403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/public_html/newadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/public_html/newadmin/cg-tourism-coupon-edit.cfm
<Cfif parameterexists(url.add)>
    <cfquery name=addphoto datasource="#ds#">
INSERT INTO tourismevents(eventname,eventcap)
VALUES	('',0)
</cfquery>

<Cfquery name="Geter" dataSource="#ds#">
    select eventid from tourismevents order by eventid desc limit 0,1
</Cfquery>

<cflocation url="cg-tourism-coupon-edit.cfm?id=#geter.eventid#" addtoken="no" statuscode="301">
</cfif>    

<cfcontent type="text/html;charset=iso-8859-1">
<cfprocessingDirective pageencoding="iso-8859-1">





<cfparam name="getsubq.subcatid" default="0">

<CFSET CurrentDateTime = #CreateODBCDateTime(Now())#><cfif session.email eq ''><cfset Session.email = -1></cfif><cfif IsDefined("Cookie.email")><cfset Session.email = Cookie.email></cfif>
<cfinclude template="header.cfm">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>


<div id="content">
  <div id="content-header">
  </div>
  <div class="container-fluid" style="margin-left:200px;">
	  
<Cfif parameterexists(url.edit)>

<cfparam name="form.ccainfo" default="">
<cfparam name="form.ccadesc" default="">
<cfparam name="form.ogimage" default="">
<cfparam name="form.ogdescription" default="">

<cfparam name="form.trackingpixel" default="">

<!--- Handle OG image file upload (jpg/png) --->
<cfif structKeyExists(form, "ogimagefile") and len(trim(form.ogimagefile)) gt 0>
	<cfset uploadDir = "/home/home2/cgny/public_html/2019/uploads2/#url.id#">
	<cfif not directoryExists(uploadDir)>
		<cfdirectory action="create" directory="#uploadDir#">
	</cfif>
	<cftry>
		<cfexecute name="/bin/chmod" arguments="0755 #uploadDir#" timeout="5"></cfexecute>
	<cfcatch></cfcatch>
	</cftry>
	<cftry>
		<cffile action="upload" filefield="ogimagefile" destination="#uploadDir#" nameConflict="MakeUnique" accept="image/jpeg,image/png,image/jpg">
		<!--- chmod 0644 so web server can serve the file --->
		<cftry>
			<cfexecute name="/bin/chmod" arguments="0644 #uploadDir#/#cffile.serverFile#" timeout="5"></cfexecute>
		<cfcatch></cfcatch>
		</cftry>
		<cfset form.ogimage = "https://www.cityguideny.com/uploads2/#url.id#/#cffile.serverFile#">
		<cfcatch>
			<!--- Upload failed, keep existing form.ogimage --->
		</cfcatch>
	</cftry>
</cfif>

<CFQUERY datasource="#ds#">
	UPDATE tourismevents
	SET
	eventname = '#form.eventname#',
	eventdate = #form.eventdate#,
	seo_link = '#form.seo_link#',
	eventcap = #form.eventcap#,
	confirmationfrom = '#form.confirmationfrom#',
	confirmationsubject = '#form.confirmationsubject#',
	eventdescription = '#form.copyedit#',
    ogimage = '#form.ogimage#',
	ogdescription = '#form.ogdescription#',
	eventconfirmationemail = '#form.eventconfirmationemail#',
	eventconfirmationpage = '#form.eventconfirmationpage#'
	

	WHERE eventID = #form.id#
</CFQUERY>
done

<Cflocation addtoken="no" url="cg-tourism-events.cfm">


<cfelse>


<cfquery name="getrecord" datasource="#ds#">
select *
from tourismevents
where eventid = #url.id#
</cfquery>

<cfoutput><FORM action="cg-tourism-coupon-edit.cfm?edit=on&id=#url.id#" method="post" enctype="multipart/form-data"> </cfoutput>
<cfoutput><input NAME="id"  MAXLENGTH="200" TYPE="hidden" value="#url.id#">
<table>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">Event Name:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="eventname" MAXLENGTH="200" TYPE="text" SIZE="30" value="#getrecord.eventname#"></td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">SEO Link:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="seo_link" MAXLENGTH="200" TYPE="text" SIZE="30" value="#getrecord.seo_link#"></td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">Date:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="eventdate" MAXLENGTH="200" TYPE="text" SIZE="30" value="#getrecord.eventdate#"></td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">Cap (0 for Unlimited):</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="eventcap" MAXLENGTH="200" TYPE="text" SIZE="30" value="#getrecord.eventcap#"></td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">OG Social Image:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP>
<input NAME="ogimage" MAXLENGTH="200" TYPE="text" SIZE="50" value="#getrecord.ogimage#">
<cfoutput><br><small>Or upload: </small><input NAME="ogimagefile" TYPE="file" accept=".jpg,.jpeg,.png"></cfoutput>
<cfif len(trim(getrecord.ogimage))><cfoutput><br><img src="#getrecord.ogimage#" alt="OG Image" style="max-width:200px;margin-top:5px;"></cfoutput></cfif>
</td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">OG Description:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="ogdescription" MAXLENGTH="500" TYPE="text" SIZE="60" value="#getrecord.ogdescription#"></td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">Confirmation Email From:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="confirmationfrom" MAXLENGTH="200" TYPE="text" SIZE="30" value="#getrecord.confirmationfrom#"></td>
</tr>

<tr>
<td style="padding:5px;"  VALIGN=TOP><b><font face="Arial" size="+0">Confirmation Email Subject:</font></b></td>
<td style="padding:5px;"  VALIGN=TOP><input NAME="confirmationsubject" MAXLENGTH="200" TYPE="text" SIZE="30" value="#getrecord.confirmationsubject#"></td>
</tr>



<tr>
<td style="padding:5px;"  VALIGN=TOP colspan="2">
   
   <cfcookie name = "folderme"
    value = "#Now()#"
    expires = "NOW">

<cfcookie name = "folderme" value = "/uploads2/#url.id#/">
<Cfparam name="url.beta" default="on">


	<script src="ckeditor46z27e/ckeditor.js?asd2" charset="utf-8"></script>

<script type="text/javascript" src="ckfinder3511/ckfinder.js?as441" charset="utf-8"></script>
<textarea id="myarea12" class="ckeditor" name="copyedit" style="height:600px;">#getrecord.EVENTDESCRIPTION#</textarea>
<script type="text/javascript">

CKEDITOR.on( 'dialogDefinition', function( ev ) {
                                // Take the dialog name and its definition from the event data.
                                var dialogName = ev.data.name;
                                var dialogDefinition = ev.data.definition;
                                // Check if the definition is from the dialog we're interested on (the "Link" dialog).
                                if ( dialogName == 'link' ){
                                        var targetTab = dialogDefinition.getContents( 'target' );
                                        var targetDropdown = targetTab.get( 'linkTargetType' );
                                        targetDropdown.default = '_blank';
                                }
                        }       );



CKFinder.setupCKEditor( editor, 'ckfinder34/' ) ;


var editor = CKEDITOR.replace( 'myarea12',{
   height: '500px',
   extraAllowedContent : 'object(*);param(*);embed(*);p(*);script(*);form(*);input(*);div(*);blockquote(*)'
});


editor.on( 'instanceReady', function() {
console.log( editor.filter.allowedContent );
} );
</script>



</td></tr>




<tr>
<td style="padding:5px;"  VALIGN=TOP colspan="2">
    <h2>Confirmation Email </h2>
      
<textarea id="myarea132" class="ckeditor" name="eventconfirmationemail" style="height:600px;">#getrecord.eventconfirmationemail#</textarea>

<script type="text/javascript">


var editor = CKEDITOR.replace( 'myarea132',{
   height: '300px',
   extraAllowedContent : 'object(*);param(*);embed(*);p(*);script(*);form(*);input(*);div(*);blockquote(*)'
});


editor.on( 'instanceReady', function() {
console.log( editor.filter.allowedContent );
} );
</script>



</td></tr>


<tr>
<td style="padding:5px;"  VALIGN=TOP colspan="2">
    <h2>Confirmation Page </h2>
      
<textarea id="myarea1321" class="ckeditor" name="eventconfirmationpage" style="height:600px;">#getrecord.eventconfirmationpage#</textarea>

<script type="text/javascript">


var editor = CKEDITOR.replace( 'myarea1321',{
   height: '300px',
   extraAllowedContent : 'object(*);param(*);embed(*);p(*);script(*);form(*);input(*);div(*);blockquote(*)'
});


editor.on( 'instanceReady', function() {
console.log( editor.filter.allowedContent );
} );
</script>



</td></tr>



</cfoutput>

</table>



</table><br><br><br>
<p><input type="submit" value="Submit the form" style="background-color:black;color:white;">
<br><br><br><br><br><br>
</form></center>


</cfif>
<p>
         </div>
          </div>
        </div>
      </div>






      <!-- /.row -->

     <cfinclude template="footer.cfm">

Youez - 2016 - github.com/yon3zu
LinuXploit