www.dev2.delv-in.com - UnknownSec 403

upload mass deface mass delete console info server
name : v_stories.php
 <div class='col-12 spacer'>&nbsp;</div>
	
<div class='liner'>
	<div class='stories'>
		<h1>Stories</h1>
	
		<h2>You're not alone.  Here are some of the more typical stories we've encountered and for which DELVIN has solutions.  You will likely be able to relate to at least one.</h2>

	</div>
<?php


	$Story = new Story;

	$rows = $Story->get('', 'rank');

	if (!isset($_POST['storyID'])){
		$_POST['storyID'] = 1;
	}

	if (isset($rows[$_POST['storyID']])){
		$movieFile = $rows[$_POST['storyID']]['movieFile'];
		echo "
	<div class='storyVideo'>
		<h3>". $rows[$_POST['storyID']]['stTitle'] . "</h3>
	<video id='videoPreview' class='video-js vjs-default-skin' controls preload='auto' width=100% poster='views/stories/" . $movieFile . ".png' data-setup='{}' >
     <source src='views/stories/" . $movieFile . ".mp4' type='video/mp4'>
     <source src='views/stories/" . $movieFile . ".webm' type='video/webm'>
     <p class='vjs-no-js'>To view this video please enable JavaScript, and consider upgrading to a web browser that <a href='http://videojs.com/html5-video-support/' target='_blank'>supports HTML5 video</a></p>
  </video>
  </div>";
	}

	echo "
	<div class='stories_container'>";
	foreach ($rows as $row){

		echo "
		<div class='story'>
			<div class='title'>". $row['stTitle'] . "</div>
			<div class='descript'>" . $row['stDescript'] . "</div>
			";
		if ($_POST['storyID'] != $row['storyID']){
			
			echo "
			<div class='watchStory'>
				<form action='' method='post'>
					<input type='hidden' name='storyID' value='". $row['storyID'] . "'>
					<input type='submit' name='submitBut' value='Watch' class='btn btn-login'>
				</form>
			</div>";
		}
		echo "
		</div>";
	}

	echo "
	</div>";
?>

</div>
UnknownSec Shell
