"; exit; } $db->query("SET NAMES 'utf8'"); $db->query("SET COLLATION_CONNECTION='utf8_czech_ci'"); $db->query("SET character_set_client=utf8"); $db->query("SET character_set_connection=utf8"); $db->query("SET character_set_results=utf8"); //test hack sql if (banned()) { echo "Blacklisted IP. Contact the admin.
Vase IP byla zablokovana. Kontaktujte spravce.
eo@eo.cz

"; echo getIP(); exit; } /*if (strpos($_requesturi,"select")) { if (!strpos($_requesturi,'html')) { log_write("HACK|".getIP()."|".$_requesturi,99);exit; } }*/ /*if (strpos($_requesturi,'exec')) { if (!strpos($_requesturi,'executive')) { log_write("HACK|".getIP()."|".$_requesturi,99);exit; } }*/ $_hack_patterns = [ // SQL injection 'eo_2.','char(','concat','information_', 'sleep(','benchmark(','group_concat(','load_file(', 'into outfile','into dumpfile','@@version','@@datadir','xp_cmdshell', 'union select','union all select', // XSS '200))) { //overit hack. moc dlouhy url log_write("?HACK|".getIP()."|".$_requesturi,98); } //isset PRODUCT -> header s 301kou na html.. if (isset($_REQUEST["product"])) { $code=$_REQUEST["product"]; $pos=strpos($code,"-"); if ($pos) $code=substr($code,0,$pos); $r=$db->query("SELECT cenik_kat,cenik_nazev FROM mh_cenik WHERE cenik_kod=?", $code)->fetchArray(); if (count($r)==0) $r=$db->query("SELECT cenik_kat,cenik_nazev FROM cenik2 WHERE cenik_kod=?", $code)->fetchArray(); $CatID=@$r["cenik_kat"]; $CNZ=@$r["cenik_nazev"]; $CNZR=modrewrite_name($CNZ); } include("init.php"); if (!strpos(".".$_requesturi,'?e=')) { if (strpos($_requesturi,'product=')) { $url="https://www.eo.cz/$code-$CNZR.html"; if (@$bezobrazku==1) $url.="?bezobrazku=1"; // zachovat pri 301 na hezkou URL (jinak by se ztratil) @header("HTTP/1.1 301 Moved Permanently"); @header("location:$url"); } } if (strpos($_requesturi,"//")) { $url=str_replace("//","/",$_requesturi); @header("HTTP/1.1 301 Moved Permanently"); @header("location:$url"); } //vyradit url typu 00.html/script/script.. if ((strpos($_requesturi,".html")&&(substr($_requesturi,strlen($_requesturi)-4,4)!='html'))) { $_hp=strpos($_requesturi,'.html')+5; if (@$_requesturi[$_hp]!=='?') { // query string za .html je platny (napr. ?bezobrazku=1) — orezavat jen cestu typu .html/script $url=substr($_requesturi,0,$_hp); @header("HTTP/1.1 301 Moved Permanently"); @header("location:$url"); } } $fullUrl="https://www.eo.cz".$_SERVER['REQUEST_URI']; $cleanUrl=strtok($fullUrl, '?'); //////////////////////////////////////////////////////// if ((@$_COOKIE['_m']=='off')&&(($_COOKIE["firsttime"]!='no'))) { $_SESSION["_user"]=""; $_SESSION["_pass"]=""; $_SESSION["_logged"]=0; setcookie('_xuser', null, -1,'/'); setcookie('_xpass', null, -1,'/'); setcookie("firsttime", "no", 0, "/"); @header("location: /"); } if (@$_COOKIE['_m']=='on') { $flogin=@$_COOKIE["_xuser"]; $fpasscook=substr(@$_COOKIE["_xpass"],0,32); if (!@$_logged) include("login.php"); } if (!isset($_COOKIE['firsttime'])) setcookie("firsttime", "no", 0, "/"); if (!user_admin($_user)) $_obch=0; if (@$cook==1) print_r ($_COOKIE); //debug // echo "_logged= $_logged, neprihlasen = $neprihlasen"; //jsme v nahledu na detail produktu? -> rozklicovat kod ($code), najit CatID.. if (isset($product)) { $code=$product; $pos=strpos($code,"-"); if ($pos) $code=substr($code,0,$pos); $rproduct=$db->query("SELECT cenik_kod,cenik_kod2,cenik_pn,cenik_kat,cenik_nazev,cenik_vyrobce,cenik_nazevshort,cenik_dod,cenik_nakup,cenik_ao,cenik_rema,cenik_dph,cenik_marze,cenik_skladem,cenik_kusu,cenik_ean,cenik_zaruka,cenik_atr1,cenik_atr2,cenik_atr3,cenik_atr4,cenik_atr5 FROM mh_cenik LEFT JOIN cenik_atr ON cenik_id=cenik_kod WHERE cenik_kod=? LIMIT 1", $code)->fetchArray(); $rowproduct=$rproduct; $CatID=@$rowproduct["cenik_kat"]; katr($CatID); if (!$CatID) { //neni produkt ->hledat v cenik2 $code=$product; $pos=strpos($code,"-"); if ($pos) $code=substr($code,0,$pos); $r=$db->query("SELECT * FROM cenik2 WHERE cenik_kod=?", $code)->fetchArray(); if (count($r)) { $pn=$r["cenik_pn"]; $eanc=$r["cenik_ean"]; //-- vyjimka. pokud existuje v cenik produkt se shodnym kod2, pak zobrazi ten. $rq=$db->query("SELECT * FROM mh_cenik WHERE cenik_kod2='".$r["cenik_kod2"]."'")->fetchArray(); if (count($rq)) { @header("HTTP/1.1 301 Moved Permanently"); @header("location: /?product=".$rq["cenik_kod"]); } if (!detect_bot()) log_write("OLDPRODUCT|$code|$pn|$CatID"); $oldprod=1; //zobrazeni neaktualniho produktu. ALE.. $rx=$db->query("SELECT sklad_kusu FROM mh_sklad WHERE sklad_kod=?", $code)->fetchArray(); //..pokud je skladem, tak se produkt 'ozivi' if ((count($rx))&&($rx["sklad_kusu"])) { //zkopirovani z cenik2 do cenik $rx=$db->query("SELECT * FROM cenik2 WHERE cenik_kod=?", $code)->fetchArray(); $xkod=$rx['cenik_kod']; $xkod2=$rx['cenik_kod2']; $xpn=$rx['cenik_pn']; $xnazev=$rx['cenik_nazev'];$xnazevs=$rx['cenik_nazevshort']; $xzaruka=$rx['cenik_zaruka']; $xnakup=$rx['cenik_nakup']; $xrema=$rx['cenik_rema']; $xao=$rx['cenik_ao']; $xvyrobce=$rx['cenik_vyrobce']; $xkat=$rx['cenik_kat']; $xmarze=$rx['cenik_marze']; $xrez=$rx['cenik_ean']; $xdod=$rx['cenik_dod']; $db->query("INSERT INTO mh_cenik VALUES(?,?,?,?,?,?,?,?,?,?,'ks',?,?,?,?,'',0,'',?)", $xkod,$xkod2,$xpn,$xnazev,$xnazevs,$_dph,$xzaruka,$xnakup,$xrema,$xao, $xvyrobce,$xkat,$xmarze,$xdod,$xrez); $oldprod=0; //oziveno $rproduct=$db->query("SELECT cenik_kod,cenik_kod2,cenik_pn,cenik_kat,cenik_nazev,cenik_vyrobce,cenik_nazevshort,cenik_dod,cenik_nakup,cenik_ao,cenik_rema,cenik_dph,cenik_marze,cenik_skladem,cenik_kusu,cenik_ean,cenik_zaruka,cenik_atr1,cenik_atr2,cenik_atr3,cenik_atr4,cenik_atr5 FROM mh_cenik LEFT JOIN cenik_atr ON cenik_id=cenik_kod WHERE cenik_kod=? LIMIT 1", $code)->fetchArray(); $rowproduct=$rproduct; $CatID=@$rowproduct["cenik_kat"]; katr($CatID); } $rproduct=$db->query("SELECT cenik_kod,cenik_kod2,cenik_pn,cenik_kat,cenik_nazev,cenik_vyrobce,cenik_nazevshort,cenik_dod,cenik_nakup,cenik_ao,cenik_rema,cenik_dph,cenik_marze,cenik_skladem,cenik_kusu,cenik_ean,cenik_zaruka FROM cenik2 WHERE cenik_kod=? LIMIT 1", $code)->fetchArray(); $rowproduct=$rproduct; } /////////// } } //HTTP status 404/301 nutno poslat PRED vystupem HTML - pozdeji je output buffer //odeslany a header() v tele stranky selze (soft 404 = Google indexuje mrtve URL) if (!isset($p) && !isset($qsearch)) { if (isset($product) && !isset($rowproduct["cenik_nazev"])) { header("HTTP/1.1 404 Not Found"); } elseif (!isset($product) && isset($CatID) && @$CatID[0]!='~' && !@$_nazevkategorie && $CatID!='tonery' && $CatID!='nb-prislusenstvi') { if ($CatID=='notebook') { header("HTTP/1.1 301 Moved Permanently"); header("location: https://www.eo.cz/notebooky/?vyr=".rawurlencode(@$vyr)); exit; } header("HTTP/1.1 404 Not Found"); } } include ($_SERVER['DOCUMENT_ROOT']."/script/description.php") /////////////////////////////////////////////////////////////// ?> <? include ($_SERVER['DOCUMENT_ROOT']."/script/title.php"); echo $_title; ?> ">
"; //exit; ?> kategorie | vyrobci | parametry | atckategorie | souvisejici | import | minitexty | atributy | exit'; ?>
Admin
Tento produkt neexistuje"; //log_write ("$code",2); } } else { if (isset($CatID)&&(!@$_nazevkategorie)) { if ($CatID=='tonery') include("main_tonery.php"); else if ($CatID=='nb-prislusenstvi') include("main_nb.php"); else { //404 hlavicka i redirect 'notebook' uz odeslany pred HTML vystupem (viz vyse) echo "
Tato kategorie neexistuje"; log_write ("neexistuje kategorie $CatID",1); exit; } } else { if ($_obch) include ("categoryB.php"); else include ("categoryB.php"); } } } if (isset($gmE)) include("sendmailA.php"); ?>
close(); ?>