403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/innoutstorage/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/innoutstorage/webadmin/order_index.php_bk20210623
<?php
require_once("check_login.php");
require_once("Zebra_Pagination/Zebra_Pagination.php");

$_SESSION["index_url_parameter"] = get_index_url_parameter();

if (!isset($_GET["filter1"]) && !isset($_GET["filter2"]) && !isset($_GET["filter3"]) && !isset($_GET["all"])) {
    $order_info = array();
    $filter_sql = " and createdate >= DATE_SUB(CURRENT_DATE(), INTERVAL 2 WEEK) AND createdate <= '".date('Y-m-d 23:59:59')."'";
    $parameters = NULL;
} else {

    //check date time
    if ($_GET["filter1"] == 3 || $_GET["filter1"] == 5) {
        $message = "";
        if (empty($_GET["filter2"])) {
            $message .= "請選擇開始日期。\\n\\n";
        } else {
            if (!validateDate($_GET["filter2"], "Y-m-d")) {
                $message .= "開始日期格式出錯。\\n\\n";
            }
        }

        if (empty($_GET["filter3"])) {
            $message .= "請選擇完結日期。\\n\\n";
        } else {
            if (!validateDate($_GET["filter3"], "Y-m-d")) {
                $message .= "完結日期格式出錯。\\n\\n";
            }
        }

        if (!empty($_GET["filter2"]) && !empty($_GET["filter3"]) && validateDate($_GET["filter2"], "Y-m-d") && validateDate($_GET["filter3"], "Y-m-d") && $_GET["filter3"] <= $_GET["filter2"]) {
            $message .= "開始日期必須早於完結日期。\\n\\n";
        }

        if (!empty($message)) {
            echo "<script>alert('" . $message . "'); location.href='order_index.php'</script>";
            exit;
        }

        $filter_sql = "and startdate >= ? and startdate <= ?";
        $parameters = array($_GET["filter2"], $_GET["filter3"]);
    }


    $filter_sql = "";

    if (isset($_GET["all"]) && (int)$_GET["all"] == 1) {
        $filter_sql = "";
        $parameters = NULL;
    } else {
        if (isset($_GET["filter1"]) && isset($_GET["filter2"])) {
            if ($_GET["filter1"] == 0) {
                $filter_sql = "and id = ?";
            }

            if ($_GET["filter1"] == 1 || $_GET["filter1"] == 2) {
                $filter_sql = "and customer_id = ?";
            }

            if ($_GET["filter1"] == 4) {
                $filter_sql = "and status = ?";
            }

            $parameters = array($_GET["filter2"]);

            if ($_GET["filter1"] == 3) {
                $filter_sql = "and startdate >= ? and startdate <= ?";
                $parameters = array($_GET["filter2"], $_GET["filter3"]);
            }

            if ($_GET["filter1"] == 5) {
                $filter_sql = "and createdate >= ? and createdate <= ?";
                $parameters = array($_GET["filter2"], $_GET["filter3"]);
            }

        }
    }
}

//pagination
// how many records should be displayed on a page?
$records_per_page = 20;
// instantiate the pagination object
$pagination = new Zebra_Pagination();

// records per page
$pagination->records_per_page($records_per_page);

$sql = "select count(*) as count from `order` where deleted = 0 " . $filter_sql . " order by id DESC";
$order_info = bind_pdo($sql, $parameters, "selectone");

// the number of total records is the number of records in the array
$pagination->records($order_info['count']);

$sql = "select * from `order` where deleted = 0 " . $filter_sql . " order by id DESC";
$sql .= ' LIMIT ' . (($pagination->get_page() - 1) * $records_per_page) . ', ' . $records_per_page ;
$order_info = bind_pdo($sql, $parameters, "selectall");

foreach ($order_info as $key => $order) {
    $order_id = $order["id"];
    $order_info[$key]["order_code"] = $order["code"];
    /*$customer_info                     = get_customer($order["customer_id"]);
    $order_info[$key]["customer_code"] = $customer_info["code"];
    $order_info[$key]["customer_name"] = $customer_info["customer_name"];*/

    $customer_name = get_customer_name(rsa_crypt($order["customer_firstname"], 2), rsa_crypt($order["customer_lastname"], 2));
    $order_info[$key]["customer_code"] = $order["customer_code"];
    $order_info[$key]["customer_name"] = $customer_name;
    $order_info[$key]["customer_tel"] = rsa_crypt($order_info[$key]["customer_tel"], 2);

}

$filter_order_code = "";
$filter_customer_code = "";
$filter_customer_name = "";
$filter_status = "";
$filter_startfrom = "";

$all_order_info = get_order2();
foreach ($all_order_info as $key => $order) {
    $filter_order_code[$key][0] = $order["id"];
    $filter_order_code[$key][1] = $order["code"];
}

$all_order_info = get_customer2();

foreach ($all_order_info as $key => $customer) {
    $filter_customer_code[$key][0] = $customer["id"];
    $filter_customer_code[$key][1] = $customer["code"];

    $filter_customer_name[$key][0] = $customer["id"];
    $filter_customer_name[$key][1] = $customer["customer_name"];
}

$status_info = get_master_type_code("ORDER_STATUS");
foreach ($status_info as $key => $status) {
    $filter_status[$key][0] = $status["code"];
    $filter_status[$key][1] = $status["name_tc"];
}

$filter1_info = array("合約編號", "客戶編號", "客戶姓名", "生效日期", "狀態", "建立日期");
$filter2_info = array(0 => $filter_order_code, 1 => $filter_customer_code, 2 => $filter_customer_name, 3 => "user_input", 4 => $filter_status, 5 => "user_input");

?>
<!DOCTYPE html>
<html>
<head>
    <?php require_once("html_head.php"); ?>
    <link rel="stylesheet" href="Zebra_Pagination/css/zebra_pagination.css" type="text/css">

    <script src="Zebra_Pagination/js/zebra_pagination.js"></script>

    <script type="text/javascript" src="js/chosen_v1.4.1/chosen.jquery.min.js"></script>
    <link rel="stylesheet" href="js/chosen_v1.4.1/chosen.min.css">

    <script type="text/javascript">
        $(function () {
            $("#filter2_35, #filter3_35").datepicker({
                dateFormat: 'yy-mm-dd'
            });
        });
    </script>

    <script type="text/javascript">

        function switch_order(order_id) {

            if (!isNaN(order_id)) {
                var r = confirm("你確定要為這張合約進入轉倉程序?");
                if (r == true) {
                    window.location.href = '_ajax.php?for=switch_order&order_id=' + order_id;
                }
            }
        }

        function terminate_order(order_id) {

            if (!isNaN(order_id)) {
                var r = confirm("你確定要為這張合約進入退倉程序?");
                if (r == true) {
                    window.location.href = 'terminate_order.php?order_id=' + order_id;
                }
            }
        }

        function filter() {
            var filter1 = $("select[name='filter1']").val();
            if (filter1 == 3 || filter1 == 5) {
                var filter2 = $("#filter2_35").val();
                var filter3 = $("#filter3_35").val();
            } else {
                var filter2 = $("#filter2_" + filter1).val();
            }

            if (filter1 != "" && filter2 != "" && filter3 != "") {
                top.location.href = 'order_index.php?filter1=' + filter1 + '&filter2=' + filter2 + '&filter3=' + filter3;
            } else if (filter1 != "" && filter2 != "") {
                top.location.href = 'order_index.php?filter1=' + filter1 + '&filter2=' + filter2;
            } else {
                if (filter1 == "3" || filter1 == "5") {
                    alert("請選擇篩選方式,開始日期及完結日期。");
                } else {
                    alert("請選擇篩選方式。");
                }
            }
        }


        $(function () {
            $("#filter1").chosen({width: "100px", search_contains: true});
            $("#filter2_0").chosen({width: "250px", search_contains: true});
            $("#filter2_1").chosen({width: "250px", search_contains: true});
            $("#filter2_2").chosen({width: "250px", search_contains: true});
            //$("#filter2_3").chosen({width: "250px", search_contains: true});
            $("#filter2_4").chosen({width: "250px", search_contains: true});

            $("#filter2_0_chosen").css("display", "none");
            $("#filter2_1_chosen").css("display", "none");
            $("#filter2_2_chosen").css("display", "none");
            $("#filter2_35").css("display", "none");
            $("#filter3_35").css("display", "none");
            $("#filter2_4_chosen").css("display", "none");

            <?php
            if (isset($_GET["filter1"])) {
                if ($_GET["filter1"] == 3 || $_GET["filter1"] == 5) {
                    echo '$("#filter2_35").css("display", "inline-block");';
                    echo '$("#filter3_35").css("display", "inline-block");';
                } else {
                    echo '$("#filter2_"+' . $_GET["filter1"] . '+"_chosen").css("display", "inline-block");';
                }
            }
            ?>

            $("#filter1").change(function () {
                var filter_1_key = $(this).val();
                $(".filter2").css("display", "none");
                $("#filter2_0_chosen").css("display", "none");
                $("#filter2_1_chosen").css("display", "none");
                $("#filter2_2_chosen").css("display", "none");
                $("#filter2_35").css("display", "none");
                $("#filter3_35").css("display", "none");
                $("#filter2_4_chosen").css("display", "none");

                if (parseInt(filter_1_key) == 3 || parseInt(filter_1_key) == 5) {
                    $("#filter2_35").css("display", "inline-block");
                    $("#filter3_35").css("display", "inline-block");
                } else {
                    $("#filter2_" + filter_1_key + "_chosen").css("display", "inline-block");
                }
            });

        });

    </script>
</head>

<body>
<table width="1200" height="600" border="0" cellpadding="0" cellspacing="0">
    <tr>
        <td width="200" align="left" valign="top">
            <table width="200" border="0" cellpadding="0" cellspacing="0">
                <tr>
                    <td height="70" align="left" valign="middle">&nbsp;</td>
                </tr>
                <tr>
                    <td width="200" align="left" valign="top"><!-- Main Menu -->
                        <?php require("menu.php"); ?><!-- End Main Menu --></td>
                </tr>
            </table>
        </td>
        <td width="1000" align="left" valign="top">
            <table width="1000" border="0" cellpadding="0" cellspacing="0">
                <tr>
                    <td>
                        <table width="1000" border="0" cellspacing="0" cellpadding="0">
                            <tr>
                                <td height="70" class="pagetitletxt">&nbsp;&nbsp;</td>
                                <td width="50" align="center" class="icontxt">

                                </td>
                            </tr>
                        </table>
                    </td>
                </tr>
                <tr>
                    <td class="pagetitletxt">
                        &nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/>

                            合約

                        </b></td>
                </tr>
                <tr>
                    <td height="25" align="left" valign="middle" class="msg"><?php if (isset($_GET["msg"])) echo $_GET['msg']; ?></td>
                </tr>

                <tr>
                    <td align="left" valign="middle">

                        <div>篩選: <select name="filter1" id="filter1">
                                <option value="">---請選擇---</option>
                                <?php
                                foreach ($filter1_info as $key => $filter1) {
                                    if (isset($_GET["filter1"]))
                                        $selected = matched_option($key, $_GET["filter1"], "select");

                                    echo '<option value="' . $key . '" ' . $selected . '>' . $filter1 . '</option>';
                                }
                                ?>
                            </select>

                            <select name="filter2" id="filter2_0" class="filter2 ">
                                <option value="">---請選擇---</option>
                                <?php

                                foreach ($filter2_info[0] as $data) {
                                    if (isset($_GET["filter2"]))
                                        $selected = matched_option($data[0], $_GET["filter2"], "select");

                                    echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
                                }

                                ?>
                            </select>

                            <select name="filter2" id="filter2_1" class="filter2 ">
                                <option value="">---請選擇---</option>
                                <?php
                                foreach ($filter2_info[1] as $data) {
                                    if (isset($_GET["filter2"]))
                                        $selected = matched_option($data[0], $_GET["filter2"], "select");

                                    echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
                                }


                                ?>
                            </select>

                            <select name="filter2" id="filter2_2" class="filter2 ">
                                <option value="">---請選擇---</option>
                                <?php

                                foreach ($filter2_info[2] as $data) {
                                    if (isset($_GET["filter2"]))
                                        $selected = matched_option($data[0], $_GET["filter2"], "select");

                                    echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
                                }

                                ?>
                            </select>

                            <input type="text" name="filter2"
                                   value="<?php if (isset($_GET["filter2"]) && isset($_GET["filter1"]) && ($_GET["filter1"] == 3 || $_GET["filter1"] == 5)) echo $_GET["filter2"]; else echo ""; ?>"
                                   id="filter2_35" class="filter2" style="width: 100px;" placeholder="開始日期"/>

                            <input type="text" name="filter3"
                                   value="<?php if (isset($_GET["filter3"]) && isset($_GET["filter1"]) && ($_GET["filter1"] == 3 || $_GET["filter1"] == 5)) echo $_GET["filter3"]; else echo ""; ?>"
                                   id="filter3_35" class="filter3" style="width: 100px;" placeholder="完結日期"/>

                            <select name="filter2" id="filter2_4" class="filter2 ">
                                <option value="">---請選擇---</option>
                                <?php
                                foreach ($filter2_info[4] as $data) {
                                    if (isset($_GET["filter2"]))
                                        $selected = matched_option($data[0], $_GET["filter2"], "select");

                                    echo '<option value="' . $data[0] . '" ' . $selected . ' class="' . $key . '">' . $data[1] . '</option>';
                                }
                                ?>
                            </select>

                            <button type="button" onclick="filter();">送出</button>

                            <button type="button" onclick="window.location.href='order_index.php?all=1';" style="margin-left: 15px;">
                                全部合約
                            </button>
                        </div>

                        <br>

                        <table width="1150" border="0" cellpadding="0" cellspacing="0">
                            <tr>
                                <td width="10" class="listtitletxt"></td>
                                <td width="100" class="listtitletxt">合約編號</td>
                                <td width="100" class="listtitletxt">門卡號碼</td>
                                <!--<td width="150" class="listtitletxt">客戶類別</td>-->
                                <td width="150" class="listtitletxt">客戶姓名</td>
                                <td width="80" class="listtitletxt">聯絡電話</td>
                                <td width="200" class="listtitletxt">租用單位</td>
                                <td width="70" class="listtitletxt" style="white-space: nowrap">租用期(月)</td>
                                <td width="80" class="listtitletxt">生效日期</td>
                                <td width="80" class="listtitletxt">結束日期</td>
                                <td width="50" class="listtitletxt">狀態</td>
                                <td width="50" class="listtitletxt">轉倉</td>
                                <td width="50" class="listtitletxt">退倉</td>
                                <td width="50" class="listtitletxt">詳情</td>

                            </tr>

                            <?php
                            foreach ($order_info as $order) {
                                print "<tr>";
                                print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
                                print "<td class='listtxt' style='padding-left:5; white-space: nowrap'>" . $order['order_code'] . "</td>";

                                print "<td class='listtxt' style='padding-left:5'>" . $order['room_key'] . "</td>";

                                /*$customer_type = get_master_type_code("CUSTOMER_TYPE", $order["customer_typeid"]);
                                if($order["customer_typeid"] == "BUSINESS"){
                                    print "<td class='listtxt' style='padding-left:5'>" . $customer_type["name_tc"] . "<br>".$order["customer_companyname"]."</td>";
                                }else if($order["customer_typeid"] == "PERSONAL"){
                                    print "<td class='listtxt' style='padding-left:5'>" . $customer_type["name_tc"] . "</td>";
                                }*/

                                print "<td class='listtxt' style='padding-left:5'>" . $order['customer_name'] . "<br>(" . $order['customer_code'] . ")</td>";
                                print "<td class='listtxt' style='padding-left:5'>" . $order['customer_tel'] . "</td>";

                                $order_room_info = get_order_room($order["id"]);
                                $order_room_list = "";
                                foreach ($order_room_info as $detail) {
                                    $room_info = get_room($detail["room_id"]);
                                    $order_room_list .= check_combine_room($room_info["code"]) . ", ";
                                }

                                $order_room_list = substr_replace($order_room_list, "", -2);

                                print "<td class='listtxt' style='padding-left:5'>" . $order_room_list . "</td>";

                                print "<td class='listtxt' style='padding-left:5'>" . $order['rent_month'] . "</td>";
                                print "<td class='listtxt' style='padding-left:5'>" . $order['startdate'] . "</td>";
                                print "<td class='listtxt' style='padding-left:5'>" . $order['enddate'] . "</td>";

                                $order_status = get_master_type_code("ORDER_STATUS", $order["status"]);

                                print "<td class='listtxt' style='padding-left:5'>" . $order_status["name_tc"] . "</td>";

                                if ($order["status"] == "NEW") {
                                    print "<td class='listtxt' style='padding-left:5'><button type='button' onclick='switch_order(" . $order["id"] . ");'>轉倉</button></td>";
                                } else {
                                    print "<td class='listtxt' style='padding-left:5'>不適用</td>";
                                }

                                if ($order["status"] == "NEW") {
                                    print "<td class='listtxt' style='padding-left:5'><button type='button' onclick='terminate_order(" . $order["id"] . ");'>退倉</button></td>";
                                } else {
                                    print "<td class='listtxt' style='padding-left:5'>不適用</td>";
                                }


                                // Modify
                                print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='order_modifyform.php?order_id=" . $order['id'] . "'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";

                                print "</tr>";

                            }
                            ?>
                        </table>

                        <br>

                        <?php
                        // render the pagination links
                        $pagination->render();
                        ?>
                    </td>
                </tr>
            </table>
        </td>
    </tr>
</table>
</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit