403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/onegolf/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/onegolf/webadmin/ajax.php
<?php
	require_once('basic_info.php');

	global $dbh;

	if ($_GET["for"] == "update_scores") {
		if(!empty($_POST["id"]) && !empty($_POST["hole"])){
			$sql = "update scores set hole_".(int)$_POST["hole"]." = ? where id = ?";
			$parameters = array((int)$_POST["scores"], (int)$_POST["id"]);
			bind_pdo($sql, $parameters);

			echo 1;
		}
	}

	if ($_GET["for"] == "update_sort") {
		if(!empty($_POST["event_id"]) && !empty($_POST["player_id"]) && !empty($_POST["sort"])){
			$sql = "update event_player set sort = ? where event_id = ? and player_id = ?";
			$parameters = array((int)$_POST["sort"], (int)$_POST["event_id"], (int)$_POST["player_id"]);
			bind_pdo($sql, $parameters);

			echo 1;
		}
	}

Youez - 2016 - github.com/yon3zu
LinuXploit