403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/innoutstorage/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/innoutstorage/webadmin/customer_index.php
<?php
	require_once("check_login.php");

	$_SESSION["index_url_parameter"] = get_index_url_parameter();

	if (!isset($_GET["filter1"]) && !isset($_GET["filter2"]) && !isset($_GET["all"])) {
		$customer_info = array();
	} else {
		$filter_sql = "";

		if (isset($_GET["all"]) && (int)$_GET["all"] == 1) {
			$filter_sql = "";
			$parameters = NULL;
		} else {
			if (isset($_GET["filter1"]) && isset($_GET["filter2"])) {
				if ($_GET["filter1"] == 0 || $_GET["filter1"] == 1 || $_GET["filter1"] == 3) {
					$filter_sql = "and id = ?";
				}

				if ($_GET["filter1"] == 2) {
					$filter_sql = "and typeid = ?";
				}

				$parameters = array($_GET["filter2"]);
			}
		}

		$sql = "select * from `customer` where deleted = 0 " . $filter_sql . " order by code ASC";

		$customer_info = bind_pdo($sql, $parameters, "selectall");

		foreach ($customer_info as $key => $customer) {
			$customer_name                        = get_customer_name(rsa_crypt($customer["firstname"], 2), rsa_crypt($customer["lastname"], 2));
			$customer_info[$key]["customer_name"] = $customer_name;
		}
	}

	$filter_code = "";
	$filter_name = "";
	$filter_type = "";
	$filter_tel  = "";

	$all_customer_info = get_customer();

	foreach ($all_customer_info as $key => $customer) {
		$filter_code[$key][0] = $customer["id"];
		$filter_code[$key][1] = $customer["code"];

		$filter_name[$key][0] = $customer["id"];
		$filter_name[$key][1] = $customer["customer_name"];

		$filter_tel[$key][0] = $customer["id"];
		$filter_tel[$key][1] = rsa_crypt($customer["tel"], 2);

	}

	$customer_type_info = get_master_type_code("CUSTOMER_TYPE");
	foreach ($customer_type_info as $key => $customer_type) {
		$filter_type[$key][0] = $customer_type["code"];
		$filter_type[$key][1] = $customer_type["name_tc"];
	}

	$filter1_info = array("客戶編號", "客戶姓名", "客戶類別", "聯絡電話");
	$filter2_info = array(0 => $filter_code, 1 => $filter_name, 2 => $filter_type, 3 => $filter_tel);


	/*$customer_info = get_customer();
	foreach($customer_info as $key => $customer){
		$customer_name = get_customer_name(rsa_crypt($customer["firstname"], 2), rsa_crypt($customer["lastname"], 2) );
		$customer_info[$key]["customer_name"] = $customer_name;
	}*/
?>
<!DOCTYPE html>
<html>
<head>
	<?php require_once("html_head.php"); ?>

	<script type="text/javascript" src="js/chosen_v1.4.1/chosen.jquery.min.js"></script>
	<link rel="stylesheet" href="js/chosen_v1.4.1/chosen.min.css">

	<script type="text/javascript">
		function DeleteRow(id) {
			if (confirm("你確定要刪除?")) {
				window.location.href = 'customer_delete.php?id=' + id;
			}
		}

		function filter() {
			var filter1 = $("select[name='filter1']").val();
			var filter2 = $("#filter2_" + filter1).val();

			if (filter1 != "" && filter2 != "") {
				top.location.href = 'customer_index.php?filter1=' + filter1 + '&filter2=' + filter2;
			} else {
				alert("請選擇篩選方式。");
			}
		}

		$(function () {
			$("#filter1").chosen({width: "100px", search_contains: true});
			$("#filter2_0").chosen({width: "250px", search_contains: true});
			$("#filter2_1").chosen({width: "250px", search_contains: true});
			$("#filter2_2").chosen({width: "250px", search_contains: true});
			$("#filter2_3").chosen({width: "250px", search_contains: true});

			$("#filter2_0_chosen").css("display", "none");
			$("#filter2_1_chosen").css("display", "none");
			$("#filter2_2_chosen").css("display", "none");
			$("#filter2_3_chosen").css("display", "none");

			<?php
			if (isset($_GET["filter1"])) {
				echo '$("#filter2_"+' . $_GET["filter1"] . '+"_chosen").css("display", "inline-block");';
			}
			?>

			$("#filter1").change(function () {
				var filter_1_key = $(this).val();
				$(".filter2").css("display", "none");
				$("#filter2_0_chosen").css("display", "none");
				$("#filter2_1_chosen").css("display", "none");
				$("#filter2_2_chosen").css("display", "none");
				$("#filter2_3_chosen").css("display", "none");

				$("#filter2_" + filter_1_key + "_chosen").css("display", "inline-block");

			});

		});

	</script>
</head>

<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
	<tr>
		<td width="200" align="left" valign="top">
			<table width="200" border="0" cellpadding="0" cellspacing="0">
				<tr>
					<td height="70" align="left" valign="middle">&nbsp;</td>
				</tr>
				<tr>
					<td width="200" align="left" valign="top"><!-- Main Menu -->
						<?php require("menu.php"); ?><!-- End Main Menu --></td>
				</tr>
			</table>
		</td>
		<td width="800" align="left" valign="top">
			<table width="800" border="0" cellpadding="0" cellspacing="0">
				<tr>
					<td>
						<table width="800" border="0" cellspacing="0" cellpadding="0">
							<tr>
								<td height="70" class="pagetitletxt">&nbsp;&nbsp;</td>
								<td width="50" align="center" class="icontxt">

									<a href="customer_addform.php"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0"/><br/>&nbsp;新增&nbsp;&nbsp;
									</a>

								</td>
							</tr>
						</table>
					</td>
				</tr>
				<tr>
					<td class="pagetitletxt">
						&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/>

							客戶

						</b></td>
				</tr>
				<tr>
					<td height="25" align="left" valign="middle" class="msg"><?php if (isset($_GET["msg"])) echo $_GET['msg']; ?></td>
				</tr>

				<tr>
					<td align="left" valign="middle">

						<div>篩選: <select name="filter1" id="filter1">
								<option value="">---請選擇---</option>
								<?php
									foreach ($filter1_info as $key => $filter1) {
										if (isset($_GET["filter1"]))
											$selected = matched_option($key, $_GET["filter1"], "select");

										echo '<option value="' . $key . '" ' . $selected . '>' . $filter1 . '</option>';
									}
								?>
							</select>

							<select name="filter2" id="filter2_0" class="filter2 ">
								<option value="">---請選擇---</option>
								<?php

									foreach ($filter2_info[0] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}

								?>
							</select>

							<select name="filter2" id="filter2_1" class="filter2 ">
								<option value="">---請選擇---</option>
								<?php
									foreach ($filter2_info[1] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}


								?>
							</select>

							<select name="filter2" id="filter2_2" class="filter2 ">
								<option value="">---請選擇---</option>
								<?php

									foreach ($filter2_info[2] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}

								?>
							</select>

							<select name="filter2" id="filter2_3" class="filter2 ">
								<option value="">---請選擇---</option>
								<?php

									foreach ($filter2_info[3] as $data) {
										if (isset($_GET["filter2"]))
											$selected = matched_option($data[0], $_GET["filter2"], "select");

										echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
									}

								?>
							</select>

							<button type="button" onclick="filter();">送出</button>

							<button type="button" onclick="window.location.href='customer_index.php?all=1';" style="margin-left: 15px;">
								全部客戶
							</button>
						</div>

						<br>

						<table width="800" border="0" cellpadding="0" cellspacing="0">
							<tr>
								<td width="10" class="listtitletxt"></td>
								<td width="100" class="listtitletxt">客戶編號</td>
								<td width="100" class="listtitletxt">客戶姓名</td>
								<td width="50" class="listtitletxt">客戶類別</td>
								<td width="100" class="listtitletxt">聯絡電話</td>
								<td width="80" class="listtitletxt">註冊日期</td>
								<td width="20" class="listtitletxt"></td>
								<td width="20" class="listtitletxt"></td>
							</tr>

							<?php
								foreach ($customer_info as $customer) {
									print "<tr>";
									print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
									print "<td class='listtxt' style='padding-left:5'>" . $customer{'code'} . "</td>";
									print "<td class='listtxt' style='padding-left:5'>" . $customer{'customer_name'} . "</td>";
									$customer_type = get_master_type_code("CUSTOMER_TYPE", $customer["typeid"]);

									print "<td class='listtxt' style='padding-left:5'>" . $customer_type["name_tc"] . "</td>";
									print "<td class='listtxt' style='padding-left:5'>" . rsa_crypt($customer{'tel'}, 2) . "</td>";
									print "<td class='listtxt' style='padding-left:5'>" . $customer["createdate"] . "</td>";

									// Modify
									print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='customer_modifyform.php?id=" . $customer{'id'} . "'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";

									// Delete
									print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteRow(" . $customer{'id'} . ")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";

									print "</tr>";

									print "</tr>";

								}

							?>
						</table>
					</td>
				</tr>
			</table>
		</td>
	</tr>
</table>
</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit