403Webshell
Server IP : 103.82.32.14  /  Your IP : 216.73.217.140
Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9
System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : lonmakmf ( 524)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/forumhet/public_html/users/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/forumhet/public_html/users/stt.php
<?php
    define('_IN_JOHNCMS', 1);
    echo '<div class="phdr"><b>Tường nhà.</b></div>';
    if ($user_id) {
        $user_wall = $user['id'];
        if(isset($_POST['submit'])) {
            $noidung = functions::checkin(trim($_POST['text']));
            if(strlen($noidung) > 45) {
                $vbcat = mb_substr($noidung, 0, 45).'....';
            } else {
                $vbcat = $noidung;
            }
            $trungt = mysql_result(mysql_query("SELECT COUNT(*) FROM `status` WHERE `text`='{$noidung}'"), 0);
            $timep = mysql_fetch_array(mysql_query("SELECT `lastpost` FROM `users` WHERE `id`='{$user_id}'"));
            if(!empty($ban)) {
                echo '<div class="rmenu">Tài khoản của bạn đang bị khoá nên không thể viết status!</div>';
            } else if(($timep['lastpost'] + 7) > time()) {

                echo '<div class="rmenu">Bạn có thể viết status tiếp theo sau <b>'.(($timep['lastpost'] + 7) - time()).'s</b> nữa!</div>';
            } else if(empty($_POST['text'])) {
                echo '<div class="rmenu">Bạn chưa nhập nội dung!</div>';
            } else if($trungt > 0) {
                echo '<div class="rmenu">Nội dung status này đã tồn tại!</div>';
            } else  if(strlen($_POST['text']) < 4) {
                echo '<div class="rmenu">Nội dung Status quá ngắn!</div>';
            } else if(strlen($_POST['text']) > 5000) {
                echo '<div class="rmenu">Nội dung Status của bạn đã quá 5000 kí tự!</div>';
            } else {
                mysql_query("UPDATE `users` SET `poststatus`=`poststatus`+'1' WHERE `id` = '$user_id' ");
                mysql_query("INSERT INTO `status` SET `user_id`='".$user_id."', `text`='" . mysql_real_escape_string($noidung) . "', `time`='".time()."', `wall`='$user_wall'");
                $rid = mysql_insert_id();
                if($user_wall != $user_id && !empty($user_wall)) {
                    mysql_query("INSERT INTO `cms_mail` SET `user_id` = '$user_id', `from_id`='$user_wall', `them`='25', `text` = '[url=".$home."/users/profile.php?user=".$user_id."][cnick]".$user_id."[/cnick][/url] đã đăng một [url=".$home."/users/profile.php?act=status&user=".$user['id']."&binhluan&id=".$rid."]trạng thái[/url] lên tường nhà bạn: ".addslashes($vbcat)."', `sys`='1', `time`='".time()."'");
                }
                $exists = array();
                if(preg_match('#@([a-zA-Z0-9\-\@\*\(\)\?\!\~\_\=\[\]]+)#si', $noidung)) {
                    preg_match_all('#@([a-zA-Z0-9\-\@\*\(\)\?\!\~\_\=\[\]]+)#si', $noidung, $text);
                    $dem = count($text[1]);
                    for($i=0; $i<=$dem; $i++) {
                        $ktu = mysql_result(mysql_query("SELECT COUNT(*) FROM `users` WHERE `name`='{$text[1][$i]}'"), 0);

                        $resq = mysql_fetch_array(mysql_query("SELECT `id` FROM `users` WHERE `name`='{$text[1][$i]}'"));
                        $demtag = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_bl` WHERE `user_id`='".$resq['id']."' AND `user_fr`='".$user_id."' AND `type`='t'"), 0);
                        if($ktu == 1 && $demtag == 0 && $resq['id'] != $user_id && $user_wall != $resq['id'] && isset($exists[intval($resq['id'])]) == false) {
                            $exists[intval($resq['id'])] = true;
                            mysql_query("UPDATE `users` SET `bl`= `bl` + '1' WHERE `id`='".$resq['id']."'");

                            mysql_query("INSERT INTO `cms_mail` SET `user_id` = '$user_id', `from_id`='".$resq['id']."', `them`='24', `text` = '[url=".$home."/users/profile.php?user=".$user_id."][cnick]".$user_id."[/cnick][/url] đã nhắc đến bạn trong [url=".$home."/users/profile.php?act=status&user=".$user['id']."&binhluan&id=".$rid."]tâm trạng ".functions::sex($user_id)."[/url]: ".addslashes($vbcat)."', `sys`='1', `time`='".time()."'");
                        }
                    }
                }
                mysql_query("UPDATE `users` SET `lastpost`='".time()."' WHERE `id`='".$user_id."'");

                $trave = isset($_POST['trave']) ? base64_decode($_POST['trave']) : 'index.php';
                header("Location: $trave");
                exit();
            }
        }
        //nhap lieu
        $trave = base64_encode($_SERVER['REQUEST_URI']);
        echo '<div class="list1">';

        echo '<form method="post"><textarea rows="2" name="text" placeholder="Hãy viết gì đó..."></textarea><input type="hidden" name="trave" value="'.$trave.'"/><br /><input type="submit" name="submit" value="&#160;&#160;Đăng&#160;&#160;"/></form>';
        echo '</div>';
    } else {
        echo '<div class="rmenu">Bạn cần <a href="/login.php">Đăng nhập</a> hoặc <a href="/registration.php">Đăng ký</a> để sử dụng hết chức năng của diễn đàn</div>';
    }
    //phan bai dang



    $tong = mysql_result(mysql_query("SELECT COUNT(*) FROM `status` WHERE `wall`='$user[id]' OR `user_id`='$user[id]'"), 0);
    if ($tong > $kmess){
        echo '<div class="topmenu" style="margin-top: 5px;">' . functions::display_pagination('profile.php?user='.$user['id'].'&', $start, $tong, $kmess) . '</div>';
    }
if($tong) {

    $req = mysql_query("SELECT * FROM `status` WHERE `wall`='$user[id]' OR `user_id`='$user[id]' ORDER BY `time` DESC LIMIT $start,$kmess");
    $i = 0;
    while ($res = mysql_fetch_array($req)) {

        echo '<div style="background-color: #ffffff; border-color: #D5D5D5; border-style: solid; border-width: 1px 1px 1px 1px; margin: 5px 0 3px 0;"><div style="padding: 3px 4px 0 4px;">';
        if ($set_user['avatar']) {
            echo '<table cellpadding="0" cellspacing="0"><tr><td>';
            if(file_exists(($rootpath . 'files/users/avatar/' . $res['user_id'] . '.png'))) {
                echo '<img src="' . $home . '/avatar/'.$res['user_id'].'-20-40.png" width="40" height="40" alt="" />&#160;';
            } else {
                echo '<img src="' . $home . '/avatar/default-20-40.png" />&#160;';
            }
            echo '</td><td>';
        }
        $name = mysql_fetch_array(mysql_query("SELECT * FROM `users` WHERE `id`='{$res['user_id']}'"));
        echo (time()> $name['lastdate']+300 ? ''.functions::image('user/off.png', array('class' => 'icon-inline')).'' : ''.functions::image('user/on.png', array('class' => 'icon-inline')).'');
        echo ''.($user_id && $user_id != $res['user_id'] ? '<a href="/users/profile.php?user='.$res['user_id'].'"><b>'.functions::nickcolor($res['user_id']).'</b></a>' : '<b>'.functions::nickcolor($res['user_id']).'</b>').''.(!empty($res['wall']) && $res['user_id'] != $res['wall'] ? ' > <a href="/users/profile.php?user='.$res['wall'].'"><b>'.functions::nickcolor($res['wall']).'</b></a>':'').'';
        if(!empty($res['wall']) && $res['user_id'] != $res['wall']){
        }else{
            echo ' '.functions::rights($res['user_id']);
        }
        echo '<br />'.functions::image('clock.png', array('class' => 'icon-inline')).'<span class="gray" style="font-size: x-small;">'.functions::display_date($res['time']).'</span>';
        if ($set_user['avatar']) {
            echo '</td></tr></table>';
        }
        echo '</div><div style="margin-top: 5px; padding: 0 4px 4px 4px;">';
        //kt hinh anh
        $ten = mysql_fetch_array(mysql_query("SELECT `name` FROM `users` WHERE `id`='{$res['user_id']}'"));
        $ltext = mysql_fetch_array(mysql_query("SELECT * FROM `status` WHERE `id`='{$res['share']}'"));
        $ten2 = mysql_fetch_array(mysql_query("SELECT `name` FROM `users` WHERE `id`='{$ltext['user_id']}'"));
        if($res['share'] != 0) {
            if($ltext['img'] == 1) {
                echo '<span class="gray">'.($res['user_id'] == $user_id ? 'Bạn' : ''.$ten['name'].'').' đã chia sẻ một hình ảnh của '.($ltext['user_id'] == $user_id ? 'bạn' : ''.$ten2['name'].'').':</span><br />';
            } else {
                echo '<span class="gray">'.($res['user_id'] == $user_id ? 'Bạn' : ''.$ten['name'].'').' đã chia sẻ một tâm trạng của '.($ltext['user_id'] == $user_id ? 'bạn' : ''.$ten2['name'].'').':</span><br />';
            }
        }
        if($res['img'] == 1 && $res['share'] == 0) {
            echo '<span class="gray">'.($res['user_id'] == $user_id ? 'Bạn' : ''.$ten['name'].'').' đã đăng một hình ảnh:</span><br />';
        }
        //het hinh anh
        $cut = 500;
        if(strlen($res['text']) > $cut) {
            $text = mb_substr($res['text'], 0, $cut);
            $text = html_entity_decode($text, ENT_QUOTES, 'UTF-8');
            $text = functions::checkout($text, 1, 1);
            echo functions::smileys($text);
            echo '....&#160;<a href="/users/profile.php?act=status&user='.$user['id'].'&stt&id='.$res['id'].'">Đọc tiếp...>></a><br />';
        } else {
            $text = functions::checkout($res['text'], 1, 1);
            echo functions::smileys($text);
            echo '<br />';
        }
        if($res['share'] != 0) {
            if($ltext['img'] == 1) {
                echo '<div class="menu" style="margin: 3px 6px 3px 6px"><a href="/users/profile.php?user='.$ltext['user_id'].'">'.functions::nickcolor($ltext['user_id']).'</a> ('.functions::display_date($ltext['time']).')<br /><span class="gray">Đã đăng một <a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'" style="color:gray">hình ảnh</a>:</span><br />';
                if(strlen($ltext['text']) > $cut) {
                    $text = mb_substr($ltext['text'], 0, $cut);
                    $text = html_entity_decode($text, ENT_QUOTES, 'UTF-8');
                    $text = functions::checkout($text, 1, 1);
                    echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
                    echo '....<br /><a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'">Đọc tiếp.</a>';
                } else {
                    $text = functions::checkout($ltext['text'], 1, 1);
                    echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
                }
                $GetImageSize = GetImageSize('../files/status/'.$res['share'].'.png');
                if($GetImageSize){
                    echo '<div align="center"><a href="/files/status/'.$res['share'].'.png"><img src="/files/status/'.$res['share'].'.png" alt="image" style="max-width: 120px; height: auto;" /></a></div>';
                }else{
                     echo '<div align="center">Link ảnh không tồn tại..!</div>';
                }
                echo '</div>';
            } else {
                echo '<div class="menu" style="margin: 3px 6px 3px 6px"><a href="/users/profile.php?user='.$ltext['user_id'].'">'.functions::nickcolor($ltext['user_id']).'</a> ('.functions::display_date($ltext['time']).')<br /><span class="gray">Trong một <a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'" style="color:gray">tâm trạng</a>:</span><br />';
                if(strlen($ltext['text']) > $cut) {
                    $text = mb_substr($ltext['text'], 0, $cut);
                    $text = html_entity_decode($text, ENT_QUOTES, 'UTF-8');
                    $text = functions::checkout($text, 1, 1);
                    echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
                    echo '....<br /><a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'">Khác</a>';
                } else {
                    $text = functions::checkout($ltext['text'], 1, 1);
                    echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
                }
                echo '</div>';
            }
        }
        if($res['img'] == 1 && $res['share'] == 0) {
            $GetImageSize = GetImageSize('../files/status/'.$res['id'].'.png');
            if($GetImageSize){
                echo '<div align="center"><a href="/files/status/'.$res['id'].'.png"><img src="/files/status/'.$res['id'].'.png" alt="image" style="max-width: 120px; height: auto;" /></a></div>';
            }else{
                 echo '<div align="center">Link ảnh không tồn tại..!</div>';
            }
        }
        $kt = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_like` WHERE `id`='".$res['id']."'AND `user_id`='".$user_id."'"), 0);
        $like = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_like` WHERE `id`='".$res['id']."'"), 0);
        $dembv = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_cmt` WHERE `id`='".$res['id']."'"), 0);
echo '</div>';

        if ($user_id) {
            echo '<div style="background-color: #f8f8f8; padding: 3px 4px 4px 4px; border-color: #D5D5D5; border-style: solid; border-width: 1px 0 0 0; font-size: x-small;">'.($res['user_id'] == $user_id || $res['user_id'] != $user_id ? ''.($like == 0 ? '' : '<a href="/users/profile.php?act=status&user='.$user['id'].'&showlike&id='.$res['id'].'">'.functions::image('like.png', array('class' => 'icon-inline')).$like.'</a> · ').' '.($kt == 0 ? ''.($user_id ? '<a href="/users/profile.php?act=status&user='.$user['id'].'&thich&id='.$res['id'].'">Thích</a>' : '').'' : '<a href="/users/profile.php?act=status&user='.$user['id'].'&bothich&id='.$res['id'].'">Bỏ thích</a>').'' : '<a href="/users/profile.php?act=status&user='.$user['id'].'&showlike&id='.$res['id'].'">'.functions::image('like.png', array('class' => 'icon-inline')).$like.'</a>').''.(!$user_id ? ''.functions::image('like.png', array('class' => 'icon-inline')).$like.'' : '').' · <a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['id'].'">Bình luận('.$dembv.')</a> · <a href="/users/profile.php?act=status&user='.$user['id'].'&chiase&id='.$res['id'].'">Chia sẻ</a>'.($res['user_id'] == $user_id && ($res['time'] + 600) > $time ? ' · <a href="/users/profile.php?act=status&user='.$user['id'].'&edit&id='.$res['id'].'"><font color="red">Edit</font></a>' : '').''.($datauser['rights'] >= 8 || $res['user_id'] == $user_id || $res['wall'] == $user_id ? ' · <a href="/users/profile.php?act=status&user='.$user['id'].'&xoa&id='.$res['id'].'"><font color="red">Xóa</font></a>' : '').'</div>';
        }
        echo '</div>';
        $i++;
    }

} else {
    echo '<div class="rmenu">Không có status nào!</div>';
}

if ($tong > $kmess){
    echo '<div class="topmenu">' . functions::display_pagination('profile.php?user='.$user['id'].'&', $start, $tong, $kmess) . '</div>';
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit