AnonSec Shell
Server IP : 172.67.216.113  /  Your IP : 104.23.243.32   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/ilawasia.onnud20.com/class_old/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/ilawasia.onnud20.com/class_old/actionClass.php
<?php
require('connectClass.php');
class actiondata extends Connect{
    public function add($param){//$param = ตัวแปร array
        $con=$this->setconnect();

        $varibles=array_keys($param);
        foreach ($varibles as $field){
            $addfield=$field." ";
            $setfield=$setfield.$addfield;

            $addvalue=$this->getdata($param[$field])."||||";
            if($addvalue==""){
                $addvalue='""';
            }
            $setvalue=$setvalue.$addvalue;
        }
        $table=$param['table'];

        $fieldset=$this->cutcomma($setfield);
        $setfield=$fieldset;

        $valueset=$this->cutcomma2($setvalue);
        $setvalue=$valueset;


        $sql="INSERT INTO $table ($setfield) VALUES ($setvalue)";
        $result=mysqli_query($con,$sql);
        //$id = mysqli_insert_id();
        if($result){
            $data['suc']=1;//สำเร็จ
        }else{
            $data['suc']=2;	//ไม่สำเร็จ
        }
        $data['id']=$id;
        $data['sql']=$sql;
        return $data;
    }
    public function add_db($param){//$param = ตัวแปร array
        $con=$this->setconnect();
        $txtfield = "";
        $txtvalue = "";
        $varibles=array_keys($param);
        foreach ($varibles as $field)
        {
            $addfield = $field."[-]";
            if($param[$field] == '')
            {
                $param[$field] = '" "';
            }
            $value = $param[$field]."[-]";
            $txtfield = $txtfield . $addfield;
            $txtvalue = $txtvalue . $value;

        }
        $field_c = $this->cutcomma_space_title($txtfield);
        $field_c_v = $this->cutcomma_space_footer($txtvalue);
        $table = $param['table'];


        $sql="INSERT INTO $table ($field_c) VALUES ($field_c_v);";
        $result = mysqli_query($con,$sql);
        if($result){
            $data['suc']=1;//สำเร็จ
        }else{
            $data['suc']=2;	//ไม่สำเร็จ
        }
        $data['sql']=$sql;
        return $data;
    }

    private function cutcomma($data){
        //var_dump($data);
        $cutmomma=explode(" ",$data);
        $valuenum=count($cutmomma);
        $i=0;
        foreach($cutmomma as $sub){
            if($i !=0 && $cutmomma[$i]!=''){
                if($i==($valuenum-2)){
                    $value=$value.$cutmomma[$i];
                }else{
                    $value=$value.$cutmomma[$i].",";
                }
            }

            $i++;
        }
        return $value;
    }
    private function cutcomma2($data){
        //var_dump($data);
        $cutmomma=explode("||||",$data);
        $valuenum=count($cutmomma);
        echo "valuenum".$valuenum;
        $i=0;
        foreach($cutmomma as $sub){
            if($i !=0 && $i <= $valuenum-2){

                if($i==($valuenum-2)){
                    $value=$value."'".$cutmomma[$i]."'";
                }else{
                    $value=$value."'".$cutmomma[$i]."',";
                }
            }
            $i++;
        }

        return $value;
    }
    private function cutcomma_space($data)
    {
        $cutmomma = explode("[-]",$data);
        $valuenum = count($cutmomma);
        $i=0;
        foreach($cutmomma as $sub){
            if($i !=0 && $cutmomma[$i]!=''){
                if($i == ($valuenum-2)){
                    $value=$value.$cutmomma[$i].",";
                }else{
                    $value=$value.$cutmomma[$i].",";
                }
            }
            $i++;
        }
        return $value;

    }
    private function cutcomma_space_title($data)
    {
        $cutmomma = explode("[-]",$data);
        $valuenum = count($cutmomma);
        $i=0;
        foreach($cutmomma as $sub){
            if($i !=0 && $cutmomma[$i]!=''){
                if($i == ($valuenum-2)){
                    $value="`".$value.$cutmomma[$i]."`";
                }else{
                    $value=$value.$cutmomma[$i]."`,`";
                }
            }
            $i++;
        }
        return $value;

    }
    private function cutcomma_space_footer($data)
    {
      $cutmomma = explode("[-]",$data);
      $valuenum = count($cutmomma);
      $i=0;
      foreach($cutmomma as $sub){
          if($i !=0 && $cutmomma[$i]!=''){
              if($i == ($valuenum-2)){
                  $value=$value.$cutmomma[$i];
              }else{
                  $value=$value.$cutmomma[$i].",";
              }
          }
          $i++;
      }
      return $value;

    }

    public function edit($param){
        $con=$this->setconnect();
        $varibles = array_keys($param);
        $i = 0;
        $table = $param['table'];
        $id = $param['id'];

        foreach ($varibles as $field)
        {
            if($i >1)
            {
                $sql="UPDATE $table SET $field = '".$param[$varibles[$i]]."' WHERE id = $id";

                $result = mysqli_query($con,$sql);
                if($result){
                    $data['suc'][] = 1;
                }else{
                    $data['suc'][] = 0;
                }
            }
            $i++;

        }
        //$data['sql']=$sql;
        return $data;
    }

    public function edit_db($param){//$param = ตัวแปร array
        $con=$this->setconnect();

        $varibles=array_keys($param);
        $table = $param['table'];
        $txt = "";
        $txt_sql = "";
        $i = 0;

        foreach ($varibles as $field)
        {
            if($i == 1)
            {
                $txt_where = "`".$field. "` = '" . $param[$field] . "' ";
            }
            if($i > 1)
            {
                if($i == 2)
                {
                    $txt = "`". $field . "` = '" . $param[$field] . "' ";
                }
                else
                {
                    $txt = ",`". $field .  "` = '" . $param[$field] . "' ";
                }

                $txt_sql = $txt_sql . $txt;

            }
            $i++;
        }

        $sql = "UPDATE  `".$table."` SET  ".$txt_sql." WHERE  ".$txt_where;
        $result = mysqli_query($con,$sql);
        if($result)
        {
            $data['suc'] = 1;
        }
        else
        {
            $data['suc'] = 0;
        }
        $data['sql'] = $sql;


        return $data;
    }

    public function edit_db2($param){//$param = ตัวแปร array
        $con=$this->setconnect();

        $varibles=array_keys($param);
        $table = $param['table'];
        $txt = "";
        $txt_sql = "";
        $i = 0;

        foreach ($varibles as $field)
        {
            if($i == 1)
            {
                $txt_where = "`".$field. "` = " . $param[$field] . " ";
            }
            if($i > 1)
            {
                if($i == 2)
                {
                    $txt = "`". $field . "` = " . $param[$field] . " ";
                }
                else
                {
                    $txt = ",`". $field .  "` = " . $param[$field] . " ";
                }

                $txt_sql = $txt_sql . $txt;

            }
            $i++;
        }

        $sql = "UPDATE  `".$table."` SET  ".$txt_sql." WHERE  ".$txt_where;
        $result = mysqli_query($con,$sql);
        if($result)
        {
            $data['suc'] = 1;
        }
        else
        {
            $data['suc'] = 0;
        }
        $data['sql'] = $sql;


        return $data;
    }


    public function delete($param){//$param = ตัวแปร array
        $con=$this->setconnect();

        $table = $param['table'];
        $wherekey = array_keys($param);
        $numparam = count($param);
        $i = 0;
        foreach($wherekey as $key){
            if($key != 'table'){
                $keyfield[] = $key;
                $keyvalue[] = $param[$key];
                }
            $i++;
        }

        $numwhere=count($keyfield);

        for($key=0; $key<$numwhere;$key++){
            if($key==($numwhere-1)){
            $comparition=$keyfield[$key]."= '".$keyvalue[$key]."'";
            }else{
            $comparition=$keyfield[$key]."= '".$keyvalue[$key]."'  and ";
            }
            $where=$where.$comparition;
        }

        $sql="DELETE FROM ".$table." WHERE ".$where;
        $result=mysqli_query($con,$sql);
        if($result){
            $data['suc'] = 1;//สำเร็จ
        }else{
            $data['suc'] = 2;//ไม่สำเร็จ
        }
        $data['sql'] = $sql;
        return $data;
    }
    public function view($param){//$param = ตัวแปร array

        $con=$this->setconnect();

        if($param['id'] != "")
        {
            $sql="select * from ".$param['table']." where id='".$param['id']."'";
        }else{
//-----------------------------------ตรวจสอบข้อมูลเกี่ยวกับการแบ่งหน้า----------------------------------------------------------
            if($param['srclimit']=="" or $param['srclimit']==0)
            {
                $srclimit=10;
                }else{
                $srclimit=$param['srclimit'];
            }

            if($param['page'] == "" or $param['page']==0){
                $page=1;
                $min=0;
                $max=$srclimit;
            }else if($param['page'] !="" or $param['page'] !=0){
                $page=$param['page'] ;
                $min=($srclimit * $page)- $srclimit;
                $max=$srclimit;
            }
//----------------------------------//ตรวจสอบข้อมูลเกี่ยวกับการแบ่งหน้า----------------------------------------------------------
//----------------------------------ตรวจสอบว่ามีการใส่คำค้นมาหรือไม่-------------------------------------------------------------
			 if($param['srcword']==""){//ไม่มีการส่งคำค้นมา
					$sql="select * from $param[table]";
				if($param['status']==""){
					if($param['sortby']!=""){
						$sql.=" order by $param[sortby] $param[typeofsort]";
					}
				}else{
					$sql.=" where status=$param[status]";
						if($sortby!=""){
							$sql.=" order by $param[sortby] $param[typeofsort]";
						}
				}

			}else if($param['srcword'] !=""){//มีการส่งคำค้นมา

                //ตัวสอบตัวดำเนินการที่ส่งค่ามา
                if($param['sign'] ==""){
                    $addsign="=";
                    $conparitoin1="";
                    $conparitoin2="";
                }else if($param['sign']=="="){
                    $addsign="=";
                    $conparitoin1="";
                    $conparitoin2="";
                }else if($param['sign']=="-%"){
                    $addsign="LIKE ";
                    $conparitoin1="";
                    $conparitoin2="%";
                }else if($param['sign']=="%%"){
                    $addsign="LIKE ";
                    $conparitoin1="%";
                    $conparitoin2="%";
                }else if($param['sign']=="%-"){
                    $addsign="LIKE ";
                    $conparitoin1="%";
                    $conparitoin2="";
                }
					$sql="select * from $param[table] where $param[srcfield] $addsign'".$conparitoin1.$param['srcword'].$conparitoin2."'";
				 if($param['status']==""){
                    if($param['sortby']!=""){
                        $sql.=" order by ".$param['sortby']." ".$param['typeofsort'];
                    }
				}else{
					$sql.=" and status='$param[status]'";
                    if($param['sortby']!=""){
                        $sql.=" order by ".$param['sortby']." ".$param['typeofsort'];
                    }
				}
			}
//----------------------------------//ตรวจสอบว่ามีการใส่คำค้นมาหรือไม่----------------------------------------------------

			if($param['createpage']=='yes'){//ตรวจสอบว่าต้องการแบ่งหน้าหรือไม่
				$sql.=" LIMIT $min , $max";
			}
		}
        $result=mysqli_query($con,$sql);
        $num=mysqli_num_rows($result);
		//--------------------------------------------หาข้อมูลหน้าทั้งหมดตามเงื่อนไข โดยไม่มีการแบ่งหน้า------------------------------------------------------
		if($param['srcword'] !=""){//มีการส่งคำค้นมา
			$sql2="select * from ".$param['table']." where $param[srcfield] $addsign'".$conparitoin1.$param['srcword'].$conparitoin2."'"  ;
			if($param['status']=="1"){
				$sql2.=" and status='".$param['status']."'";
			}
		}else{
			$sql2="select * from ".$param['table'];
			if($param['status']=="1"){
				$sql2.=" where status='".$param['status']."'";
			}
		}
//---------------------------------------------------------------------------------------------------------------------------------------

		$result2=mysqli_query($con,$sql2);
		$num1=mysqli_num_rows($result2);
			//var_dump($sql2);

		//----------------------หาหน้าทั้งหมด-------------------------------
		@$totalpage=ceil($num1/$srclimit);
		$i=0;
		while($datasql=mysqli_fetch_array($result)){

		//---------------------------ค้นหาชื่อฟิล์ดจาก table เพื่อทำการ return ข้อมูล---------------------------------------
            $numfield=mysqli_num_fields($result);
            $b=0;
            while ($b < mysqli_num_fields($result)) {
                $meta = mysqli_fetch_field($result, $b);

                $data[$b]['fieldname']=$meta->name;
                $data[$i][$data[$b]['fieldname']]=$datasql[$data[$b]['fieldname']];
                $b++;
            }
		//-------------------------------------ปิดหาชื่อฟีล์ด---------------------------------------------------------------

			$i++;
		}
        $data['totalpage']=$totalpage;
        $data['page']=$page;
        $data['srcfield']=$param['srcfield'];
        $data['srcword']=$param['srcword'];
        $data['sign']=$param['sign'];
        $data['sql']=$sql;
        $data['num']=$num;
        $data['num1']=$num1;
        $data['min']=$min;
        $data['srclimit']=$srclimit;
        $data['typeofsort']=$typeofsort;


        // var_dump($data);
            //exit;
        return $data;
	}
    public function findAfield($table,$primarykey,$viewfield){  //('ชือtable',privarykey,ฟีลด์ที่ต้องการดู)
        $con=$this->setconnect();
        $sql="select ".$viewfield." from ".$table." where id=".$primarykey."";
        $re=@mysqli_query($con,$sql);
        $da=@mysqli_fetch_array($re);
        $viewfield=$da[$viewfield];
        if($viewfield==""){
            //echo "ค่าตัวแปรไม่ถูกต้อง";
            $data="ค่าตัวแปรไม่ถูกต้อง";
        }else{
            //echo 	$viewfield;
            $data=$viewfield;
        }
        return $data;
    }

    public function q_one($table,$primarykey,$viewfield){  //('ชือtable',คำค้น,ฟีลด์ที่ต้องการดู)
        $con=$this->setconnect();
        $sql="select ".$viewfield." from ".$table." where ".$primarykey."";
        $re=@mysqli_query($con,$sql);
        $da=@mysqli_fetch_array($re);
        $viewfield=$da[$viewfield];
        if($viewfield==""){
            //echo "ค่าตัวแปรไม่ถูกต้อง";
            $data="ค่าตัวแปรไม่ถูกต้อง";
        }else{
            //echo 	$viewfield;
            $data = $viewfield;
        }
        return $data;
    }

    public function generateRandomStringUppercase($length = 10){
      $characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
      $charactersLength = strlen($characters);
      $randomString = '';
      for ($i = 0; $i < $length; $i++) {
          $randomString .= $characters[rand(0, $charactersLength - 1)];
      }
      return $randomString;
    }
    public function generateRandomStringLowercase($length = 10){
      $characters = 'abcdefghijklmnopqrstuvwxyz';
      $charactersLength = strlen($characters);
      $randomString = '';
      for ($i = 0; $i < $length; $i++) {
          $randomString .= $characters[rand(0, $charactersLength - 1)];
      }
      return $randomString;
    }
    public function generateRandomString($length = 10){
      $characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
      $charactersLength = strlen($characters);
      $randomString = '';
      for ($i = 0; $i < $length; $i++) {
          $randomString .= $characters[rand(0, $charactersLength - 1)];
      }
      return $randomString;
    }
    public function generateRandomStringAndNumber($length = 10){
      $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
      $charactersLength = strlen($characters);
      $randomString = '';
      for ($i = 0; $i < $length; $i++) {
          $randomString .= $characters[rand(0, $charactersLength - 1)];
      }
      return $randomString;
    }
    public function generateRandomNumber($length = 10){
      $characters = '0123456789';
      $charactersLength = strlen($characters);
      $randomString = '';
      for ($i = 0; $i < $length; $i++) {
          $randomString .= $characters[rand(0, $charactersLength - 1)];
      }
      return $randomString;
    }


}
?>

Anon7 - 2022
AnonSec Team