403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-dev/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-dev/public_html/mod/route_drivers_ajax.php
<?php
	//ini_set('display_errors',1);
	//error_reporting(E_ALL & ~E_NOTICE);
?>
<?php include('_mod_security.php'); ?>
<?php
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Driver Name', 'dbcol' => 'su.user_name', 'width' => '100px'));
			$dbg->add_column(array('label' => 'Full Name', 'dbcol' => 'su.full_name', 'width' => '250px'));
			$dbg->add_column(array('label' => 'Email', 'dbcol' => 'su.email', 'width' => '200px'));
			$dbg->add_column(array('label' => 'Assigned', 'sortable' => false, 'searchable' => false, 'width' => '75px', 'align' => 'center'));
			$dbg->end_header();
			$dbg->end_header_section();
			$sql = "SELECT DISTINCT su.user_id, su.user_name, su.full_name, su.email, rd.route_driver_id FROM sys_users su LEFT OUTER JOIN routes_drivers rd ON (su.user_id = rd.driver_id ".$_GET['parm1'].") ".
					"WHERE ".$dbg->search_spec()." AND su.active = 1 AND su.roles LIKE '%driver%' ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row();
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&region_id='.$region_id.'&id='.$row->user_id.'" >'.$row->user_name.'</a>');
					$dbg->add_cell($row->full_name);
					$dbg->add_cell($row->email);
					$checked = '';
					//if (in_array($row->zip, $ar_zip_codes)) :
					if (!empty($row->route_driver_id)) :
						$checked = ' checked="checked" ';
					endif;
					$dbg->add_cell('<input type="checkbox" class="route_driver_cell" name="drivers[]" id="driver_'.$row->user_id.'" value="'.$row->user_id.'" '.$checked.' onchange="update_driver(\''.$row->user_id.'\')"  />');
					$dbg->end_row();
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded));
			//echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql));
			return;
			break;
		case 'add' :
			$sql = "INSERT INTO routes_drivers SET ".
				"route_id = ".nz($_GET['route'], '0').", ".
				"driver_id = ".nz($_GET['driver_id'], '0').", ".
				"create_date = '".date('Y-m-d H:i:s')."', ".
				"create_by = ".nz($_SESSION['user_id'], '0').", ".
				"update_by = ".nz(trim($_SESSION['user_id'])).", ".
				"update_date = '".date('Y-m-d H:i:s')."' ";
			if ($db->query($sql)) :
				$result_msg = 'Success';
			else :
				$result_msg = 'Database Error!';
			endif;
			echo json_encode(array('result' => $result_msg));
			return;
			break;
		case 'remove' :
			$sql = "DELETE FROM routes_drivers WHERE route_id = ".nz($_GET['route'], '0')." AND driver_id = ".nz($_GET['driver_id'],'0')." ";
			if ($db->query($sql)) :
				$result_msg = 'Success';
			else :
				$result_msg = 'Database Error!';
			endif;
			echo json_encode(array('result' => $result_msg));
			return;
			break;
	endswitch;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit