403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)pathways.org.hk/MIS20140127/old20140407/Event/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)pathways.org.hk/MIS20140127/old20140407/Event/Event_DetailFrom_ajax.php
<?php

include_once '../include/DBConnect.php';

if (isset($_GET['lesson_date']) && isset($_GET['starttime']) && isset($_GET['endtime']) && isset($_GET['roomid'])) {
    $count = 0;
    $event_id = $_GET['event_id'];
    $lessondate = $_GET['lesson_date'];
    $starttime = $_GET['starttime'];
    $endtime = $_GET['endtime'];
    $roomid = $_GET['roomid'];
    $row = $_GET['row'];
    $sth = $dbh->prepare("SELECT `start_time`,`end_time` FROM `lesson` WHERE `actived`=1 and `deleted`=0 and `room_id` = ? and `date` = ?");
    $sth->bindParam(1, $roomid);
    $sth->bindParam(2, $lessondate);
    $sth->execute();
    if ($sth->rowcount() == 0) {
        $add = "delete_row_lesson(this,$row);";
        echo "<tr>
          <td style=\"margin-left:auto;margin-right:auto;\"><button type=\"button\" class=\"btn\"  onclick=\"$add\"><i class=\"icon-remove\"></i></button></td>          
          <td>$lessondate<input type=\"hidden\" name=\"lesson_date[]\" value=\"$lessondate\"/></td>
          <td>$starttime:00<input type=\"hidden\" name=\"start_time[]\" value=\"$starttime\"/></td>
          <td>$endtime:00<input type=\"hidden\" name=\"end_time[]\" value=\"$endtime\"/></td>          
          <td>
            <input class=\"required\" type=\"text\" value=\"" . ((strtotime($endtime) - strtotime($starttime)) / 60) . "\" style=\"margin-left: 1px;margin-right: 1px;width: 85%\" name=\"teaching_hour[]\" autocomplete=\"off\" onkeydown=\"return ( event.ctrlKey || event.altKey || (47<event.keyCode && event.keyCode<58 && event.shiftKey==false) || (95<event.keyCode && event.keyCode<106) || (event.keyCode==8) || (event.keyCode==9) || (event.keyCode>34 && event.keyCode<40) || (event.keyCode==46) )\"/>
            (Minutes)
          </td>
          <td>$roomid<input type=\"hidden\" name=\"Room_id[]\" value=\"$roomid\"/></td>
          <td style=\"width: 100px;text-align: left;\"><button class=\"btn\" data-toggle=\"modal\" data-target=\"#student_modal_$row\" onclick=\"checkradio($row);\"><i class=\"icon-user\"></i> Student</button><label id=\"student_label_0" . ($row - 1) . "\"></label> </td>
          <td style=\"width: 100px;text-align: left;\"><button class=\"btn\" data-toggle=\"modal\" data-target=\"#staff_modal_$row\" onclick=\"checkradio2($row);\"><i class=\"icon-leaf\" ></i> Teacher</button><label id=\"staff_label_0" . ($row - 1) . "\"></label> </td>
        </tr>";
    } else {
        while ($ResultSet = $sth->fetch(PDO::FETCH_ASSOC)) {
            $count++;
            $resultset_start_time = explode(':', $ResultSet['start_time']);
            $resultset_end_time = explode(':', $ResultSet['end_time']);
            $starttime_exp = explode(':', $starttime);
            $endtime_exp = explode(':', $endtime);
            $db_starttime = mktime($resultset_start_time[0], $resultset_start_time[1]);
            $db_endtime = mktime($resultset_end_time[0], $resultset_end_time[1]);
            $gen_starttime = mktime($starttime_exp[0], $starttime_exp[1]);
            $gen_endtime = mktime($endtime_exp[0], $endtime_exp[1]);
            /* S=db start time E=db end time ||=gen start/end time  */
            /* --- case 1 :( | S E | )   --- */
            /* --- case 2 :( | S | E )   --- */
            /* --- case 3 :( S | E | )   --- */
            /* --- case 4 :( S | | E )   --- */
            if ($db_starttime <= $gen_starttime && $db_endtime >= $gen_starttime) {   // case 1, case 2
                echo "1234";
                break;
            }
            if ($db_starttime <= $gen_endtime && $db_endtime >= $gen_endtime) {       // case 3, case 1
                echo "1234";
                break;
            }
            if ($db_starttime >= $gen_starttime && $db_endtime <= $gen_endtime) {     // case 4
                echo "1234";
                break;
            }
            if ($count == $sth->rowcount()) {
                $add = "delete_row_lesson(this,$row);";
                echo "<tr>
          <td style=\"margin-left:auto;margin-right:auto;\"><button type=\"button\" class=\"btn\"  onclick=\"$add\"><i class=\"icon-remove\"></i></button></td>          
          <td>$lessondate<input type=\"hidden\" name=\"lesson_date[]\" value=\"$lessondate\"/></td>
          <td>$starttime<input type=\"hidden\" name=\"start_time[]\" value=\"$starttime\"/></td>
          <td>$endtime<input type=\"hidden\" name=\"end_time[]\" value=\"$endtime\"/></td>
          <td>
            <input class=\"required\" type=\"text\" value=\"" . ((strtotime($endtime) - strtotime($starttime)) / 60) . "\" style=\"margin-left: 1px;margin-right: 1px;width: 85%\" name=\"teaching_hour[]\" autocomplete=\"off\" onkeydown=\"return ( event.ctrlKey || event.altKey || (47<event.keyCode && event.keyCode<58 && event.shiftKey==false) || (95<event.keyCode && event.keyCode<106) || (event.keyCode==8) || (event.keyCode==9) || (event.keyCode>34 && event.keyCode<40) || (event.keyCode==46) )\"/>
            (Minutes)
          </td>
          <td>$roomid<input type=\"hidden\" name=\"Room_id[]\" value=\"$roomid\"/></td>
          
          <td style=\"width: 100px;text-align: left;\">
            <button class=\"btn\" data-toggle=\"modal\" data-target=\"#student_modal_$row\" onclick=\"checkradio($row);\"><i class=\"icon-user\"></i> Student</button>
            <label id=\"student_label_0" . ($row - 1) . "\"></label> 
          </td>
          <td style=\"width: 100px;text-align: left;\">
            <button class=\"btn\" data-toggle=\"modal\" data-target=\"#staff_modal_$row\" onclick=\"checkradio2($row);\"><i class=\"icon-leaf\" ></i> Teacher</button>
            <label id=\"staff_label_0" . ($row - 1) . "\"></label> 
          </td>
            </tr>";
            }
        }
    }
}

if (isset($_GET['event_id']) && isset($_GET['root_id'])){
    $event_id = $_GET['event_id'];
    $root_id = $_GET['root_id'];
    $sth = $dbh->query("select date,lesson_id from lesson_attendance where actived = 1 and deleted = 0 and stu_linking_id = $root_id and state = 3 and lesson_id in (select lesson_id from event_lesson where actived = 1 and deleted = 0 and event_id = $event_id) order by 1");
    while($result = $sth->fetch(PDO::FETCH_ASSOC)){
        echo "<option value=\"".$result["date"].",".$result['lesson_id']."\">".$result['date']."</option>";
    }
    
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit