403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)gepgroup.hk/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)gepgroup.hk/webadmin/news_form.php
<?php
require_once( realpath(dirname(__FILE__)) . '/../common/config.php');
require_once( realpath(dirname(__FILE__)) . '/function_is_login.php');
if (!is_login())
{
	header("Location: index.php");
	exit;
}

$id = !empty($_POST['id']) ? $_POST['id'] : $_GET['id'];
$action = strlen($id) ? 'Modify' : 'Add';

//----------------------------------------------------
// Submit information
//----------------------------------------------------
if (strtoupper($_SERVER['REQUEST_METHOD']) == 'POST')
{
	if (strlen($id))
	{
		$model = News::first($id);
	}
	else
	{
		$model = new News(array(
			'actived' => 1,
			'deleted' => 0,
		));
	}
	
	// default value
	$model->safe_set_attributes($_POST);
	
	if (!$model->is_new_record())
		$is_valid = $model->save();
	else
	{
		$model->assign_sort_if_empty();
		
		$is_valid = News::transaction(function() use (&$model)
		{
			// Update sort first
			News::update_all(array(
				'set' => 'sort = sort + 1',
				'conditions' => array('sort >= ?', $model->sort),
			));
			return $model->save();
		});
	}
	
	if ($is_valid)
	{
		header("Location: news_index.php?msg=" . $action . " Success");
		exit;
	}
}

//----------------------------------------------------
// Initialize
//----------------------------------------------------
if (isset($model))
{
	if ($model->is_new_record())
		$model->id = NULL;
}
else
{
	$model = strlen($id) ? News::first($id) : new News;
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
	<title>Content Management System (CMS) - Powered by One Solution Limited</title>
	<link rel="stylesheet" type="text/css" href="css/smoothness/jquery-ui-1.9.0.custom.min.css" />
	<link rel="stylesheet" type="text/css" href="css/style.css" />
	<script type="text/javascript" src="js/jquery-1.8.2.min.js"></script>
	<script type="text/javascript" src="js/jquery.validate.min.js"></script>
	<script type="text/javascript" src="js/jquery.validate.additional-methods.min.js"></script>
	<script type="text/javascript" src="js/jquery-ui-1.9.0.custom.min.js"></script>
	<script type="text/javascript" src="js/jquery.blockUI.js"></script>
	<script type="text/javascript" src="js/webadmin_common.js"></script>
	<script type="text/javascript">
	<!--
	$(function() {
		$('#data_form').validate();
		$('.date').datepicker({ dateFormat: 'yy-mm-dd' });
	});
	//-->
	</script>
</head>

<body>
<form action="<?=basename(__FILE__)?>?<?=htmlentities(http_build_query($_GET))?>" method="post" id="data_form" name="data_form" enctype="multipart/form-data">
	<?php $attribute = 'id'; ?>
	<input type="hidden" name="<?=$attribute?>" value="<?=$model->$attribute?>" />
	<table width="800" border="0" cellpadding="0" cellspacing="0">
		<tr>
			<td height="70" align="right" valign="middle" class="icontxt"><table border="0" cellpadding="0" cellspacing="0">
					<tr>
						<td width="50" align="center"><a href="#" onClick="return submitFormOnClick('data_form');"><img src="images/iconSave.png" alt="Save" width="32" height="32" border="0" /><br />
							&nbsp;Save&nbsp;</a></td>
						<td width="50" align="center"><a href="news_index.php?msg=Cancel"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0" /><br />
							&nbsp;Cancel&nbsp;</a></td>
						<td>&nbsp;</td>
					</tr>
				</table></td>
		</tr>
		<tr>
			<td><span style="float:left;" class="pagetitletxt">&nbsp;<b><img alt="" src="images/iconList.jpg" width="48" height="48" style="vertical-align:middle" /> <?=$action?> News </b></span>
				<?php if (!$model->is_new_record()) { // modify mode ?>
				<span style="float:right;" class="msg">Last Update:
				<?=empty($model->modify_user->user_name) ? NULL : $model->modify_user->user_name?>
				&nbsp;
				<?=$model->modify_on->format('Y-m-d H:i:s')?>
				</span>
				<?php } // end of modify mode ?></td>
		</tr>
		<tr>
			<td align="left" valign="middle"><!-- Content -->
				
				<table border="0" cellpadding="0" cellspacing="0">
					<?php if ($model->is_new_record()) { ?>
					<tr>
						<td width="120" align="right" valign="top" class="content">Sort</td>
						<td width="10" class="content" valign="top">:</td>
						<?php $attribute = 'sort'; ?>
						<td class="content"><input type="text" class="content digits" name="<?=$attribute?>" value="<?=$model->$attribute?>" size="2" maxlength="5" />
							<br />
							<span class="msg">Max 5 digits</span></td>
					</tr>
					<?php } // end of model is new record ?>
					<tr>
						<td width="120" align="right" valign="top" class="content">Title</td>
						<td width="10" class="content" valign="top">:</td>
						<?php $attribute = 'title'; ?>
						<td class="content"><input type="text" class="content required" name="<?=$attribute?>" value="<?=$model->$attribute?>" size="80" maxlength="500" />
							<br />
							<span class="msg">Max length: 500</span></td>
					</tr>
					<tr>
						<td width="120" align="right" valign="top" class="content">Date</td>
						<td width="10" class="content" valign="top">:</td>
						<?php $attribute = 'date'; ?>
						<td class="content"><input type="text" class="content date required" name="<?=$attribute?>" value="<?=empty($model->$attribute) ? '' : $model->$attribute->format('Y-m-d')?>" size="20" />
							<br />
							<span class="msg">News date</span></td>
					</tr>
					<tr>
						<td width="120" align="right" valign="top" class="content">Description</td>
						<td width="10" class="content" valign="top">:</td>
						<td class="content">
							<?php
							$attribute = 'desc';
							include_once( realpath(dirname(__FILE__)) . "/fckeditor/fckeditor.php");
							$sBasePath = "fckeditor/"; // Reserve path: $_SERVER['PHP_SELF'];
							
							$oFCKEditor = new FCKEditor($attribute);
							$oFCKEditor->BasePath = $sBasePath;
							$oFCKEditor->Width = 290;
							$oFCKEditor->Height = 500;
							$oFCKEditor->Value = str_replace("\r", '', preg_replace("/\n/", "", $model->$attribute));
							$oFCKEditor->Create();
							?>
							<br />
							<span class="msg">Max width: 270</span>
						</td>
					</tr>
				</table>
				
				<!-- End Content --></td>
		</tr>
		<tr>
			<td align="left" valign="middle">&nbsp;</td>
		</tr>
	</table>
</form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit