Mini Shell Moded By TiGER HeX

/mnt/volume_sfo2_01/50mmla/viewStory.php

<?php
include_once('includes/static/configure.php');
include_once('includes/static/util.php');
include_once('includes/static/dbcon.php');
include_once('includes/static/gdimg.php');
include_once('includes/static/sessions.php');
include_once('includes/appTop.php');

$pg_name = basename($_SERVER['PHP_SELF']);
include_once('includes/header.php');
include_once('includes/ads/468x60.php');
?>

<?
$story_id = 0;
if(isset($_REQUEST['storyId'])){
   $story_id = $_REQUEST['storyId'];
}
//content
$sql="SELECT story_id,story_title,story_body,u.user_id,s.entry_time,username FROM 50mm_stories s, 50mm_users u WHERE s.user_id = u.user_id AND s.story_id = '$story_id'";
if( !($result = $db->sql_query($sql)) ){
   $sql_error = $db->sql_error();
   die($sql_error['message']);
}
$html = '<img src="images/home.gif" border="0" onClick="javascript:history.back();" style="cursor:pointer;"><br><br>';
while($row = $db->sql_fetchrow($result)){

$html.='<table cellpadding="0" cellspacing="0" border="0">'."\n";
	$html.='<tr valign="top">'."\n";
	$html.='<td width="400">'."\n";
	$html.='<div class="title">'.$row['story_title'].'</div><br>'."\n";
	$unix = get_unix_time($row['entry_time']);
    $date = date("m.j.y",$unix);
    $html.= get_html_text($row['story_body'])."\n";
	$html.='</td>'."\n";

$imgsql = "SELECT image FROM 50mm_embed WHERE story_id = '$story_id'";
	if( !($imgresult = $db->sql_query($imgsql)) ){
	   $sql_error = $db->sql_error();
	   die($sql_error['message']);
	}
	$tags = "";
	while($row2 = $db->sql_fetchrow($imgresult)){
	   if(!empty($row2['image'])){
		   $image_info = @getimagesize(ROOT_DIR.STORY_LIMG_DIR.$row2['image']);
		   $js = "popImage('".urlencode(STORY_LIMG_DIR.$row2['image'])."','".$image_info[0]."','".$image_info[1]."');";
		   $tags.="<img src=\"".STORY_SIMG_DIR.$row2['image']."\" border=\"0\" vspace=\"20\" style=\"cursor:pointer;\" onClick=\"".$js."\"><br>\n";
	   }
	}
	if(!empty($tags)){
	   $html.='<td width="30">&nbsp;</td>'."\n";
	   $html.='<td>'.$tags.'</td>'."\n";
	}
	$html.='</tr>'."\n";
	$html.='</table>'."\n";
	$html.='<br><br>Posted '.$date.' by '.'<a href="viewProfile.php?userId='.$row['user_id'].'">'.$row['username'].'</a><br><br>'."\n";
}
echo $html;
?>
<?
include_once('includes/footer.php');
include_once('includes/appBottom.php');
?>