403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/kelvin/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/kelvin/webadmin/product_cat_index.php
<?php
	include 'config.php';

	// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
	{
		header("Location: login.php");
		exit;
	}
	require("configure.php");
	$pid = $_GET['pid'];
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<title>Content Management System (CMS)</title>
	<link rel="stylesheet" type="text/css" href="css/style.css" />
	<!-- Main Menu -->
	<link rel="stylesheet" type="text/css" href="css/menu.css" />
	<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
	<script type="text/javascript" src="js/ddaccordion.js"></script>
	<script type="text/javascript" src="js/menuddaccordion.js"></script>
	<!-- End Main Menu -->
	<script type="text/javascript">
		function Deletepdcategory(pdcatid)
		{
			if (confirm("Are you sure you want to delete?"))
			{
				window.location.href = 'product_cat_delete.php?pdcatid='+pdcatid;
			}
		}
	</script>

</head>

<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
	<tr>
		<td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
				<tr>
					<td height="70" align="left" valign="middle">&nbsp;</td>
				</tr>
				<tr>
					<td width="200" align="left" valign="top"><!-- Main Menu --><?php require("menu.php");?><!-- End Main Menu --></td>
				</tr>
			</table></td>
		<td width="800" align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
				<tr>
					<td><table width="800" border="0" cellspacing="0" cellpadding="0">
							<tr>
								<td height="70" class="pagetitletxt">&nbsp;&nbsp;</td>
								<td width="100" align="center" class="icontxt"><a href="product_cat_addform.php?pid=0&lv=1"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0" /><br />&nbsp;Add Category&nbsp;</a></td>
							</tr>

						</table></td>
				</tr>
				<tr>
					<td class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" />Product Category </b></td>
				</tr>
				<tr>
					<td height="25" align="left" valign="middle" class="msg"><?php echo $_GET['msg']; ?></td>
				</tr>
				<!--
	  <tr>
        <td height="35" align="left" valign="middle" class="content"><?php
		//echo "<b><a href='product_cat_index.php?pid=0' />You are here: All Category</a>". getLevel($pid) ."</b>";
		?></td>
      </tr>-->
				<?php if (getLevelNum($pid) <= 1)  { ?>
					<tr>
						<td align="left" valign="middle"><form name="form1" method="post" action="product_cat_sort_update.php"><table width="800" border="0" cellpadding="0" cellspacing="0">
									<tr>
										<td width="10" class="listtitletxt"></td>
										<td width="90" class="listtitletxt">Sort</td>
										<td width="600" class="listtitletxt">Categories</td>
										<td width="20" class="listtitletxt"></td>
										<td width="20" class="listtitletxt"></td>
										<td width="20" class="listtitletxt"></td>
									</tr>
									<?php
										$result = mysql_query("SELECT * FROM product_cat where levelnum =1 ORDER BY pdcatsort ASC ");
										while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
										{

											print "<tr>";
											print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
											print "<td class='listtxt' valign='middle' align='left'><input class='sortinput' type='text' name='idarraynumber[]' value='".$row{'pdcatsort'}."' size='2' />
				<input type='hidden' name='idarray[]'  value='".$row{'pdcatid'}."'><input type='hidden' name='pdcatid' value='".$row{'pdcatid'}."'></td>";
											if ($row{'pdcattitleen'} <> '') {
												print "<td class='listtxt' style='padding-left:5'><a href='product_detail_index.php?pdcatid=".$row{'pdcatid'}."'>".$row{'pdcattitleen'}."</a><a style='margin-left: 30px;' href='product_cat_addform.php?pid=".$row{"pdcatid"}.'&lv='.getLevelNum($row{"pdcatid"})."'>[Add Sub-Category]</a></td>";

											} else if ($row{'pdcattitletc'} <> '') {
												print "<td class='listtxt' style='padding-left:5'><a href='product_detail_index.php?pdcatid=".$row{'pdcatid'}."'>".$row{'pdcattitletc'}."</a></td>";
												//} else if ($row{'pdcattitlesc'} <> '') {
												//	print "<td class='listtxt' style='padding-left:5'><a href='product_detail_index.php?pdcatid=".$row{'pdcatid'}.">".$row{'pdcattitlesc'}."</a></td>";
											}  else	{
												print "<td class='listtxt' style='padding-left:5'></td>";
											}


											//Status
											print "<td class='listtxt' align='center'>";
											if ($row{'pdcatstatus'} == '1') // Enable
											{
												print "<a href='product_cat_status.php?pdcatid=".$row{'pdcatid'}."'>";
												print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
											}
											else // Disable
											{
												print "<a href='product_cat_status.php?pdcatid=".$row{'pdcatid'}."'>";
												print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
											}
											print "</td>";

											// Modify
											print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='product_cat_modifyform.php?pdcatid=".$row{'pdcatid'}."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";

											//Delete
											print "<td class='listtxt' align='center'><a href='#' onClick=\"Deletepdcategory(".$row{'pdcatid'}.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";


											print "</tr>";

											//level 2 category
											$levelone = $row{"pdcatid"};
											$result2 = mysql_query("SELECT * FROM product_cat where parentid ='".$levelone."' ORDER BY pdcatsort ASC ");
											while ($row2 = mysql_fetch_array($result2,MYSQL_ASSOC))
											{
												print "<tr>";
												print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
												print "<td class='listtxt' valign='middle' align='left'><input class='sortinput' type='text' style='margin-left: 30px;' name='idarraynumber[]' value='".$row2{'pdcatsort'}."' size='2' />
				<input type='hidden' name='idarray[]'  value='".$row2{'pdcatid'}."'><input type='hidden' name='pdcatid' value='".$row2{'pdcatid'}."'></td>";
												if ($row2{'pdcattitleen'} <> '') {
													print "<td class='listtxt' style='padding-left:5'><a style='margin-left: 30px;' href='product_detail_index.php?pdcatid=".$row2{'pdcatid'}."'>".$row2{'pdcattitleen'}."</a><a style='margin-left: 30px;' href='product_cat_addform.php?pid=".$row2{"pdcatid"}.'&lv='.getLevelNum($row2{"pdcatid"})."'>[Add Sub-Category]</a></td>";
													//print "<td class='listtxt' style='padding-left:5'><a style='margin-left: 30px;' href='product_detail_index.php?pdcatid=".$row2{'pdcatid'}."'>".$row2{'pdcattitleen'}."</a></td>";
													//print "<td class='listtxt' style='padding-left:5'><a style='margin-left: 30px;' href='product_detail_index.php?pdcatid=".$row2{'pdcatid'}."'>".$row2{'pdcattitleen'}."</a> ---- Add Subcategory"."<a href='product_cat_addform.php?pid=".$row2{"pdcatid"}.'&lv='.getLevelNum($row2{"pdcatid"})."'>".$row2{'pdcattitleen'}."</a></td>";
												} else if ($row2{'pdcattitletc'} <> '') {
													print "<td class='listtxt' style='padding-left:5'><a style='margin-left: 30px;' href='product_detail_index.php?pdcatid=".$row2{'pdcatid'}."'>".$row2{'pdcattitletc'}."</a></td>";
													//} else if ($row{'pdcattitlesc'} <> '') {
													//	print "<td class='listtxt' style='padding-left:5'><a href='product_detail_index.php?pdcatid=".$row{'pdcatid'}.">".$row{'pdcattitlesc'}."</a></td>";
												}  else	{
													print "<td class='listtxt' style='padding-left:5'></td>";
												}


												//Status
												print "<td class='listtxt' align='center'>";
												if ($row2{'pdcatstatus'} == '1') // Enable
												{
													print "<a href='product_cat_status.php?pdcatid=".$row2{'pdcatid'}."'>";
													print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
												}
												else // Disable
												{
													print "<a href='product_cat_status.php?pdcatid=".$row2{'pdcatid'}."'>";
													print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
												}
												print "</td>";

												// Modify
												print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='product_cat_modifyform.php?pdcatid=".$row2{'pdcatid'}."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";

												//Delete
												print "<td class='listtxt' align='center'><a href='#' onClick=\"Deletepdcategory(".$row2{'pdcatid'}.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";

												print "</tr>";




												/*------------------------------------------*/
												//level 3 category
												$leveltwo = $row2{"pdcatid"};
												$result3 = mysql_query("SELECT * FROM product_cat where parentid ='".$leveltwo."' ORDER BY pdcatsort ASC ");
												while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC))
												{
													print "<tr>";
													print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
													print "<td class='listtxt' valign='middle' align='left'><input class='sortinput' style='margin-left: 60px;' type='text' name='idarraynumber[]' value='".$row3{'pdcatsort'}."' size='2' />
				<input type='hidden' name='idarray[]'  value='".$row3{'pdcatid'}."'><input type='hidden' name='pdcatid' value='".$row3{'pdcatid'}."'></td>";
													if ($row3{'pdcattitleen'} <> '') {
														print "<td class='listtxt' style='padding-left:5'><a style='margin-left: 60px;' href='product_detail_index.php?pdcatid=".$row3{'pdcatid'}."'>".$row3{'pdcattitleen'}."</a></td>";
													} else if ($row3{'pdcattitletc'} <> '') {
														print "<td class='listtxt' style='padding-left:5'><a style='margin-left: 60px;' href='product_detail_index.php?pdcatid=".$row3{'pdcatid'}."'>".$row3{'pdcattitletc'}."</a></td>";
														//} else if ($row{'pdcattitlesc'} <> '') {
														//	print "<td class='listtxt' style='padding-left:5'><a href='product_detail_index.php?pdcatid=".$row{'pdcatid'}.">".$row{'pdcattitlesc'}."</a></td>";
													}  else	{
														print "<td class='listtxt' style='padding-left:5'></td>";
													}


													//Status
													print "<td class='listtxt' align='center'>";
													if ($row3{'pdcatstatus'} == '1') // Enable
													{
														print "<a href='product_cat_status.php?pdcatid=".$row3{'pdcatid'}."'>";
														print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
													}
													else // Disable
													{
														print "<a href='product_cat_status.php?pdcatid=".$row3{'pdcatid'}."'>";
														print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
													}
													print "</td>";

													// Modify
													print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='product_cat_modifyform.php?pdcatid=".$row3{'pdcatid'}."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";

													//Delete
													print "<td class='listtxt' align='center'><a href='#' onClick=\"Deletepdcategory(".$row3{'pdcatid'}.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";

													print "</tr>";
												}
												//end of level 3
												/*------------------------------------------*/
											}
											//end of level 2
										}
										//end of level 1
										//mysql_close($dbh);
									?>
								</table><input type="submit" value="Update Sort"></form></td>
					</tr>
				<?php } ?>
			</table>
		</td></tr>
</table>
</body>
</html>
<?php
	// echo path
	function getLevel($p)
	{
		$sql1 = "select * from product_cat where pdcatid = ". $p ." ";
		$result1 = mysql_query($sql1);
		while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
		{
			if ($row1{parentid} <> 0)
			{
				$n =  $n . getLevel($row1{'parentid'}) ." > <a href='product_cat_index.php?pid=". $row1{'pdcatid'} ."'>". $row1{'pdcattitleen'} ."</a>";
			}
			else
			{
				$n = " > <a href='product_cat_index.php?pid=". $row1{'pdcatid'} ."'>". $row1{'pdcattitleen'} ."</a>";
			}
		}
		return $n;
	}

	function getLevelNum($p)
	{
		$i_lv =1;
		$sql1 = "select * from product_cat where pdcatid = ". $p ." ";
		$result1 = mysql_query($sql1);
		if( mysql_num_rows($result1) ==0){
			return $i_lv;
		}
		$i_lv++;
		while($row1 = mysql_fetch_array($result1,MYSQL_ASSOC)){
			if(strlen($row1["parentid"]) == 0 || $row1["parentid"] == 0 ){
				return $i_lv;
			}

			$sql1 = "select * from product_cat where pdcatid = ".$row1["parentid"] ." ";
			$result1 = mysql_query($sql1);
			$i_lv++;
		}
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit