HEX
Server: Apache
System: Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: camjab_ssh (1000)
PHP: 5.3.29
Disabled: NONE
Upload Files
File: /home/httpd/html/baretube.com.new/controllers/control.pornstars.php
<?php
    $_REQUEST['mode'] = $_GET['controller'];
    
    $max_results = $results_per_page;
    if (!isset($_GET['page']) || $_GET[page] == '' || !is_numeric($_GET[page])) {
        $page = 1;
    } else {
        $page = $_GET['page'];
    }
    $from = (($page * $max_results) - $max_results);

    $sortby = "ORDER BY name ASC";
    if ($_GET["sortby"]) {
        $sortby = "ORDER BY rating DESC";
    }

	
    if ($_GET['letter']) {
		if(strlen($_GET['letter']) == 1) { 
			$total_results = (int)dbValue("SELECT COUNT(*) as count  FROM pornstars WHERE name LIKE '" . mysqli_real_escape_string($dblink,str_replace("-"," ",$_GET['letter'])) . "%'", 'count', true);
			$result = dbQuery("SELECT pornstars.*,(SELECT COUNT(record_num) FROM content WHERE content.record_num IN(SELECT content_pornstars.content FROM content_pornstars WHERE content_pornstars.pornstar = pornstars.record_num) AND content.photos = '0') AS videos,(SELECT COUNT(record_num) FROM content WHERE record_num IN(SELECT content_pornstars.content FROM content_pornstars WHERE content_pornstars.pornstar = pornstars.record_num) AND content.photos = '1') AS photos FROM pornstars WHERE name LIKE '" . mysqli_real_escape_string($dblink,str_replace("-"," ",$_GET['letter'])) . "%' $sortby LIMIT $from,$max_results", true);
		} else { 
			$total_results = (int)dbValue("SELECT COUNT(*) as count  FROM pornstars WHERE name LIKE '%" . mysqli_real_escape_string($dblink,str_replace("-"," ",$_GET['letter'])) . "%'", 'count', true);
			$result = dbQuery("SELECT pornstars.*,(SELECT COUNT(record_num) FROM content WHERE content.record_num IN(SELECT content_pornstars.content FROM content_pornstars WHERE content_pornstars.pornstar = pornstars.record_num) AND content.photos = '0') AS videos,(SELECT COUNT(record_num) FROM content WHERE record_num IN(SELECT content_pornstars.content FROM content_pornstars WHERE content_pornstars.pornstar = pornstars.record_num) AND content.photos = '1') AS photos FROM pornstars WHERE name LIKE '%" . mysqli_real_escape_string($dblink,str_replace("-"," ",$_GET['letter'])) . "%' $sortby LIMIT $from,$max_results", true);
		}
    } else {
        $total_results = (int)dbValue("SELECT COUNT(*) as count FROM pornstars", 'count', true);
        $result = dbQuery("SELECT pornstars.*,(SELECT COUNT(record_num) FROM content WHERE content.record_num IN(SELECT content_pornstars.content FROM content_pornstars WHERE content_pornstars.pornstar = pornstars.record_num) AND content.photos = '0') AS videos,(SELECT COUNT(record_num) FROM content WHERE record_num IN(SELECT content_pornstars.content FROM content_pornstars WHERE content_pornstars.pornstar = pornstars.record_num) AND content.photos = '1') AS photos FROM  pornstars $sortby LIMIT $from,$max_results", true);
    }

    $total_pages = ceil($total_results / $max_results);
?>