403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/public_html/stealsaffiliates/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/public_html/stealsaffiliates/addeditvenueinfo.cfm
<cfinclude template="header.cfm">
          <cfquery name="checksecurity" dataSource="#ds#">
	select type,vendorid,name from steals.stealsvendorpeople
where peopleid = #session.id#
</cfquery>
          <cfquery name="checkvendor" dataSource="#ds#">
	select vendorname from steals.stealsvendor
where vendorid = #checksecurity.vendorid#
</cfquery>

<Cfif #checksecurity.recordcount# eq 1>
<cfif parameterexists(url.editsave)>
		<cfparam name="form.address2" default="">

		<cfquery name=addphoto datasource="#ds#">
		update steals.stealsvendorsinfo
		set description = '#form.description#',
		video = '#form.video#',tips = '#form.tips#'

		where vendorid = #url.vendorid#
	</cfquery>



	<cfif parameterexists(form.image) and #form.image# is not ''>
<cfset robpic = #createUUID()#>

<cfset ds='cityguide'>
	<cfset imagepath="/home/home2/cgny/public_html/stealsimages">


<cffile action="upload"
	        nameconflict="makeunique"
filefield="image"
accept="image/jpeg,image/pjpeg,image/png,image/gif"
 destination="#imagepath#/#robpic#.jpg"
 mode="644">

<cfset #file.serverfile# = '#robpic#.jpg'>
	<cfset photo = "#File.ServerFile#">

<Cfquery name="upds" dataSource="#ds#">
	update steals.stealsvendorsinfo
	set image = '#photo#'

	where vendorid = #url.vendorid#
</cfquery>

</cfif>

<cfif parameterexists(form.logo) and #form.logo# is not ''>
<cfset robpic = #createUUID()#>

<cfset ds='cityguide'>
	<cfset imagepath="/home/home2/cgny/public_html/stealsimages">


<cffile action="upload"
	        nameconflict="makeunique"
filefield="logo"
accept="image/jpeg,image/pjpeg,image/png"
 destination="#imagepath#/#robpic#.jpg"
 mode="644">

<cfset #file.serverfile# = '#robpic#.jpg'>
	<cfset photo = "#File.ServerFile#">

<Cfquery name="upds" dataSource="#ds#">
	update steals.stealsvendorsinfo
	set logo = '#photo#'

	where vendorid = #url.vendorid#
</cfquery>

</cfif>


	<cflocation url="index.cfm" addToken="no">

</cfif>

  <!-- Left navbar-header end -->
  <!-- Page Content -->
  <div id="page-wrapper">
    <div class="container-fluid">
      <div class="row bg-title">
        <div class="col-lg-3 col-md-4 col-sm-4 col-xs-12"  style="width: 90%;">
          <h4 class="page-title">Venue Info for<Br> <cfoutput><u>#checkvendor.vendorname#</u></cfoutput></h4>
  User: <Cfoutput>#checksecurity.name#</Cfoutput>


        </div>
      <div class="row">
        <div class="col-md-12">
          <div class="white-box">




	<Cfquery name="getperson" dataSource="#ds#">
		select * from steals.stealsvendorsinfo
		where vendorid = #checksecurity.vendorid#
	</cfquery>

	    <Cfif #getperson.recordcount# eq 0>

		    	<cfquery name=addphoto datasource="#ds#">
		INSERT INTO steals.stealsvendorsinfo(vendorid,description,image,video,logo)
	VALUES(#checksecurity.vendorid#,'','','','')
		</cfquery>

	<Cfquery name="getperson" dataSource="#ds#">
		select * from steals.stealsvendorsinfo
		where vendorid = #checksecurity.vendorid#
	</cfquery>
	    </Cfif>

      <form class="form-horizontal" id="loginform" action="addeditvenueinfo.cfm?editsave=on&vendorid=<cfoutput>#checksecurity.vendorid#</cfoutput>" method="post" enctype="multipart/form-data">

<Cfoutput query="getperson">

	<table><Tr>
	<Cfif #logo# is not ''>
		<Td>
		<img src="http://www.cityguideny.com/stealsimages/#logo#" style="max-width: 200px;">
		</Td>
	</Cfif>

		<!---				<Td>Photos:<br>
<center>
		<a href="addeditvenuephotos.cfm"><img src="/photouploadtool.png" style="max-width: 200px;"><br>
		<b>Click to Manage Photos</b></a>
	</center>
						</Td><Td>
	<Cfquery name="getpics" dataSource="#ds#">
		select * from steals.stealsvendorpics where vendorid = #checksecurity.vendorid# </cfquery>

<table><Tr>
<cfloop from="1" to="#getpics.recordcount#" index="i">
	<td>
<a href="addeditvenuephotos.cfm"><img src="http://www.cityguideny.com/stealsimages/#getpics.photo[i]#" style="max-width: 50px;"></a>
</td>

</cfloop>
</Tr></table>
						</Td>
						--->
 </Tr></table>

      <div class="form-group ">
          <div class="col-xs-12">
<br>
<Br>
General Description - Enter 1-3 paragraphs of text to describe your business (this appears on the offer description page):
	         <Textarea name="description" placeholder="Description"  style="height:200px;width: 100%">#description#</Textarea>

        <script>
            CKEDITOR.replace( 'description' );
        </script>

<br><br>
Add a Video - You may include a video on your offer page by embedding it from YouTube, Vimeo or Facebook. For help, <a href="http://embed.ly/code" target="_new">click here</a>.
	         <Textarea name="video" placeholder="Optional Video Embed"  style="height:100px;width: 100%">#video#</Textarea>
<br><Br>


Tips - Use the box below to provide visitor tips, including best hours to visit, tips for families and other helpful information:
	         <Textarea name="tips" placeholder="Optional Venue Tips"  style="height:100px;width: 100%">#tips#</Textarea>
<br><Br>


<p>
<B>Upload New Logo: <input type=file name=logo class="form-control">
<!---
<p>
Upload New Photo: <input type=file name=image class="form-control">
</p></B>--->

          </div>
        </div>
    </Cfoutput>


        <div class="form-group text-center m-t-20">
          <div class="col-xs-12">
            <button class="btn btn-info btn-lg btn-block text-uppercase waves-effect waves-light" type="submit">Save Venue Information</button>
          </div>
        </div>

</form>
          </div>
        </div>


          </div>
        </div>
      </div>
<cfinclude template="footer.cfm">
<Cfabort>



<cfelse>

Error, you must be the primary user to add/edit sub-users of this account.
</Cfif>

          </div>
        </div>
      </div>
<cfinclude template="footer.cfm">

Youez - 2016 - github.com/yon3zu
LinuXploit