403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/fulltion.com/public_html/administrator/modules/manu_supply/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/fulltion.com/public_html/administrator/modules/manu_supply//supplyinbus.php
<?php 
@$setpoint = @$_GET['SSUpdateBusProduct'];
$linkUrl = "index.php?name=manu_supply&file=supplyinbus&SSUpdateBusProduct=".@$setpoint;
@$link1 = "index.php?name=manu_supply&file=supplytobus&SSUpdateBusProduct=".@$setpoint;
@$link2 = "index.php?name=manu_supply&file=supplyfrombus&SSUpdateBusProduct=".@$setpoint;
if(isset($fullsc)){
$linkUrl .= "&fullsc=fullsc";
@$link1 .= "&fullsc=fullsc";
@$link2 .= "&fullsc=fullsc";
}
if(@$_GET['act']=="deletedata"){
	
	@$arrDataHist = array();
	
	@$getiddetail = @$db->getOne("invoicedetail","*","InvoiceDetailID='".@$_GET['InvoiceDetailID']."'","","");
	@$getend = @$db->getOne("invoice","*","InvoiceID='".@$getiddetail['InvoiceID']."'","","");
	@$arrDataHist['InvoiceDetailID'] = @$getiddetail['InvoiceDetailID'];
	@$arrDataHist['InvoiceID'] 		= @$getiddetail['InvoiceID'];
	@$arrDataHist['LastPoint'] 		= @$getiddetail['LastPoint'];
	@$arrDataHist['BusXRouteID']			= @$getiddetail['BusXRouteID'];
	@$arrDataHist['EmpReviceID'] 	= @$_SESSION['member']['userid'];
	@$arrDataHist['StartPoint']		= @$getend['InvoiceStartPoint'];
	@$arrDataHist['EndPoint']		= @$getend['InvoiceEndPoint'];
	@$arrDataHist['status'] 			= '1';
	@$arrDataHist['HistDatetime'] 	= date("Y-m-d H:i:s");
	
	@$db->insertData("hist",@$arrDataHist);
	
	
	@$arrData = array();
	@$arrData['status'] = 1;
	@$arrData['BusXRouteID'] = 0;
	@$db->updateData("invoicedetail",@$arrData," InvoiceDetailID='".@$_GET['InvoiceDetailID']."'");
	
	
	
	@$msg = "Delete Data complete.";
	@$res = true;
}elseif(@$_GET['act']=="deleteAll"){
	//echo "<pre>"; print_r(@$_POST);
	@$arrData = array();
	@$arrDataHist = array();
	if(count(@$_POST['pagedel']) > 0){
		foreach($_POST['pagedel'] as $key => $val){
	
			@$getiddetail = @$db->getOne("invoicedetail","*","InvoiceDetailID='".@$val."'","","");
			@$getend = @$db->getOne("invoice","*","InvoiceID='".@$getiddetail['InvoiceID']."'","","");
			@$arrDataHist['InvoiceDetailID'] = @$getiddetail['InvoiceDetailID'];
			@$arrDataHist['InvoiceID'] 		= @$getiddetail['InvoiceID'];
			@$arrDataHist['LastPoint'] 		= @$getiddetail['LastPoint'];
			@$arrDataHist['BusXRouteID']			= @$getiddetail['BusXRouteID'];
			@$arrDataHist['EmpReviceID'] 	= @$_SESSION['member']['userid'];
			@$arrDataHist['StartPoint']		= @$getend['InvoiceStartPoint'];
			@$arrDataHist['EndPoint']		= @$getend['InvoiceEndPoint'];
			@$arrDataHist['status'] 			= '1';
			@$arrDataHist['HistDatetime'] 	= date("Y-m-d H:i:s");
			
			@$db->insertData("hist",@$arrDataHist);
			
			
			@$arrData['status'] = 1;
			@$arrData['BusXRouteID'] = 0;
			@$db->updateData("invoicedetail",@$arrData," InvoiceDetailID='".@$val."'");
		}
	}
	@$msg = "Delete Data complete.";
	@$res = true;
}

@$getcode = @$db->getOne("busxroute","*"," BusXRouteID='".@$_GET['BusXRouteID']."'");
@$getrouteid = @$getcode['RouteID'];
@$getbusid = @$getcode['BusID'];

@$getroutename = @$db->getOne("route","*"," RouteID='".@$getrouteid."'");
@$getbusname = @$db->getOne("bus","*"," BusID='".@$getbusid."'");

@$where_f = " BusXRouteID = '".@$_GET['BusXRouteID']."'";

@$page = @$_GET['page'] ? @$_GET['page'] : 1;
@$arrpageP = @$db->getAll( "invoicedetail", "*",@$where_f,"" );
@$arrPage = @$objMaster->viewPages(@$page, @$arrpageP, "15");
@$getPage = @$db->getAll("invoicedetail","*",@$where_f,"",@$arrPage["offset"]);
?>
<h3> < <a href="<?PHP echo @$link1;?>" ><?php echo @$lang_set['backtobus']; ?></a>  |  <a href="<?PHP echo @$link2;?>" ><?php echo @$lang_set['backfrombus']; ?></a> > </h3>	

<!-- Start Content Box -->
<div class="content-box">
	<!-- Start Content Box Header-->
	<div class="content-box-header">	
    		<?PHP if(isset($fullsc)){ ?>
			<label><a href="index.php?name=manu_main&hk=login"><img src="resources/images/home.png" alt="Edit" /></a></label>
        <?PHP }?>	
			<h3><?php echo @$getroutename['RouteName']."  //  วันที่ ".@$objMaster->getdbdateformat(@$getcode['SetDate'])."  รถที่ใช้  ".@$getbusname['BusName']; ?></h3>
					
			<ul class="content-box-tabs">
				<li><a href="#list" <?php echo (@$_GET['act']=="" ? 'class="default-tab"' : '');?>><?php echo @$lang_set['list_product']; ?></a></li> <!-- href must be unique and match the id of target div -->
			</ul>	
			<div class="clear"></div>	
	</div>		
    <!-- End Content Box Header-->
    
    <!-- Start Content Box Content-->
    <div class="content-box-content">
   		<?php if(@$res){?>
          <div class="notification success png_bg">
             <a href="#" class="close"><img src="resources/images/icons/cross_grey_small.png" title="Close this notification" alt="close" /></a>
                   <div>
                       <?php echo @$msg;?>
                   </div>
             </div>
          <meta http-equiv="refresh" content="1;URL=<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>">
        <?php }?>
   		<!-- Start Tab Content id="list"-->
        <div class="tab-content <?php echo (@$_GET['act']=="" ? 'default-tab' : '');?>" id="list">
        <form action="<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>&amp;act=deleteAll" method="post">
        <table>
                    	<thead>
                        	<tr>
                            <th><input type="checkbox" class="check_all" /></th>
                            <th><?php echo @$lang_set['endpoint']; ?></th>
                        	<th><?php echo @$lang_set['CodeProduct']; ?></th>
                            <th><?php echo @$lang_set['NameProduct']; ?></th>
                            <th><?php echo @$lang_set['WeightProduct']; ?></th>
                            <th><?php echo @$lang_set['SizeProducr']; ?></th>
                            <th><?php echo @$lang_set['totalmoney']; ?></th>
                            <th><?php echo @$lang_set['invoice_status']; ?></th>
                            <th><?php echo @$lang_set['comment']; ?></th>
                            <th></th>
                            </tr>
                        </thead>
                        <?PHP 
						if(@$getPage){
                			foreach($getPage as $key => $va){
							@$getstatusproduct = @$db->getOne("invoidestatus","*"," statusid='".@$va['status']."'");
							@$getinvoice = @$db->getOne( "invoice", "*"," InvoiceID = '".@$va['InvoiceID']."'","" );
							@$getendname = @$db->getOne("deliverypoint","*","DeliveryPointID = ".@$getinvoice['InvoiceEndPoint']);
							@$getnamesize = @$db->getOne("setupsize","*","SetupSizeID = ".@$va['ProductSize']);
						?>
                        <tr>
                        	<td>
                            <?PHP if(@$getinvoice['InvoiceStartPoint'] == @$setpoint){?>
                            <input type="checkbox" name="pagedel[]" value="<?php echo @$va['InvoiceDetailID'];?>"/>
                            <?PHP }?>
                            </td>
                        	<td><?php echo @$getendname['DeliveryPointName'];?></td>
                            <td><?php echo @$va['ProductCode'];?></td>
                            <td><?php echo @$va['ProductName'];?></td>
                            <td><?php echo @$va['ProductWeight'];?></td>
                            <td><?php echo @$getnamesize['SetupSizeSize'];?></td>
                            <td><?php echo @$va['totalmoney'];?></td>
                            <td><?php echo @$getstatusproduct['statusdesc'];?></td>
                            <td><?php echo @$va['comment'];?></a></td>
                            <td>
                            <?PHP 
							if(@$getinvoice['InvoiceStartPoint'] == @$setpoint){?>
                            <a href="<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>&act=deletedata&InvoiceDetailID=<?php echo @$va['InvoiceDetailID']?>&SSUpdateBusProduct=<?php echo @$setpoint;?>" title="ของลงจากรถ"><img src="resources/images/icons/Car_Out.png" alt="ของลงจากรถ" width="16" height="16"/></a>
                            <?PHP }?>
                            </th>
                        </tr>
                        <?php }
						}else{
						?>
						<tr>
							<th colspan="11" style="text-align:center"><?php echo @$lang_set['not_data']; ?></th>
						<tr>
						<?php 
						}
						?>
        	<tfoot>
                <tr>
                    <td colspan="11">
                        <div class="bulk-actions align-left">
                            <select name="actdel">
                                <option value="del">ของลงจากรถ</option>
                            </select>
                        <input class="button" type="submit" value="<?php echo @$lang_set['selected']; ?>" />
                        </div>
                        <!-- Start .pagination -->	
                        <div class="pagination">
                         <?php if($arrPage['allpage']>1){?>
                            <a href="<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>&SSUpdateBusProduct=<?php echo @$setpoint;?>&page=1" title="หน้าแรก">&laquo; หน้าแรก</a><a href="<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>&SSUpdateBusProduct=<?php echo @$setpoint;?>&page=<?php echo ($page==1 ? $page : @$page-1);?>" title="ก่อนหน้า">&laquo; ก่อนหน้า</a>
                             <?php if( @$arrPage["startPage"]!="" && @$arrPage["endPage"] !="" ){?>       
                                        <?php 
                                        for($i = @$arrPage["startPage"]; $i <= @$arrPage["endPage"]; ++$i) {
                                            echo'<a href="'.$linkUrl.'&BusXRouteID='.@$_GET['BusXRouteID'].'&SSUpdateBusProduct='.@$setpoint.'&page='.@$i.'" '.(@$page == @$i ? 'class="number current"' : '').'>'.(@$i).'</a>';
                                        }?>
                             <?php }?>
                            <a href="<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>&SSUpdateBusProduct=<?php echo @$setpoint;?>&page=<?php echo ($page==$arrPage["allpage"] ? $page : $page+1);?>" title="ถัดไป">ถัดไป &raquo;</a><a href="<?PHP echo $linkUrl;?>&BusXRouteID=<?php echo @$_GET['BusXRouteID']?>&SSUpdateBusProduct=<?php echo @$setpoint;?>&page=<?php echo @$arrPage["allpage"];?>" title="หน้าสุดท้าย">หน้าสุดท้าย &raquo;</a>
                         <?php }?>
                        </div> 
                        <!-- End .pagination -->
                        <div class="clear"></div>
                    </td>
                </tr>
            </tfoot>
        </table>	
        </form>
        </div>		
        <!-- End Tab Content id="list"-->
</div>

Youez - 2016 - github.com/yon3zu
LinuXploit