Professor6T9 Web SheLL

Windows NT WEB-23 10.0 build 17763 (Windows Server 2016) i586
Microsoft-IIS/10.0
103.118.16.173

File Name : view.php

<?php
/**
 * Этот файл является частью программы "CRM Руководитель" - конструктор CRM систем для бизнеса
 * https://www.rukovoditel.net.ru/
 * 
 * CRM Руководитель - это свободное программное обеспечение, 
 * распространяемое на условиях GNU GPLv3 https://www.gnu.org/licenses/gpl-3.0.html
 * 
 * Автор и правообладатель программы: Харчишина Ольга Александровна (RU), Харчишин Сергей Васильевич (RU).
 * Государственная регистрация программы для ЭВМ: 2023664624
 * https://fips.ru/EGD/3b18c104-1db7-4f2d-83fb-2d38e1474ca3
 */

//check if report exist  
$reports_info_query = db_query("select * from app_reports where id='" . db_input((int) $_GET['reports_id']) . "'");
if(!$reports_info = db_fetch_array($reports_info_query))
{
    $alerts->add(TEXT_REPORT_NOT_FOUND, 'error');
    redirect_to('reports/');
}

//check report access
if($reports_info['reports_type'] == 'common')
{
    //check access for common report
    if($app_user['group_id'] > 0)
    {
        $check_query = db_query("select r.* from app_reports r, app_entities e, app_entities_access ea  where r.id = '" . $reports_info['id'] . "' and  r.entities_id = e.id and e.id=ea.entities_id and length(ea.access_schema)>0 and ea.access_groups_id='" . db_input($app_user['group_id']) . "' and (find_in_set(" . $app_user['group_id'] . ",r.users_groups) or find_in_set(" . $app_user['id'] . ",r.assigned_to)) and r.reports_type = 'common' order by r.dashboard_sort_order, r.name");
    }
    else
    {
        $check_query = db_query("select r.* from app_reports r, app_entities e  where r.id = '" . $reports_info['id'] . "' and  r.entities_id = e.id and (find_in_set(" . $app_user['group_id'] . ",r.users_groups) or find_in_set(" . $app_user['id'] . ",r.assigned_to)) and r.reports_type = 'common' order by r.dashboard_sort_order, r.name");
    }
    
    if(!$check = db_fetch_array($check_query))
    {
        redirect_to('dashboard/access_forbidden');
    }
}
elseif($app_logged_users_id != $reports_info['created_by'])
{
    redirect_to('dashboard/access_forbidden');
}

//get report entity info
$entity_info = db_find('app_entities', $reports_info['entities_id']);
$entity_cfg = new entities_cfg($reports_info['entities_id']);

//get page title
if($reports_info['reports_type'] == 'entity_menu')
{
    $page_title = (strlen($entity_cfg->get('listing_heading')) > 0 ? $entity_cfg->get('listing_heading') : $entity_info['name']);

if(!filters_panels::has_any($reports_info['entities_id'], $entity_cfg) and $app_user['group_id'] > 0)
    {
        //use default filters if there is no any filters panes stup
        $default_reports_query = db_query("select * from app_reports where entities_id='" . db_input($reports_info['entities_id']) . "' and reports_type='default'");
        if(db_num_rows($default_reports_query))
        {
            $default_reports_info = db_fetch_array($default_reports_query);
            $force_filters_reports_id = $default_reports_info['id'];
        }
    }
}
else
{
    $page_title = $reports_info['name'];
}

$app_title = app_set_title($page_title);

switch($app_module_action)
{
    case 'set_listing_type':
        $reports_info_query = db_query("select id from app_reports where id='" . _get::int('reports_id') . "'");
        if($reports_info = db_fetch_array($reports_info_query))
        {
            db_query("update app_reports set listing_type='" . db_input($_GET['type']) . "' where id='" . $reports_info['id'] . "'");
        }

redirect_to('reports/view', 'reports_id=' . _get::int('reports_id'));
        break;
}

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	0/0	0777	2024-07-11 10:44:20
..	dir	-	0/0	0777	2024-07-11 10:44:20
common_filters.php	text/x-php	3.56 KB	0/0	0666	2023-09-17 07:13:16
configure.php	text/x-php	2.81 KB	0/0	0666	2023-09-17 07:13:20
filters.php	text/x-php	10.79 KB	0/0	0666	2024-02-01 10:42:36
filters_form.php	text/x-php	1.25 KB	0/0	0666	2023-09-17 07:13:26
filters_options.php	text/x-php	27.52 KB	0/0	0666	2024-02-03 08:50:50
form.php	text/x-php	953 B	0/0	0666	2023-09-17 07:13:30
reports.php	text/x-php	9.82 KB	0/0	0666	2023-09-17 07:13:34
select2_prepare_add_item_json.php	text/x-php	4.63 KB	0/0	0666	2023-09-17 07:13:36
sorting.php	text/x-php	6.45 KB	0/0	0666	2023-09-17 07:13:40
users_filters.php	text/x-php	3.45 KB	0/0	0666	2023-09-17 07:13:42
view.php	text/x-php	3.8 KB	0/0	0666	2023-09-17 07:13:44

Team Anon Force

https://t.me/Professor6T9x