403Webshell
Server IP : 119.59.102.212  /  Your IP : 3.133.157.170
Web Server : Apache/2
System : Linux narin 2.6.32-042stab142.1 #1 SMP Tue Jan 28 23:44:17 MSK 2020 x86_64
User : yangkam ( 1022)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/yangkam/domains/yangkam.go.th/public_html/coremain/module/gallery/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yangkam/domains/yangkam.go.th/public_html/coremain/module/gallery/gallery_output.php
<?php
// Status Package Module
$status_module=select_query("status_module","cms_status_module","id","18");
if($status_module[0]!=1)	{	
	fieldset_no_module();
}
// Pession
if(id_top_permission("b")!=1){	
	permission_fail();			
}

if ($_SESSION['dbname'] != "nversion_62") {
  $navig['gallery'] = "ภาพกิจกรรม";
  $navig['gallery_add'] = "เพิ่มภาพกิจกรรม";
  navigator($navig);
  echo "<br>";
  bar_header("เพิ่มภาพกิจกรรม");
  fieldset_top("ภาพกิจกรรม");
} else {
  $navig['gallery'] = "ผลงานที่ผ่านมา";
  navigator($navig);
  echo "<br>";
  bar_header("เพิ่มผลงานที่ผ่านมา");
  fieldset_top("ผลงานที่ผ่านมา");
}
//include_once("coremain/module/gallery/class.upload.php");
import_request_variables('pG', 'p_');
if($p_fulltexts!="")								{		$fulltexts=trim($p_fulltexts);					}
if($p_en_fulltexts!="")								{		$en_fulltexts=trim($p_en_fulltexts);					}
if($p_add_topic!="")							{		$add_topic=trim($p_add_topic);			}
if($p_block!="")									{		$block=trim($p_block);	 							}
if($p_id_topic!="")								{		$id_topic=trim($p_id_topic);					}
if($p_upload_pic_ok!="")					{		$upload_pic_ok=trim($p_upload_pic_ok);	}
if($p_upload_pic!="")						{		$upload_pic=trim($p_upload_pic);					}
if($p_explain!="")								{	     $explain=trim($p_explain);								}
if($p_en_explain!="")								{	     $en_explain=trim($p_en_explain);								}
if($p_check_upload!="")					{	     $check_upload=trim($p_check_upload);		}

if ($add_topic == "1") {
//*******เพิ่มข้อมูลลงในฐาน*************************************************
// หาค่า id สูงสุด + 1
  $sqlmax1 = "select max(id_topic+1) from port_gallery_topic";
  $resultmax1 = mysql_query($sqlmax1);
  $datamax1 = mysql_fetch_row($resultmax1);
  if ($datamax1[0] == "") {
    $datamax1[0] = "1";
  }
  $port_id = $_SESSION[port][id];
  $sql = "INSERT INTO port_gallery_topic(id_topic,port_id,fulltexts,en_fulltexts,block,status) values('$datamax1[0]','$port_id','$fulltexts','$en_fulltexts','$block','1')";
  $result = mysql_query($sql) or die(mysql_error());
  echo "<center><br><br>ชื่อกิจกรรมได้ถูกบันทึกแล้ว<br><br>ขั้นตอนต่อไปให้เลือกรูปที่จะ Upload </center>";
  echo "<meta http-equiv='refresh' content='2; url=index.php?mod=gallery_output&path=gallery&id_topic=$datamax1[0]'>";
}

if ($id_topic != "" && $check_upload == "") {
  $sql="SELECT * FROM `port_gallery_topic`  WHERE  id_topic='$id_topic'"; 
  $result=mysql_query($sql);
  $data = mysql_fetch_array($result);
?>
<!--<form  action='index.php?mod=gallery_output&path=gallery&id_topic=$id_topic' method='post' enctype='multipart/form-data' name='add' id='add' onSubmit='return checkadd()'>-->
<form id="fm_gallery" name="fm_gallery">
  <table width='98%' border='0' align='center' cellpadding='1' cellspacing='1'>
    <tr>
      <td colspan='2' align=center>
        <b><?= $data['fulltexts'] ?></b><br><br>
        
        <!--<input type="hidden" name="check_upload" value="1" />-->
        <input type="hidden" name="id_topic" value="<?= $id_topic ?>" />
      </td>
    </tr>
    <?php
      $option = array(
          'title' => 'Upload รูป',
          'description' => 'เลือกภาพกิจกรรม',
          'file_type' => 'image',
          'prefix' => 'pic',
          'extraHTML' => array(
              0 => array('type' => 'input', 'text' => 'คำอธิบายรูป', 'name' => 'explain', 'style' => 'width: 100%;')
            )
      );
      file_upload('userfile', 'gallery', 'fm_gallery', 'coremain/module/gallery/gallery_update_output.php', $option);
      
      button_text('Upload รูป', 'submit', 2, 'userfile', 'กรุณาเลือกรูปที่จะอัพโหลด !');
    ?>
  </table>
</form>
<?php
}
fieldset_down();
?>
<script language="javascript">
function checkadd() {
if(document.add.userfile1.value=="") {
alert("กรุณาเลือกรูปที่จะอัพโหลด") ;
document.add.userfile1.focus() ;
return false ;}
else 
return true ;
}
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit