403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/tessabalpatiu.go.th/public_html/administrator/modules/promote5/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/tessabalpatiu.go.th/public_html/administrator/modules/promote5/index.php
<?PHP
function rrmdir($dir) { 
   if (is_dir($dir)) { 
     $objects = scandir($dir); 
     foreach ($objects as $object) { 
       if ($object != "." && $object != "..") { 
         if (filetype($dir."/".$object) == "dir") rrmdir($dir."/".$object); else unlink($dir."/".$object); 
       } 
     } 
     reset($objects); 
     rmdir($dir); 
   } 
 } 
 
@$linkurl = "index.php?name=promote5";
@$linkurl1 = "index.php?name=promote5";
@$linkurlpic = "index.php?name=promote5&file=picture";

@$tableName = "promoteknow2";
@$tableNamePicture = "promoteknow2_picture";
if(@$_GET['act']=="add"){
	@$arrData = array();
	
	@$idarr = @$db->getOne(@$tableName,"max(menu_id) as menu_id","lang_code='".$lang_code."'");
	@$id = @$idarr['menu_id'];
	@$autoid = @$id+1;
	$lang = $db->getAll("language","*","","","");
	if($lang){
		foreach($lang as $key => $value ){
			@$arrData['menu_id']   = @$autoid;
			@$arrData['menu_name']	= @$_POST['menu_name'];
			@$arrData['menu_sort']   = @$_POST['menu_sort'];
			@$arrData['menu_title']   = @$_POST['menu_title'];
			@$arrData['menu_link']   = @$_POST['menu_link'];
			@$arrData['menu_status'] = @$_POST['menu_status'];
			@$arrData['menu_detail'] = @$_POST['menu_detail'];
			@$arrData['menu_type'] = "promote4";
			@$arrData['menu_classflag'] = @$_POST['menu_classflag'];
			@$arrData['lang_code'] = $value["lang_code"];
			
			foreach($arrData as $k => $v ){
					$arrData[$k] = str_replace("'", "\'", $v); 
				}
			@$db->insertData(@$tableName,@$arrData);	
		}
	}
	@mkdir("uploads/".@$_POST['menu_name']);
	$msg = $lang_set['txtSaveComplete'];
	$res = 1;
	
}elseif(@$_GET['act']=="editdata"){
	@$arrData = array();
	
		@$arrData['menu_name']	= @$_POST['menu_name'];
		@$arrData['menu_sort']   = @$_POST['menu_sort'];
		@$arrData['menu_title']   = @$_POST['menu_title'];
		@$arrData['menu_link']   = @$_POST['menu_link'];
		@$arrData['menu_status'] = @$_POST['menu_status'];
		@$arrData['menu_detail'] = @$_POST['menu_detail'];
		@$arrData['menu_classflag'] = @$_POST['menu_classflag'];	
		foreach($arrData as $k => $v ){
				$arrData[$k] = str_replace("'", "\'", $v); 
			}
		//echo "<pre>";print_r(@$_POST);
		//	exit;
		@$db->updateData(@$tableName,@$arrData,"menu_id = '".@$_POST["menu_id"]."' and lang_code='".$lang_code."'");	
	
	$msg = $lang_set['txtEditComplete'];
	$res = 1;
	
}elseif(@$_GET['act']=="edit"){
	@$arrRes = @$db->getOne(@$tableName,"*"," menu_id='".@$_GET['menu_id']."' and lang_code='".$lang_code."'");
	
}elseif(@$_GET['act']=="deletedata"){
	
	@$getchkp = @$db->getAll(@$tableNamePicture,"*","menu_id='".@$_GET['menu_id']."'");
	if(@$getchkp){
		foreach(@$getchkp as $ke => $va){
			$getchkp = @$db->getOne(@$tableNamePicture,"*","menu_id='".@$va['menu_id']."'");
			
			@unlink("uploads/".@$va['menu_name']."/".$getchkp['image1']);
			@unlink("uploads/".@$va['menu_name']."/".$getchkp['image11']);
			@unlink("uploads/".@$va['menu_name']."/".$getchkp['image2']);
			@unlink("uploads/".@$va['menu_name']."/".$getchkp['image3']);
			@unlink("uploads/".@$va['menu_name']."/".$getchkp['image4']);
			
			//@$db->deleteData(@$tableNamePicture,"picture_id='".$getchkp['picture_id']."'");
			
		}
	}
	
	$getdel = @$db->getOne(@$tableName,"*","menu_id='".@$_GET['menu_id']."'");
	rrmdir("uploads/".$getdel["menu_name"]);
	//@$db->deleteData(@$tableName,"menu_id='".@$_GET['menu_id']."'");


}elseif(@$_GET['act']=="deleteAll"){
	//echo "<pre>"; print_r(@$_POST);exit;
	if(@$_POST['actdel']=="update"){
		//@$arrData = array();
		
		if(@$_POST['themeSortArray']){
			foreach(@$_POST['themeSortArray'] as $ke => $va){
				@$arrData2['menu_sort'] = $va;
				@$db->updateData(@$tableName,@$arrData2,"menu_id='".$ke."'");
			}
		}
		
		if(@$_POST['themeStatusArray']){
			foreach(@$_POST['themeStatusArray'] as $ke => $va){
				@$arrData3['menu_status'] = $va;
				@$db->updateData(@$tableName,@$arrData3,"menu_id='".$ke."'");
			}
		}
		
		if(@$_POST['themeTitleArray']){
			foreach(@$_POST['themeTitleArray'] as $ke => $va){
				@$arrData5['menu_title'] = $va;
				@$db->updateData(@$tableName,@$arrData5,"menu_id='".$ke."'");
			}
		}
		@$msg = $lang_set['txtEditComplete'];
		
	}else if (@$_POST['actdel']=="del"){
		//echo "<pre>"; print_r($_POST['pagedel']);
		//exit;
			foreach(@$_POST['pagedel'] as $key => $val){
				@$getchkp = @$db->getAll(@$tableNamePicture,"*","menu_id='".@$val."'");
				if(@$getchkp){
					foreach(@$getchkp as $ke => $va){
						$getchkp = @$db->getOne(@$tableNamePicture,"*","menu_id='".@$va['menu_id']."'");
						@unlink("uploads/".@$va['menu_name']."/".$getchkp['image1']);
						@unlink("uploads/".@$va['menu_name']."/".$getchkp['image11']);
						@unlink("uploads/".@$va['menu_name']."/".$getchkp['image2']);
						@unlink("uploads/".@$va['menu_name']."/".$getchkp['image3']);
						@unlink("uploads/".@$va['menu_name']."/".$getchkp['image4']);
						@$db->deleteData(@$tableNamePicture,"menu_id ='".$va['menu_id']."'");
					}
				}
				@$db->deleteData(@$tableName,"menu_id='".@$val."'");
			}
		@$msg = $lang_set['txtDeleteComplete'];
	}

	@$res = 1;

}
$where_f = "lang_code='".$lang_code."'";

if(@$_POST['keyword']){@$search = @$_POST['keyword']; }
if(@$_GET['keyword']){@$search = @$_GET['keyword']; }

if(@$search){
	@$searchnew = str_replace("'", "\'", @$search); 
	if(@$where_f){
		@$where_f .= " and menu_name like '%".@$searchnew."%'";
	}else{
		@$where_f  = " menu_name like '%".@$searchnew."%'";
	}	
	
	@$linkurl .= "&keyword=".@$search;
}
@$page = @$_GET['page'] ? @$_GET['page'] : 1;

@$arrpageP = @$db->getAll( @$tableName, "*",@$where_f,"" );
@$arrPage = @$objMaster->viewPages(@$page, @$arrpageP, "15");
@$getPage = @$db->getAll( @$tableName,"*",@$where_f," order by menu_sort asc",@$arrPage["offset"]);
//echo "<pre>"; print_r(@$getPage);

?>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<div class="content-box"><!-- Start Content Box -->
	<div class="content-box-header">
        <h3>องค์ความรู้ ภายใน</h3>
        <ul class="content-box-tabs">
            <li><a href="#tab1" <?php echo ($_GET['act']=="" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['list_page']; ?></a></li>
            <li><a href="#tab2" <?php echo ($_GET['act']=="edit" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['add_page']; ?></a></li>
        </ul>
        <div class="clear"></div>
	</div> <!-- End .content-box-header -->
        <div class="content-box-content">
        	<?php if(@$res==1){?>
                <div class="notification success png_bg">
					<a href="#" class="close"><img src="images/icons/cross_grey_small.png" title="Close this notification" alt="close" /></a>
					<div>
					<?php echo @$msg;?>
					</div>
				</div>
                <meta http-equiv="refresh" content="1;URL=<?PHP echo @$linkurl;?>">
            <?php }?>
            <div class="tab-content <?php echo (@$_GET['act']!="edit" ? "default-tab" : "" );?>" id="tab1"> <!-- This is the target div. id must match the href of this div's tab -->
            
        <form action="<?PHP echo @$linkurl1;?>" method="post">
        <table>
        	<tr>
            	<td>
        	<input type="text" class="text-input small-input" name="keyword" value="<?php echo @$_POST['keyword'];?>" /> &nbsp;<input type="submit" class="button" value="<?php echo $lang_set['search']; ?>" />
            </td>
            </tr>
        </table>
        </form>
        <form action="<?PHP echo @$linkurl;?>&act=deleteAll" method="post">
        <table width="100%">
            <thead>
            <tr>
            	<th style="vertical-align:middle"><input class="check-all" type="checkbox" /></th>
                <th style="vertical-align:middle" align="left" width="75"><?php echo $lang_set['menu_sort']; ?></th>
                <th style="vertical-align:middle">จน.</th>
                <th style="vertical-align:middle">วันที่</th>
                <th style="vertical-align:middle">เรื่อง</th>
                <th style="vertical-align:middle" width="75"><?php echo $lang_set['menu_status']; ?></th>
              <th style="vertical-align:middle" width="100"><?php echo $lang_set['menu_picture']; ?><span style="vertical-align:middle;text-align:right;"><?PHP echo $getpicture["countpic"];?></span></th>
            </tr>
            </thead>
            <tfoot>
            <tr>
                <td colspan="7">
                <div class="bulk-actions align-left"></div>
                <div class="pagination">
                <?php if( @$arrPage["startPage"]!="" && @$arrPage["endPage"] !="" ){?>
                    <a href="<?php echo @$linkurl;?>&page=<?php echo @$arrPage["startPage"];?>" title="First Page">&laquo; First</a>
                  <a href="<?php echo @$linkurl;?>&page=<?php echo (@$page-1);?>" title="Previous Page">&laquo; Prevoius</a>
              <?php 
					for($i = @$arrPage["startPage"]; $i <= @$arrPage["endPage"]; ++$i) {
						echo'<a href="'.@$linkurl.'&page='.@$i.'" class="number '.(@$page == @$i ? 'current' : '').'">'.(@$i).'</a>';
					}?>
                    <a href="<?php echo @$linkurl;?>&page=<?php echo (@$page+1);?>" title="Next Page">Next &raquo;</a>
                  <a href="<?php echo @$linkurl;?>&page=<?php echo @$arrPage["endPage"];?>" title="Last Page">Last &raquo;</a>
                <?php }?>
                </div>
                <div class="clear"></div></td>
            </tr>
            </tfoot>
            <tbody>
            <?php 
            if(@$getPage){
                foreach(@$getPage as $key => $val){
            ?>
            <tr>
            	<td style="vertical-align:middle;"><input type="checkbox" name="pagedel[]" value="<?php echo $val['menu_id'];?>"/></td>
                <td style="vertical-align:middle;"><input type="text" value="<?php echo $val['menu_sort'];?>" class="text-input small-input" name="themeSortArray[<?php echo $val['menu_id'];?>]" /></td>
                <td style="vertical-align:middle"><?php echo $val['bo_view'];?></td>
                <td style="vertical-align:middle"><?php echo $val['menu_name'];?></td> 
              <td style="vertical-align:middle"><?php echo $val['menu_title'];?></td>
                <td style="vertical-align:middle;">
                 <select name="themeStatusArray[<?php echo $val['menu_id'];?>]"  class="styled styledmini">
                	<option value="1" <?php echo ($val['menu_status']=="1" ? "selected" : "");?>><?PHP echo $lang_set["show"];?></option>
                    <option value="0" <?php echo ($val['menu_status']=="0" ? "selected" : "");?>><?PHP echo $lang_set["hide"];?></option>
                </select>
                 </td>
                 <td class="delete" style="vertical-align:middle;"><div align="center">
                <a href="<?php echo @$linkurlpic;?>&menu_id=<?php echo $val['menu_id']?>"  title="Picture"><img src="images/icons/clip.png" alt="Picture" width="15" height="23" /></a>
                <a href="<?php echo @$linkurl;?>&act=edit&menu_id=<?php echo $val['menu_id']?>"  title="Edit"><img src="images/icons/pencil.png" alt="Edit" /></a>
              <!-- <a href="javascript:void();" onClick="chkConfirm('<?php echo @$linkurl;?>&act=deletedata&menu_id=<?php echo $val['menu_id']?>','Delete Menu Data');"  title="Delete"><img src="images/icons/cross.png" alt="Delete" /></a>--></div></td>
            <tr>
            <?php
                }
            }else{
            ?>
            <tr>
                <td colspan="7" style="text-align:center"><?php echo @$lang_set['page_not_have']; ?>.</td>
            </tr>
            <?php 
            }
            ?>
            </tbody>
        </table>
      </form>
    </div> <!-- End #tab1 -->
    
    <div class="tab-content <?php echo ($_GET['act']=="edit" ? "default-tab" : "" );?>" id="tab2">
    
    <form id="formID1" action="<?php echo @$linkurl;?>&act=<?php echo (@$_GET['act']=="edit" ? "editdata" : "add");?>" method="post">
    	<input type="hidden" name="menu_id" value="<?php echo @$_GET['menu_id'];?>">
          <p>
         	<label><?php echo $lang_set['menu_sort']; ?>:</label>
            <input type="text" name="menu_sort" id="menu_sort" value="<?php echo (@$arrRes['menu_sort'] ? @$arrRes['menu_sort'] : "0");?>" class="validate[required,custom[integer],min[0]] text-input smail-input" />
         </p>
		 <p>
         	<label>วันที่ :</label>
            <input type="text" name="menu_name" id="menu_name" value="<?php echo @$arrRes['menu_name'];?>" class="validate[required] text-input medium-input" />
         </p>
         <p>
         	<label>เรื่อง :</label>
            <input type="text" name="menu_title" id="menu_title" value="<?php echo @$arrRes['menu_title'];?>" class="text-input medium-input" />
         </p>         
         </p>
               <label>รายละเอียด :</label>          
                    <?php 
					
					
					if($chkBrowser['name']=="Apple Safari" || $chkBrowser['name']=="Google Chrome"){
					  include("FCKeditor/fckeditor.php") ;
					  $oFCKeditor = new FCKeditor('menu_detail') ;
					  $oFCKeditor->BasePath = 'FCKeditor/' ;
					  $oFCKeditor->Width = '800' ;
					  $oFCKeditor->Height = '600' ;
					  $oFCKeditor->Value  = @$arrRes["menu_detail"];
					  $oFCKeditor->Create() ;
					 }else{
					  include("FCKeditor1/fckeditor.php") ;
					  $oFCKeditor = new FCKeditor('menu_detail') ;
					  $oFCKeditor->BasePath = 'FCKeditor1/' ;
					  $oFCKeditor->Width = '800' ;
					  $oFCKeditor->Height = '600' ;
					  $oFCKeditor->Value  = @$arrRes["menu_detail"];
					  $oFCKeditor->Create() ; 
					 }
					?>
               </p>
		<p>
        	<label><?php echo $lang_set['menu_classflag']; ?>:</label>
			 <input type="radio" class="radio" name="menu_classflag" value="1" <?php echo (@$arrRes['menu_classflag']=="1" ? "checked" : "" ); ?> /> <?PHP echo $lang_set["yes"];?> &nbsp;&nbsp;<input type="radio" class="radio" name="menu_classflag" value="0"  <?php echo ( !@$arrRes['menu_classflag'] || @$arrRes['menu_classflag']=="0" ? "checked" : "" ); ?>/><?PHP echo $lang_set["no"];?>
		</p>
		<p>
        	<label><?php echo $lang_set['menu_status_add']; ?>:</label>
			 <input type="radio" class="radio" name="menu_status" value="1" <?php echo (@$arrRes['menu_status']=="1" ? "checked" : "" ); ?> /> <?PHP echo $lang_set["show"];?> &nbsp;&nbsp;<input type="radio" class="radio" name="menu_status" value="0"  <?php echo ( !@$arrRes['menu_status'] || @$arrRes['menu_status']=="0" ? "checked" : "" ); ?>/><?PHP echo $lang_set["hide"];?>
		</p>
         <hr />
		 <p>
				<input type="submit" class="button" value="<?php echo $lang_set['submit']; ?>" />
		</p>          
     </form>
    
    </div>
    
</div>

Youez - 2016 - github.com/yon3zu
LinuXploit