www.dev2.delv-in.com - UnknownSec 403

upload mass deface mass delete console info server
name : v_admin_story.php
 <div class='col-12 pad_4_b'>
	<div class='col-10'>
		<h1>Whiteboard Story</h1>
	</div>
	<div class='col-2 right'>
		<form action='' method='post'>
			<input type='submit' name='submitBut' value='Add Story' class='btn btn_add'>
		</form>
	</div>
</div>


<table class='data_table'>
	<tr>
		<th>ID #</th><th>Title</th><th>Description</th><th>Video</th><th>Display Order</th><th class='centre'>Action</th>
	</tr>

<?php

	$Story = new Story;

	date_default_timezone_set('Canada/Pacific');

	$rows = $Story->get('', 'rank');

	foreach ($rows as $storyID => $row){

		echo "
		<tr>
		<td>".$row['storyID']."</td>
		<td>".$row['stTitle']."</td>
		<td>".$row['stDescript']."</td>
		<td>";
		if ($row['movieFile'] != ''){
			echo "<img src='views/stories/".$row['movieFile'].".png' height=75 align='left'> ".$row['movieFile'];
		}
		echo "</td>
		<td>
			<form action='' method='post' name='set_rank'>
				<input type='hidden' name='storyID' value='". $row['storyID'] ."'>
				<input type='hidden' name='oldRank' value='". $row['rank'] ."'>
				<input type='hidden' name='submitBut' value='updateRank'>
				";
		$SelectObjNum = new SelectObjNum('rank', 1, count($rows), 1, $row['rank'], '', '[select]', "onchange='submit(\"this\")'", 'set_rank', 'centre');
		echo "
			</form>
		</td>
		<td class='centre'>
			<form action='' method='post'>
				<input type='hidden' name='storyID' value='".$row['storyID']."'>
				<input type='submit' name='submitBut' value='Edit' class='btn btn_edit btn-mini'>
				<input type='submit' name='submitBut' value='Delete' class='btn btn_delete btn-mini'>
			</form>
			</td>
		</tr>";
	}

?>


</table>
UnknownSec Shell
