403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/tessabalpatiu.go.th/public_html/administrator/modules/setting/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/tessabalpatiu.go.th/public_html/administrator/modules/setting/iconHome.php
<?php
$res = 0;
$linkurl = "index.php?name=setting&file=iconHome";
if(@$_GET['act']=="add"){
	//echo '<pre>';print_r($_POST);exit;
	$timesave = time();
	$lang = $db->getAll("language","*","","","");
	$arrData = array();
	$autoid = 0;
	$idarr = $db->getOne("banner","max(banner_id) as banner_id","");
	$id = $idarr['banner_id'];
	$autoid = $id+1;
	if($lang){
		if(isset($_FILES)){
			foreach(@$_FILES as $key => $val){
				if( @ereg("^image", @$key)){
					if( @$val['name'] ){
						@$thumnelwid = array("width"=>"25","hight"=>"26");
						@$arrData[@$key] = @$objMaster->uploadImage("image", "../image_data/banner",@$key,@$key."_".time(),@$_FILES,"",@$thumnelwid);
					
					}
				}
			}
		}
		$arrData['banner_id']	= $autoid;
		$arrData['banner_link']= $_POST['banner_link'];
		$arrData['lang_code']	= $value['lang_code'];
		$arrData['type']	= "icon";
		foreach($arrData as $k => $v ){
			$arrData[$k] = str_replace("'", "\'", $v); 
		}
		//echo "<pre>"; print_r($arrData);
		//exit;
		$db->insertData("banner",$arrData);
		
	}
	$msg = $lang_set['txtSaveComplete'];
	$res = 1;
		
}elseif(@$_GET['act']=="editdata"){
	@$arrData = array();
	if(isset($_FILES)){
		foreach(@$_FILES as $key => $val){
			if( @ereg("^image", @$key)){ //image
				@$k="chkDel".ucfirst(strtolower(@$key));
				if( @$val['name']){
					@$thumnelwid = array("width"=>"25","hight"=>"26");
					@$arrData[@$key] = @$objMaster->uploadImage("image","../image_data/banner",@$key,@$key."_".time(),@$_FILES,"",@$thumnelwid);//exit;
					if(@$key=="image"){@$chk_img1 = @$arrData[@$key]; }
					@$chk_img = @$arrData[@$key];
					if(@$_POST[@$k] && @$chk_img){
						@unlink("../image_data/banner/", @$_POST[@$k], "0");
						@unlink("../image_data/banner/thumbs", @$_POST[@$k], "0");
					}	
				}
			}
		}
	}
	$arrData['banner_link']= $_POST['banner_link'];
	
	foreach(@$arrData as $k => $v ){
		@$arrData[@$k] = str_replace("'", "\'", @$v); 
	}

	@$db->updateData("banner",@$arrData," banner_id='".@$_POST['banner_id']."' and lang_code='".@$lang_code."'");
	
	@$msg = "Edit Data complete.";
	@$res = true;

}elseif(@$_GET['act']=="edit"){
	@$arrRes = @$db->getOne("banner","*"," banner_id='".@$_GET['banner_id']."' and lang_code='".@$lang_code."'");
	
}elseif(@$_GET['act']=="deletedata"){
	@$arrdel = @$db->getOne("banner","*"," banner_id='".@$_GET['banner_id']."' and lang_code='".@$lang_code."'");
	@unlink("../image_data/banner", @$arrdel['image1']);
	@unlink("../image_data/banner/thumbs", @$arrdel['image1']);
	
	@unlink("../image_data/banner", @$arrdel['image2']);
	@unlink("../image_data/banner/thumbs", @$arrdel['image2']);
	
	@$db->deleteData("banner"," banner_id='".@$_GET['banner_id']."'");
	
	@$msg = "Delete Data complete.";
	@$res = true;
}elseif(@$_GET['act']=="del"){
	
	$getdel = $db->getOne("banner","*","banner_id = '".$_GET["banner_id"]."'");
	
	@unlink("../image_data/banner/".@$getdel["image1"]);
	@unlink("../image_data/banner/".@$getdel["image2"]);
	
	$db->deleteData("banner","banner_id = '".$_GET["banner_id"]."'");
}elseif(@$_GET['act']=="deleteall"){
	
		@$arrData = array();
		if(count(@$_POST['hdbanner_id']) > 0){
			foreach(@$_POST['hdbanner_id'] as $key => $val){
				
				@$arrData['banner_title'] = @$_POST['banner_title_'.@$val.''];
				@$arrData['banner_link'] = @$_POST['banner_link_'.@$val.''];
				
				foreach(@$arrData as $k => $v ){
						@$arrData[@$k] = str_replace("'", "\'", @$v); 
				}
				@$datasu = @$db->updateData("banner",@$arrData," banner_id='".@$val."'");
			}
		}
		
	$msg = $lang_set['txtEditComplete'];
	$res = 1;
}elseif(@$_GET['act']=="reimg"){
	$SCimage->load('../image_data/banner/'.$_GET['largeimg']);
	$SCimage->resize(940,550);
	$SCimage->save('../image_data/banner/'.$_GET['oldimg']);
	$msg = $lang_set['txtEditComplete'];
	$res = 1;
}


$getPage = $db->getAll( "banner", "*","lang_code='".$lang_code."' and type='icon'","order by banner_id desc" );
//echo "<pre>"; print_r($getPage);
?>
<div class="content-box"><!-- Start Content Box -->
	<div class="content-box-header">
        <h3><?php echo $lang_set['banner_icon'];?></h3>
        <ul class="content-box-tabs">
        <?php if($_GET['act'] != "edit"){?>
            <li><a href="#tab1" <?php echo ($_GET['act'] != "edit" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['list_page']; ?></a></li>
            <li><a href="#tab2" <?php echo ($_GET['act']=="edit" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['add_page']; ?></a></li>		
        <?php }else{?>
        	<li><a href="#tab2" <?php echo ($_GET['act']=="edit" ? 'class="default-tab"' : "" );?>><?php echo $lang_set['edit_page']; ?></a></li>		
        <?php }?>
        </ul>
        <div class="clear"></div>
	</div> <!-- End .content-box-header -->
        <div class="content-box-content">
            <div class="tab-content <?php echo ($_GET['act']!="edit" ? "default-tab" : "" );?>" id="tab1"> <!-- This is the target div. id must match the href of this div's tab -->
            <?php if($res==1){?>
                <div class="notification success png_bg">
					<a href="#" class="close"><img src="images/icons/cross_grey_small.png" title="Close this notification" alt="close" /></a>
					<div>
					<?php echo $msg;?>
					</div>
				</div>
                <meta http-equiv="refresh" content="0;URL=<?php echo $linkurl;?>">
            <?php }?>
        <form action="<?php echo $linkurl;?>&act=deleteall" method="post">
        	<?php  if($getPage){?>
            	<table>
                	<tr style="background:#F3F3F3;">
                    	<td width="90">รูปภาพ</td>
                        <td width="90">รูปภาพ Hover</td>
                        <td>URL</td>
                        <td></td>
                    </tr>
                    <?php  foreach($getPage as $kfile => $vfile){?>
                    <tr style="background:#ffffff;">
                    	<input type="hidden" name="hdbanner_id[]" value="<?php echo @$vfile['banner_id'];?>" />
                    	<td style="vertical-align:middle"><img src="../image_data/banner/<?PHP echo $vfile["image1"];?>" border="0"/></td>
                        <td style="vertical-align:middle"><img src="../image_data/banner/<?PHP echo $vfile["image2"];?>" border="0"/></td>
                        <td style="vertical-align:top"><?PHP echo $vfile["banner_link"];?></td>
                        <td style="vertical-align:middle; text-align:right;">
                        <a href="<?php echo $linkurl;?>&act=edit&banner_id=<?php echo @$vfile['banner_id']?>#add" title="Edit"><img src="images/icons/pencil.png" alt="Edit" /></a> |
                        <a href="javascript:void();" title="Delete" onclick="chkConfirm('<?php echo $linkurl;?>&act=del&banner_id=<?php echo $vfile['banner_id']?>','ยืนยันการลบข้อมูล');"><img src="images/icons/cross.png" alt="Delete" /></a></td></tr>
                    <?php }?>
                </table>
                <!--<p>
				<input type="submit" class="button" value="<?php echo $lang_set['update']; ?>" />
				</p>-->
            <?php }?>
        </form>
        
     </div> <!-- End #tab1 -->

    <div class="tab-content <?php echo ($_GET['act']=="edit" ? "default-tab" : "" );?>" id="tab2">
    <form action="<?php echo $linkurl;?>&act=<?php echo (@$_GET['act']=="edit" ? "editdata" : "add");?>" method="post" id="formID1" enctype="multipart/form-data">
    <input type="hidden" name="banner_id" value="<?php echo @$arrRes['banner_id'];?>" />
        <p>
			<label>รูปภาพ</label>
             <?php if(@$arrRes['image1']){?>
                <img src="../image_data/banner/<?php echo @$arrRes['image1'];?>" />
             <?php }?>
			<input class="validate[required] text-input large-input" type="file" id="image1" name="image1" <?php echo ( !@$arrRes['image1'] ? "":"DISABLED");?> />
            &nbsp;<?php echo ( !@$arrRes['image1'] ? "": "<br><input type='checkbox' onClick='if(this.checked){document.getElementById(\"chkDelImage1\").value=\"".@$arrRes['image1']."\";document.getElementById(\"image1\").disabled=\"\";}else{document.getElementById(\"chkDelImage1\").value=\"\";document.getElementById(\"image1\").disabled=\"true\";}'> ".@$lang_set['delete_image']." <input type='hidden' value='' id='chkDelImage1' name='chkDelImage1'>" ) ?><input type="hidden" id="oldImage1" name="oldImage1" value="<?php echo @$arrRes['image1']; ?>">
            <div>อัพโหลดภาพขนาด 25px × 26px</div>
		</p>
		<p>
			<label>รูปภาพ(Mouse Hover)</label>
            <?php if(@$arrRes['image2']){?>
                <img src="../image_data/banner/<?php echo @$arrRes['image2'];?>" />
             <?php }?>
			<input class="validate[required] text-input large-input" type="file" id="image2" name="image2" <?php echo ( !@$arrRes['image2'] ? "":"DISABLED");?> />
            &nbsp;<?php echo ( !@$arrRes['image2'] ? "": "<br><input type='checkbox' onClick='if(this.checked){document.getElementById(\"chkDelImage2\").value=\"".@$arrRes['image2']."\";document.getElementById(\"image2\").disabled=\"\";}else{document.getElementById(\"chkDelImage2\").value=\"\";document.getElementById(\"image2\").disabled=\"true\";}'> ".@$lang_set['delete_image']." <input type='hidden' value='' id='chkDelImage2' name='chkDelImage2'>" ) ?><input type="hidden" id="oldImage2" name="oldImage2" value="<?php echo @$arrRes['image2']; ?>">
            <div>อัพโหลดภาพขนาด 25px × 26px</div>
		</p>
        <p>
			<label>URL</label>
			<input class="validate[required,custom[url]] text-input large-input" type="text" id="url" name="banner_link" value="<?php echo (@$arrRes['banner_link'] ? @$arrRes['banner_link'] : "http://");?>"/>
		</p>
		<p>
				<input type="submit" class="button" value="<?php echo $lang_set['submit']; ?>" />
		</p>
	</form>
    </div> <!-- End #tab2 -->        
</div> <!-- End .content-box-content -->
</div>

											
                                            
                                            
                                            

Youez - 2016 - github.com/yon3zu
LinuXploit