403Webshell
Server IP : 103.48.194.25  /  Your IP : 216.73.217.33
Web Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux VMHostDefault 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
User : sieuthimay ( 1016)
PHP Version : 8.2.20
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/nhadatkhangdien.net-bk/public_html/admin/sources/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/nhadatkhangdien.net-bk/public_html/admin/sources/slider.php
<?php	if(!defined('_source')) die("Error");
	
	$act = (isset($_REQUEST['act'])) ? addslashes($_REQUEST['act']) : "";
	switch($act){
		case "man_photo":
			get_photos();
			$template = "slider/photos";
			break;
		case "add_photo":		
			$template = "slider/photo_add";
			break;
		case "edit_photo":
			get_photo();
			$template = "slider/photo_edit";
			break;
		case "save_photo":
			save_photo();
			break;
		case "delete_photo":
			delete_photo();
			break;			
		default:
			$template = "index";
	}

function fns_Rand_digit($min,$max,$num)
{
	$result='';
	for($i=0;$i<$num;$i++){
		$result.=rand($min,$max);
	}
	return $result;	
}

function get_photos(){
	global $d, $items, $paging;
	
	
	if(@$_REQUEST['hienthi']!='')
	{
		$id_up = @$_REQUEST['hienthi'];
		$sql_sp = "SELECT id,hienthi FROM table_slider where id='".$id_up."' ";
		$d->query($sql_sp);
		$cats= $d->result_array();
		$hienthi=$cats[0]['hienthi'];
		//echo "id:". $spdc1;
		if($hienthi==0)
		{
			$sqlUPDATE_ORDER = "UPDATE table_slider SET hienthi =1 WHERE  id = ".$id_up."";
			$resultUPDATE_ORDER = mysql_query($sqlUPDATE_ORDER) or die("Not query sqlUPDATE_ORDER");
		}
		else
		{
			$sqlUPDATE_ORDER = "UPDATE table_slider SET hienthi =0  WHERE  id = ".$id_up."";
			$resultUPDATE_ORDER = mysql_query($sqlUPDATE_ORDER) or die("Not query sqlUPDATE_ORDER");
		}	
	}

	$d->setTable('slider');
	$d->setOrder('stt,id desc');
	$d->select('*');
	$d->query();
	$items = $d->result_array(); 
	
	$curPage = isset($_GET['curPage']) ? $_GET['curPage'] : 1;
	$url="index.php?com=slider&act=man_photo";
	$maxR=10;
	$maxP=4;
	$paging=paging($items, $url, $curPage, $maxR, $maxP); 
	//$items=$paging['source'];
}

function get_photo(){
	global $d, $item, $list_cat;
	$id = isset($_GET['id']) ? themdau($_GET['id']) : "";
	if(!$id)
	transfer("Không nhận được dữ liệu", "index.php?com=slider&act=man_photo");
	$d->setTable('slider');
	$d->setWhere('id', $id);
	$d->select();
	if($d->num_rows()==0) transfer("Dữ liệu không có thực", "index.php?com=slider&act=man_photo");
	$item = $d->fetch_array();	
}

function save_photo()
{
	global $d;
	
	
	$data['ten'] 	= isset($_POST['ten'])? $_POST['ten'] : 0;
	$data['mota'] 	= isset($_POST['mota'])? $_POST['mota'] : 0;	
	$data['link'] 	= isset($_POST['link'])? $_POST['link'] : 0;
	$data['stt'] 	= isset($_POST['stt'])? $_POST['stt'] : 0;
	$data['hienthi'] = isset($_POST['hienthi']) ? 1 : 0;
		
	//upload hinh ảnh	
	$file_name = alias(substr($data['ten'],0,15)); 
	if(isset($_FILES['file']['name']) && $_FILES['file']['name']!='')
	{
		$photo = upload_image("file", _upload_hinhanh , $file_name) ;
		$data['photo'] = $photo;		
	}
		
	if(empty($_POST)) transfer("Không nhận được dữ liệu", "index.php?com=slider&act=man_photo");
	
	$id = isset($_POST['id']) ? $_POST['id'] : "";
	if($id)
	{
		//xoa ảnh củ
		/*if($photo = upload_image("file", 'Jpg|jpg|png|gif|JPG|jpeg|JPEG', _upload_hinhanh,$file_name)){
			$data['photo'] = $photo;
			$d->setTable('slider');
			$d->setWhere('id', $id);
			$d->select();
			if($d->num_rows()>0)
			{
				$row = $d->fetch_array();
				delete_file(_upload_hinhanh.$row['photo']);
			}
		}*/
					
		$d->reset();
		$d->setTable('slider');
		$d->setWhere('id', $id);
		if(!$d->update($data)) transfer("Cập nhật dữ liệu bị lỗi", "index.php?com=slider&act=man_photo");
		redirect("index.php?com=slider&act=man_photo");
	} 
	else 
	{
		//$photo = upload_image("file", 'Jpg|jpg|png|gif|JPG|jpeg|JPEG', _upload_hinhanh,$file_name);
											
		$d->setTable('slider');
		if(!$d->insert($data)) transfer("Lưu dữ liệu bị lỗi", "index.php?com=slider&act=man_photo");
				
		redirect("index.php?com=slider&act=man_photo");
	}
}

function delete_photo(){
	global $d;
	if(isset($_GET['id'])){
		$id =  themdau($_GET['id']);
		$d->setTable('slider');
		$d->setWhere('id', $id);
		$d->select();
		if($d->num_rows()==0) transfer("Dữ liệu không có thực", "index.php?com=slider&act=man_photo");
		$row = $d->fetch_array();
		delete_file(_upload_hinhanh.$row['photo']);
		if($d->delete())
			redirect("index.php?com=slider&act=man_photo");
		else
			transfer("Xóa dữ liệu bị lỗi", "index.php?com=slider&act=man_photo");
	}elseif (isset($_GET['listid'])==true){
		$listid = explode(",",$_GET['listid']); 
		for ($i=0 ; $i<count($listid) ; $i++){
			$idTin=$listid[$i]; 
			$id =  themdau($idTin);		
			$d->reset();
		$sql = "select * from #_slider where id='".$id."'";
		$d->query($sql);
		if($d->num_rows()>0){
			while($row = $d->fetch_array()){
				delete_file(_upload_hinhanh.$row['photo']);
			}
			$sql = "delete from #_slider where id='".$id."'";
			$d->query($sql);
		}
			
		} redirect("index.php?com=slider&act=man_photo");} else transfer("Không nhận được dữ liệu", "index.php?com=slider&act=man_photo");
}

#====================================
function get_list_cat($id=0){
	global $d, $list_cat;
	
	$sql = "select * from #_tours order by id desc";
	$d->query($sql);
	$cats = $d->result_array();
	
	$list_cat = '<select name="id_item" class="input">';
	for($i=0, $count=count($cats); $i<$count; $i++)
		$list_cat .= '<option value="'.$cats[$i]['id'].'" '.(($cats[$i]['id']==$id)?'selected="selected"':'').'>'.$cats[$i]['tieude'].'</option>';
	$list_cat .= '</select>';
}


?>

	

Youez - 2016 - github.com/yon3zu
LinuXploit