403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/alliancealliance/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/alliancealliance/webadmin/enrollment_index.php
<?php
	require_once('check_login.php');

	if (!isset($_GET["filter1"]) && !isset($_GET["filter2"]) && !isset($_GET["all"])) {
		$enrollment_info = array();
	}else{
		$filter_sql = "";
		$parameters = NULL;

		if(isset($_GET["all"]) && (int)$_GET["all"] == 1){
			$filter_sql = "";
			$parameters = NULL;
		}else{
			if (isset($_GET["filter1"]) && isset($_GET["filter2"]) && (int)$_GET["filter1"] != 3) {
				if($_GET["filter1"] == 0){  //course code
					$filter_sql = "and course_id = ?";
				}

				if($_GET["filter1"] == 1){  //enrollment date
					$filter_sql = "and enrollment_date between ? and ?";
				}

				if($_GET["filter1"] == 2){  //reference code
					$filter_sql = "and ref_code = ?";
				}

				/*if($_GET["filter1"] == 3){  //Participant email
					//looping id
					$filter_sql = "and email = ?";
				}*/

				if($_GET["filter1"] == 4){  //reference code
					$filter_sql = "and company_name = ?";
				}

				if($_GET["filter1"] == 1){
					$parameters = array();
					$result = explode(",",$_GET["filter2"]);
					foreach($result as $row){
						$parameters[] = $row;
					}
				}else{
					if($_GET["filter1"] == 4){
						$parameters = array(urldecode($_GET["filter2"]));
					}else{
						$parameters = array($_GET["filter2"]);
					}

				}

			}
		}

		$sql = "select * from enrollment
				where deleted = 0 ".$filter_sql." order by enrollment_date DESC, ref_code DESC";

		$enrollment_info = bind_pdo($sql, $parameters, "selectall");
	}

	if(isset($_GET["filter1"]) && $_GET["filter1"] == 3){  //Participant email
		$enrollment_info = get_enrollment_by_email($_GET["filter2"]);
	}

	$filter_course_code = "";
	$filter_ref_code = "";
	$filter_participant_email = "";
	$filter_company_name = "";

	$all_enrollment_info = get_enrollment();
	$all_course_info = get_course();
	$all_email_list_info = get_enrollment_email_list();
	$all_company_name_info = get_company_name();

	foreach ($all_course_info as $key => $row) {
		$filter_course_code[$key][0] = $row["id"];
		$filter_course_code[$key][1] = $row["code"];
	}

	foreach ($all_enrollment_info as $key => $row) {
		$filter_ref_code[$key][0] = $row["ref_code"];
		$filter_ref_code[$key][1] = $row["ref_code"];
	}

	foreach ($all_email_list_info as $key => $row) {
		$filter_participant_email[$key][0] = $row;
		$filter_participant_email[$key][1] = $row;
	}

	foreach ($all_company_name_info as $key => $row) {
		$filter_company_name[$key][0] = urlencode($row["company_name_en"]);
		$filter_company_name[$key][1] = $row["company_name_en"];
	}

	$filter1_info = array("Course Code", "Enrollment Date", "Reference Code", "Participant Email", "Company Name");
	$filter2_info = array(0 => $filter_course_code, 1 => "", 2 => $filter_ref_code, 3 => $filter_participant_email, 4 => $filter_company_name);
?>
<!DOCTYPE html>
<html>
<head>
	<?php require_once('html_head.php'); ?>

	<script type="text/javascript" src="js/chosen_v1.4.1/chosen.jquery.min.js"></script>
	<link rel="stylesheet" href="js/chosen_v1.4.1/chosen.min.css">

	<script type="text/javascript">

		$(function () {
			$("#filter1").chosen({width: "150px", search_contains: true});
			$("#filter2_0").chosen({width: "250px", search_contains: true});
			$("#filter2_2").chosen({width: "250px", search_contains: true});
			$("#filter2_3").chosen({width: "250px", search_contains: true});
			$("#filter2_4").chosen({width: "250px", search_contains: true});

			$("#filter2_0_chosen").css("display", "none");
			$("#filter2_2_chosen").css("display", "none");
			$("#filter2_3_chosen").css("display", "none");
			$("#filter2_4_chosen").css("display", "none");

			<?php
				if(isset($_GET["filter1"])){
					if((int)$_GET["filter1"] == 1){
						echo '$("#filter2_"+'.$_GET["filter1"].').css("display", "inline-block");';

						$result = explode(",",$_GET["filter2"]);
						echo '$("#enrollment_date_from").val("'.$result["0"].'");';
						echo '$("#enrollment_date_to").val("'.$result["1"].'");';
					}else{
						echo '$("#filter2_"+'.$_GET["filter1"].'+"_chosen").css("display", "inline-block");';
					}
				}
			?>

			$("#filter1").change(function () {
				var filter_1_key = $(this).val();
				$(".filter2").css("display", "none");
				$("#filter2_0_chosen").css("display", "none");
				$("#filter2_2_chosen").css("display", "none");
				$("#filter2_3_chosen").css("display", "none");
				$("#filter2_4_chosen").css("display", "none");

				$("#filter2_" + filter_1_key + "_chosen").css("display", "inline-block");

				if(filter_1_key == 1){
					$("#filter2_1").css("display", "inline-block");
				}else{
					$("#filter2_1").hide();
				}

			});


			$("#enrollment_date_from").datepicker({
				dateFormat: 'yy-mm-dd'
			});

			$("#enrollment_date_to").datepicker({
				dateFormat: 'yy-mm-dd'
			});
		});

		function filter() {
			var filter1 = $("select[name='filter1']").val();
			var filter2 = $("#filter2_" + filter1).val();

			console.log(filter2);

			if(filter1 == 1){
				var enrollment_date_from = $("#enrollment_date_from").val();
				var enrollment_date_to = $("#enrollment_date_to").val();

				if (enrollment_date_from == "" || enrollment_date_to == "") {
					alert("Please select the enrollment date range.");
				}else{
					filter2 = enrollment_date_from+","+enrollment_date_to;
				}
			}

			if (filter1 != "" && filter2 != "") {
				top.location.href = 'enrollment_index.php?filter1=' + filter1 + '&filter2=' + filter2;
			} else {
				alert("Please select a filter criteria.");
			}
		}
	</script>

	<script type="text/javascript">
		function DeleteRow(id, typeid) {
			if (confirm("Are you sure to delete this record?")) {
				window.location.href = 'enrollment_delete.php?id=' + id;
			}
		}
	</script>
</head>

<body>

<table height="600" border="0" cellpadding="0" cellspacing="0">
	<tr>
		<td width="200" align="left" valign="top">
			<table width="200" border="0" cellpadding="0" cellspacing="0">
				<tr>
					<td height="70" align="left" valign="middle">&nbsp;</td>
				</tr>
				<tr>
					<td width="200" align="left" valign="top"><!-- Main Menu -->
						<?php require("menu.php"); ?><!-- End Main Menu --></td>
				</tr>
			</table>
		</td>
		<td align="left" valign="top">
			<table border="0" cellpadding="0" cellspacing="0">
				<tr>
					<td>
						<table border="0" cellspacing="0" cellpadding="0">
							<tr>
								<td height="70" class="pagetitletxt">&nbsp;&nbsp;</td>
								<td width="50" align="center" class="icontxt">
									<!--<a href="enrollment_addform.php"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0"/><br/>&nbsp;Add&nbsp;&nbsp;
									</a>--></td>
							</tr>
						</table>
					</td>
				</tr>
				<tr>
					<td class="pagetitletxt">
						&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/> Enrollment
						</b></td>
				</tr>
				<tr>
					<td height="25" align="left" valign="middle" class="msg"><?php if (!empty($_GET["msg"])) echo $msg; ?></td>
				</tr>

				<tr>
					<td align="left" valign="middle">

						<div>Filter: <select name="filter1" id="filter1">
								<option value="">--- Please Select ---</option>
								<?php
									foreach ($filter1_info as $key => $filter1) {
										if (isset($_GET["filter1"]))
											$selected = matched_option($key, $_GET["filter1"], "select");

										echo '<option value="' . $key . '" ' . $selected . '>' . $filter1 . '</option>';
									}
								?>
							</select>

							<select name="filter2" id="filter2_0" class="filter2 ">
								<option value="">--- Please Select ---</option>
								<?php

									foreach ($filter2_info[0] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}

								?>
							</select>

							<div id="filter2_1" class="filter2" style="display: none;">
								From: <input type="text" name="enrollment_date_from" id="enrollment_date_from" style="width: 100px;"/>
								To: <input type="text" name="enrollment_date_to" id="enrollment_date_to" style="width: 100px;"/>
							</div>

							<select name="filter2" id="filter2_2" class="filter2 ">
								<option value="">--- Please Select ---</option>
								<?php
									foreach ($filter2_info[2] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}


								?>
							</select>

							<select name="filter2" id="filter2_3" class="filter2 ">
								<option value="">--- Please Select ---</option>
								<?php

									foreach ($filter2_info[3] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}

								?>
							</select>

							<select name="filter2" id="filter2_4" class="filter2 ">
								<option value="">--- Please Select ---</option>
								<?php

									foreach ($filter2_info[4] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}

								?>
							</select>

							<button type="button" onclick="filter();">Submit</button>

							<button type="button" onclick="window.location.href='enrollment_index.php?all=1';" style="margin-left: 15px;">
								Show All
							</button>
						</div>

						<br>

						<table style="width: 3500px;" border="0" cellpadding="0" cellspacing="0">
							<tr>
								<td width="10" class="listtitletxt"></td>
								<td width="20" class="listtitletxt"></td>
								<td width="20" class="listtitletxt"></td>
								<td width="20" class="listtitletxt">No.</td>
								<td width="100" class="listtitletxt">Entry Day</td>
								<td width="100" class="listtitletxt">Reference Code</td>
								<td width="50" class="listtitletxt">Mr./Ms.</td>
								<td width="150" class="listtitletxt">Name in Full</td>
								<td width="120" class="listtitletxt">ID Number</td>
								<td width="120" class="listtitletxt">RA Code</td>
								<td width="120" class="listtitletxt">Company</td>
								<td width="120" class="listtitletxt">Company Address 1</td>
								<td width="120" class="listtitletxt">Position in Company</td>
								<td width="80" class="listtitletxt">IATA Code</td>
								<td width="100" class="listtitletxt">Tel. no.</td>
								<td width="100" class="listtitletxt">Mobile no.</td>
								<td width="100" class="listtitletxt">Fax</td>
								<td width="150" class="listtitletxt">E-mail</td>
								<td width="150" class="listtitletxt">cc E-mail</td>
								<td width="120" class="listtitletxt">Experience in air cargo industry</td>
								<td width="120" class="listtitletxt">Education Level</td>
								<td width="180" class="listtitletxt">Existing airfreight compliance client of Alliance</td>
								<td width="120" class="listtitletxt">Are you renewing the certificate?</td>
								<td width="120" class="listtitletxt">Date of obtain previous certificate</td>
								<td width="120" class="listtitletxt">Institution of issuing</td>
								<td width="120" class="listtitletxt">Have you ever enroll the DG Training?</td>
								<td width="100" class="listtitletxt">Payment Amount</td>
								<td width="100" class="listtitletxt">Payment Date</td>
								<td width="100" class="listtitletxt">Cheque Number</td>
								<td width="120" class="listtitletxt">Remarks</td>
								<td width="80" class="listtitletxt">Last Update</td>
							</tr>

							<?php
								$count = 1;
								foreach ($enrollment_info as $row) {
									print "<tr>";
									print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";

									// Modify
									print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='enrollment_modifyform.php?id=" . $row{'id'} . "'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";

									// Delete
									print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteRow(" . $row{'id'} . ")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";

									print "<td class='listtxt' style='padding-left:5'>".$count."</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row["enrollment_date"] . "</td>";

									print "<td class='listtxt' style='padding-left:5'>".$row["ref_code"]."</td>";


									print "<td class='listtxt' style='padding-left:5'>" . $row{'title'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($row["participant_name"], 2) . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($row["identity_id"], 2) . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'ra_code'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'company_name'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'company_address'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'position'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'iata_code'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($row["tel"], 2) . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($row["mobile"], 2) . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'fax'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($row["email"], 2) . "</td>";
									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($row["cc_email"], 2) . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'exp_air_cargo'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'education_level'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'existing_airfreight'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'renew_cert'} . "</td>";

									if(!empty($row["date_obtain_pre_cert"]) && $row["date_obtain_pre_cert"] != "0000-00-00"){
										print "<td class='listtxt' style='padding-left:5'>" . $row{'date_obtain_pre_cert'} . "</td>";
									}else{
										print "<td class='listtxt' style='padding-left:5'></td>";
									}

									print "<td class='listtxt' style='padding-left:5'>" . $row{'institution_issuing'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'have_enroll_dg_training'} . "</td>";
									//get course category name and course name
									/*$sql                  = "select * from course_category where id = ?";
									$parameters           = array($row["course_category_id"]);
									$course_category_info = bind_pdo($sql, $parameters, "selectone");

									$sql         = "select * from course where id = ?";
									$parameters  = array($row["course_id"]);
									$course_info = bind_pdo($sql, $parameters, "selectone");

									print "<td class='listtxt' style='padding-left:5'>" . $course_category_info{'name_en'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $course_info{'code'} . "</td>";*/


									$sql         = "select * from course where id = ?";
									$parameters  = array($row["course_id"]);
									$course_info = bind_pdo($sql, $parameters, "selectone");

									print "<td class='listtxt' style='padding-left:5'>" . $course_info{'fee'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'payment_date'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'cheque_num'} . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . nl2br($row{'remark'}) . "</td>";

									print "<td class='listtxt' style='padding-left:5'>" . $row{'lastupdate'} . "</td>";

									print "</tr>";

									$count++;
								}
								$dbh = null;
							?>
						</table>

					</td>
				</tr>
			</table>
		</td>
	</tr>
</table>

</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit