403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)discoverylearning.com.hk/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)discoverylearning.com.hk/webadmin/coursesdetail_add.php
<?php 
/*error_reporting(E_ALL);
ini_set('display_errors', '1');*/

require("configure.php"); 

$CoursesCatId			= $_POST["CoursesCatId"];
$CoursesDetailSort		= $_POST["CoursesDetailSort"];
$CoursesDetailNameen	= htmlspecialchars($_POST["CoursesDetailNameen"],ENT_QUOTES);
$CoursesDetailAgeen		= htmlspecialchars($_POST["CoursesDetailAgeen"],ENT_QUOTES);
$CoursesDetailFeeen		= htmlspecialchars($_POST["CoursesDetailFeeen"],ENT_QUOTES);
$CoursesDetailTimeen	= htmlspecialchars($_POST["CoursesDetailTimeen"],ENT_QUOTES);
$CoursesDetailDescen	= preg_replace("/'/","\'",$_POST["CoursesDetailDescen"]);

$CoursesDetailNametc	= htmlspecialchars($_POST["CoursesDetailNametc"],ENT_QUOTES);
$CoursesDetailAgetc		= htmlspecialchars($_POST["CoursesDetailAgetc"],ENT_QUOTES);
$CoursesDetailFeetc		= htmlspecialchars($_POST["CoursesDetailFeetc"],ENT_QUOTES);
$CoursesDetailTimetc	= htmlspecialchars($_POST["CoursesDetailTimetc"],ENT_QUOTES);
$CoursesDetailDesctc	= preg_replace("/'/","\'",$_POST["CoursesDetailDesctc"]);

$CoursesDetailNamesc	= htmlspecialchars($_POST["CoursesDetailNamesc"],ENT_QUOTES);
$CoursesDetailAgesc		= htmlspecialchars($_POST["CoursesDetailAgesc"],ENT_QUOTES);
$CoursesDetailFeesc		= htmlspecialchars($_POST["CoursesDetailFeesc"],ENT_QUOTES);
$CoursesDetailTimesc	= htmlspecialchars($_POST["CoursesDetailTimesc"],ENT_QUOTES);
$CoursesDetailDescsc	= preg_replace("/'/","\'",$_POST["CoursesDetailDescsc"]);

//print_r($_POST); 

$sql = "select max(CoursesDetailId) as maxid ";
$sql .= "from CoursesDetail ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$CoursesDetailId = $row{maxid}+1;

// copy image 
if ($_FILES['CoursesDetailScheduleen']['name'] <> '')
{
	copy ($_FILES['CoursesDetailScheduleen']['tmp_name'], "coursesschedule/".$CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name']) 
		or die ("Could not copy");
	
	$CoursesDetailScheduleen = $CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name'];
	$CoursesDetailScheduleen	= htmlspecialchars($CoursesDetailScheduleen,ENT_QUOTES);
}
else
{
	$CoursesDetailScheduleen = "";
}
// End upload image code

// copy image 
if ($_FILES['CoursesDetailScheduletc']['name'] <> '')
{
	copy ($_FILES['CoursesDetailScheduletc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name']) 
		or die ("Could not copy");
	
	$CoursesDetailScheduletc = $CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name'];
	$CoursesDetailScheduletc	= htmlspecialchars($CoursesDetailScheduletc,ENT_QUOTES);
}
else
{
	$CoursesDetailScheduletc = "";
}
// End upload image code

// copy image 
if ($_FILES['CoursesDetailSchedulesc']['name'] <> '')
{
	copy ($_FILES['CoursesDetailSchedulesc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name']) 
		or die ("Could not copy");
	
	$CoursesDetailSchedulesc = $CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name'];
	$CoursesDetailSchedulesc	= htmlspecialchars($CoursesDetailSchedulesc,ENT_QUOTES);
}
else
{
	$CoursesDetailSchedulesc = "";
}
// End upload image code


if ($CoursesDetailSort == '' || $CoursesDetailSort == '0') {
	$sql = "select max(CoursesDetailSort) as maxid ";
	$sql .= "from CoursesDetail ";
	$sql .= "WHERE CoursesCatId = $CoursesCatId ";
	$result=mysql_query($sql);
	$row = mysql_fetch_array($result,MYSQL_ASSOC);
	$CoursesDetailSort = $row{maxid}+1;
}
if( mysql_num_rows(mysql_query("SELECT CoursesDetailId FROM CoursesDetail WHERE CoursesDetailSort=$CoursesDetailSort AND CoursesCatId=$CoursesCatId ")) > 0){
	mysql_query("UPDATE CoursesDetail SET CoursesDetailSort= CoursesDetailSort+1 WHERE CoursesDetailSort >=$CoursesDetailSort AND CoursesCatId=$CoursesCatId ");
}


$sql = "insert into CoursesDetail (CoursesDetailId, CoursesCatId, CoursesDetailNameen, CoursesDetailAgeen, CoursesDetailFeeen, CoursesDetailTimeen, CoursesDetailDescen, CoursesDetailScheduleen, CoursesDetailNametc, CoursesDetailAgetc, CoursesDetailFeetc, CoursesDetailTimetc, CoursesDetailDesctc, CoursesDetailScheduletc, CoursesDetailNamesc, CoursesDetailAgesc, CoursesDetailFeesc, CoursesDetailTimesc, CoursesDetailDescsc, CoursesDetailSchedulesc, CoursesDetailSort) values ('$CoursesDetailId', '$CoursesCatId', '$CoursesDetailNameen', '$CoursesDetailAgeen', '$CoursesDetailFeeen', '$CoursesDetailTimeen', '$CoursesDetailDescen', '$CoursesDetailScheduleen', '$CoursesDetailNametc', '$CoursesDetailAgetc', '$CoursesDetailFeetc', '$CoursesDetailTimetc', '$CoursesDetailDesctc', '$CoursesDetailScheduletc', '$CoursesDetailNamesc', '$CoursesDetailAgesc', '$CoursesDetailFeesc', '$CoursesDetailTimesc', '$CoursesDetailDescsc', '$CoursesDetailSchedulesc', '$CoursesDetailSort')";
mysql_query($sql);
if( mysql_errno() > 0 ){
	echo 'Courses Detail Add Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

mysql_close($dbh);

header("Location: coursesdetail_index.php?CoursesCatId=".$CoursesCatId."&msg=Add Successful");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit