403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)eizo.hkosl.com/global/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)eizo.hkosl.com/global/webadmin/model_add.php
<?php
	include 'config.php';

// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: login.php");
		exit;
	}


	if($_POST["promote_datefrom"] > $_POST["promote_dateto"]){
		echo "<script>alert('Promote Date To should be later than Promote Date From!'); history.back();</script>";
		exit;
	}


	$nowdate = date("Y-m-d H:i:s");
	$model_code = $_POST["model_code"];
	$series_id = $_POST["series_id"];
	$free_mix_color = $_POST["free_mix_color"];
	$promote_date_from = $_POST["promote_datefrom"];
	$promote_date_to = $_POST["promote_dateto"];
	$fixed_warranty_year = $_POST["fixed_warranty_year"];
	$extend_warranty_year = $_POST["extend_warranty_year"];
	foreach ($arraylangcode as $langcode => $langname) {
		$warranty_detail["$langcode"] = $_POST["warranty_detail_".$langcode];
		$warranty_detail_extend["$langcode"] = $_POST["warranty_detail_extend_".$langcode];
	}


	$sql = "select * from series where series_id=?";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute(array($series_id))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	$row = $sth->fetch(PDO::FETCH_ASSOC);
	$region = $row{"region"};

	$sql = "select max(sort) as maxid from model where series_id=?";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute(array($series_id))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	$row = $sth->fetch(PDO::FETCH_ASSOC);
	$sort = $row{"maxid"} + 1;

	$sql = "insert into model (region, series_id, model_code,free_mix_color, fixed_warranty_year, extend_warranty_year, warranty_detail_sc, warranty_detail_tc, warranty_detail_en,warranty_detail_extend_sc, warranty_detail_extend_tc, warranty_detail_extend_en,sort, createdate, createby, lastupdate, lastupby, promote_datefrom, promote_dateto) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?,?, ?, ?, ?, ?)";

	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	$parameter = array($region, $series_id, $model_code,$free_mix_color,$fixed_warranty_year,$extend_warranty_year,$warranty_detail["sc"], $warranty_detail["tc"], $warranty_detail["en"],$warranty_detail_extend["sc"], $warranty_detail_extend["tc"], $warranty_detail_extend["en"], $sort, $nowdate, $_SESSION['cmsloginid'], $nowdate, $_SESSION['cmsloginid'], $promote_date_from, $promote_date_to);

	if (!$sth->execute($parameter)) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	$dbh = null;

	header("Location: model_index.php?series_id=$series_id&msg=Add Successful");

?>

Youez - 2016 - github.com/yon3zu
LinuXploit