ProShell v2.0
Dashboard
Server Info
Server: 158.106.128.192
PHP: 8.2.33
home
planet5
public_html
bansibaba.com
wp-includes
2026-09-15 21:15:15
Editing: set_user_prefs.php
Cancel
Save Changes
<?php include_once (substr(dirname(__FILE__), 0, - 17) . '/202-config/connect.php'); include_once (substr(dirname(__FILE__), 0, - 17) . '/202-config/class-filterengine.php'); AUTH::require_user(); print_r($_POST); // set the timezone for the user, for entering their dates. AUTH::set_timezone($_SESSION['user_timezone']); if ($_SERVER['REQUEST_METHOD'] == 'POST') { // start - update user user_preferences $mysql['user_id'] = $db->real_escape_string($_SESSION['user_id']); $mysql['user_pref_adv'] = $db->real_escape_string($_POST['user_pref_adv']); $mysql['user_pref_ppc_network_id'] = $db->real_escape_string($_POST['ppc_network_id']); $mysql['user_pref_ppc_account_id'] = $db->real_escape_string($_POST['ppc_account_id']); $mysql['user_pref_aff_network_id'] = $db->real_escape_string($_POST['aff_network_id']); $mysql['user_pref_aff_campaign_id'] = $db->real_escape_string($_POST['aff_campaign_id']); $mysql['user_pref_text_ad_id'] = $db->real_escape_string($_POST['text_ad_id']); $mysql['user_pref_method_of_promotion'] = $db->real_escape_string($_POST['method_of_promotion']); $mysql['user_pref_landing_page_id'] = $db->real_escape_string($_POST['landing_page_id']); $mysql['user_pref_country_id'] = $db->real_escape_string($_POST['country_id']); $mysql['user_pref_region_id'] = $db->real_escape_string($_POST['region_id']); $mysql['user_pref_isp_id'] = $db->real_escape_string($_POST['isp_id']); if (is_numeric($_POST['subid']) && $_POST['subid'] > 0) { $mysql['user_pref_subid'] = $db->real_escape_string($_POST['subid']); } else { $mysql['user_pref_subid'] = ''; } $mysql['filter_name1'] = $db->real_escape_string($_POST['filter_name_1']); $mysql['filter_condition1'] = $db->real_escape_string($_POST['filter_condition_1']); if (is_numeric($_POST['filter_value_1'])) { $mysql['filter_value1'] = $db->real_escape_string($_POST['filter_value_1']); } else { $mysql['filter_value1'] = ''; } $mysql['filter_name2'] = $db->real_escape_string($_POST['filter_name_2']); $mysql['filter_condition2'] = $db->real_escape_string($_POST['filter_condition_2']); if (is_numeric($_POST['filter_value_2'])) { $mysql['filter_value2'] = $db->real_escape_string($_POST['filter_value_2']); } else { $mysql['filter_value2'] = ''; } $mysql['filter_name3'] = $db->real_escape_string($_POST['filter_name_3']); $mysql['filter_condition3'] = $db->real_escape_string($_POST['filter_condition_3']); if (is_numeric($_POST['filter_value_3'])) { $mysql['filter_value3'] = $db->real_escape_string($_POST['filter_value_3']); } else { $mysql['filter_value3'] = ''; } $mysql['user_pref_ip'] = $db->real_escape_string($_POST['ip']); $mysql['user_pref_ref'] = $db->real_escape_string($_POST['referer']); $mysql['user_pref_keyword'] = $db->real_escape_string($_POST['keyword']); $mysql['user_pref_limit'] = $db->real_escape_string($_POST['user_pref_limit']); $mysql['user_pref_breakdown'] = $db->real_escape_string($_POST['user_pref_breakdown']); $mysql['user_cpc_or_cpv'] = $db->real_escape_string($_POST['user_cpc_or_cpv']); $mysql['user_pref_show'] = $db->real_escape_string($_POST['user_pref_show']); $mysql['user_pref_device_id'] = $db->real_escape_string($_POST['device_id']); $mysql['user_pref_browser_id'] = $db->real_escape_string($_POST['browser_id']); $mysql['user_pref_platform_id'] = $db->real_escape_string($_POST['platform_id']); if (is_array($_POST['details'])) { foreach ($_POST['details'] as $key => $value) { $mysql['user_pref_group_' . ($key + 1)] = $db->real_escape_string($value); } } } //only do this if the FilterEngine is Defined if (class_exists('FilterEngine')) { $_SESSION['avg_cpc'] = $db->real_escape_string($_POST['avg_cpc']); // set filterEngine $filterEngine = new FilterEngine(); $filterEngine->setFilter($mysql['filter_name1'], $mysql['filter_condition1'], $mysql['filter_value1'], 1); $filterEngine->setFilter($mysql['filter_name2'], $mysql['filter_condition2'], $mysql['filter_value2'], 2); $filterEngine->setFilter($mysql['filter_name3'], $mysql['filter_condition3'], $mysql['filter_value3'], 3); } // predefined timelimit set, set the options if ($_POST['user_pref_time_predefined'] != '') { switch ($_POST['user_pref_time_predefined']) { case 'today': case 'yesterday': case 'last7': case 'last14': case 'last30': case 'thismonth': case 'lastmonth': case 'thisyear': case 'lastyear': case 'alltime': $clean['user_pref_time_predefined'] = $_POST['user_pref_time_predefined']; break; } if (! isset($clean['user_pref_time_predefined'])) { $error['user_pref_time_predefined'] = '<div class="error">You choose an incorrect time user_preference</div>'; } } else { $from = explode('/', $_POST['from']); $from_month = trim($from[0]); $from_day = trim($from[1]); $from_year = trim($from[2]); $to = explode('/', $_POST['to']); $to_month = trim($to[0]); $to_day = trim($to[1]); $to_year = trim($to[2]); // if from or to, validate, and if validated, set it accordingly if (($from != '') and (checkdate($from_month, $from_day, $from_year) == false)) { $error['date'] = '<div class="error">Wrong date format, you must use the following military time format: <strong>mm/dd/yyyy - hh:mms</strong></div>'; } else { $clean['user_pref_time_from'] = mktime(0, 00, 0, $from_month, $from_day, $from_year); } if (($to != '') and (checkdate($to_month, $to_day, $to_year) == false)) { $error['date'] = '<div class="error">Wrong date format, you must use the following military time format: <strong>mm/dd/yyyy - hh:mm</strong></div>'; } else { $clean['user_pref_time_to'] = mktime(23, 59, 59, $to_month, $to_day, $to_year); } } echo $error['date'] . $error['user_pref_time_predefined'] . $error['user_pref_limit'] . $error['user_pref_show']; if (! $error) { $mysql['user_pref_time_predefined'] = $db->real_escape_string($clean['user_pref_time_predefined']); $mysql['user_pref_time_from'] = $db->real_escape_string($clean['user_pref_time_from']); $mysql['user_pref_time_to'] = $db->real_escape_string($clean['user_pref_time_to']); $user_sql = " UPDATE `202_users_pref` SET `user_pref_adv`='" . $mysql['user_pref_adv'] . "',"; if ($_POST['ppc_network_id'] == '') { $user_sql .= "`user_pref_ppc_network_id`=null,"; } else if ($_POST['ppc_network_id'] != '') { $user_sql .= "`user_pref_ppc_network_id`='" . $mysql['user_pref_ppc_network_id'] . "',"; } $user_sql .= "`user_pref_ppc_account_id`='" . $mysql['user_pref_ppc_account_id'] . "', `user_pref_aff_network_id`='" . $mysql['user_pref_aff_network_id'] . "', `user_pref_aff_campaign_id`='" . $mysql['user_pref_aff_campaign_id'] . "', `user_pref_text_ad_id`='" . $mysql['user_pref_text_ad_id'] . "', `user_pref_method_of_promotion`='" . $mysql['user_pref_method_of_promotion'] . "', `user_pref_landing_page_id`='" . $mysql['user_pref_landing_page_id'] . "', `user_pref_country_id`='" . $mysql['user_pref_country_id'] . "', `user_pref_region_id`='" . $mysql['user_pref_region_id'] . "', `user_pref_isp_id`='" . $mysql['user_pref_isp_id'] . "', `user_pref_ip`='" . $mysql['user_pref_ip'] . "', `user_pref_subid`='" . $mysql['user_pref_subid'] . "', `user_pref_referer`='" . $mysql['user_pref_ref'] . "', `user_pref_keyword`='" . $mysql['user_pref_keyword'] . "', `user_pref_limit`='" . $mysql['user_pref_limit'] . "', `user_pref_show`='" . $mysql['user_pref_show'] . "', `user_pref_breakdown`='" . $mysql['user_pref_breakdown'] . "', `user_cpc_or_cpv`='" . $mysql['user_cpc_or_cpv'] . "', `user_pref_time_predefined`='" . $mysql['user_pref_time_predefined'] . "', `user_pref_time_from`='" . $mysql['user_pref_time_from'] . "', `user_pref_time_to`='" . $mysql['user_pref_time_to'] . "', `user_pref_group_1`='" . $mysql['user_pref_group_1'] . "', `user_pref_group_2`='" . $mysql['user_pref_group_2'] . "', `user_pref_group_3`='" . $mysql['user_pref_group_3'] . "', `user_pref_group_4`='" . $mysql['user_pref_group_4'] . "', `user_pref_device_id`='" . $mysql['user_pref_device_id'] . "', `user_pref_browser_id`='" . $mysql['user_pref_browser_id'] . "', `user_pref_platform_id`='" . $mysql['user_pref_platform_id'] . "' WHERE `user_id`='" . $mysql['user_id'] . "'"; // echo $user_sql; $user_result = $db->query($user_sql) or record_mysql_error($user_sql); }
Upload Files
Cancel
Upload
Create New
Cancel
Create
Change Permissions
Cancel
Save
Change Date
Cancel
Save
Rename Item
Cancel
Save
Confirm Delete
Are you sure you want to delete the selected items?
Cancel
Delete