403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/fulltion.com/public_html/administrator/modules/manu_masterbus/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/fulltion.com/public_html/administrator/modules/manu_masterbus/addemp.php
<?php 
if(@$_GET['act']=="add"){

	@$db->deleteData("busxemp"," BusID='".@$_GET['BusID']."'");

	@$arrData = array();
	
	@$arrData['BusID']				= @$_GET['BusID'];	
	@$arrData['EmpID']				= @$_POST['Driver1ID'];
	@$arrData['BusXEmpType']			= "พนักงานขับรถ 1";	
	foreach(@$arrData as $k => $v ){
		@$arrData[@$k] = str_replace("'", "\'", @$v); 
	}
	@$db->insertData("busxemp",@$arrData);
	
	@$arrData['BusID']				= @$_GET['BusID'];	
	@$arrData['EmpID']				= @$_POST['Driver2ID'];
	@$arrData['BusXEmpType']			= "พนักงานขับรถ 2";	
	foreach(@$arrData as $k => $v ){
		@$arrData[@$k] = str_replace("'", "\'", @$v); 
	}
	@$db->insertData("busxemp",@$arrData);
	
	@$arrData['BusID']				= @$_GET['BusID'];	
	@$arrData['EmpID']				= @$_POST['Assistant1ID'];
	@$arrData['BusXEmpType']			= "พนักงานต้อนรับ";	
	foreach(@$arrData as $k => $v ){
		@$arrData[@$k] = str_replace("'", "\'", @$v); 
	}
	@$db->insertData("busxemp",@$arrData);
	
	@$arrData['BusID']				= @$_GET['BusID'];	
	@$arrData['EmpID']				= @$_POST['Assistant2ID'];
	@$arrData['BusXEmpType']			= "บริกร";	
	foreach(@$arrData as $k => $v ){
		@$arrData[@$k] = str_replace("'", "\'", @$v); 
	}
	@$db->insertData("busxemp",@$arrData);
	
	//exit;
	@$msg = "Save Data complete.";
	@$res = true;
}

@$where_f = " BusID='".@$_GET['BusID']."' ";

@$page = @$_GET['page'] ? @$_GET['page'] : 1;
@$arrpageP = @$db->getAll("busxemp", "*",@$where_f,"" );
@$arrPage = @$objMaster->viewPages(@$page, @$arrpageP, "15");
@$getPage = @$db->getAll("busxemp","*",@$where_f,"",@$arrPage["offset"]);


@$getcode = @$db->getOne("bus","*"," BusID='".@$_GET['BusID']."'");

@$getdriver1 = @$db->getOne("busxemp","*"," BusID='".@$_GET['BusID']."' and BusXEmpType = 'พนักงานขับรถ 1'");
@$getdriver2 = @$db->getOne("busxemp","*"," BusID='".@$_GET['BusID']."' and BusXEmpType = 'พนักงานขับรถ 2'");
@$getassistant1 = @$db->getOne("busxemp","*"," BusID='".@$_GET['BusID']."' and BusXEmpType = 'พนักงานต้อนรับ'");
@$getassistant2 = @$db->getOne("busxemp","*"," BusID='".@$_GET['BusID']."' and BusXEmpType = 'บริกร'");

@$getdepartment = @$db->getAll("department", "*"," DepartmentStatus = '1'","" );

//@$getemp = @$db->getAll( "admin", "*"," EmpStatus = '1'","" );
@$getemp = @$db->getAll( "admin", "*"," EmpStatus = '1' and EmpID NOT IN (select EmpID from ".DB_PREFIX."busxemp where BusID <> ".@$_GET['BusID'].")","" );
//echo "<pre>"; print_r(@$getPage);
?>
<!-- Start Content Box -->
<div class="content-box">
	<!-- Start Content Box Header-->
	<div class="content-box-header">
					
			<h3><?php echo @$getcode['BusName']; ?></h3>
					
			<ul class="content-box-tabs">
				<li><a href="#list" <?php echo (@$_GET['act']=="" ? 'class="default-tab"' : '');?>><?php echo @$lang_set['list_busxemp']; ?></a></li> <!-- href must be unique and match the id of target div -->
				<li><a href="#add" <?php echo (@$_GET['act']=="edit" ? 'class="default-tab"' : '');?>><?php echo @$lang_set['add_busxemp']; ?></a></li>
			</ul>	
			<div class="clear"></div>	
	</div>		
    <!-- End Content Box Header-->
    
    <!-- Start Content Box Content-->
    <div class="content-box-content">
     	<?php if(@$res){?>
          <div class="notification success png_bg">
             <a href="#" class="close"><img src="resources/images/icons/cross_grey_small.png" title="Close this notification" alt="close" /></a>
                   <div>
                       <?php echo @$msg;?>
                   </div>
             </div>
          <meta http-equiv="refresh" content="1;URL=index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>">
        <?php }?> 
   
   		<!-- Start Tab Content id="list"-->
        <div class="tab-content <?php echo (@$_GET['act']=="" ? 'default-tab' : '');?>" id="list">
        <form action="index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>&amp;act=deleteAll" method="post">
        <table cellpadding="0" cellspacing="0" width="100%">
            <thead>
                <tr>
                    <th width="300" align="left"><?php echo @$lang_set['busxemp_empname']; ?></th>
                    <th width="300" align="left"><?php echo @$lang_set['busxemp_type']; ?></th>
                </tr>
            </thead>            
            <?php 
            if(@$getPage){
                foreach(@$getPage as $key => $val){
				@$getempname = @$db->getOne("admin","*"," EmpID='".@$val['EmpID']."'");		
            ?>
            <?PHP if(@$getempname['EmpName'] != ""){?>
            <tr>
                <th>
                	
						<?php echo @$getempname['EmpName'];?>
                    <?PHP //}else{?>
                    	<?php //echo @$lang_set['not_data'];?>
                   
                
                </th>
                <th><?php echo @$val['BusXEmpType'];?></th>
            </tr>
             <?PHP }?>    
            <?php
                }
            }else{
            ?>
            <tr>
                <th colspan="11" style="text-align:center"><?php echo @$lang_set['not_data']; ?></th>
            </tr>
            <?php 
            }
            ?>
            
            <tfoot>
                <tr>
                    <td colspan="11">
                        <!-- Start .pagination -->	
                        <div class="pagination">
                            <a href="index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>&page=<?php echo @$arrPage["startPage"];?>" title="First Page">&laquo; First</a><a href="index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>&page=<?php echo (@$page-1);?>" title="Previous Page">&laquo; Previous</a>
                             <?php if( @$arrPage["startPage"]!="" && @$arrPage["endPage"] !="" ){?>       
                                        <?php 
                                        for($i = @$arrPage["startPage"]; $i <= @$arrPage["endPage"]; ++$i) {
                                            echo'<a href="index.php?name=manu_masterbus&file=addemp&BusID='.@$_GET["BusID"].'&page='.@$i.'" '.(@$page == @$i ? 'class="number current"' : '').'>'.(@$i).'</a>';
                                        }?>
                             <?php }?>
                            <a href="index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>&page=<?php echo (@$page+1);?>" title="Next Page">Next &raquo;</a><a href="index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>&page=<?php echo @$arrPage["endPage"];?>" title="Last Page">Last &raquo;</a>
                        </div> 
                        <!-- End .pagination -->
                        <div class="clear"></div>
                    </td>
                </tr>
            </tfoot>
        </table>	
        </form>
        </div>		
        <!-- End Tab Content id="list"-->
        <!-- Start Tab Content id="add"-->
    	<div class="tab-content <?php echo (@$_GET['act']=="edit" ? 'default-tab' : '');?>" id="add">
     		<form action="index.php?name=manu_masterbus&file=addemp&BusID=<?php echo @$_GET['BusID']?>&act=add#add" method="post" enctype="multipart/form-data" ><!--onsubmit="return checkdelivery();"-->
            	<fieldset>
                      <input type="hidden" name="BusXEmpID" value="<?php echo  @$_GET['BusXEmpID'];?>">
                    <p>
                      <label><?php echo @$lang_set['busxemp_driver1']; ?>:</label>
                      <select id="Department_Driver1" onchange="SelectDepartmentAddBus('<?PHP echo $lang_code;?>','1','<?PHP echo @$_GET['BusID'];?>')">
                      	<option value="0"><?php echo @$lang_set['select']; ?></option>
						<?php if(@$getdepartment){foreach(@$getdepartment as $key => $val){
						if(@$getdriver1){
						@$getdriver1name = @$db->getOne("admin", "*"," EmpID = ".@$getdriver1['EmpID'],"" );
						}
						if(@$getdriver1name){
						@$getdepartment_driver1 = @$db->getOne("department", "*"," DepartmentID = ".@$getdriver1name['DepartmentID'],"" );
						}
						?>
                         <option value="<?php echo @$val['DepartmentID'];?>" <?php echo (@$val['DepartmentID']=='' || @$val['DepartmentID']==@$getdepartment_driver1['DepartmentID'] ? "selected" : "")?>><?php echo @$val['DepartmentName'];?></option>
                        <?php }
						}?>						
                      </select>
                     <select name="Driver1ID" id="Driver1ID">
                     	<option value="0"><?php echo @$lang_set['not_data']; ?></option>
						<?php if(@$getdriver1['EmpID'] != "0" and @$getdriver1['EmpID'] != ""){
							@$getdriver1name = @$db->getOne("admin", "*"," EmpID = ".@$getdriver1['EmpID'],"" );?>
                        <option value="<?php echo @$getdriver1['EmpID'];?>" selected="selected"><?php echo @$getdriver1name['EmpName'];?></option>
                        <?php }?>						
                      </select>
                    </p>
                    <p>
                      <label><?php echo @$lang_set['busxemp_driver2']; ?>:</label>
                      <select id="Department_Driver2" onchange="SelectDepartmentAddBus('<?PHP echo $lang_code;?>','2','<?PHP echo @$_GET['BusID'];?>')">
                      	<option value="0"><?php echo @$lang_set['select']; ?></option>
						<?php if(@$getdepartment){foreach(@$getdepartment as $key => $val){
						if(@$getdriver2){
						@$getdriver2name = @$db->getOne("admin", "*"," EmpID = ".@$getdriver2['EmpID'],"" );
						}
						if(@$getdriver2name){
						@$getdepartment_driver2 = @$db->getOne("department", "*"," DepartmentID=".@$getdriver2name['DepartmentID'],"" );
						}
						?>
                         <option value="<?php echo @$val['DepartmentID'];?>" <?php echo (@$val['DepartmentID']=='' || @$val['DepartmentID']==@$getdepartment_driver2['DepartmentID'] ? "selected" : "")?>><?php echo @$val['DepartmentName'];?></option>
                        <?php }
						}?>						
                      </select>
                     <select name="Driver2ID" id="Driver2ID">
                     	<option value="0"><?php echo @$lang_set['not_data']; ?></option>
						<?php if(@$getdriver2['EmpID'] != "0"  and @$getdriver2['EmpID'] != ""){
							@$getdriver2name = @$db->getOne("admin", "*"," EmpID = ".@$getdriver2['EmpID'],"" );?>
                        <option value="<?php echo @$getdriver2['EmpID'];?>" selected="selected"><?php echo @$getdriver2name['EmpName'];?></option>
                        <?php }?>					
                      </select>
                    </p>
                    <p>
                      <label><?php echo @$lang_set['busxemp_assistant1']; ?>:</label>
                      <select id="Department_Assistant1" onchange="SelectDepartmentAddBus('<?PHP echo $lang_code;?>','3','<?PHP echo @$_GET['BusID'];?>')">
                      	<option value="0"><?php echo @$lang_set['select']; ?></option>
						<?php if(@$getdepartment){foreach(@$getdepartment as $key => $val){
						if(@$getassistant1){
						@$getassistant1name = @$db->getOne("admin", "*"," EmpID = ".@$getassistant1['EmpID'],"" );
						}
						if(@$getassistant1name){
						@$getdepartment_assistant2 = @$db->getOne("department", "*"," DepartmentID=".@$getassistant1name['DepartmentID'],"" );
						}
						?>
                         <option value="<?php echo @$val['DepartmentID'];?>" <?php echo (@$val['DepartmentID']=='' || @$val['DepartmentID']==@$getdepartment_assistant1['DepartmentID'] ? "selected" : "")?>><?php echo @$val['DepartmentName'];?></option>
                        <?php }
						}?>						
                      </select>
                     <select name="Assistant1ID" id="Assistant1ID">
                     	<option value="0"><?php echo @$lang_set['not_data']; ?></option>
						<?php if(@$getassistant1['EmpID'] != "0" and @$getassistant1['EmpID'] != ""){
							@$getassistant1name = @$db->getOne("admin", "*"," EmpID = ".@$getassistant1['EmpID'],"" );?>
                        <option value="<?php echo @$getassistant1['EmpID'];?>" selected="selected"><?php echo @$getassistant1name['EmpName'];?></option>
                        <?php }?>					
                      </select>
                    </p>
                    <p>
                      <label><?php echo @$lang_set['busxemp_assistant2']; ?>:</label>
                      <select id="Department_Assistant2" onchange="SelectDepartmentAddBus('<?PHP echo $lang_code;?>','4','<?PHP echo @$_GET['BusID'];?>')">
                      	<option value="0"><?php echo @$lang_set['select']; ?></option>
						<?php if(@$getdepartment){foreach(@$getdepartment as $key => $val){
						if(@$getassistant2){
						@$getassistant2name = @$db->getOne("admin", "*"," EmpID = ".@$getassistant2['EmpID'],"" );
						}
						if(@$getassistant2name){
						@$getdepartment_assistant2 = @$db->getOne("department", "*"," DepartmentID=".@$getassistant2name['DepartmentID'],"" );
						}
						?>
                         <option value="<?php echo @$val['DepartmentID'];?>" <?php echo (@$val['DepartmentID']=='' || @$val['DepartmentID']==@$getdepartment_assistant2['DepartmentID'] ? "selected" : "")?>><?php echo @$val['DepartmentName'];?></option>
                        <?php }
						}?>						
                      </select>
                     <select name="Assistant2ID" id="Assistant2ID">
                     	<option value="0"><?php echo @$lang_set['not_data']; ?></option>
						<?php if(@$getassistant2['EmpID'] != "0" and @$getassistant2['EmpID'] != ""){
							@$getassistant2name = @$db->getOne("admin", "*"," EmpID = ".@$getassistant2['EmpID'],"" );?>
                        <option value="<?php echo @$getassistant2['EmpID'];?>" selected="selected"><?php echo @$getassistant2name['EmpName'];?></option>
                        <?php }?>					
                      </select>
                    </p>
                    <p>
                        <input type="submit" class="button" value="<?php echo @$lang_set['submit']; ?>" />
                    </p>
        		</fieldset>
        	</form>				
        </div>
        <!-- End Tab Content id="add"-->
</div>

					

Youez - 2016 - github.com/yon3zu
LinuXploit