403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)pathways.org.hk/MIS20140127/old20140414/student/20140516/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)pathways.org.hk/MIS20140127/old20140414/student/20140516/ajax_stu_add_assessment.php
<?php

include_once '../include/DBConnect.php';
$j = $_POST['j'];
$program = "";
$subject = "";
$query_prog = "Select program_id,program_name from program";
$result_prog = $dbh->query($query_prog);
$result_prog->setFetchMode(PDO::FETCH_OBJ);

$query_subj = "Select subject_id,sub_name from subject";
$result_subj = $dbh->query($query_subj);
$result_subj->setFetchMode(PDO::FETCH_OBJ);

echo '<tr>
                            <td>Program</td>
                            <td>
                                <select name="ass_program[]" required="true">
                                    <option></option>';
while ($row_prog = $result_prog->fetch()) {
    echo '<option value="' . $row_prog->program_id . '">' . $row_prog->program_name . '</option>';
}
echo'</select>
                            </td>
                            <td>Subject</td>
                            <td>
                                <select name="ass_subject[]" required="true">
                                    <option></option>';
while ($row_subj = $result_subj->fetch()) {
    echo '<option value = "' . $row_subj->subject_id . '">' . $row_subj->sub_name . '</option>';
}
echo'</select>
                            </td>
                        </tr>
                        <tr>
                            <td>Date of Assessment</td>
                            <td>
                                <div class="input-append date-picker">
                                    <input type="text" name="assessment_date[]" class="dateISO">
                                    <span class="add-on">
                                        <i class="icon-calendar" data-date-icon="icon-calendar" data-time-icon="icon-time"></i>
                                    </span>
                                </div>
                            </td>

                            <td>Assessment</td>
                            <td colspan="3">
                                <div class="fileupload fileupload-new" style="margin:0px" data-provides="fileupload">
                                    <div class="input-append">
                                        <div class="uneditable-input ">
                                            <i class="icon-file fileupload-exists"></i>
                                            <span class="fileupload-preview"><a href="assessment/<? //= $attachment[$attribute]                           ?>" target="_blank"><? //= $attachment[$attribute]                        ?></a></span>
                                        </div>
                                        <span class="btn btn-file">
                                            <span class="fileupload-new">Select file</span>
                                            <span class="fileupload-exists">Change</span>
                                            <input type="file" name="assessment_doc' . $j . '">      
</span>
<a href="#" class="btn fileupload-exists" data-dismiss="fileupload">Remove</a>
</div>
</div>
</td>
</tr>';

Youez - 2016 - github.com/yon3zu
LinuXploit