403Webshell
Server IP : 119.59.102.212  /  Your IP : 3.22.217.190
Web Server : Apache/2
System : Linux narin 2.6.32-042stab142.1 #1 SMP Tue Jan 28 23:44:17 MSK 2020 x86_64
User : yangkam ( 1022)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/yangkam/domains/yangkam.go.th/public_html/coremain/module/calendar/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yangkam/domains/yangkam.go.th/public_html/coremain/module/calendar/showevent.php
<?php
session_start();
//include ("../../function_sql_query.php");
//include ("../../function_form.php");
include ("../../function_import_request.php");
echo"<meta http-equiv='Content-Type' content='text/html; charset=utf-8'>";
echo"<link href='coremain/ccs/style.css' rel='stylesheet' type='text/css'>";
import_request_variables('pG', 'p_');
//#5.3#//if($p_dbname!="")													{	     $dbname=trim($p_dbname);							}
$dbname = isset($p_dbname) ? $p_dbname : '';
$_SESSION['dbname'] = isset($_SESSION['dbname']) ? trim($_SESSION['dbname']) : $dbname;
//#5.3#//if($p_member_c!="")                                 {	    $member_c=trim($p_member_c);			}
$member_c = isset($p_member_c) ? $p_member_c : '';
//#5.3#//if($member_c!="")									{		$_SESSION[member]=$member_c;			}
$_SESSION['member'] = isset($_SESSION['member']) ? $_SESSION['member'] : $member_c;
//#5.3#//if($p_per!="")										{	     $per=trim($p_per);						}
$per = isset($p_per) ? $p_per : '';
//#5.3#//if($_SESSION['per']=="") 							{		$_SESSION['per']=$per;					}
$_SESSION['per'] = isset($_SESSION['per']) ? trim($_SESSION['per']) : $per;

if($p_date!="")										{	     $date=trim($p_date);                   }
if($p_month!="")									{	     $month=trim($p_month);                 }
if($p_year!="")										{	     $year=trim($p_year);                   }

include("../../../$_SESSION[web_name]/connect.php");
include("../../function_button.php");

$months1="0".$month;
$month=substr($months1,-2);
$query_Recordset = "SELECT * FROM cms_calendar WHERE date = '$date-$month-$year' ORDER BY id DESC";
$Recordset = mysql_query($query_Recordset);
$row_Recordset = mysql_fetch_assoc($Recordset);
$totalRows_Recordset = mysql_num_rows($Recordset);
//********************************* ทำการเช็คว่าปัจจุบัน ฐานข้อมูลใช้หน้ากากอะไร************************************************************
/*$sqltm="select * from main_themes where status=1";
$resulttm=mysql_query($sqltm);
$datatm=mysql_fetch_array($resulttm);
*/
?>
<table width='98%' border='0' cellspacing='0' align='center' height='20'>
  <tr>
    <td valign='top'>
      <table width='100%' border='0' cellspacing='1' align='center' cellpadding='0'>
        <tr> 
          <td bgcolor="#ffffff" height="292" valign="top">
          <!-- ส่วนหัว -->
          <table width='100%' border='0' align='center' cellpadding='1' cellspacing='1'>
            <tr>
              <td width='100%' height='18'>
              <?php if($_SESSION['admin_web']=="admin" || $_SESSION['per']=="1"){ ?>
                <center><img src='coremain/images/add.gif'><a href="javascript:void(0);" class="num_addevent" id="<?php echo $year.'-'.$month.'-'.$date ?>">เพิ่มข้อมูล</a></center>
              <?php } ?>
              </td>
            </tr>
          </table>
          
        <?php if($totalRows_Recordset == 0){ ?>
          <table width='100%' border='0' align='center' cellpadding='1' cellspacing='1' bgcolor='FFFFFF'>
            <tr>
              <td width='100%' height='80'><center><B>ยังไม่มีปฏิทินกิจกรรม</B></center></td>
            </tr>
          </table>
        <?php }else{
          do{ ?>
          <table width='100%' border='0' align='center' cellpadding='1' cellspacing='1'>
            <tr>
              <td width='80%'>&nbsp;<img src='coremain/images/arr3.jpg'> <?php echo $row_Recordset['event']; ?></td>
              <td>
            <?php if($row_Recordset['file'] != ""){ ?>
              &nbsp;<a href="#WIN" onClick="window.open('../../../<?php echo $_SESSION['web_name']?>/module_calendar/<? echo $row_Recordset[file];?>','blah2','width=779,height=685,resizable=yes	,status=yes,scrollbar=yes')">เอกสาร</a>
            <?php }else{ echo "..........."; }

            if($_SESSION['admin_web']=="admin" || $_SESSION['per']=="1"){ ?>
              &nbsp;<a href="javascript:void(0);" class="num_addevent" id="<?php echo $year.'-'.$month.'-'.$date.'#@#'.$row_Recordset['id'] ?>"><img src="coremain/images/edit.gif" border="0" alt="แก้ไข" /></a>
              <!--&nbsp;<a href='update.php?id=<?php //echo $row_Recordset['id'] ?>&date=<?php //echo $date ?>&month=<?php //echo $month ?>&year=<?php //echo $year ?>&dbnames=<?php //echo $dbnames ?>'><img src='coremain/images/edit.gif' border='0' alt='แก้ไข'></a>-->
              &nbsp;<a href='delete.php?id_dels=<?php echo $row_Recordset['id'] ?>&date=<?php echo $date ?>&month=<?php echo $month ?>&year=<?php echo $year ?>' onclick='return goURL();'><img src='coremain/images/del1.gif' border='0'  alt='ลบ'></a>
            <?php } ?>
              </td>
            </tr>
          </table>
      <?php
          } while ($row_Recordset = mysql_fetch_assoc($Recordset));
          mysql_free_result($Recordset);
        }
      ?>
            <br><br>
            <!--<center><input type='submit' name='Submit2' value='ปิดหน้านี้' onmouseover="this.style.cursor='hand'" onclick='window.close()'></center>-->
          </td>
        </tr>
      </table>
	</td>
  </tr>
</table>

<script language="JavaScript">
  
  function goURL() {
    var blnLink;
    blnLink = confirm("Click OK เพื่อยืนยันการลบข้อมูล?")

    if (!blnLink) { return false; }

    return true;
  }
  
  $('.num_addevent').click(function(){
    var id = $(this).attr('id').split('#@#');
    var arr = id[0].split('-');
    var arrData = [
      { name: 'date', value: arr[2] },
      { name: 'month', value: arr[1] },
      { name: 'year', value: arr[0] }
    ];
    var url = 'coremain/module/calendar/add_event.php';
    var title = 'เพิ่มปฏิทินงาน';
    if(id[1] !== undefined){
      arrData.push({ name: 'id', value: id[1] });
      url = 'coremain/module/calendar/update.php';
      title = 'แก้ไขปฏิทินงาน';
    }
    var dialog = 'dialog-popup';
    var popup = $('#'+dialog);
    showDialog(dialog);
    popup.dialog('option', 'title', title);
    
    $.ajax({
      type: 'post',
      url: url,
      data: arrData,
      success: function(result){
        popup.html(result);
      }
    });
  });
  
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit