403Webshell
Server IP : 121.121.20.254  /  Your IP : 216.73.216.202
Web Server : Microsoft-IIS/10.0
System : Windows NT WEB-SERVER 10.0 build 20348 (Windows Server 2022) AMD64
User : IUSR ( 0)
PHP Version : 8.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/inetpub/wwwroot/OPENPOSFNB/wp-content/plugins/insert-php-code-snippet/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/inetpub/wwwroot/OPENPOSFNB/wp-content/plugins/insert-php-code-snippet/admin/snippets.php
<?php
if ( ! defined( 'ABSPATH' ) )
	exit;

global $wpdb;
$_GET = stripslashes_deep($_GET);
$xyz_ips_message =$search_name_db=$search_name= '';

if(isset($_GET['xyz_ips_msg'])){
	$xyz_ips_message = intval($_GET['xyz_ips_msg']);
}
if($_POST)
{
    if(isset($_POST['search']))
    {
        if(!isset($_REQUEST['_wpnonce'])||!wp_verify_nonce($_REQUEST['_wpnonce'],'snipp-manage_') ){
            wp_nonce_ays( 'snipp-manage_' );
            exit;
        }
    }
    // if(isset($_POST['textFieldButton2']))
    // {
    //     if(!isset($_REQUEST['_wpnonce'])||!wp_verify_nonce($_REQUEST['_wpnonce'],'bulk_actions_ips') ){
    //         wp_nonce_ays( 'bulk_actions_ips' );
    //         exit;
    //     }
    // }
	if (isset($_POST['apply_ips_bulk_actions'])){
		if (isset($_POST['ips_bulk_actions_snippet'])){
			if(!isset($_REQUEST['_wpnonce'])||!wp_verify_nonce($_REQUEST['_wpnonce'],'bulk_actions_ips') )
    	{
            wp_nonce_ays( 'bulk_actions_ips' );
            exit;
        }
		$xyz_ips_snippet_ids = [];
			$ips_bulk_actions_snippet=$_POST['ips_bulk_actions_snippet'];
			if (isset($_POST['xyz_ips_snippet_ids']) && is_array($_POST['xyz_ips_snippet_ids']))
			$xyz_ips_snippet_ids = array_map('intval', $_POST['xyz_ips_snippet_ids']);
 				$xyz_ips_pageno = isset( $_GET['pagenum'] ) ? absint( $_GET['pagenum'] ) : 1;
 				if (empty($xyz_ips_snippet_ids))
				{
					wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=8&pagenum='.$xyz_ips_pageno));
					exit();
				}
				if ($ips_bulk_actions_snippet==2)//bulk-delete
				{
					foreach ($xyz_ips_snippet_ids as $snippet_id)
					{
						$wpdb->query($wpdb->prepare( 'DELETE FROM  '.$wpdb->prefix.'xyz_ips_short_code  WHERE id=%d',$snippet_id)) ;
					}
					wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=3&pagenum='.$xyz_ips_pageno));
					exit();
				}
				elseif ($ips_bulk_actions_snippet==0)//bulk-Deactivate
				{
					foreach ($xyz_ips_snippet_ids as $xyz_ips_snippetId)
						$wpdb->update($wpdb->prefix.'xyz_ips_short_code', array('status'=>2), array('id'=>$xyz_ips_snippetId));
						wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=4&pagenum='.$xyz_ips_pageno));
						exit();
				}
				elseif ($ips_bulk_actions_snippet==1)//bulk-activate
				{
					foreach ($xyz_ips_snippet_ids as $xyz_ips_snippetId)
						$wpdb->update($wpdb->prefix.'xyz_ips_short_code', array('status'=>1), array('id'=>$xyz_ips_snippetId));
						wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=4&pagenum='.$xyz_ips_pageno));
						exit();
				}
				elseif ($ips_bulk_actions_snippet==-1)//no action selected
				{
					wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=7&pagenum='.$xyz_ips_pageno));
					exit();
				}
		}

	}

}
if($xyz_ips_message == 1){

	?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet successfully added.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 2){

	?>
<div class="xyz_ips_system_notice_area_style0" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet not found.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 3){

	?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet successfully deleted.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 4){

	?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet status successfully changed.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 5){

	?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet successfully updated.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 7)
{
	?>
	<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
	<span id="system_notice_area_common_msg">	Please select an action to apply.&nbsp;&nbsp;&nbsp;
	</span>	
		<span id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
	</div>
<?php
}
if($xyz_ips_message == 8)
{
	?>
	<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
	<span id="system_notice_area_common_msg">
		Please select at least one snippet to perform this action.&nbsp;&nbsp;&nbsp;
		</span>
		<span id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
	</div>
<?php
}
?>

<div >


	<form method="post">
	<?php wp_nonce_field( 'bulk_actions_ips');?>
		<fieldset style="width: 98.8%; border: 1px solid #4d3e3e2e; padding: 10px 0px;">
			<legend><h3>PHP Code Snippets</h3></legend>
			<?php
			global $wpdb;
			if (get_option('xyz_ips_sync_needed') != 0) {
				echo '<div id="ips-sync-notice" class="notice notice-warning is-dismissible">
						<p>
							<strong>Usage Tracking Sync Required.</strong><br>
							Your site needs a one-time synchronization to build snippet usage records.
							This helps in displaying accurate usage statistics.
							<button id="xyz-start-sync" class="button button-primary"  data-offset ="'. get_option('xyz_ips_sync_needed').'">
								'.(get_option('xyz_ips_sync_needed') > 1 ? 'Resume Sync' : 'Start Sync').'
							</button>
							<span id="sync-progress" style="margin-left:10px;"></span>
						</p>
					  </div>';
			  }
 			$pagenum = isset( $_GET['pagenum'] ) ? absint( $_GET['pagenum'] ) : 1;
			$limit = get_option('xyz_ips_limit');
			$offset = ( $pagenum - 1 ) * $limit;


			$field=get_option('xyz_ips_sort_field_name');
			$order=get_option('xyz_ips_sort_order');
			if(isset($_POST['snippet_name']))
			{
			$search_name=sanitize_text_field($_POST['snippet_name']);
			$search_name_db=esc_sql($search_name);
			}
			if(isset($_POST['insertionMethod']))
			{
				$insertionMethod =intval($_POST["insertionMethod"]); 
			}
			else
			{
				$insertionMethod =0;
			}
			$strInsertionMethod='';
			if (intval($insertionMethod)>0)
			{
			$strInsertionMethod=" AND insertionMethod=$insertionMethod";
			}

			//$entries = $wpdb->get_results( "SELECT * FROM ".$wpdb->prefix."xyz_ips_short_code  	WHERE title like '%".$search_name_db."%'".$strInsertionMethod." ORDER BY  $field $order LIMIT $offset,$limit" );
			$entries = $wpdb->get_results($wpdb->prepare("SELECT * FROM {$wpdb->prefix}xyz_ips_short_code WHERE title LIKE %s {$strInsertionMethod} ORDER BY $field $order LIMIT %d, %d",	'%' . $wpdb->esc_like($search_name_db) . '%',$offset,$limit
				)
			);

			?>
			<input  id="xyz_ips_submit_ips"
				style="cursor: pointer; margin-bottom:10px; margin-left:8px;" type="button"
				name="textFieldButton2" value="Add New PHP Code Snippet"
				 onClick='document.location.href="<?php echo admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-add');?>"'>
			<br>
<span style="padding-left: 6px;color:#21759B;">With Selected : </span>
 <select name="ips_bulk_actions_snippet" id="ips_bulk_actions_snippet" style="width:130px;height:29px;">
	<option value="-1">Bulk Actions</option>
	<option value="0">Deactivate</option>
	<option value="1">Activate</option>
	<option value="2">Delete</option>
</select>
<input type="submit" title="Apply" name="apply_ips_bulk_actions" value="Apply" style="color:#21759B;cursor:pointer;padding: 5px;background:linear-gradient(to top, #ECECEC, #F9F9F9) repeat scroll 0 0 #F1F1F1;border: 2px solid #DFDFDF;">
</form>


<table class="xyz-ips-manage-header">
	<tr>
		<td>
<form name="manage_snippets" action="" method="post">
							         <?php wp_nonce_field('snipp-manage_');?>
							<div class="xyz_ips_search_div"  style="float:right;">
				            	<table class="xyz_ips_search_div_table" style="width:100%;">
								&nbsp;&nbsp;

<span>Snippet Placement</span>&nbsp;
   <select name="insertionMethod" id="insertionMethod" >
  <option value="0" <?php if($insertionMethod==0) { echo "selected"; } ?>>All</option>
	  <option value="1" <?php if($insertionMethod==1) { echo "selected"; } ?>>Automatic</option>
	<option value="2" <?php if($insertionMethod==2) { echo "selected"; } ?>>Short Code</option>
	<option value="3" <?php if($insertionMethod==3) { echo "selected"; } ?>>Execute On Demand</option>
</select>
  &nbsp;&nbsp;
				                	<tr>
				                  		 	 <input type="text" name="snippet_name" value= "<?php if(isset($search_name)){echo esc_attr($search_name);}?>" placeholder="Search" >
				                   			<input type="submit" name="search" class="xyz-ips-go" value="Go" />
				              		</tr>
				           		</table>
	          				</div>
</form>

</td>
	</tr>
</table>
<table class="widefat" style="width: 99%; margin: 0 auto; border-bottom:none;">
	<thead>
		<tr>
		    <th scope="col" width="3%"><input type="checkbox" id="chkAllSnippets" /></th>
			<th scope="col" >Tracking Name</th>
			<th scope="col">Snippet Placement </th>
			<th scope="col">Placement Details</th>
			<th scope="col" >Status</th>
			<th scope="col" colspan="4" style="text-align: center;">Action</th>
		</tr>
	</thead>
	<tbody>
		<?php
		if( !empty($entries) )//if( count($entries)>0 )
		 {
			$count=1;
			$class = '';
			foreach( $entries as $entry ) {
				$class = ( $count % 2 == 0 ) ? ' class="alternate"' : '';
				$snippetId=intval($entry->id);
				?>
		<tr <?php echo $class; ?>>
		<td style="vertical-align: middle !important;padding-left: 18px;">
		<input type="checkbox" class="chk" value="<?php echo $snippetId; ?>" name="xyz_ips_snippet_ids[]" id="xyz_ips_snippet_ids" />
		</td>
			<td id="xyz_ips_vAlign" title="<?php echo esc_attr($entry->description); ?>" ><?php
			echo esc_html($entry->title);
			?></td>
			<td>
				
				
			<?php
			$placement_text = '';
			if($entry->status == 2){
				$placement_text ='NA';
			 } else{ 
/* AUTOMATIC PLACEMENT */
if ($entry->insertionMethod == 1) {
	$placement_text =
		'<span class="ips-badge ips-badge-auto">Automatic</span>';
}
/* SHORTCODE PLACEMENT */
elseif ($entry->insertionMethod == 2) {


	$placement_text =
		'<span class="ips-badge ips-badge-shortcode">Shortcode</span> ' .
		'<span onclick="xyz_ips_copy_shortcode(' . (int) $entry->id . ')" ' .
		'class="xyz_ips_copy_shortcode" id="xyz_ips_shortcode_' . (int) $entry->id . '">' .
		'[xyz-ips snippet="' . esc_html($entry->title) . '"]</span>' .
		'<span onclick="xyz_ips_copy_shortcode(' . (int) $entry->id . ')">' .
		'<img class="xyz_ips_img xyz_ips_img_table" title="Click to copy" ' .
		'src="' . esc_url(plugins_url('insert-php-code-snippet/images/copy-document.png')) . '">' .
		'</span>';
}
elseif ($entry->insertionMethod == 3) {
	$placement_text ='<span class="ips-badge ips-badge-ondemand">Execute on demand</span>'.'<img onclick=xyz_ips_execute_shortcode('.$entry->id.') class="xyz_ips_img xyz_ips_img_table" id="xyz_ips_img_execute_shortcode" title="Click to execute" src="'.plugins_url('insert-php-code-snippet/images/play-button.png').'">';
}
echo $placement_text;
}?>
</td>
		<td id="xyz_ips_vAlign" style="color:#1c331cbf;">
		<?php
		if ($entry->status == 2) {
			echo '—';
		} elseif ($entry->insertionMethod == 1) {
			if (!empty($entry->insertionLocation)) {
				echo esc_html(
					xyz_ips_get_insertion_location_label($entry->insertionLocation)
				);
			} else {
				echo '—';
			}
		} elseif ($entry->insertionMethod == 2) {
			$post_count=0;
			$post_count = $wpdb->get_var($wpdb->prepare(
				"SELECT COUNT(*) FROM {$wpdb->prefix}xyz_ips_usage WHERE snippet_id = %d", 
				$entry->id
			));
			 echo $post_count ? "Used in $post_count posts/pages" : "Not used";
		}
		elseif ($entry->insertionMethod == 3) {
			echo 'Manually triggered';
		}
		?>
</td>
			<td id="xyz_ips_vAlign">
				<?php
					if($entry->status == 2){
						echo "Inactive";
					}elseif ($entry->status == 1){
					echo "Active";
					}

				?>
			</td>
			<?php
					if($entry->status == 2){
						$stat1 = admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-status&snippetId='.$snippetId.'&status=1&pageno='.$pagenum);
			?>
			<td style="text-align: center;"><a
				href='<?php echo wp_nonce_url($stat1,'ips-pstat_'.$snippetId); ?>'><img
					id="xyz_ips_img" title="Activate"
					src="<?php echo plugins_url('images/activate.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a>
			</td>
				<?php
					}elseif ($entry->status == 1){
						$stat2 = admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-status&snippetId='.$snippetId.'&status=2&pageno='.$pagenum);
					?>
			<td style="text-align: center;"><a
				href='<?php echo wp_nonce_url($stat2,'ips-pstat_'.$snippetId); ?>'><img
					id="xyz_ips_img" title="Deactivate"
					src="<?php echo plugins_url('images/pause.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a>
			</td>
					<?php
					}

				?>

			<td style="text-align: center;"><a
				href='<?php echo admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-edit&snippetId='.$snippetId.'&pageno='.$pagenum); ?>'><img
					id="xyz_ips_img" title="Edit Snippet"
					src="<?php echo plugins_url('images/edit.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a>
			</td>

			<?php $delurl = admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-delete&snippetId='.$snippetId.'&pageno='.$pagenum);?>
			<td style="text-align: center;" ><a
				href='<?php echo wp_nonce_url($delurl,'ips-pdel_'.$snippetId); ?>'
				onclick="javascript: return confirm('Please click \'OK\' to confirm ');"><img
					id="xyz_ips_img" title="Delete Snippet"
					src="<?php echo plugins_url('images/delete.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a></td>

			<?php
			$page_url =xyz_ips_get_link_by_slug('xyz-ics-preview-page');
			$page_url =add_query_arg( 'preview', 'true', $page_url );
			$page_url =add_query_arg( 'snippetId', $snippetId, $page_url );
			$prewurl =esc_url($page_url);
			?>
			<td style="text-align: center;" >
			<?php if($entry->insertionMethod ==2) {?>
				<a href='<?php echo $prewurl;?>' target="_blank">
					<img id="xyz_ips_img" title="Preview" src="<?php echo plugins_url('images/preview.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
				</a>
				<?php }?>
			</td>
		</tr>
		<?php
		$count++;
			}
		} else { ?>
		<tr>
			<td colspan="7" >PHP Code Snippets not found</td>
		</tr>
		<?php } ?>
	</tbody>
</table>

			<input  id="xyz_ips_submit_ips"
				style="cursor: pointer; margin-top:10px;margin-left:8px;" type="button"
				name="textFieldButton2" value="Add New PHP Code Snippet"
				 onClick='document.location.href="<?php echo admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-add');?>"'>

			<?php
			$total = $wpdb->get_var( "SELECT COUNT(`id`) FROM ".$wpdb->prefix."xyz_ips_short_code" );
			$num_of_pages = ceil( $total / $limit );

			$page_links = paginate_links( array(
					'base' => add_query_arg( 'pagenum','%#%'),
				    'format' => '',
				    'prev_text' =>  '&laquo;',
				    'next_text' =>  '&raquo;',
				    'total' => $num_of_pages,
				    'current' => $pagenum
			) );



			if ( $page_links ) {
				echo '<div class="tablenav" style="width:99%"><div class="tablenav-pages" style="margin: 1em 0">' . $page_links . '</div></div>';
			}

			?>

		</fieldset>

	

</div>
<script type="text/javascript">
jQuery(document).ready(function(){
	jQuery("#chkAllSnippets").click(function(){
		jQuery(".chk").prop("checked",jQuery("#chkAllSnippets").prop("checked"));
    });
    // Handling the Sync Button click
    jQuery(document).on('click', '#xyz-start-sync', function(e) {
    e.preventDefault();
    let btn = jQuery(this);
    let progress = jQuery('#sync-progress');
    btn.prop('disabled', true).text('Syncing...');
    // Read initial offset from button data attribute
    let initialOffset = parseInt(btn.data('offset')) || 0;
    function runSyncBatch(offset) {
        jQuery.ajax({
            url: ajaxurl,
            type: 'POST',
            data: {
                action: 'xyz_ips_sync_usage',
                offset: offset
            },
            success: function(response) {
                if (response.success && response.data.status === 'processing') {
                    progress.text('Processed ' + response.data.new_offset + ' posts...');
                    // Update button data-offset to keep track
                    btn.data('offset', response.data.new_offset);
                    runSyncBatch(response.data.new_offset);
                } else {
                    progress.text('✅ Sync Complete!');
                    btn.prop('disabled', false).text('Sync Usage Now');
                    btn.data('offset', 0); // reset offset
                    location.reload(); 
                }
            },
            error: function() {
                progress.text('❌ Sync failed. Please try again.');
                btn.prop('disabled', false).text('Sync Usage Now');
            }
        });
    }
    runSyncBatch(initialOffset);
});
});
const xyz_ips_copy_shortcode = (id) => {

    var span = document.getElementById("xyz_ips_shortcode_" + id);
    var tempTextarea = document.createElement("textarea");
    tempTextarea.value = span.textContent;
    document.body.appendChild(tempTextarea);
    tempTextarea.select();
    tempTextarea.setSelectionRange(0, 99999); // For mobile devices
    document.execCommand("copy");
    document.body.removeChild(tempTextarea);


  (typeof xyz_ips_notice === 'function')? xyz_ips_notice('Short code copied successfully',1):null;

};


const xyz_ips_notice = (msg = '', flag = 0) => {


const noticeElement = jQuery('#xyz_ips_system_notice_area');
if (noticeElement.length > 0) 
{

  jQuery('#system_notice_area_common_msg').text(msg);
  if (flag === 0) {
  if(noticeElement.hasClass('xyz_ips_system_notice_area_style1'))
  noticeElement.removeClass('xyz_ips_system_notice_area_style1')
  if(! noticeElement.hasClass('xyz_ips_system_notice_area_style0'))
  noticeElement.addClass('xyz_ips_system_notice_area_style0');

  } else {
  if(noticeElement.hasClass('xyz_ips_system_notice_area_style0'))
  noticeElement.removeClass('xyz_ips_system_notice_area_style0')
  if(! noticeElement.hasClass('xyz_ips_system_notice_area_style1'))
  noticeElement.addClass('xyz_ips_system_notice_area_style1');

  }
  noticeElement.animate({
    opacity: 'show',
    height: 'show'
  }, 500);

}
else{



  let noticeElementString = 
  `<div class="xyz_ips_system_notice_area_style${flag}" id="xyz_ips_system_notice_area">
    <span id="system_notice_area_common_msg">${msg}.&nbsp;&nbsp;&nbsp;</span>
    <span id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
  </div>`;

  let noticeElement = jQuery(noticeElementString);
  jQuery('body').append(noticeElement);
  noticeElement.animate({
    opacity: 'show',
    height: 'show'
  }, 500); 





}

};

function xyz_ips_execute_shortcode(id) {


var nonce= '<?php echo wp_create_nonce('xyz_ips_execute_shortcode');?>';
jQuery.ajax({
    url: ajaxurl, 
    type: 'POST',
    dataType: 'json',
    data: {
        action: 'xyz_ips_execute_shortcode', 
        _wpnonce: nonce,
        id: id
    },
    success: function(response) {
        if (response.status === 1) {
          xyz_ips_notice(response.message,1);

        } else {
          xyz_ips_notice(response.message,0);
        }
    },
    error: function(xhr, status, error) {
      xyz_ips_notice('An error occurred: ' + error, 0);
    }
});
}
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit