403Webshell
Server IP : 103.82.32.14  /  Your IP : 216.73.217.121
Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9
System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : lonmakmf ( 524)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/forumhet/public_html/incfiles/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/forumhet/public_html/incfiles/head.php
<?php

/**
 * @package     JohnCMS
 * @link        http://johncms.com
 * @copyright   Copyright (C) 2008-2011 JohnCMS Community
 * @license     LICENSE.txt (see attached file)
 * @version     VERSION.txt (see attached file)
 * @author      http://johncms.com/about
 */

defined('_IN_JOHNCMS') or die('Error: restricted access');

$headmod = isset($headmod) ? mysql_real_escape_string($headmod) : '';
$textl = isset($textl) ? $textl : $set['copyright'];
$seokw = (isset($seow) ? $seow : $set['copyright']);
$seodesc = isset($seod) ? $seod : $set['meta_desc'];
$time = time();
echo '<!DOCTYPE html>' .
    "\n" . '<html lang="en">' .
    "\n" . '<head>' .
    "\n" . '<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">' .
    "\n" . '<meta http-equiv="Content-Language" content="vi" />' .
    "\n" . '<meta http-equiv="imagetoolbar" content="no" />' .
    "\n" . '<meta http-equiv="X-UA-Compatible" content="IE=edge">' .
    "\n" . '<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=2.0, user-scalable=yes">' .
    "\n" . '<meta name="HandheldFriendly" content="true">' .
    "\n" . '<meta name="MobileOptimized" content="width">' .
    "\n" . '<meta content="yes" name="apple-mobile-web-app-capable">' .
    "\n" . '<meta name="Generator" content="Forum Việt, ForumViet.Mobi">' .
    "\n" . '<meta name="robots" content="'.(isset($noRobots) ? 'noindex, nofollow' : 'index, follow, noodp, noydir').'" />' .
    (!empty($set['meta_key']) ? "\n" . '<meta name="keywords" content="' . $seokw . '">' : '') .
    (!empty($set['meta_desc']) ? "\n" . '<meta name="description" content="' . $seodesc . '">' : '') .
    "\n" . '<link rel="stylesheet" href="' . $set['homeurl'] . '/theme/' . $set_user['skin'] . '/style.css">' .
    "\n" . '<link rel="shortcut icon" href="' . $set['homeurl'] . '/favicon.ico">' .
    "\n" . '<link rel="alternate" type="application/rss+xml" title="RSS | ' . $lng['site_news'] . '" href="' . $set['homeurl'] . '/rss/rss.php">' .
    "\n" . '<title>' . $textl . '</title>' .
    ($user_id ? "\n" . '<script language="javascript" src="/auto/auto.js" type="text/javascript"></script>' : '') .
    "\n" . '<script type="text/javascript">function ImgError(source){source.src = "/images/image-not-found.png";source.onerror = "";return true;}</script>' .
    "\n" . '<style type="text/css">#YouTube1{width: 100%; height: 100%;}</style>' .
    "\n" . '<script type="text/javascript" src="/play/jwplayer/swfobject.js"></script>' .
    "\n" . '<script type="text/javascript" src="/play/jwplayer/jwplayer.js"></script>' .
    "\n" . '<script type="text/javascript" src="'.$home.'/cdn/jquery.js"></script>' .
    "\n" . '<script type="text/javascript" src="http://ajax.microsoft.com/ajax/jquery.validate/1.7/jquery.validate.min.js"></script>'.
    "\n" . '</head><body><div id="main">' . core::display_core_errors();
   if ($user_id) {
    $xemnotification = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` WHERE `from_id`='$user_id' AND `read`='0' AND `sys`='1' AND `delete`!='$user_id';"), 0);
    $xemmessage = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` LEFT JOIN `cms_contact` ON `cms_mail`.`user_id`=`cms_contact`.`from_id` AND `cms_contact`.`user_id`='$user_id' WHERE `cms_mail`.`from_id`='$user_id' AND `cms_mail`.`sys`='0' AND `cms_mail`.`read`='0' AND `cms_mail`.`delete`!='$user_id' AND `cms_contact`.`ban`!='1' AND `cms_mail`.`spam`='0'"), 0);
    $xemfriend = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_contact` WHERE `from_id`='$user_id' AND `type`='2' AND `friends`='0';"), 0);
    $xemalbum = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_album_files` WHERE `user_id` = '" . core::$user_id . "' AND `unread_comments` = 1"), 0);
    $tongthongbao = ($xemnotification + $xemfriend + $xemalbum + $xemmessage);
    $xemthongbao = ($xemnotification + $xemfriend + $xemalbum);
echo "<script>
loged=1,step=0,title=document.title;
$(document).ready(function(){
var refreshTitle = setInterval(function() {
    $(\"#loadtitle\").load('/auto/autotitle.php');
    $(\"#loadtitle\").slideDown(\"slow\");
    }, 100000);
});
</script>";


    echo '<div id="loadtitle">';
    echo "<script type=\"text/javascript\">
    function flash_title() {
        if($tongthongbao > 0){
            step++;
            if(step==3){step=1};
            if(step==1){document.title=title};
            if(step==2){document.title='Bạn có ".($xemthongbao > 0 && $xemmessage > 0 ? $xemmessage.' tin nhắn và '.$xemthongbao.' thông báo' : ($xemthongbao > 0 ? $xemthongbao.' thông báo' : ($xemmessage > 0 ? $xemmessage.' tin nhắn' : '')))." mới .!!'};
            setTimeout(\"flash_title()\",100000);
        };
    };
    flash_title();
    </script>";
    echo '</div>';
   }
/*
-----------------------------------------------------------------
Рекламный модуль
-----------------------------------------------------------------
*/
$cms_ads = array();
if (!isset($_GET['err']) && $act != '404' && $headmod != 'admin') {
    $view = $user_id ? 2 : 1;
    $layout = ($headmod == 'mainpage' && !$act) ? 1 : 2;
    $req = mysql_query("SELECT * FROM `cms_ads` WHERE `to` = '0' AND (`layout` = '$layout' or `layout` = '0') AND (`view` = '$view' or `view` = '0') ORDER BY  `mesto` ASC");
    if (mysql_num_rows($req)) {
        while (($res = mysql_fetch_assoc($req)) !== FALSE) {
            $name = explode("|", $res['name']);
            $name = htmlentities($name[mt_rand(0, (count($name) - 1))], ENT_QUOTES, 'UTF-8');
            if (!empty($res['color'])) $name = '<span style="color:#' . $res['color'] . '">' . $name . '</span>';
            // Если было задано начертание шрифта, то применяем
            $font = $res['bold'] ? 'font-weight: bold;' : FALSE;
            $font .= $res['italic'] ? ' font-style:italic;' : FALSE;
            $font .= $res['underline'] ? ' text-decoration:underline;' : FALSE;
            if ($font) $name = '<span style="' . $font . '">' . $name . '</span>';
            @$cms_ads[$res['type']] .= '<a href="' . ($res['show'] ? functions::checkout($res['link']) : $set['homeurl'] . '/go.php?id=' . $res['id']) . '">' . $name . '</a><br/>';
            if (($res['day'] != 0 && time() >= ($res['time'] + $res['day'] * 3600 * 24)) || ($res['count_link'] != 0 && $res['count'] >= $res['count_link']))
                mysql_query("UPDATE `cms_ads` SET `to` = '1'  WHERE `id` = '" . $res['id'] . "'");
        }
    }
}

/*
-----------------------------------------------------------------
Рекламный блок сайта
-----------------------------------------------------------------
*/
if (isset($cms_ads[0])) echo $cms_ads[0];

/*
-----------------------------------------------------------------
Выводим логотип и переключатель языков
-----------------------------------------------------------------
*/

$thoiganhientai = gmdate("H:i - d/m/Y", time() + 7*3600);

if($user_id){
    $new_mail = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` LEFT JOIN `cms_contact` ON `cms_mail`.`user_id`=`cms_contact`.`from_id` AND `cms_contact`.`user_id`='$user_id' WHERE `cms_mail`.`from_id`='$user_id' AND `cms_mail`.`sys`='0' AND `cms_mail`.`read`='0' AND `cms_mail`.`delete`!='$user_id' AND `cms_contact`.`ban`!='1' AND `cms_mail`.`spam`='0'"), 0);
    $new_sys_mail = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` WHERE `from_id`='$user_id' AND `read`='0' AND `sys`='1' AND `delete`!='$user_id';"), 0);
    $banmoi = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_contact` WHERE `from_id`='$user_id' AND `type`='2' AND `friends`='0';"), 0);
}


/*
-----------------------------------------------------------------
Выводим верхний блок с приветствием
-----------------------------------------------------------------
*/
echo '<script type="text/javascript"> function toggle(){var ele=document.getElementById("dropdown-toggleg");if(ele.style.display=="block"){ele.style.display = "none";}else{ele.style.display = "block";}} </script>';
if($user_id){
echo '<div id="trick" class="header" style="border-bottom: 1px solid #ffffff;"><a href="/" style="padding: 5px; color: #FFFFFF; font-size: 20px;"><span class="uppercase">Forum Việt</span></a></div>';
echo '<div id="header">
        <ul>
            <li><a href="'.$home.'/mail/index.php" id="message_href" style="padding: 6px;"><img src="/images/user/mail.png" /><div class="vhnew" id="message">'.$new_mail.'</div></a></li>
            <li><a href="' . $home . '/users/profile.php?act=friends" id="friend_href" style="padding: 6px;"><img src="/images/user/banbe.png" /><div class="vhnew" id="friend">'.$banmoi.'</div></a></li>
            <li><a href="' . $home . '/mail/index.php?act=systems" style="padding: 6px;"><img src="/images/user/new.png" /><div class="vhnew" id="notification">'.$new_sys_mail.'</div></a></li>
            <div style="display: inline;float: right;"><a style="color: #eee;margin-right: 6px;" href="javascript:toggle();"><strong id="vh4">'.$datauser['name'].' <img src="/images/user/arrow.png" alt="" /> </strong>'.(file_exists((ROOTPATH . '/files/users/avatar/' . $user_id . '.png')) ? '<img src="' . $home . '/avatar/'.$user_id.'-15-30.png" />' : '<img src="' . $home . '/avatar/default-15-30.png" />').'</a></div>
        </ul>
    </div>';
echo '<div id="relative"><div class="dropdown-toggleg" id="dropdown-toggleg">
<a href="' . $home . '/users/profile.php"><li><table style="padding: 0; border-spacing: 0;"><tr><td style="vertical-align: baseline; padding: 0 5px 0 5px"><img src="/images/user/info.png" /></td><td>Trang cá nhân</td></tr></table></li></a>
<a href="' . $home . '/group"><li><table style="padding: 0; border-spacing: 0;"><tr><td style="vertical-align: baseline; padding: 0 5px 0 5px"><img src="/images/user/partner.png" /></td><td>Hội nhóm</td></tr></table></li></a>
<li><center><table cellpadding="0" cellspacing="0"><tr><td valign="baseline" style="padding: 0 5px 0 5px"><a href="/pages/faq.php"><img src="/images/user/helpdesk.png" /></a></td><td valign="baseline" style="padding: 0 5px 0 5px"><a href="/users/profile.php?act=office"><img src="/images/user/settings.png" /></a></td><td valign="baseline" style="padding: 0 5px 0 5px"><a href="/exit.php"><img src="/images/user/exit.png" /></a></td></tr></table></center></li>
<li style="text-align:center" class="lobster">
'.$thoiganhientai.'
</li>
</div></div>';
}else{
echo '<div class="header"><a href="/" style="padding: 5px; color: #FFFFFF;  font-size: 20px;"><span class="uppercase">Forum Việt</span></a></div>';
echo '<div class="header" style="border-top: 1px solid #ffffff; text-align: center;"><a href="/login.php" style="padding: 5px; color: #FFFFFF;" class="page_item">Đăng nhập</a> <a href="/registration.php" style="padding: 5px; color: #FFFFFF;" class="page_item">Đăng ký</a></div>';
}

if (!empty($ban)) echo '<div class="alarm" style="text-align:center"><a href="' . $set['homeurl'] . '/users/profile.php?act=ban">Tài khoản bị cấm!!!</a></div>';
echo '<div class="maintxt">';

/*
-----------------------------------------------------------------
Рекламный блок сайта
-----------------------------------------------------------------
*/
if (!empty($cms_ads[1])) echo '<div class="gmenu">' . $cms_ads[1] . '</div>';

/*
-----------------------------------------------------------------
Фиксация местоположений посетителей
-----------------------------------------------------------------
*/
$sql = '';
$set_karma = unserialize($set['karma']);
if ($user_id) {
    // Фиксируем местоположение авторизованных
    if (!$datauser['karma_off'] && $set_karma['on'] && $datauser['karma_time'] <= (time() - 86400)) {
        $sql .= " `karma_time` = '" . time() . "', ";
    }
    $movings = $datauser['movings'];
    if ($datauser['lastdate'] < (time() - 300)) {
        $movings = 0;
        $sql .= " `sestime` = '" . time() . "', ";
    }
    if ($datauser['place'] != $headmod) {
        ++$movings;
        $sql .= " `place` = '" . mysql_real_escape_string($headmod) . "', ";
    }
    if ($datauser['browser'] != $agn)
        $sql .= " `browser` = '" . mysql_real_escape_string($agn) . "', ";
    $totalonsite = $datauser['total_on_site'];
    if ($datauser['lastdate'] > (time() - 300))
        $totalonsite = $totalonsite + time() - $datauser['lastdate'];
    mysql_query("UPDATE `users` SET $sql
        `movings` = '$movings',
        `total_on_site` = '$totalonsite',
        `lastdate` = '" . time() . "'
        WHERE `id` = '$user_id'
    ");
	include('game_head.php');
} else {
    // Фиксируем местоположение гостей
    $movings = 0;
    $session = md5(core::$ip . core::$ip_via_proxy . core::$user_agent);
    $req = mysql_query("SELECT * FROM `cms_sessions` WHERE `session_id` = '$session' LIMIT 1");
    if (mysql_num_rows($req)) {
        // Если есть в базе, то обновляем данные
        $res = mysql_fetch_assoc($req);
        $movings = ++$res['movings'];
        if ($res['sestime'] < (time() - 300)) {
            $movings = 1;
            $sql .= " `sestime` = '" . time() . "', ";
        }
        if ($res['place'] != $headmod) {
            $sql .= " `place` = '" . mysql_real_escape_string($headmod) . "', ";
        }
        mysql_query("UPDATE `cms_sessions` SET $sql
            `movings` = '$movings',
            `lastdate` = '" . time() . "'
            WHERE `session_id` = '$session'
        ");
    } else {
        // Если еще небыло в базе, то добавляем запись
        mysql_query("INSERT INTO `cms_sessions` SET
            `session_id` = '" . $session . "',
            `ip` = '" . core::$ip . "',
            `ip_via_proxy` = '" . core::$ip_via_proxy . "',
            `browser` = '" . mysql_real_escape_string($agn) . "',
            `lastdate` = '" . time() . "',
            `sestime` = '" . time() . "',
            `place` = '" . mysql_real_escape_string($headmod) . "'
        ");
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit