403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/survey_demo/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/survey_demo/survey_form_post.php
<?php
	require_once('webadmin/basic_info.php');

	if (!isset($_SESSION["id"]) || (int)$_SESSION["id"] <= 0) {
		echo "<script type='text/javascript'>alert('Cannot find survey information.'); location.href=document.referrer; </script>";
		exit;
	}

	$id = (int)$_SESSION["id"];
	check_user_has_fill_form($id);
	$campaign = get_campaign($id);
	check_campaign_date($campaign);

	//loop question
	$message   = "";
	$questions = get_question($id);
	foreach ($questions as $question) {
		//form checking
		if (empty($_POST[$question["name"]])) {
			$question["label"] = str_replace("||", " / ", $question["label"]);
			$message .= "Please enter " . $question["label"] . ".\\n\\n";
		}
	}

	if (!empty($message)) {
		echo "<script type='text/javascript'>alert('" . $message . "'); location.href=history.back(); </script>";
		exit;
	}

	//record user info
	$ip       = $_SERVER['REMOTE_ADDR'];
	$browser  = $_SERVER['HTTP_USER_AGENT'];
	$referrer = $_SERVER['HTTP_REFERER'];

	$user_browser_info = array("ip" => $ip, "browser" => $browser, "referrer" => $referrer);

	//valid form
	foreach ($questions as $question) {

		//inset form data
		if ($question["type"] == "text" || $question["type"] == "radio-group") {
			$sql        = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)";
			$parameters = array(session_id(), $id, $question["name"], $question["type"], $_POST[$question["name"]], json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']);
			bind_pdo($sql, $parameters);
		} else if ($question["type"] == "checkbox-group") {
			foreach ($_POST[$question["name"]] as $answer) {
				$sql        = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)";
				$parameters = array(session_id(), $id, $question["name"], $question["type"], $answer, json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']);
				bind_pdo($sql, $parameters);
			}
		}else{
			$sql        = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)";
			$parameters = array(session_id(), $id, $question["name"], $question["type"], $_POST[$question["name"]], json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']);
			bind_pdo($sql, $parameters);
		}
	}

	header("Location: user_info.php");





Youez - 2016 - github.com/yon3zu
LinuXploit