ucast.upm.edu.my ~ Shell I

Editing file /var/www/phpvideo/group_admin2.php (0755)

<?php

///////////////////////////////////////////////////////////////////////////////////////
// PHPmotion                                                http://www.phpmotion.com //
///////////////////////////////////////////////////////////////////////////////////////
// License: You are not to sell or distribute this software without permission       //
// Main Author: Brian Shawa -  bshawa@gmail.com                                      //
// Help and support please visit http://www.phpmotion.com                            //
// Copyright reserved                                                                //
///////////////////////////////////////////////////////////////////////////////////////

include_once ("classes/config.php");
include_once ('classes/menu_groups.php');

include_once ('classes/sessions.php');

$referer = mysql_real_escape_string($_SERVER['HTTP_REFERER']);
$todays_date = mysql_real_escape_string($config["date_format"]);

$result = array();
$group_id = mysql_real_escape_string($_POST['gid']);
$action = mysql_real_escape_string($_POST['action']);
$action_id = mysql_real_escape_string($_POST['action_id']);

//check if I am logged in
if ($user_id == "") {
echo ''.$config["must_login"] .'';
 die();
}

//check if group has been specified in url
if ($group_id == "") {
echo ''.$config['general_error'].'';
 die();
}
if ($action == "") { //no action set
echo ''.$config['general_error'].'';
}

if ($action_id == "") { //no action id set
echo ''.$config['general_error'].'';
}

//check if group exists
$sql = "SELECT * FROM group_profile WHERE indexer = $group_id";
$query = mysql_query($sql);
if (mysql_num_rows($query) == 0) {
 @mysql_close();
echo ''.$config['general_error'].'';
 die();
}

//check if users is logged in or just visitor
if ($user_id != "") {
 //check if I am group admin to load admin features
 $sql = "SELECT * FROM group_membership WHERE group_id = $group_id AND member_id = $user_id AND group_admin = 'yes'";
 $query = @mysql_query($sql);
 $am_i_admin = @mysql_num_rows($query);
 if ($am_i_admin == 0) {
 	@mysql_close();
echo ''.$config['no_rights'].'';
 die();
 }
}

//delete member from group and also members videos

if ($action == "del_member") {

$sql1 = "DELETE FROM group_videos WHERE member_id = $action_id AND group_id =$group_id";
mysql_query($sql1);
$sql1 = "DELETE FROM group_membership WHERE member_id = $action_id AND group_id =$group_id";
mysql_query($sql1);
@mysql_close();
echo ''.$config["request_completed"].'';
}