www.dev2.delv-in.com - UnknownSec 403

upload mass deface mass delete console info server
name : v_admin_story_edit.php
 <?php

	if ($_POST['submitBut'] == 'Edit'){

		$Story = new Story;
		$row = $Story->get($_POST['storyID'], '', '');

		$storyID = $_POST['storyID'];
		$stTitle = $row['stTitle'];
		$stDescript = $row['stDescript'];
		$xMovieFile = $row['movieFile'];
		$action = 'Edit';

	} else if ($_POST['submitBut'] == 'Save'){
		// return data from form
		$storyID = $_POST['storyID'];
		$stTitle = $_POST['stTitle'];
		$stDescript = $_POST['stDescript'];
		$xMovieFile = $_POST['xMovieFile'];
		$action = $_POST['action'];

	} else {
		// initialize variables
		$storyID = '';
		$stTitle = '';
		$stDescript = '';
		$xMovieFile = '';
		$action = 'Add';
	}

	echo "

	<form action='' method='post' enctype='multipart/form-data'>
	<input type='hidden' name='storyID' value='".$storyID."'>
	<input type='hidden' name='xMovieFile' value='".$xMovieFile."'>
	<input type='hidden' name='action' value='".$action."'>

	<div class='col-12'>
		<div class='col75'>
			<H1>". $action . " Story</H1>
		</div>
		<div class='col25 right'>
			<input type='submit' name='submitBut' value='Save' class='btn btn_save'>
			<input type='submit' name='submitBut' value='Cancel' class='btn btn_cancel'>
		</div>
	</div>

	<div class='edit_form_group'>";

	if ($storyID > 0){

		echo "
		<div class='form_label'>ID#: </div>
		<div class='form_input'>".$storyID."</div>
		";
	}


	echo "


	<div class='col-12 bot_line'>
		<div class='form_label'>Title</div>
		<div class='form_input'>
			<input type='text' name='stTitle' value='".$stTitle."' size=50 maxlength=50>
		</div>
	</div>

	<div class='col-12 bot_line'>
		<div class='form_label'>Description</div>
		<div class='form_input'><textarea name='stDescript' id='stDescript'>".$stDescript."</textarea></div>
	</div>

	<script>
		CKEDITOR.replace('stDescript');
	</script>
	
	<div class='col-12 bot_line'>
		<div class='form_label'>
			Whiteboard Video (png, mp4, webm)</div>
		<div class='form_input'>
			<input type='file' id='movieFile[]' name='movieFile[]' multiple>
		</div>

		<div class='form_label'>&nbsp;</div>
		<div class='form_input'>";
	if (file_exists('views/stories/' . $xMovieFile . ".png")){
		echo "
	<video id='videoPreview' class='video-js vjs-default-skin' controls preload='auto'  height='200' poster='views/stories/" . $xMovieFile . ".png' data-setup='{}' >
     <source src='views/stories/" . $xMovieFile . ".mp4' type='video/mp4'>
     <source src='views/stories/" . $xMovieFile . ".webm' type='video/webm'>
     <p class='vjs-no-js'>To view this video please enable JavaScript, and consider upgrading to a web browser that <a href='http://videojs.com/html5-video-support/' target='_blank'>supports HTML5 video</a></p>
  </video>";
		echo "
		<input type='checkbox' name='delMovieFile'> Delete Video";
	}

	echo "
		</div>
	</div>
	</form>
</div>";
UnknownSec Shell
