403Webshell
Server IP : 80.241.246.6  /  Your IP : 216.73.216.188
Web Server : Apache/2.4.25 (Debian)
System : Linux kharagauli 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : www-data ( 33)
PHP Version : 7.0.33-0+deb9u12
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/kharagauli_new/Citizens_feedback/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/kharagauli_new/Citizens_feedback/interactive.php
<?php
ob_start(); 
session_start();
$res='';

if(isset($_POST['f'])){
	$f=$_POST['f'];
	include 'admin/conf.php';
	
	if($f=='checkPID'){
		$ID=$_POST['pid'];
		$ptk=mysqli_query($baza,'select * from cf_PersonalIDs where PersonalIDs="'.$ID.'"');
		$res=mysqli_num_rows($ptk);
		}else 
	if($f=='getProgramsClasses'){
		// print_r($_POST);
		$archive=(int)$_POST['archive'];
		$res='';
		$ptk=mysqli_query($baza,'select * from cf_ProgramClasses where Active=1 and Archive='.$archive.' order by Pos');
		if(mysqli_num_rows($ptk)==0) 
			$res.= '<div class="QHeader">პროგრამის კლასი არ მოიძებნა</div>';
		else{
			$res.= '<div class="QHeader">აირჩიეთ პროგრამის კლასი ან საჭიროების იდენტიფიცირება</div>';
			$res.= '<select name="PrClass" id="PrClass" class="cfSelect" onchange="PrClassChange(this.value)" required><option></option>';
			while($row=mysqli_fetch_array($ptk)){
				$res.= '<option value="'.$row['ID'].'" '.($row['ShowInProgramList']==1?'isProgram=1':'').'>'.$row['Name'].'</option>';
				}
			$res.= '</select>';
			}
		}else
	if($f=='getPrograms'){
		include 'inpoly.php';
		$inpoly=-1;
		if(isset($_POST['target'])){
			$target=$_POST['target'];
			if(isset($target['lat'])){
				$inpoly=isInside($border, $target);
				}
			}
		
		$PrClass=(int)$_POST['PrClass'];
		if(isset($_POST['isProgram']))
			$isProgram=(int)$_POST['isProgram'];
			else $isProgram=0;
		
		$continue=true;
		if(false)
		if($isProgram==0){
			$continue=false;
			if($inpoly==-1) $res= '<div class="QHeader error">სისტემამ ვერ დააფიქსირა თქვენი გეოლოკაცია.</div>';
			else
			if($inpoly==0) $res= '<div class="QHeader error">თქვენ იმყოფებით მუნიციპალიტეტის საზღვრებს გარეთ, ამიტომ ვერ მიიღებთ მონაწილეობას გამოკითხვაში.</div>';
			else $continue=true;
			}
			
		if($continue){
			$UserPrograms=array();
			$UserProgramIDs='0';
			if(isset($_POST['pid'])){
				$pid=$_POST['pid'];		
				$sql='select * from cf_Respondents where PersonalID="'.$pid.'"';
				$ptk=mysqli_query($baza,$sql);
				if($row=mysqli_fetch_array($ptk)) {
					$RID=$row['ID']; 
					$sql='select ProgramID from cf_Answers where RespondentID='.$RID.' GROUP by ProgramID';
					$ptk=mysqli_query($baza,$sql);
					while($row=mysqli_fetch_array($ptk,1))
						$UserPrograms[]=$row['ProgramID'];
					}
				$sql='select * from cf_PersonalIDs where PersonalIDs="'.$pid.'"';
				$ptk=mysqli_query($baza,$sql);
				if($row=mysqli_fetch_array($ptk))
					$UserProgramIDs=trim($row['ProgramIDs']);
					}
			if($UserProgramIDs=='') $UserProgramIDs='0';
				
			$ShowOnlyUsedPrograms=false;
			if(isset($_POST['ShowOnlyUsedPrograms']))
				$ShowOnlyUsedPrograms=($_POST['ShowOnlyUsedPrograms']==1);
			$sql='select * from cf_Programs where ClassID='.$PrClass.' and QuestionnaireID>0 and Active=1 '.($ShowOnlyUsedPrograms?' and ID in ('.$UserProgramIDs.')':'').' order by Pos';

			$ptk=mysqli_query($baza,$sql);
			if(mysqli_num_rows($ptk)==0) 
				$res= '<div class="QHeader">აქტიური პროგრამა არ მოიძებნა</div>';
			else{
				$res= '<div class="QHeader" UserPrograms="'.json_encode($UserPrograms,256).'">აირჩიეთ '.($isProgram==1?'პროგრამა':'კითხვარი').'</div>';
				$res.= '<select class="cfSelect" name="Program" id="Program" onchange="ProgramChange(this.value)" required><option></option>';
				while($row=mysqli_fetch_array($ptk)){
					$res.= '<option value="'.$row['ID'].'" QID="'.$row['QuestionnaireID'].'" '.(in_array($row['ID'],$UserPrograms)?'used=1':'').'>'.$row['Name'].'</option>';
					}
				$res.= '</select>';
				}
			}
		}else
	if($f=='getStatistics'){
		$res=array();
		$QuestID=(int)$_POST['QuestID'];
		$ProgramID=(int)$_POST['ProgramID'];
		$sql='SELECT * FROM `cf_Questionnaire` where ID='.$QuestID;
		$ptk=mysqli_query($baza,$sql);
		if($row=mysqli_fetch_array($ptk)) {
			$Questions=$row['Questions'];
			if($Questions=='') $Questions='0';
			$sql='SELECT * FROM `cf_Questions` where ID in ('.$Questions.') order by field (ID, '.$Questions.')';
			$ptk=mysqli_query($baza,$sql);
			while($row=mysqli_fetch_array($ptk,1)){
				$row['Options']=json_decode($row['Options'],true);
				$res['Q-'.$row['ID']]=$row;
				$res['Q-'.$row['ID']]['Data']=array();
				$sql='SELECT * FROM `cf_Answers` where ProgramID='.$ProgramID.' and  QuestionnaireID='.$QuestID.' and  QuestionID='.$row['ID'];
				$ptk2=mysqli_query($baza,$sql);
				while($row2=mysqli_fetch_array($ptk2,1)){
					$res['Q-'.$row['ID']]['Data'][]=$row2;
					}
				}
			}
		$res=json_encode($res,256);
		}else
	if($f=='getQuestions'){
		$QuestID=(int)$_POST['QuestID'];
		$ProgramID=(int)$_POST['ProgramID'];
		$res='<input type="hidden" name="QuestID" value="'.$QuestID.'"><input type="hidden" name="ProgramID" value="'.$ProgramID.'">';
		$sql='SELECT * FROM `cf_Questionnaire` where ID='.$QuestID;
		$ptk=mysqli_query($baza,$sql);
		if($row=mysqli_fetch_array($ptk)) {
			$Questions=$row['Questions'];
			if($Questions=='') $Questions='0';
			$sql='SELECT * FROM `cf_Questions` where ID in ('.$Questions.') order by field (ID, '.$Questions.')';
			$ptk=mysqli_query($baza,$sql);
			$Qi=0;
			while($row=mysqli_fetch_array($ptk,1)){
				$Options=json_decode($row['Options'],true);
				$Qi++;
				if(in_array($row['QuestName'],array('ასაკი','სქესი'))) $Required=''; else  $Required='required';
				$res.= '<div class="Question">
					<div class="QHeader">'.$Qi.'. '.$row['QuestName'].'<span class="required_'.$Required.'"></span></div><input type="hidden" name="answer['.$row['ID'].'][type]" value="'.$row['Type'].'">';
				
				if($row['Type']=='ტექსტი სტრიქონი'){ 
					$res.= '<input class="cfText"  name="answer['.$row['ID'].'][value]" type="text" '.$Required.'>';
				}
					
				if($row['Type']=='ტექსტი აბზაცი'){ 
					$res.= '<textarea class="cfParagraph" name="answer['.$row['ID'].'][value]" '.$Required.'></textarea>';
					}
				
				if($row['Type']=='შეფასება ქულით'){ 
					$res.= '<input name="answer['.$row['ID'].'][value]" type="number" min="'.$Options['minimum'].'" max="'.$Options['maximum'].'" '.$Required.'>';
				}
				
				if($row['Type']=='თარიღი') {
					$res.= '<input name="answer['.$row['ID'].'][value]" type="date" min="'.$Options['minimum'].'" max="'.$Options['maximum'].'" value="'.date('Y-m-d').'" '.$Required.'>';
				}
				
				if($row['Type']=='თარიღების დიაპაზონი') {
					$res.= '<input name="answer['.$row['ID'].'][value][0]" type="date" min="'.$Options['minimum'].'" max="'.$Options['maximum'].'" value="'.date('Y-m-d',strtotime('-1 months')).'" '.$Required.'> - ';
					$res.= '<input name="answer['.$row['ID'].'][value][1]" type="date" min="'.$Options['minimum'].'" max="'.$Options['maximum'].'" value="'.date('Y-m-d').'" '.$Required.'>';
					}
				
				if($row['Type']=='არჩევა ერთის') {
					$Answers=explode('\r\n',$Options['Answers']);
					foreach($Answers as $Ai=>$Answer)
						$res.= '<div><label><input type="radio" name="answer['.$row['ID'].'][value]" value="'.$Ai.'" '.$Required.'> '.$Answer.'</label></div>';
					}
				
				if($row['Type']=='არჩევა რამოდენიმეს') {
					$Answers=explode('\r\n',$Options['Answers']);
					foreach($Answers as $Ai=>$Answer)
						$res.= '<div><label><input type="checkbox" name="answer['.$row['ID'].'][value][]" value="'.$Ai.'" > '.$Answer.'</label></div>';
					}
				
				if($row['NeedComment']==1)
					$res.= 'დაურთეთ კომენტარი <div><textarea class="cfComment" name="answer['.$row['ID'].'][comment]"></textarea></div>';
				
				$res.='</div>';
				
				}

			}

		}else	
		
		$res='"'.$f.'" not found';
	}
echo $res;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit