403Webshell
Server IP : 80.241.246.6  /  Your IP : 216.73.216.188
Web Server : Apache/2.4.25 (Debian)
System : Linux kharagauli 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : www-data ( 33)
PHP Version : 7.0.33-0+deb9u12
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/kharagauli_new/Citizens_feedback/admin/pages/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/kharagauli_new/Citizens_feedback/admin/pages/Questions.php
<div class="page-container" id="page-container">
    <!-- BEGIN MAIN CONTENT -->
    <div class="main_content">
        <!-- BEGIN WRAPPER -->
        <div class="content-wrapper" style="padding-top: 80px; padding-bottom: 80px">
<?php
if($_SESSION['E_'.$Action]==1)
if($Action=='Questions'){ // ==================== 
	
	
		


if(isset($_GET['DelQuestionnaire'])){
	$QID=(int)$_GET['DelQuestionnaire'];
	mysqli_query($baza,'delete from cf_Questionnaire where ID='.$QID);
	mysqli_query($baza,'update cf_Programs set QuestionnaireID=0, Active=0 where QuestionnaireID='.$QID);
	mysqli_query($baza,'delete from cf_Answers where QuestionnaireID='.$QID);
	}
	
if(isset($_POST['QQName'])){
	$QQName=$_POST['QQName'];
	$QQID=(int)$_POST['QQID'];
	if(isset($_POST['Questions']))
		$Questions=implode(',',$_POST['Questions']);
		else $Questions='0';
	if($QQID==0){
		$sql='select * from cf_Questionnaire  where Name="'.$QQName.'"';
		$ptk=mysqli_query($baza,$sql);
		if(mysqli_num_rows($ptk)>0) {
			info('ასეთი კითხვარი უკვე არსებობს'); 
			}else{
			$sql='insert into cf_Questionnaire (Name, Questions) values ("'.$QQName.'", "'.$Questions.'")';
			$ptk=mysqli_query($baza,$sql);
			}
		}else{ // QQID>0
		$sql='update cf_Questionnaire set Name="'.$QQName.'", Questions="'.$Questions.'" where ID='.$QQID;
		$ptk=mysqli_query($baza,$sql);
		}
	if(!$ptk) die(mysqli_error($ptk));
	}
	
$QQID=0; $QQName='';
if(isset($_GET['ID']))
	$QQID=(int)$_GET['ID'];
	
	$ptk=mysqli_query($baza,'select * from cf_Questionnaire Where ID='.$QQID);
	if($row=mysqli_fetch_array($ptk,1)){
		if(isset($_GET['DelQuestion'])){
			$QuID=(int)$_GET['DelQuestion'];
			$Questions=explode(',',$row['Questions']);
			$QKey=array_search($QuID,$Questions);
			if($QKey!==false)
				unset($Questions[$QKey]);
			$Questions=implode(',',$Questions);
			mysqli_query($baza,'update cf_Questionnaire set Questions="'.$Questions.'" Where ID='.$QQID);
			mysqli_query($baza,'delete from cf_Answers where QuestionaireID='.$QQID.' and QuestionID='.$QuID);
			}
		}

	?>
<div class="inlineDiv">
	<table border="1" cellspacing="0" cellpadding="5" class="normal QQTable" align="center" style="border-collapse:collapse; margin-top:20px">
		<thead><tr><td>კითხვარის დასახელება</td><td colspan="10"></td></thead>
		<tbody >
	<?php
	$Questions='0';
	$ptk=mysqli_query($baza,'select * from cf_Questionnaire order by Name');
	while($row=mysqli_fetch_array($ptk,1)){
			if($QQID==$row['ID']) {
				$QQName=$row['Name'];
				$Questions=$row['Questions'];
				if($Questions=='') $Questions='0';
			}
			?>
		<tr num="<?=$row['ID']?>" <?=$row['ID']==$QQID?'class="selected"':''?>>
			<td class="SelectedTD2"><?=$row['Name']?></td>
			<td><span class="delete"></span></td>
		</tr>
		<?php } ?>
		</tbody>
	</table>
<script>
$('.QQTable span.delete').on('click',function(){ 
	var num=$(this).closest('tr').attr('num');
	confirmMessage('კითხვარის და მისი სტატისტიკის წაშლა','?Action=<?=$Action?>&DelQuestionnaire='+num);
	})
</script>
<?php
		
if(!isset($Question)){
	$QuestionID=0;
	$Question=array('ID'=>0, 'QuestName'=>'', 'Type'=>'', 'Options'=>'[]', 'NeedComment'=>false);
	}else $QuestionID=$Question['ID'];

if(isset($_GET['QuID'])){
	$QuID=(int)$_GET['QuID'];
	$ptk=mysqli_query($baza,'select * from cf_Questions where ID='.$QuID);
	if($row=mysqli_fetch_array($ptk,1)){
		$QuestionID=$row['ID'];
		$Question=$row;
		}
	}
	
?>
	<form action="?Action=<?=$Action?>" method="post" enctype="multipart/form-data"><input type="hidden" name="QQID" value="<?=$QQID?>">
		<table border="1" cellspacing="0" cellpadding="5" class="normal" align="center" style="border-collapse:collapse; margin-top:20px">
		<thead><tr><td><?=$QQID>0?'კითხვარის რედაქტირება <a href="?Action='.$Action.'">ახალი კითხვარი</a>':'ახალი კითხვარი'?></td></thead>
		<tr><td>დასახელება <input type="text" name="QQName" value="<?=$QQName?>"></td></tr>
		<tr><td>კითხვები: 
			
			<table border="1" cellspacing="0" cellpadding="5" class="normal QuTable" align="center" style="border-collapse:collapse; margin-top:20px">
				<thead><tr><td></td><td>კითხვა</td><td>ტიპი</td><td colspan="10"></td></thead>
				<tbody class="sortable">
			<?php
			$sql='select * from cf_Questions where ID in ('.$Questions.') order by field (ID, '.$Questions.')';
			$ptk=mysqli_query($baza,$sql);
			if(!$ptk) die(mysqli_error($baza).'<br>'.$sql);
			while($row=mysqli_fetch_array($ptk,1)){
					?>
				<tr num="<?=$row['ID']?>" <?=$row['ID']==$QuestionID?'class="selected"':''?>>
					<td class="handle"></td>
					<td class="SelectedTD2" href="ID=<?=$QQID?>&QuID=<?=$row['ID']?>"><?=$row['QuestName']?><input type="hidden" name="Questions[]" readonly="" value="<?=$row['ID']?>"></td>
					<td><?=$row['Type']?></td>
					<td><span class="delete"></span></td>
				</tr>
				<?php } ?>
				</tbody>
			</table>
	
<script>
$('.sortable').sortable();
$('.QuTable span.delete').on('click',function(){ 
	var num=$(this).closest('tr').attr('num');
	confirmMessage('კითხვის და მასთან დაკავშირებული სტატისტიკის წაშლა','?Action=<?=$Action?>&ID=<?=$QQID?>&DelQuestion='+num);
	})
</script>			
			
			
			</td></tr>
		<tr><td align="center" colspan="10"><input type="submit"></td>
		</table>
	</form>
</div>
	
	
	
	
<?php
	
if(isset($_POST['QuestID'])){
	$QuestID = (int)$_POST['QuestID'];
	$QuestName = $_POST['QuestName'];
	$Type = $_POST['Type']; 
	if(isset($_POST['options']))
		$options = addslashes(json_encode($_POST['options'],256));
		else $options='{}';
	$NeedComment = isset($_POST['NeedComment'])?1:0; 
	$sql='';
	if($QuestID>0)
		$sql='update cf_Questions set QuestName="'.$QuestName.'", Type="'.$Type.'", options="'.$options.'", NeedComment="'.$NeedComment.'" where ID='.$QuestID;
		else{
		$ptk=mysqli_query($baza,'select * from cf_Questions where QuestName="'.$QuestName.'"');
		if($row=mysqli_fetch_array($ptk,1)){
			info('ასეთი შეკითხვა უკვე არსებობს');
			$Question=$row;
			}
			else
		$sql='insert into cf_Questions (QuestName, Type, options, NeedComment) values ("'.$QuestName.'", "'.$Type.'", "'.$options.'", "'.$NeedComment.'")';
		}
	if($sql!=''){
		echo $sql.'<br>';
		$ptk=mysqli_query($baza,$sql);
		if(!$ptk) die(mysqli_error($baza).'<br>SQL='.$sql);
		}
	
	}
	


	
?>
<div class="inlineDiv">


<?php
$QuTypes=array('ტექსტი სტრიქონი','თარიღი','თარიღების დიაპაზონი','არჩევა ერთის','არჩევა რამოდენიმეს','შეფასება ქულით','ტექსტი აბზაცი');
?>
<script>
var QuTypes=<?=json_encode($QuTypes,256);?>;
</script>
	
	<form action="?Action=<?=$Action?>" method="post" enctype="multipart/form-data" class="PrForm" onSubmit="return checkForm()">
		<input type="hidden" name="QuestID" value="<?=$QuestionID?>">
		<table border="1" cellspacing="0" cellpadding="5" class="normal" align="center" style="border-collapse:collapse; margin-top:20px">
		<thead><tr><td><?=$QuestionID>0?'კითხვის რედაქტირება <a href="?Action='.$Action.'&ID='.$QQID.'">ახალი კითხვა</a>':'ახალი კითხვა'?></td></thead>
		<tr><td>დასახელება<br><input type="text" name="QuestName" value="<?=$Question['QuestName']?>"></td></tr>
			<tr><td>ტიპი<br>
				<select name="Type" onChange="getQuestion(this.value)">
					<option value="-1">-</option>
				<?php foreach($QuTypes as $Type){?> 
					<option value="<?=$Type?>" <?=$Type==$Question['Type']?'selected':''?>><?=$Type?></option>
				<?php } ?>
				</select>
				</td></tr>
			<tr><td class="QOptions">
				<?php
	if(isset($Question['Options']))
		$Options=json_decode($Question['Options'],true);
		else $Options=array();
	
	$TypeKey=array_search($Question['Type'],$QuTypes);
	if($TypeKey==1 || $TypeKey==2){?> 
				<span>მინიმალური <input type="date" name="options[minimum]" value="<?=$Options['minimum']?>"></span> - 
				<span>მაქსიმალური <input type="date" name="options[maximum]" value="<?=$Options['maximum']?>"></span>
				<?php } 
	if($TypeKey==3 || $TypeKey==4){?> 
				ყოველი შესაძლო პასუხი დაწერეთ თითო ხაზზე <br><textarea name="options[Answers]" class="answers"><?=implode($crlf,explode('\r\n',$Options['Answers']))?></textarea>
				<?php } 
	if($TypeKey==5){?> 
				<span>მინიმალური <input type="number" name="options[minimum]" value="<?=$Options['minimum']?>"></span> - 
				<span>მაქსიმალური <input type="number" name="options[maximum]" value="<?=$Options['maximum']?>"></span>
				<?php } 

	?></td></tr>
			<tr><td><label>გამოვიდეს კომენტარით <input type="checkbox" name="NeedComment" <?=$Question['NeedComment']?'checked':''?>></label></td></tr>
		<tr><td align="center" colspan="10"><input type="submit" value="შეტანა"></td>
		</table>
	</form>
		
	
<script>
function checkForm(){
	var type=$('.PrForm select').val();
	if(type==-1){
		alert('აუცილებელია ტიპის მითითება');
		$('.PrForm select').focus();
		return false;
		}
	if(type==3 || type==4){
		var answers=$('.PrForm textarea').val();
		answers=answers.split('\n');
		var aa=[];
		$.each(answers,function(i,e){
			e=e.trim();
			if(e=='')
				delete answers[i];
				else aa.push(e);
			})
		answers=aa.join('\n')
		$('.PrForm textarea').val(answers);
		if(aa.length<2){
			alert('საჭოროა 2 სავარაუდო პასუხი მაინც');
			$('.PrForm textarea').focus();
			return false;
			}
	}
}
function getQuestion(kk){
	var k=QuTypes.findIndex((element)=>element==kk);
	if(k==0 || k==6){ // ტექსტური სტრიქონი
		$('td.QOptions').html('');
		}
	if(k==1 || k==2){ // თარიღი | თარიღების დიაპაზონი
		var html='<span>მინიმალური <input type="date" name="options[minimum]" value="<?=date('Y-m-d',strtotime('-100 years'))?>"></span> - '+
			'<span>მაქსიმალური <input type="date" name="options[maximum]" value="<?=date('Y-m-d',strtotime('+1 years'))?>"></span>'
		$('td.QOptions').html(html);
		}
	if(k==3 || k==4){ // არჩევა ერთის
		var html='ყოველი შესაძლო პასუხი დაწერეთ თითო ხაზზე <br><textarea name="options[Answers]" class="answers"></textarea>'
		$('td.QOptions').html(html);
		}
	if(k==5){
		var html='<span>მინიმალური <input type="number" name="options[minimum]" value="0"></span> - '+
			'<span>მაქსიმალური <input type="number" name="options[maximum]" value="10"></span>'
		$('td.QOptions').html(html);
	}
}			
$(document).on('click','.AllQuTable .import',function(){
	// QList
	var tr=$(this).closest('tr');
	var num=$(tr).attr('num');
	var Question=$(tr).find('.SelectedTD2').text();
	var Type=$(tr).find('.Type').text();
	var exists=$('.QuTable .sortable tr[num='+num+']').length>0;
	if(!exists)
		$('.QuTable .sortable').append('<tr num="'+num+'"><td class="handle"></td><td>'+Question+' <input type="hidden" name="Questions[]" readonly value="'+num+'"></td><td>'+Type+'</td><td><span class="delete"></span></td></tr>');
})
$(document).on('change','.PrForm textarea',function(){
	var answers=$('.PrForm textarea').val();
	answers=answers.split('\n');
	var aa=[];
	$.each(answers,function(i,e){
		e=e.trim();
		if(e=='')
			delete answers[i];
			else aa.push(e);
		})
	answers=aa.join('\n')
	$('.PrForm textarea').val(answers);
	})
</script>

			
			

	<table border="1" cellspacing="0" cellpadding="5" class="normal AllQuTable" align="center" style="border-collapse:collapse; margin-top:20px">
		
		<thead><tr><td colspan="10">ყველა კითხვა</td></tr></thead>
		<thead><tr><td>კითხვა</td><td>ტიპი</td><td colspan="10"></td></tr></thead>
		<tbody>
	<?php
	$ptk=mysqli_query($baza,'select * from cf_Questions order by QuestName ');
	while($row=mysqli_fetch_array($ptk,1)){
			?>
		<tr num="<?=$row['ID']?>" <?=$row['ID']==$QuestionID?'class="selected"':''?>>
			<td class="SelectedTD2" href="ID=<?=$QQID?>&QuID=<?=$row['ID']?>"><?=$row['QuestName']?></td>
			<td class="Type"><?=$row['Type']?></td>
			<td><span class="delete"></span></td>
			<?php if($QQID>0) { ?>
				<td><span class="import"></span></td>
				<?php } ?>
		</tr>
		<?php } ?>
		</tbody>
	</table>
</div>	
	<?php
	
  } ?>
</div> 	</div> 	</div> 

Youez - 2016 - github.com/yon3zu
LinuXploit