Professor6T9 Web SheLL

Windows NT WEB-23 10.0 build 17763 (Windows Server 2016) i586
Microsoft-IIS/10.0
103.118.16.173

File Name : banners.php

<?php include("links/top.php");
$action=$_GET['action'];
?>
<?php 
if($action=='delete'){
$id=$_GET['id'];
mysql_query("DELETE from banners WHERE id='$id'");

header('Location:banners.php?action=list');
}
?>
	<?php 
	if($action=='addnew' || $action== 'edit'){
	if($action=='edit'){
	$id=$_GET['id'];
	}
	if(isset($_POST['submit']) || isset($_POST['update'])){
	$title=xss_clean(mysql_real_escape_string($_POST['title']));
    $about=xss_clean(mysql_real_escape_string($_POST['about']));
	$code=generateCode(5);
	 $image ="";
	 $fileext=pathinfo($_FILES["file"]["name"], PATHINFO_EXTENSION);
	 if($fileext=='jpg' || $fileext=='jpeg' || $fileext=='png' || $fileext=='gif' || $fileext=='JPG' || $fileext=='JPEG' || $fileext=='PNG' || $fileext=='GIF'){
	 if(move_uploaded_file($_FILES["file"]["tmp_name"],
				  "../uploads/banners/" . $code.$_FILES["file"]["name"])){
					 $image =$code.$_FILES["file"]["name"];
				  }}
	
	if($action=='addnew'){
		mysql_query("INSERT INTO banners(`title`,`image`, `about`)VALUES('$title','$image', '$about')");
	
	}
	if($action=='edit'){
		mysql_query("UPDATE banners SET title='$title', about='$about' WHERE id='$id'");				
							if($image!=""){
		mysql_query("UPDATE banners SET image='$image' WHERE id='$id'");						
								
								}
	}
header('Location: banners.php?action=list');
	}
	}
	?>		
			<div class="content-box">
				
				<div class="content-box-header">
					<?php if($action=='list'){?>
					<h3>Banners List</h3>
					<?php }else if($action=='addnew'){ ?>
					<h3>Add Banner</h3>
					<?php }?>
					<div class="clear"></div>
					
				</div> 
				
				<div class="content-box-content">
						
	
						<?php if($action=='list'){
					
						$sel="select * from banners";
						$res=$DB->executeQuery($sel);
						
						?>
                        <a href="banners.php?action=addnew"><input class="button" type="submit" name="submit" value="Add Banner" /></a>
						<table id="datatables" class="display">
							
							<thead>
								<tr>
								  
								   <th>S.NO</th>
                                   <th>TITLE</th>
                                   <th>IMAGE</th>
                                   <th>Action</th>
								</tr>
								
							</thead>
						 
							<tfoot>
								<tr>
									<td colspan="6">
										
										<div class="clear"></div>
									</td>
								</tr>
							</tfoot>
						 
							<tbody>
							<?php
							  $sno=$start+1;
							 while($rec=getAssoc($res)){?>
								<tr>
									
									<td><?php echo $sno;?></td>
                                    <td><?php echo $rec['title'];?></td>
                                    <td><img src="../uploads/banners/<?php echo $rec['image'];?>" width="80" /></td>
                                  <td>
										
										 <a href="banners.php?action=edit&id=<?php echo $rec['id'];?>" title="Edit"><img src="images/icons/pencil.png" alt="Edit" /></a> &nbsp;&nbsp;
										 <a href="banners.php?action=delete&id=<?php echo $rec['id'];?>" onClick="return confirm('Are you sure you want to delete ?')" title="Delete"><img src="images/icons/cross.png" alt="Delete" /></a>
										 
										
									</td>
								</tr>
								<?php $sno++;}?>
								
							</tbody>
							
						</table>
                       
							
	
			
					<?php }else if($action=='addnew' || $action=='edit'){?>
					
					<?php if($action=='edit'){
					$id=$_GET['id'];
					$e="select * from banners where id='$id'";
					$ed=$DB->executeQuery($e);
					$edi=$DB->getAssoc($ed);
					}?>
		<form action="" name="add" method="post" onsubmit="return checkListBoxSize()" enctype="multipart/form-data">
							
							<fieldset> 
								<p>
									<label>Title</label>
										<input class="text-input small-input" type="text" name="title" value="<?php if($action=='edit'){echo $edi['title'];}?>" />
								</p>
                               <?php /*?> <p>
									<label>About</label>
										<input class="text-input small-input" type="text" name="about" value="<?php if($action=='edit'){echo $edi['about'];}?>" />
								</p><?php */?>
								<p>
									<label> Image</label>
										<input class="text-input small-input" type="file" name="file" onChange="return imgExtension(this)"  /><?php if($action=='edit'){?><img src="../uploads/banners/<?php echo $edi['image'];?>" width="80" style="float:right;" /><?php }?>
										<br /><small style="color:#F00;">Image Formats Supports Only [ .jpg,.jpeg,.png,.gif ]</small>
								</p>
                                
								<p><?php 
								if($action=='addnew'){
								?>
									<input class="button" type="submit" name="submit" value="Submit" />
									<?php }else if($action=='edit'){?>
									<input class="button" type="submit" name="update" value="Update" />
									<?php }?>

</p>
							</fieldset>
							<div class="clear"></div>
						</form>
						<?php }?>
 					        
<?php include("links/footer.php");?>

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	0/0	0777	2024-09-10 01:49:18
..	dir	-	0/0	0777	2024-09-10 01:49:33
css	dir	-	0/0	0777	2024-09-10 01:49:04
images	dir	-	0/0	0777	2024-09-10 01:49:05
js	dir	-	0/0	0777	2024-09-10 01:49:17
lib	dir	-	0/0	0777	2024-09-10 01:49:18
links	dir	-	0/0	0777	2024-09-10 01:49:18
banners.php	text/x-php	5.8 KB	0/0	0666	2015-03-09 12:02:23
categories.php	text/html	4.9 KB	0/0	0666	2015-03-09 12:02:23
error_log	text/plain	145.69 KB	0/0	0666	2015-03-09 12:02:25
gallery.php	text/x-php	5.51 KB	0/0	0666	2015-03-09 12:02:24
index.php	text/x-php	2.99 KB	0/0	0666	2015-03-09 12:02:25
pages.php	text/x-php	5.3 KB	0/0	0666	2015-03-09 12:02:26
projects.php	text/x-php	7.71 KB	0/0	0666	2015-03-09 12:02:26
recovery.php	text/x-php	3.37 KB	0/0	0666	2015-03-09 12:02:27
signout.php	text/x-php	80 B	0/0	0666	2015-03-09 12:02:27
title.php	text/x-php	5.75 KB	0/0	0666	2015-03-09 12:02:28
users.php	text/x-php	6.02 KB	0/0	0666	2015-03-09 12:02:28

Team Anon Force

https://t.me/Professor6T9x