403Webshell
Server IP : 43.241.58.20  /  Your IP : 216.73.216.25
Web Server : Apache/2
System : Linux ns1-1556229.dragonhispeed.com 3.16.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : ratsitne ( 1130)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/ratsitne/.trash/files/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/ratsitne/.trash/files/admin/product-add.php
<?php
    include '../config.php';
    include 'auth.php';
    $page_title = 'เพิ่มสินค้า';
    ob_start();

    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $sku = $_POST['sku'];
        $name = $_POST['name'];
        $description = $_POST['description'];
        $purchase_price = $_POST['purchase_price'];
        $sale_price = $_POST['sale_price'];
        $unit = $_POST['unit'];
        $barcode = $_POST['barcode'];
        $stock = $_POST['stock'];
        $product_type = $_POST['product_type'];
        $category_id = $_POST['category_id'];
        $created_at = date('Y-m-d H:i:s');

        // Handle image upload
        $image = '';
        if (isset($_FILES['image']) && $_FILES['image']['error'] == 0) {
            $target_dir = "../uploads/images/";
            $file_extension = pathinfo($_FILES["image"]["name"], PATHINFO_EXTENSION);
            $unique_file_name = date('YmdHis') . rand(1000, 9999) . '.' . $file_extension;
            $target_file = $target_dir . $unique_file_name;
            if (move_uploaded_file($_FILES["image"]["tmp_name"], $target_file)) {
                $image = $unique_file_name;
            }
        }

        $query = "INSERT INTO products (sku, name, description, purchase_price, sale_price, unit, barcode, image, stock, product_type, category_id, created_at) 
                  VALUES ('$sku', '$name', '$description', '$purchase_price', '$sale_price', '$unit', '$barcode', '$image', '$stock', '$product_type', '$category_id', '$created_at')";
        if (mysqli_query($conn, $query)) {
            $_SESSION['success_message'] = 'เพิ่มข้อมูลสินค้าเรียบร้อยแล้ว';
        } else {
            $_SESSION['error_message'] = 'เกิดข้อผิดพลาด: ' . mysqli_error($conn);
        }
        header('Location: ' . $admin_url . '/product-list.php');
        exit;
    }
?>
<form method="POST" enctype="multipart/form-data">
    <div class="card">
        <div class="card-header">
            <h3 class="card-title">เพิ่มสินค้า</h3>
        </div>
        <div class="card-body">
            <?php if (isset($_SESSION['error_message'])): ?>
                <div class="alert alert-danger alert-dismissible fade show">
                    <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                    <i class="bi bi-exclamation-triangle me-1"></i>
                    <?php echo $_SESSION['error_message']; unset($_SESSION['error_message']); ?>
                </div>
            <?php endif; ?>

            <div class="row">
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="sku">รหัสสินค้า/SKU</label>
                        <input type="text" name="sku" id="sku" class="form-control" required>
                    </div>
                </div>
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="name">ชื่อสินค้า</label>
                        <input type="text" name="name" id="name" class="form-control" required>
                    </div>
                </div>
            </div>
            
            <div class="row">
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="purchase_price">ราคาซื้อ</label>
                        <input type="number" step="0.01" name="purchase_price" id="purchase_price" class="form-control" required>
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="sale_price">ราคาขาย</label>
                        <input type="number" step="0.01" name="sale_price" id="sale_price" class="form-control" required>
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="unit">หน่วย</label>
                        <input type="text" name="unit" id="unit" class="form-control" required>
                    </div>
                </div>
            </div>
            
            <div class="row">
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="barcode">บาร์โค้ด</label>
                        <input type="text" name="barcode" id="barcode" class="form-control">
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="stock">จำนวนคงเหลือ</label>
                        <input type="number" name="stock" id="stock" class="form-control" value="0" required>
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="product_type">ประเภทสินค้า</label>
                        <select name="product_type" id="product_type" class="form-select" required>
                            <option value="สินค้านับสต๊อก">สินค้านับสต๊อก</option>
                            <option value="สินค้าไม่นับสต๊อก">สินค้าไม่นับสต๊อก</option>
                            <option value="สินค้าบริการ">สินค้าบริการ</option>
                        </select>
                    </div>
                </div>
            </div>

            <div class="row">
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="category_id">หมวดหมู่</label>
                        <select name="category_id" id="category_id" class="form-select" required>
                            <?php
                                $result = mysqli_query($conn, "SELECT id, category_name FROM categories");
                                while ($row = mysqli_fetch_assoc($result)): 
                            ?>
                                <option value="<?php echo $row['id']; ?>"><?php echo $row['category_name']; ?></option>
                            <?php endwhile; ?>
                        </select>
                    </div>
                </div>
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="image">รูปภาพสินค้า</label>
                        <input type="file" name="image" id="image" class="form-control">
                    </div>
                </div>
            </div>

            <div class="form-group">
                <label for="description">รายละเอียดสินค้า</label>
                <textarea name="description" id="description" class="form-control" rows="5"></textarea>
            </div>
        </div>
        <div class="card-footer">
            <button type="submit" class="btn btn-primary"><i class="bi bi-floppy me-1"></i>บันทึกข้อมูล</button>
            <a href="<?php echo $admin_url . '/product-list.php'; ?>" class='btn btn-secondary'>ย้อนกลับ</a>
        </div>
    </div>
</form>
<?php
    $content = ob_get_clean();
    $js_script = '';
    include 'template_master.php';
?>

Youez - 2016 - github.com/yon3zu
LinuXploit