www.dev2.delv-in.com - UnknownSec 403

upload mass deface mass delete console info server
name : v_userGuideMenu_sort.php
 <?php

    $Guide_Menu = new Guide_Menu;

    $menu_arr = $Guide_Menu->get('', $_POST['menuCrumbs'], $_POST['access'], '');

    $access_arr = array(''=>'all users', 'staff'=>'staff only', 'admin'=>'admin only');


	echo "
<div class='tab_box_liner'>

	<h2>Re-order Level " . $_POST['menuLevel'] ." Menu Items</h2>


    <div class='input_form'>

    <table class='col-12'>

    	<tr class='form_separator'>
            <td class='form_input right' colspan=2>
        		<form action='' method='post'>
                <input type='hidden' name='menuID1' value='". $_POST['menuID1'] . "'>
        			<input type='submit' name='submitBut' value='Done' class='btn btn-submit'>
        		</form>
            </td>
    	</tr>";

    $i = 1;
foreach ($menu_arr as $menuID => $row){

    if ($i < count($menu_arr)){
        echo "
        <tr class='form_separator'>";
    } else {
        echo "
        <tr>";
    }
	echo "
            <form action='' method='post' name='rank'>
                <input type='hidden' name='menuLevel' value='" . $_POST['menuLevel'] ."'>
                <input type='hidden' name='xRank' value='". $row['rank'] ."'>
                <input type='hidden' name='menuID' value='". $menuID ."'>
                <input type='hidden' name='menuID1' value='". $_POST['menuID1'] . "'>
                <input type='hidden' name='menuCrumbs' value='" . $_POST['menuCrumbs'] ."'>
                <input type='hidden' name='submitBut' value='Sort'>

            <td class='form_label'>" . $row['content'] . "</td>

            <td class='form_input'>
                	<div class='col50'>";


            $SelectObjNum = new SelectObjNum('rank', 1, count($menu_arr), 1, $row['rank'], '', '[sort order]', "onchange='submit(\"this\")'", 'rank', 'centre');
            echo "
            		</div>
            		<div class='col50 centre'>
            		" . $access_arr[$row['access']] ."
            		</div>
            	</td>
            </form>
        </tr>";

    $i++;
}
    echo "
    </table>";

?>

    </div>
</div>
UnknownSec Shell
