www.dev2.delv-in.com - UnknownSec 403

upload mass deface mass delete console info server
name : v_admin_news_del.php
 <?php

	$News = new News;
	$row = $News->get($_POST['newsID'], '', '');
	$newsID = $_POST['newsID'];
	$dispTitle = $row['dispTitle'];
	$message = $row['message'];
	$xAttach = $row['attach'];
	$link = $row['link'];
	$dateTS = $row['dateTS'];

	echo "<div class='col-12 input_form'>

	<H1>Delete Post</H1>

	<form action='' method='post'>
	<input type='hidden' name='newsID' value='".$_POST['newsID']."'>

	<div class='col-12'><b>ID#: </b>".$_POST['newsID']."</div>

	<div class='col-6 pad_top'><b>Title:</b> ".$dispTitle."' 
	</div>

	<div class='col-6 pad_top'><b>Date: </b>". date('F j, Y', $row['dateTS']). "
	</div>

	<div class='col-12 pad_top'><b>Content: </b><br>
		".$message."
	</div>

	<script>
		CKEDITOR.replace('message');
	</script>
	
	<div class='col-12 pad_top'><b>Attached a file:  </b>";

	if ($xAttach != ''){
		if(strpos($xAttach, '.pdf')){
			echo $xAttach;
		} else {
			echo "<img src='views/images/news/".$xAttach."' width=120 > ".$xAttach;
		}
	}
	echo "
	</div>

	<div class='col-12 pad_top'><b>Website link:</b> ".$link . "
	</div>

	<div class='col-12 top_line centre'>

		<input type='submit' name='submitBut' value='Cancel' class='button cancel_but'>
		<input type='submit' name='submitBut' value='Confirm Delete' class='button del_but'>
	</div>
	</form>
</div>";
UnknownSec Shell
