403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)pathways.org.hk/MIS20140127/old20140414/Event/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)pathways.org.hk/MIS20140127/old20140414/Event/Event_DetailForm_Activity_Save.php
<?php

function DeleteActivity() {
    global $dbh;
    if (isset($_POST['activity_id'])) {
        foreach ($_POST['activity_id'] as $k => $a) {
            $dbh->query("UPDATE `activity` SET `lastupby`=1,`lastupdate`=now(),`actived`=1,`deleted`=1 where activity_id =$a and actived = 1 and deleted = 0");
            $dbh->query("Update activity_stu_list set actived = 1, deleted = 0 where activity_id = $a and actived = 1 and deleted = 0");
            $dbh->query("Update activity_teach_list set actived = 1 , deleted = 0 where activity_id = $a and actived = 1 and deleted = 0");
        }
    }
}

function SaveActivity($POST, $event_id) {
    global $dbh;
    DeleteActivity();
    foreach ($_POST['activity_title'] as $k => $a) {
        $sth = $dbh->prepare("INSERT INTO `activity`(`createby`, `createdate`, `lastupby`, `lastupdate`, `actived`, `deleted`,`event_id`, `title`, `date`, `start_time`, `end_time`, `payment`, `number_attend`) VALUES (1,now(),1,now(),1,0,?,?,?,?,?,?,?)");
        $sth->bindParam(1, $event_id);
        $sth->bindParam(2, $POST['activity_title'][$k]);
        $sth->bindParam(3, $POST['activity_date'][$k]);
        $sth->bindParam(4, $POST['activity_st'][$k]);
        $sth->bindParam(5, $POST['activity_et'][$k]);
        $sth->bindParam(6, $POST['activity_payment'][$k]);
        $sth->bindParam(7, $POST['activity_attend'][$k]);
        $sth->execute();
        $activity_id = $dbh->lastInsertId();
        SaveStudentRecode($POST['activity_student_id'][$k], $activity_id);
        SaveStaffRecode($POST['activity_staff_id'][$k], $activity_id);
    }
}

function SaveStudentRecode($student_list, $activity_id) {
    Subfunction_SaveRecord($student_list, $activity_id, "INSERT INTO `activity_stu_list`(`activity_id`, `createby`, `createdate`, `lastupby`, `lastupdate`, `actived`, `deleted`,"
            . " `stu_linking_id`, `invoice_gened`) VALUES (?,1,now(),1,now(),1,0,?,0)");
}

function SaveStaffRecode($staff_list, $activity_id) {
    Subfunction_SaveRecord($staff_list, $activity_id, "INSERT INTO `activity_teach_list`(`activity_id`, `createby`, `createdate`, `lastupby`, `lastupdate`, `actived`, `deleted`,"
            . " `staff_id`, `payroll_gened`) VALUES (?,1,now(),1,now(),1,0,?,0)");
}

function Subfunction_SaveRecord($list, $activity_id, $sql) {
    global $dbh;
    foreach ($list as $w) {
        $sth = $dbh->prepare($sql);
        $sth->bindParam(1, $activity_id);
        $sth->bindParam(2, $w);
        $sth->execute();
    }
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit