KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/www/gallary/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/queenjbs/www/gallary/view_bk.html
<h2><?=$titlePathName?></h2>
<?
if($idx){
    $hit_query = "update photo_$tableName set hit = hit+1 where no='$idx'";
	$results = mysql_query($hit_query,$db_con);
    
	$qry = "SELECT * FROM photo_$tableName where no='$idx'";
    $result= mysql_query($qry,$db_con);
    $row = mysql_fetch_array($result);

    $regDate = substr($row[reg_date],0,10);
    
}
?>
<table cellspacing="0" cellpadding="0" border="0" class="table_ro_view" width="100%">
    <tr>
        <th height="30px" style="background:#f5f5f5">題目&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;&nbsp;<?=$row[subject]?></th>
        <td style="padding:7px 10px 0 0; background:#f5f5f5" align="right"><?=$regDate?></td>
    </tr>

		<?	
		if($tab !=4 && $tab !=10){
		$imgName = get_db("select file_name from files where module_no = '$idx' and module_name='$tableName' order by no");
		//echo "select file_name from files where module_no = '$idx' and module_name='$tableName' order by no";
		$file_full_path ="../files/board/resize/".$imgName;

		if (!file_exists($file_full_path)) $file_full_path= "/files/board/".$imgName;

		?>
    <tr>
        <td id="table_ro_view_td_nopadd" colspan=2 align="center" style="padding:20px 0 0px 0; border:0"><img src="<?=$file_full_path?>" style="padding:7px; border:1px solid #CCC; background-color:#FFF"></td>
    </tr>
	<?
	if($tab==11 && $tabs==7){
			$res = "select file_name,original_name from files where module_no = '$idx' and module_name='$tableName' order by no";
			$result= mysql_query($res,$db_con);
			echo "<tr><td colspan='2' align='center' style='padding:20px 0 0px 0; border:0'>";
			while ($rows = mysql_fetch_array($result)){
				$file_name = explode("_",$rows[file_name]);
				if($file_name[3] == 1024){
					$sizeNameimg ="<img src='/images/w_d_01.gif' style='margin:0 10px 0 0'/>";
				}else if($file_name[3] == 1600){
					$sizeNameimg ="<img src='/images/w_d_02.gif' style='margin:0 10px 0 0'/>";
				}else if($file_name[3] == 1680){
					$sizeNameimg ="<img src='/images/w_d_03.gif'/>";
				}
				echo "<a href='down.php?filename=$rows[file_name]&orgname=$rows[original_name]' target='hiddenFrame'>$sizeNameimg</a>&nbsp;";
			}
			echo "</td></tr>";
	}

	if($tab==11 && $tabs==701){
			$result= Get_dbres("select file_name,original_name from files where module_no = '$idx' and module_name='$tableName'");
			$rows = mysql_fetch_array($result);
			echo "<tr><td colspan='2' align='center' style='padding:20px 0 0px 0; border:0'>";
			echo "<a href='down.php?filename=$rows[file_name]&orgname=$rows[original_name]' target='hiddenFrame'><img src='/images/btn_photo.gif'/></a>&nbsp;";
			echo "</td></tr>";
	}

	//if($_SERVER["REMOTE_ADDR"] == $remoteAddr){
		$preNO = get_db("SELECT max(no) FROM photo_$tableName where no < '$idx'");
		$nextNO = get_db("SELECT min(no) FROM photo_$tableName where no > '$idx'");
	?>
	<tr>
		<td id="table_ro_view_td_nopadd" align="center" colspan=2  style="padding:20px 0 0px 0; border:0">
			<?if($nextNO){?>
			<a href="javascript:formChange('<?=$nextNO?>','view');"><img src="/images/arrow_right.gif" alt="next" /></a>
			<?}?>
			&nbsp;&nbsp;&nbsp;
			<?if($preNO){?>
			<a href="javascript:formChange('<?=$preNO?>','view');"><img src="/images/arrow_left.gif" alt="prev" /></a>
			<?}?>
		</td>
	</tr>
	<?//}?>
    <?}?>
    <tr>
        <?
            
                if($tab ==4 || $tab == 10){
                    $flvName = get_db("select file_name from files where module_no = '$idx' and module_name='$tableName' and order_by=2");
                    echo "<td height='100px' colspan='2' align=center>";
                    echo "<script>var ff = mf('flv_player_http.swf?c_id=".$flvName."', 'topimg', 450, 375, 'transparent'); documentwrite(ff);</script>";
                    $contents = stripslashes($row[contents]);
                    echo "<div style='width:470px;text-align:left;margin:20px 0'>".$contents."</div></td>";
                }else{
                    $contents = stripslashes($row[contents]);
                    echo "<td id='table_ro_view_td_nopadd' colspan='2'>".$contents."</td>";
                }
            
        ?>
        
    </tr>
</table>
<table cellpadding="0" cellspacing="0" border="0" width="100%" style="margin:10px 0 0 0" >
    <tr>
        <td align="right">
            <?if($sessionLevel == 15){?>
            <a onclick="javascript:formChange('<?=$row[no]?>','del')" style="CURSOR: hand" id="btn">■ 削除 ■ &nbsp;&nbsp;&nbsp;</a>
            <a onclick="javascript:formChange('<?=$row[no]?>','write')" style="CURSOR: hand" id="btn">■ 修正 ■ &nbsp;&nbsp;&nbsp;</a>
            <?}?>
            <a href="/gallary/?tab=<?=$tab?>&tabs=<?=$tabs?>" style="CURSOR: hand" id="btn">■ リスト ■</a>
        </td>
    </tr>
</table>
<table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:30px 0 0 0;border:1px solid #ccc" >
	<tr align="center">
		<td width="60" height="70" align="right"><img src="/images/comment_img.gif" alt="コメント" /></td>
		<td >
			<textarea name="comment" cols=45 rows=3 style="width:475px; height:50px"/><?if(!$sessionIDX){echo"ログインが必要です.";}?></textarea>
		</td>
		<td width="60" align="left" valign="middle">
			<?if($sessionIDX){?>
			<img src="/images/comment_btn.gif" onclick="commentok('<?=$idx?>','<?=$tableName?>');showCustomer('<?=$idx?>','<?=$tableName?>')" style="cursor:hand" alt="書き込み"/>
			<?}else{?>
			<img src="/images/comment_btn.gif" onclick="alert('ログインが必要です.');window.location.href('/member/?tab=12&tabs=1');" style="cursor:hand" alt="書き込み"/>
			<?}?>
		</td>
	</tr>
	<tr>
		<td colspan=3 style="padding:10px">
		<div id="txtHint">
		<?
		$result = Get_dbres("SELECT * FROM board_comment WHERE module_name='".$tableName."' and module_no='".$idx."' order by order_by desc");
		$total = mysql_affected_rows();
		//echo("SELECT * FROM board_comment WHERE module_name='".$tableName."' and module_no='".$idx."' order by order_by desc");

		echo "<table cellpadding='0' cellspacing='0' border='0' width='100%' style='margin:10px 0 0 0'>";
		for($i=0; $i<$total; $i++) {
		$rows = mysql_fetch_array($result);
		$coDate = substr($rows[reg_date],0,10);
		echo "<tr><td style='border-top:1px dotted #444;width:100px; padding:5px;'>".$rows[user_name]."<br><span style='font-size:8px'>".$coDate."</span>&nbsp;&nbsp;&nbsp;&nbsp;";
		
		if($sessionIDX == $rows[user_no]){echo"<a onclick=\"commentdel(".$rows[idx].");showCustomer('".$idx."','".$tableName."')\" style='cursor:hand'><img src='/images/comment_x.gif' alt='デリ―ト' />";
		}
		echo "</td><td style='border-top:1px dotted #444;'>".stripslashes($rows[content])."</a></td></tr>";
		}
		echo"</table>";
		?>
		</div></td>
	</tr>
</table>

Anon7 - 2021