AnonSec Shell
Server IP : 104.21.37.246  /  Your IP : 104.23.243.33   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/kainumber.com/class/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/kainumber.com/class/actionClass.php
<?php
require('connectClass.php');
class actiondata extends Connect{


			public function add($param){//$param = ตัวแปร array
					$con=$this->setconnect();

					$varibles=array_keys($param);
								foreach ($varibles as $field){
									$addfield=$field." ";
									$setfield=$setfield.$addfield;

									$addvalue=$this->getdata($param[$field])."||||";
									if($addvalue==""){
									$addvalue='""';
									}
									$setvalue=$setvalue.$addvalue;
								}
						$table=$param['table'];

						$fieldset=$this->cutcomma($setfield);
						$setfield=$fieldset;

						$valueset=$this->cutcomma2($setvalue);
						$setvalue=$valueset;


							$sql="INSERT INTO $table ($setfield) VALUES ($setvalue)";
							$result=mysqli_query($con,$sql);
							//$id = mysqli_insert_id();
							if($result){
								$data['suc']=1;//สำเร็จ
							}else{
								$data['suc']=2;	//ไม่สำเร็จ
							}
							$data['id']=$id;
							$data['sql']=$sql;
						return $data;
				}
			public function add_db($param){//$param = ตัวแปร array
					$con=$this->setconnect();
					$txtfield = "";
					$txtvalue = "";
					$varibles=array_keys($param);
					foreach ($varibles as $field)
					{
						  $addfield = $field."[-]";
						  if($param[$field] == '')
						  {
							  $param[$field] = '" "';
						  }
						  $value = $param[$field]."[-]";
						  $txtfield = $txtfield . $addfield;
						  $txtvalue = $txtvalue . $value;

					}
						$field_c = $this->cutcomma_space($txtfield);
						$field_c_v = $this->cutcomma_space($txtvalue);
						$table = $param['table'];


							$sql="INSERT INTO $table ($field_c) VALUES ($field_c_v);";
							$result = mysqli_query($con,$sql);
							if($result){
								$data['suc']=1;//สำเร็จ
							}else{
								$data['suc']=2;	//ไม่สำเร็จ
							}
							$data['sql']=$sql;
						return $data;
				}


		 public function add_db2($param){//$param = ตัวแปร array
					$con=$this->setconnect_2();
					$txtfield = "";
					$txtvalue = "";
					$varibles=array_keys($param);
					foreach ($varibles as $field)
					{
						  $addfield = $field."[-]";
						  if($param[$field] == '')
						  {
							  $param[$field] = '" "';
						  }
						  $value = $param[$field]."[-]";
						  $txtfield = $txtfield . $addfield;
						  $txtvalue = $txtvalue . $value;

					}
						$field_c = $this->cutcomma_space($txtfield);
						$field_c_v = $this->cutcomma_space($txtvalue);
						$table = $param['table'];


							$sql="INSERT INTO $table ($field_c) VALUES ($field_c_v);";
							$result = mysqli_query($con,$sql);
							if($result){
								$data['suc']=1;//สำเร็จ
							}else{
								$data['suc']=2;	//ไม่สำเร็จ
							}
							$data['sql']=$sql;
						return $data;
				}

			private function cutcomma($data){
					//var_dump($data);
					$cutmomma=explode(" ",$data);
					$valuenum=count($cutmomma);
					$i=0;
					foreach($cutmomma as $sub){
						if($i !=0 && $cutmomma[$i]!=''){
							if($i==($valuenum-2)){
								$value=$value.$cutmomma[$i];
							}else{
								$value=$value.$cutmomma[$i].",";
							}
						}

						$i++;
						}
						return $value;
				}
			private function cutcomma2($data){
					//var_dump($data);
					$cutmomma=explode("||||",$data);
					$valuenum=count($cutmomma);
					echo "valuenum".$valuenum;
					$i=0;
					foreach($cutmomma as $sub){
						if($i !=0 && $i <= $valuenum-2){

							if($i==($valuenum-2)){
								$value=$value."'".$cutmomma[$i]."'";
							}else{
								$value=$value."'".$cutmomma[$i]."',";
							}
						}
						$i++;
						}

						return $value;
				}
		private function cutcomma_space($data)
		{
					$cutmomma = explode("[-]",$data);
					$valuenum = count($cutmomma);
					$i=0;
					foreach($cutmomma as $sub){
						if($i !=0 && $cutmomma[$i]!=''){
							if($i == ($valuenum-2)){
								$value=$value.$cutmomma[$i];
							}else{
								$value=$value.$cutmomma[$i].",";
							}
						}
						$i++;
						}
						return $value;

		}
		public function edit($param)
			{
					$con=$this->setconnect();
					$varibles = array_keys($param);
							$i = 0;
							$table = $param['table'];
							$id = $param['id'];

							foreach ($varibles as $field)
							{
								if($i >1)
								{

									$sql="UPDATE $table SET $field = '".$param[$varibles[$i]]."' WHERE id = $id";

									$result = mysqli_query($con,$sql);
									if($result){
										$data['suc'][] = 1;
									}else{
										$data['suc'][] = 0;
									}
								}
								$i++;

							}
						//$data['sql']=$sql;
					return $data;
				}


		public function edit_db($param)
		{//$param = ตัวแปร array
			$con=$this->setconnect();

			$varibles=array_keys($param);
			$table = $param['table'];
			$txt = "";
			$txt_sql = "";
			$i = 0;

			foreach ($varibles as $field)
			{
				if($i == 1)
				{
					$txt_where = "`".$field. "` = '" . $param[$field] . "' ";
				}
				if($i > 1)
				{
					if($i == 2)
					{
						$txt = "`". $field . "` = '" . $param[$field] . "' ";
					}
					else
					{
						$txt = ",`". $field .  "` = '" . $param[$field] . "' ";
					}

					$txt_sql = $txt_sql . $txt;

				}
				$i++;
			}

			$sql = "UPDATE  `".$table."` SET  ".$txt_sql." WHERE  ".$txt_where;
			$result = mysqli_query($con,$sql);
			if($result)
			{
				$data['suc'] = 1;
			}
			else
			{
				$data['suc'] = 0;
			}
			$data['sql'] = $sql;


			return $data;
		}
		public function delete($param)//$param = ตัวแปร array
		{
			$con=$this->setconnect();

			$table = $param['table'];
			$wherekey = array_keys($param);
			$numparam = count($param);
				$i = 0;
			foreach($wherekey as $key){
				if($key != 'table'){
					$keyfield[] = $key;
					$keyvalue[] = $param[$key];
					}
				$i++;
				}

				$numwhere=count($keyfield);

							for($key=0; $key<$numwhere;$key++){
								if($key==($numwhere-1)){
								$comparition=$keyfield[$key]."= '".$keyvalue[$key]."'";
								}else{
								$comparition=$keyfield[$key]."= '".$keyvalue[$key]."'  and ";
								}
								$where=$where.$comparition;
							}



			$sql="DELETE FROM ".$table." WHERE ".$where;

			$result=mysqli_query($con,$sql);
								if($result){
									$data['suc'] = 1;//สำเร็จ
								}else{
									$data['suc'] = 2;//ไม่สำเร็จ
					}
					return $data;
		}
		public function view($param)//$param = ตัวแปร array
			{
				$con=$this->setconnect();

				if($param['id'] != "")
				{
					$sql="select * from ".$param['table']." where id='".$param['id']."'";
				}else
				{
//-----------------------------------ตรวจสอบข้อมูลเกี่ยวกับการแบ่งหน้า----------------------------------------------------------
					if($param['srclimit']=="" or $param['srclimit']==0)
					{
						$srclimit=10;
						}else{
						$srclimit=$param['srclimit'];
					}

					if($param['page'] == "" or $param['page']==0){
						$page=1;
						$min=0;
						$max=$srclimit;
					}else if($param['page'] !="" or $param['page'] !=0){
						$page=$param['page'] ;
						$min=($srclimit * $page)- $srclimit;
						$max=$srclimit;
					}
//----------------------------------//ตรวจสอบข้อมูลเกี่ยวกับการแบ่งหน้า----------------------------------------------------------
//----------------------------------ตรวจสอบว่ามีการใส่คำค้นมาหรือไม่-------------------------------------------------------------
			 if($param['srcword']==""){//ไม่มีการส่งคำค้นมา
					$sql="select * from $param[table]";
				if($param['status']==""){
					if($param['sortby']!=""){
						$sql.=" order by $param[sortby] $param[typeofsort]";
					}
				}else{
					$sql.=" where status=$param[status]";
						if($sortby!=""){
							$sql.=" order by $param[sortby] $param[typeofsort]";
						}
				}

			}else if($param['srcword'] !=""){//มีการส่งคำค้นมา

						//ตัวสอบตัวดำเนินการที่ส่งค่ามา
					if($param['sign'] ==""){
						$addsign="=";
						$conparitoin1="";
						$conparitoin2="";
					}else if($param['sign']=="="){
						$addsign="=";
						$conparitoin1="";
						$conparitoin2="";
					}else if($param['sign']=="-%"){
						$addsign="LIKE ";
						$conparitoin1="";
						$conparitoin2="%";
					}else if($param['sign']=="%%"){
						$addsign="LIKE ";
						$conparitoin1="%";
						$conparitoin2="%";
					}else if($param['sign']=="%-"){
						$addsign="LIKE ";
						$conparitoin1="%";
						$conparitoin2="";
					}
					$sql="select * from $param[table] where $param[srcfield] $addsign'".$conparitoin1.$param['srcword'].$conparitoin2."'";
				 if($param['status']==""){
						if($param['sortby']!=""){
						$sql.=" order by ".$param['sortby']." ".$param['typeofsort'];
						}
				}else{
					$sql.=" and status='$param[status]'";
						if($param['sortby']!=""){
						$sql.=" order by ".$param['sortby']." ".$param['typeofsort'];
						}
				}
			}
//----------------------------------//ตรวจสอบว่ามีการใส่คำค้นมาหรือไม่----------------------------------------------------

			if($param['createpage']=='yes'){//ตรวจสอบว่าต้องการแบ่งหน้าหรือไม่
				$sql.=" LIMIT $min , $max";
			}
		}
			$result=mysqli_query($con,$sql);
			$num=mysqli_num_rows($result);
		//--------------------------------------------หาข้อมูลหน้าทั้งหมดตามเงื่อนไข โดยไม่มีการแบ่งหน้า------------------------------------------------------
		if($param['srcword'] !=""){//มีการส่งคำค้นมา
			$sql2="select * from ".$param['table']." where $param[srcfield] $addsign'".$conparitoin1.$param['srcword'].$conparitoin2."'"  ;
			if($param['status']=="1"){
				$sql2.=" and status='".$param['status']."'";
				}
		}else{
			$sql2="select * from ".$param['table'];
			if($param['status']=="1"){
				$sql2.=" where status='".$param['status']."'";
				}
		}
//---------------------------------------------------------------------------------------------------------------------------------------

		$result2=mysqli_query($con,$sql2);
		$num1=mysqli_num_rows($result2);
			//var_dump($sql2);

		//----------------------หาหน้าทั้งหมด-------------------------------
		@$totalpage=ceil($num1/$srclimit);
			$i=0;
		while($datasql=mysqli_fetch_array($result)){

		//---------------------------ค้นหาชื่อฟิล์ดจาก table เพื่อทำการ return ข้อมูล---------------------------------------
				$numfield=mysqli_num_fields($result);
				$b=0;
				while ($b < mysqli_num_fields($result)) {
					$meta = mysqli_fetch_field($result, $b);

					$data[$b]['fieldname']=$meta->name;
					$data[$i][$data[$b]['fieldname']]=$datasql[$data[$b]['fieldname']];
					$b++;
				}
		//-------------------------------------ปิดหาชื่อฟีล์ด---------------------------------------------------------------

			$i++;
			}
			$data['totalpage']=$totalpage;
			$data['page']=$page;
			$data['srcfield']=$param['srcfield'];
			$data['srcword']=$param['srcword'];
			$data['sign']=$param['sign'];
			$data['sql']=$sql;
			$data['num']=$num;
			$data['num1']=$num1;
			$data['min']=$min;
			$data['srclimit']=$srclimit;
			$data['typeofsort']=$typeofsort;


			// var_dump($data);
			 //exit;
			return $data;

	}
		public function findAfield($table,$primarykey,$viewfield){  //('ชือtable',privarykey,ฟีลด์ที่ต้องการดู)
		$con=$this->setconnect();
		$sql="select ".$viewfield." from ".$table." where id=".$primarykey."";
		$re=@mysqli_query($con,$sql);
		$da=@mysqli_fetch_array($re);
		$viewfield=$da[$viewfield];
			if($viewfield==""){
				//echo "ค่าตัวแปรไม่ถูกต้อง";
				$data="ค่าตัวแปรไม่ถูกต้อง";
			}else{
				//echo 	$viewfield;
				$data=$viewfield;
			}
			return $data;
		}

		public function q_one($table,$primarykey,$viewfield){  //('ชือtable',คำค้น,ฟีลด์ที่ต้องการดู)
		$con=$this->setconnect();
		$sql="select ".$viewfield." from ".$table." where ".$primarykey."";
		$re=@mysqli_query($sql);
		$da=@mysqli_fetch_array($re);
		$viewfield=$da[$viewfield];
			if($viewfield==""){
				//echo "ค่าตัวแปรไม่ถูกต้อง";
				$data="ค่าตัวแปรไม่ถูกต้อง";
			}else{
				//echo 	$viewfield;
				$data = $viewfield;
			}
			return $data;
		}


	}
?>

Anon7 - 2022
AnonSec Team