| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/e-ims/file_manager/ |
Upload File : |
<?php
include 'config.php';
// Check if the user is logged in
if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>E-IMS</title>
<link rel="stylesheet" href="css/style.css">
<script type="text/javascript" src="js/jquery-1.10.2.min.js"></script>
<script type="text/javascript" src="js/jquery-migrate-1.2.1.min.js"></script>
<script src="http://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.11.1/jquery.validate.min.js"></script>
<?php
$pid = (int)$_REQUEST["pid"];
$lv = (int)$_REQUEST["lv"];
if (!empty($_REQUEST["companyid"])){
$companyid = "&companyid=".(int)$_REQUEST["companyid"];
} else {
$companyid = "";
}
if (!empty($_REQUEST["upload"])){
$upload = "&upload=".(int)$_REQUEST["upload"];
} else {
$upload = "";
}
if (!empty($_REQUEST["addfolder"])){
$addfolder = "&addfolder=".(int)$_REQUEST["addfolder"];
} else {
$addfolder = "";
}
if (!empty($_REQUEST["adduser"])){
$adduser = "&adduser=".(int)$_REQUEST["adduser"];
} else {
$adduser = "";
}
if (!empty($_REQUEST["modifyuser"])){
$modifyuser = "&modifyuser=".(int)$_REQUEST["modifyuser"];
} else {
$modifyuser = "";
}
if (!empty($_REQUEST["modifyuserid"])){
$modifyuserid = "&modifyuserid=".(int)$_REQUEST["modifyuserid"];
} else {
$modifyuserid = "";
}
if (!empty($_REQUEST["modifyfolder"])){
$modifyfolder = "&modifyfolder=".(int)$_REQUEST["modifyfolder"];
} else {
$modifyfolder = "";
}
if (!empty($_REQUEST["modifyfolderid"])){
$modifyfolderid = "&modifyfolderid=".(int)$_REQUEST["modifyfolderid"];
} else {
$modifyfolderid = "";
}
if (!empty($_REQUEST["modifyfile"])){
$modifyfile = "&modifyfile=".(int)$_REQUEST["modifyfile"];
} else {
$modifyfile = "";
}
if (!empty($_REQUEST["modifyfileid"])){
$modifyfileid = "&modifyfileid=".(int)$_REQUEST["modifyfileid"];
} else {
$modifyfileid = "";
}
if (!empty($_REQUEST["addreport"])){
$addreport = "&addreport=".(int)$_REQUEST["addreport"];
} else {
$addreport = "";
}
if (!empty($_REQUEST["year"])){
$year = "&year=".$_REQUEST["year"];
} else {
$year = "";
}
if (!empty($_REQUEST["addcompany"])){
$addcompany = "&addcompany=".(int)$_REQUEST["addcompany"];
} else {
$addcompany = "";
}
if (!empty($_REQUEST["modifycompany"])){
$modifycompany = "&modifycompany=".(int)$_REQUEST["modifycompany"];
} else {
$modifycompany = "";
}
if (!empty($_REQUEST["modifycompanyid"])){
$modifycompanyid = "&modifycompanyid=".(int)$_REQUEST["modifycompanyid"];
} else {
$modifycompanyid = "";
}
$user_info_sql = "SELECT * FROM sys_login WHERE loginid = :loginid";
$user_info = Db::getDbh()->prepare($user_info_sql);
$user_info->execute(array(":loginid" => $_SESSION['loginid']));
if( $error = $user_info->getError(array(":loginid" => $_SESSION['loginid'])) ){
var_dump($error);
}
$row_user_info = $user_info->fetch(PDO::FETCH_ASSOC);
$user_check_sql = "SELECT file_role.title FROM file_role
INNER JOIN file_role_user ON file_role_user.roleid = file_role.roleid Where file_role_user.userid=:userid";
$user_check = Db::getDbh()->prepare($user_check_sql);
$user_check->execute(array(":userid" => $_SESSION['loginid']));
if( $error = $user_check->getError(array(":userid" => $_SESSION['loginid'])) ){
var_dump($error);
}
$row_user_check = $user_check->fetch(PDO::FETCH_ASSOC);
if($_SESSION['role'] == 'User'){
$company_check_sql = "SELECT * FROM file_company_user Where userid=:userid";
$company_check = Db::getDbh()->prepare($company_check_sql);
$company_check->execute(array(":userid" => $_SESSION['loginid']));
if( $error = $company_check->getError(array(":userid" => $_SESSION['loginid'])) ){
var_dump($error);
}
$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
$info_companyid = $row_company_check{'companyid'};
$company_info_sql = "SELECT * FROM file_company Where status = '1' AND companyid=:companyid";
$company_info = Db::getDbh()->prepare($company_info_sql);
$company_info->execute(array(":companyid" => $info_companyid));
if( $error = $company_info->getError(array(":companyid" => $_SESSION['loginid'])) ){
var_dump($error);
}
$row_company_info = $company_info->fetch(PDO::FETCH_ASSOC);
$company_count = $company_info->rowCount();
$title = $row_company_info{'title'};
$type_title = $row_company_info{'type'};
} else {
if(empty($_GET["companyid"])){
$company_check_sql = "SELECT * FROM file_company_user Where status = '1' order by sort ASC Limit 1";
$company_check = Db::getDbh()->prepare($company_check_sql);
$company_check->execute();
if( $error = $company_check->getError() ){
var_dump($error);
}
$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
$info_companyid = $row_company_check{'companyid'};
} else {
$info_companyid = (int)$_GET["companyid"];
}
$company_info_sql = "SELECT * FROM file_company Where status = '1' order by sort ASC Limit 1";
$company_info = Db::getDbh()->prepare($company_info_sql);
$company_info->execute();
if( $error = $company_info->getError() ){
var_dump($error);
}
$row_company_info = $company_info->fetch(PDO::FETCH_ASSOC);
$company_count = $company_info->rowCount();
$title = "E-IMS";
$type_title = "";
}
if ($_REQUEST["index"] <> ""){
$index = (int)$_REQUEST["index"];
} else {
if (($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')) {
$index = "3";
} elseif($row_user_check{'title'} == 'Admin'){
$index = "2";
} elseif($row_user_check{'title'} == 'Advanced User') {
$index = "1";
} else {
$index = "0";
}
}
?>
<!--Tabber-->
<link rel="stylesheet" href="css/tabber.css">
<script src="js/jquery-ui-1.10.4.min.js"></script>
<script type="text/javascript">
$(function() {
$("#tabs").tabs({
active: <?=$index;?>,
activate: function (event, ui) {
var index = 'index.php?index='+ $(this).tabs('option', 'active');
window.location.href = index;
}
});
});
</script>
<!--Tabber End-->
</script>
<!--TreeView-->
<link rel="stylesheet" href="css/jquery.treeview.css">
<script src="js/jquery.treeview.js" type="text/javascript"></script>
<script src="js/jquery.cookie.js" type="text/javascript"></script>
<!--TreeView End-->
</head>
<body>
<div id="main_frame">
<div class="top_menu_frame">
<a href="logout.php"><div class="top_menu_btn">Logout</div></a>
<a href="#"><div class="top_menu_btn" style="color: #414141; padding: 3px 10px 3px 28px; background: url(images/login_name_icon.png) left center no-repeat;"><?=$row_user_info{'username'};?></div></a>
<div style="clear:both;"></div>
</div>
<a href="index.php"><div class="main_title"><?=$title;?></div></a>
<div style="clear:both;"></div>
<div class="type_title"><?=$type_title;?></div>
<div style="clear:both;"></div>
<div id="tabs">
<ul>
<?php
if (($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')) { ?>
<li><a href="company_management.php?index=0<?=$addcompany;?><?=$modifycompany;?><?=$modifycompanyid;?>">Company Management</a></li>
<?php
if ($company_count > 0) { ?>
<li><a href="user_management.php?index=1<?=$companyid;?><?=$adduser;?><?=$modifyuser;?><?=$modifyuserid;?>">User Management</a></li>
<li><a href="report.php?index=2<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
<li><a href="file_management.php?index=3<?=$companyid;?><?=$upload;?><?=$addfolder;?><?=$modifyfolder;?><?=$modifyfolderid;?><?=$modifyfile;?><?=$modifyfileid;?>&pid=<?=$pid;?>&lv=<?=$lv;?>">File Management</a></li>
<?php } ?>
<?php } elseif($row_user_check{'title'} == 'Admin') {?>
<?php
if ($company_count > 0) { ?>
<li><a href="user_management.php?index=0<?=$companyid;?><?=$adduser;?><?=$modifyuser;?><?=$modifyuserid;?>">User Management</a></li>
<li><a href="report.php?index=1<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
<li><a href="file_management.php?index=2<?=$companyid;?><?=$upload;?><?=$addfolder;?><?=$modifyfolder;?><?=$modifyfolderid;?><?=$modifyfile;?><?=$modifyfileid;?>&pid=<?=$pid;?>&lv=<?=$lv;?>">File Management</a></li>
<?php } else { ?>
<li><a href="blocked.php?index=0">Blocked</a></li>
<?php } ?>
<?php } elseif($row_user_check{'title'} == 'Advanced User') {?>
<?php
if ($company_count > 0) { ?>
<li><a href="report.php?index=0<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
<li><a href="file_management.php?index=1<?=$companyid;?><?=$upload;?><?=$addfolder;?><?=$modifyfolder;?><?=$modifyfolderid;?><?=$modifyfile;?><?=$modifyfileid;?>&pid=<?=$pid;?>&lv=<?=$lv;?>">File Management</a></li>
<?php } else { ?>
<li><a href="blocked.php?index=0">Blocked</a></li>
<?php } ?>
<?php } else {?>
<?php
if ($company_count > 0) { ?>
<li><a href="report.php?index=0<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
<?php } else { ?>
<li><a href="blocked.php?index=0">Blocked</a></li>
<?php } ?>
<?php } ?>
</ul>
</div>
</div>
</body>
</html>