403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/fulltion.com/private_html/administrator/modules/manu_master/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/fulltion.com/private_html/administrator/modules/manu_master/department.php
<?php 
$linkUrl = "index.php?name=manu_master&file=department";
if(@$_GET['act']=="add"){
	@$arrData = array();
	 
	@$idarr = @$db->getOne("department","*","","order by DepartmentID desc","limit 1");
	@$id = @$idarr['DepartmentID'];
	@$autoid = @$id+1;
	
	@$lang = @$db->getAll("language","*","","","");
	if(@$lang){
		foreach(@$lang as $key => $value ){
				@$arrData['DepartmentID']		= @$autoid;
				@$arrData['DepartmentName']		= @$_POST['DepartmentName'];
				@$arrData['DepartmentStatus']	= @$_POST['DepartmentStatus'];
				@$arrData['lang_code']		= @$value['lang_code'];

				foreach(@$arrData as $k => $v ){
					@$arrData[@$k] = str_replace("'", "\'", @$v); 
				}
				//echo "<pre>"; print_r(@$arrData);
				//exit;
				@$db->insertData("department",@$arrData);
		}
	}
	
	//exit;
	@$msg = "Save Data complete.";
	@$res = true;
}elseif(@$_GET['act']=="editdata"){
	@$arrData = array();
	
	@$arrData['DepartmentName']		= @$_POST['DepartmentName'];
	@$arrData['DepartmentStatus']	= @$_POST['DepartmentStatus'];
	
	foreach(@$arrData as $k => $v ){
		@$arrData[@$k] = str_replace("'", "\'", @$v); 
	}

	@$db->updateData("department",@$arrData," DepartmentID='".@$_POST['DepartmentID']."' and lang_code='".@$lang_code."'");
	
	@$msg = "Edit Data complete.";
	@$res = true;
}elseif(@$_GET['act']=="edit"){
	@$arrRes = @$db->getOne("department","*"," DepartmentID='".@$_GET['DepartmentID']."' and lang_code='".@$lang_code."'");
	
}elseif(@$_GET['act']=="deletedata"){
	
	@$db->deleteData("department"," DepartmentID='".@$_GET['DepartmentID']."'");
	@$db->deleteData("position"," DepartmentID='".@$_GET['DepartmentID']."'");
	
	@$msg = "Delete Data complete.";
	@$res = true;
}elseif(@$_GET['act']=="deleteAll"){
	//echo "<pre>"; print_r(@$_POST);
	if(count(@$_POST['pagedel']) > 0){
		foreach(@$_POST['pagedel'] as $key => $val){
			@$db->deleteData("department"," DepartmentID='".@$val."'");
			@$db->deleteData("position"," DepartmentID='".@$val."'");
		}
	}
	@$msg = "Delete Data complete.";
	@$res = true;
}
@$where_f = "lang_code='".@$lang_code."'";

@$search = @$_POST['keyword'] ? @$_POST['keyword'] : @$_GET['keyword'];
if(@$search){
	@$searchnew = str_replace("'", "\'", @$search); 
	if(@$where_f){
		@$where_f .= " and (DepartmentName like '%".@$searchnew."%')";
	}else{
		@$where_f = "  (DepartmentName like '%".@$searchnew."%')";
	}	
}

@$page = @$_GET['page'] ? @$_GET['page'] : 1;
@$arrpageP = @$db->getAll( "department", "*",@$where_f,"" );
@$arrPage = @$objMaster->viewPages(@$page, @$arrpageP, "15");
@$getPage = @$db->getAll("department","*",@$where_f,"",@$arrPage["offset"]);

//echo "<pre>"; print_r(@$getPage);
?>
<!-- Start Content Box -->
<div class="content-box">
	<!-- Start Content Box Header-->
	<div class="content-box-header">
					
			<h3><?php echo @$lang_set['department_title']; ?></h3>
					
			<ul class="content-box-tabs">
				<li><a href="#list" <?php echo (@$_GET['act']=="" ? 'class="default-tab"' : '');?>><?php echo @$lang_set['list_department']; ?></a></li> <!-- href must be unique and match the id of target div -->
				<li><a href="#add" <?php echo (@$_GET['act']=="edit" ? 'class="default-tab"' : '');?>><?php echo @$lang_set['add_department']; ?></a></li>
			</ul>	
			<div class="clear"></div>	
	</div>		
    <!-- End Content Box Header-->
    
    <!-- Start Content Box Content-->
    <div class="content-box-content">
     	<?php if(@$res){?>
          <div class="notification success png_bg">
             <a href="#" class="close"><img src="resources/images/icons/cross_grey_small.png" title="Close this notification" alt="close" /></a>
                   <div>
                       <?php echo @$msg;?>
                   </div>
             </div>
          <meta http-equiv="refresh" content="1;URL=<?php echo $linkUrl;?>">
        <?php }?> 
   
   		<!-- Start Tab Content id="list"-->
        <div class="tab-content <?php echo (@$_GET['act']=="" ? 'default-tab' : '');?>" id="list">
        
        <form action="<?php echo $linkUrl;?>" method="post" name="form_search">
            <?php echo @$lang_set['input_search'];?> :&nbsp;
            <input type="text" class="text" value="<?PHP echo @$search;?>" name="keyword" />&nbsp;
            <input type="submit" class="button" value="ค้นหา"/>
        </form>
        
        <form action="<?php echo $linkUrl;?>&amp;act=deleteAll" method="post" onsubmit="return confirmDelete(this);">
        <table cellpadding="0" cellspacing="0" width="100%">
            <thead>
                <tr>
                    <th><input type="checkbox" class="check_all" /></th>
                    <th><?php echo @$lang_set['department_name']; ?></th>
                    <th><?php echo @$lang_set['department_status']; ?></th>
                    <th style="text-align:right;"><?php echo @$lang_set['action']; ?></th>
                </tr>
            </thead>            
            <?php 
            if(@$getPage){
                foreach(@$getPage as $key => $val){
            ?>
            <tr>
                <th><input type="checkbox" name="pagedel[]" value="<?php echo @$val['DepartmentID'];?>"/></th>
                <th><?php echo @$val['DepartmentName'];?></th>
                <th>
				
				<select name="DepartmentStatus" onchange="AJAX_Update_status('Department','DepartmentStatus',this.options[this.selectedIndex].value,'<?php echo @$val['DepartmentID']?>','DepartmentID');">
                	<option value="1" <?php echo (@$val['DepartmentStatus']=="1" ? "selected" : "");?>><?php echo @$lang_set['show']; ?></option>
                    <option value="0" <?php echo (@$val['DepartmentStatus']=="0" ? "selected" : "");?>><?php echo @$lang_set['hide']; ?></option>
                </select>
                
                </th>
                <th style="text-align:right;">
                <a href="<?php echo $linkUrl;?>&act=edit&DepartmentID=<?php echo @$val['DepartmentID']?>#add" title="Edit"><img src="resources/images/icons/pencil.png" alt="Edit" /></a> |
                
                <a href="javascript:void();" title="Delete" onclick="chkConfirm('<?php echo $linkUrl;?>&act=deletedata&DepartmentID=<?php echo @$val['DepartmentID']?>','ยืนยันการลบข้อมูล');"><img src="resources/images/icons/cross.png" alt="Delete" /></a>
                </th>
            </tr>
                
            <?php
                }
            }else{
            ?>
            <tr>
                <th colspan="11" style="text-align:center"><?php echo @$lang_set['not_data']; ?></th>
            </tr>
            <?php 
            }
            ?>
            
            <tfoot>
                <tr>
                    <td colspan="11">
                        <div class="bulk-actions align-left">
                            <select name="actdel">
                                <option value="del"><?php echo @$lang_set['delete']; ?></option>
                            </select>
                        <input class="button" type="submit" value="<?php echo @$lang_set['selected']; ?>" />
                        </div>
                        <!-- Start .pagination -->	
                        <div class="pagination">
                        <?php if($arrPage['allpage']>1){?>
                           <a href="<?php echo $linkUrl;?>&page=1&keyword=<?PHP echo @$search;?>" title="หน้าแรก">&laquo; หน้าแรก</a><a href="<?php echo $linkUrl;?>&page=<?php echo (1==$page ? $page : @$page-1);?>&keyword=<?PHP echo @$search;?>" title="ก่อนหน้า">&laquo; ก่อนหน้า</a>
                             <?php if( @$arrPage["startPage"]!="" && @$arrPage["endPage"] !="" ){?>       
                                        <?php 
                                        for($i = @$arrPage["startPage"]; $i <= @$arrPage["endPage"]; ++$i) {
                                            echo'<a href="'. $linkUrl.'&keyword='.@$search.'&page='.@$i.'" '.(@$page == @$i ? 'class="number current"' : '').'>'.(@$i).'</a>';
                                        }?>
                             <?php }?>
                            <a href="<?php echo $linkUrl;?>&page=<?php echo ($page==$arrPage["allpage"] ? $page : $page+1);?>&keyword=<?PHP echo @$search;?>" title="ถัดไป">ถัดไป &raquo;</a><a href="<?php echo $linkUrl;?>&page=<?php echo @$arrPage["allpage"];?>&keyword=<?PHP echo @$search;?>" title="หน้าสุดท้าย">หน้าสุดท้าย &raquo;</a>
                        <?php }?>
                        </div> 
                        <!-- End .pagination -->
                        <div class="clear"></div>
                    </td>
                </tr>
            </tfoot>
        </table>	
        </form>
        </div>		
        <!-- End Tab Content id="list"-->
        <!-- Start Tab Content id="add"-->
    	<div class="tab-content <?php echo (@$_GET['act']=="edit" ? 'default-tab' : '');?>" id="add">
     		<form action="<?php echo $linkUrl;?>&act=<?php echo (@$_GET['act']=="edit" ? "editdata" : "add");?>#add" method="post" enctype="multipart/form-data" onsubmit="return checkpagedepartment();"><!--onsubmit="return checkdelivery();"-->
            	<fieldset>
                      <input type="hidden" name="DepartmentID" value="<?php echo  @$_GET['DepartmentID'];?>">
                    <p>
                      <label><?php echo @$lang_set['department_name']; ?>:</label>
                      <input type="text" class="text-input medium-input" name="DepartmentName" id="DepartmentName" value="<?php echo @$arrRes['DepartmentName'];?>" />
                    <!--<span class="input-notification error png_bg" id="span_name"></span>--></p>
                    <p>
                      <input type="radio" name="DepartmentStatus" value="1" <?php echo (@$arrRes['DepartmentStatus']=="1" ? "checked" : "" ); ?> /> <?php echo @$lang_set['show']; ?>
                      <input type="radio" name="DepartmentStatus" value="0"  <?php echo ( !@$arrRes['DepartmentStatus'] || @$arrRes['DepartmentStatus']=="0" ? "checked" : "" ); ?>/><?php echo @$lang_set['hide']; ?>
                    </p>
                    <p>
                        <input type="submit" class="button" value="<?php echo @$lang_set['submit']; ?>" />
                    </p>
        		</fieldset>
        	</form>				
        </div>
        <!-- End Tab Content id="add"-->
</div>

Youez - 2016 - github.com/yon3zu
LinuXploit