| Current Path : /var/www/cesa.co.za/ |
| Current File : /var/www/cesa.co.za/cl.php |
<?php
include("php/inc_db.php");
$conn=mysqli_connect($loghost, $logid, $logpwd, $dbname);
if (!in_array(strtolower($_REQUEST["t"]), array('tower_ad_website', 'tower_ad_cetrack', 'affiliate_logo_website', 'affiliate_logo_cenews', 'affiliate_logo_app'))) {
http_response_code(403);
die('Forbidden');
}
if (is_numeric($_REQUEST["l"])) {
$sql="SELECT LinkURL FROM LinkTrackers WHERE LinkTrackerID=".mysqli_real_escape_string($conn, $_REQUEST["l"]);
} else {
$sql="SELECT LinkURL FROM LinkTrackers WHERE LOWER(LinkURL)='".strtolower(trim(mysqli_real_escape_string($conn, $_REQUEST["l"]),"/"))."'";
}
$rec=mysqli_query($conn, $sql);
if ($row=mysqli_fetch_assoc($rec)) {
mysqli_query($conn, "INSERT INTO LinkClicks (LinkURL, IPAddress, LinkFrom, LinkType, UserAgent)
VALUES ('".$row["LinkURL"]."', '".mysqli_real_escape_string($conn, $_SERVER["REMOTE_ADDR"])."', '".mysqli_real_escape_string($conn, $_SERVER["HTTP_REFERER"])."', '".mysqli_real_escape_string($conn, $_REQUEST["t"])."', '".mysqli_real_escape_string($conn, $_SERVER["HTTP_USER_AGENT"])."')");
header("Location: ".$row["LinkURL"]);
} else {
http_response_code(403);
die('Forbidden');
}
?>