One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/www/admin/

Edit File: mg_avaiable.php

<?php include('config.php');
$avai = mysql_query("select * from available");
$row = mysql_fetch_array($avai);
 ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$AP_ID = $_GET['AP_ID'];

$view = mysql_query("select * from newapplication where AP_ID = '".$AP_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['AP_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE newapplication SET AP_STS ='0' WHERE AP_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE newapplication SET AP_STS ='1' WHERE AP_ID ='".$_GET['SAI']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from newapplication where AP_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Register detail deleted sucessfully");

window.location= "mg_reg.php";

</script>

<?php }

if(!$del){?>

alert("Register detail  Not deleted sucessfully");

window.location= "mg_reg.php";

</script>

<?php }

}

if($_POST['submit']){

$apno = mysql_real_escape_string($_POST['apno']);
			  
			  $regno = mysql_real_escape_string($_POST['regno']);
			  
			  $appdate = mysql_real_escape_string($_POST['appdate']);

$apimg = ($_FILES['apimg']['name']);
			  $tmp_img = $_FILES['apimg']['tmp_name'];
			  move_uploaded_file($tmp_img, "images/".$apimg);
			  
			  $apsel = mysql_real_escape_string($_POST['apsel']);

$subcat = mysql_real_escape_string($_POST['subcat']);
			  
			  $clas = mysql_real_escape_string($_POST['clas']);
			  
			  $apname = mysql_real_escape_string($_POST['apname']);

$apgen = mysql_real_escape_string($_POST['apgen']);
			  
			  $apms = mysql_real_escape_string($_POST['apms']);
			  
			  $apdob = mysql_real_escape_string($_POST['apdob']);
			  
			  $apage = mysql_real_escape_string($_POST['apage']);
			  
			  $apfat = mysql_real_escape_string($_POST['apfat']);
			  
			  $apmot = mysql_real_escape_string($_POST['apmot']);
			  
			  $aphw = mysql_real_escape_string($_POST['aphw']);

$apheg = mysql_real_escape_string($_POST['apheg']);
			  
			  $apweg = mysql_real_escape_string($_POST['apweg']);
			  
			  $apblood = mysql_real_escape_string($_POST['apblood']);

$apvis = mysql_real_escape_string($_POST['apvis']);
			  
			  $apprs = mysql_real_escape_string($_POST['apprs']);
			  
			  $apprv = mysql_real_escape_string($_POST['apprv']);
   
     		  $apadd = mysql_real_escape_string($_POST['apadd']);
			  
			  $apland = mysql_real_escape_string($_POST['apland']);
			  
			  $apcity = mysql_real_escape_string($_POST['apcity']);
			  
			  $aptal = mysql_real_escape_string($_POST['aptal']);
			  
			  $apdis = mysql_real_escape_string($_POST['apdis']);
			  
			  $apstate = mysql_real_escape_string($_POST['apstate']);
			  
			  $apcou = mysql_real_escape_string($_POST['apcou']);
			  
			  $appcod = mysql_real_escape_string($_POST['appcod']);
			  
			  $aptel = mysql_real_escape_string($_POST['aptel']);
			  
			  $apmail = mysql_real_escape_string($_POST['apmail']);
			  
			  $apmname = mysql_real_escape_string($_POST['apmname']);
			  
			  $apmrel = mysql_real_escape_string($_POST['apmrel']);
			  
			  $imgpass = ($_FILES['imgpass']['name']);
			  $tmp_img = $_FILES['imgpass']['tmp_name'];
			  move_uploaded_file($tmp_img, "images/".$imgpass);
			  
			  $imgvisa = ($_FILES['imgvisa']['name']);
			  $tmp_img = $_FILES['imgvisa']['tmp_name'];
			  move_uploaded_file($tmp_img, "images/".$imgvisa);
			  
			  $imgair = ($_FILES['imgair']['name']);
			  $tmp_img = $_FILES['imgair']['tmp_name'];
			  move_uploaded_file($tmp_img, "images/".$imgair);
			 
			  $pahav = mysql_real_escape_string($_POST['pahav']);
			  $pastatus = mysql_real_escape_string($_POST['pastatus']);
			  $pano = mysql_real_escape_string($_POST['pano']);
			  $pasur = mysql_real_escape_string($_POST['pasur']);
			  $pagname = mysql_real_escape_string($_POST['pagname']);
			  $panat = mysql_real_escape_string($_POST['panat']);
			  $pasex = mysql_real_escape_string($_POST['pasex']);
			  $padob = mysql_real_escape_string($_POST['padob']);
			  $papob = mysql_real_escape_string($_POST['papob']);
			  $papoi = mysql_real_escape_string($_POST['papoi']);
			  $padoi = mysql_real_escape_string($_POST['padoi']);
			  $padoe = mysql_real_escape_string($_POST['padoe']);
			  $pafat = mysql_real_escape_string($_POST['pafat']);
			  $pamot = mysql_real_escape_string($_POST['pamot']);
			  $paspo = mysql_real_escape_string($_POST['paspo']);
			  $paadd = mysql_real_escape_string($_POST['paadd']);
			  $papcode = mysql_real_escape_string($_POST['papcode']);
			  
			  $othav = mysql_real_escape_string($_POST['othav']);
			  $otsta = mysql_real_escape_string($_POST['otsta']);
			  $otadat = mysql_real_escape_string($_POST['otadat']);
			  $otfile = mysql_real_escape_string($_POST['otfile']);
			  $otsel = mysql_real_escape_string($_POST['otsel']);
			  $otsur = mysql_real_escape_string($_POST['otsur']);
			  $otgnam = mysql_real_escape_string($_POST['otgnam']);
			  $otnat = mysql_real_escape_string($_POST['otnat']);
			  $otsex = mysql_real_escape_string($_POST['otsex']);
			  $otdob = mysql_real_escape_string($_POST['otdob']);
			  $otocc = mysql_real_escape_string($_POST['otocc']);
			  $otpob = mysql_real_escape_string($_POST['otpob']);
			  $otpoi = mysql_real_escape_string($_POST['otpoi']);
			  $otdoi = mysql_real_escape_string($_POST['otdoi']);
			  $otdoe = mysql_real_escape_string($_POST['otdoe']);
			  $otfat = mysql_real_escape_string($_POST['otfat']);
			  $otmot = mysql_real_escape_string($_POST['otmot']);
			  $otadd = mysql_real_escape_string($_POST['otadd']);
			  $otas = mysql_real_escape_string($_POST['otas']);

$noname = mysql_real_escape_string($_POST['noname']);
			  $noadd = mysql_real_escape_string($_POST['noadd']);
			  $noland = mysql_real_escape_string($_POST['noland']);
			  $nocity = mysql_real_escape_string($_POST['nocity']);
			  $notal = mysql_real_escape_string($_POST['notal']);
			  $nodis = mysql_real_escape_string($_POST['nodis']);
			  $nostate = mysql_real_escape_string($_POST['nostate']);
			  $nocou = mysql_real_escape_string($_POST['nocou']);
			  $nopcod = mysql_real_escape_string($_POST['nopcod']);
			  $nomob = mysql_real_escape_string($_POST['nomob']);
			  $notel = mysql_real_escape_string($_POST['notel']);
			  $nomail = mysql_real_escape_string($_POST['nomail']);
			  $nocper = mysql_real_escape_string($_POST['nocper']);
			  $nonrel = mysql_real_escape_string($_POST['nonrel']);

if($_GET['AP_ID']==""){

$ins = mysql_query("insert into newapplication (AP_NO,REG_NO,APP_DATE,AP_IMG,AP_SEL,AP_SUBSEL,AP_NAME,AP_GEN,AP_DOB,AP_AGE,AP_FAT,AP_MOT,AP_HW,AP_MS,AP_HEG,AP_WEG,AP_BLOOD,AP_VIS,AP_PRS,AP_PRV,AP_ADD,AP_LAND,AP_CITY,AP_TAL,AP_DIS,AP_STATE,AP_COU,AP_PCOD,AP_TEL,AP_MAIL,AP_MNAME,AP_MREL,IMG_PASS,IMG_VISA,IMG_AIR,PA_HAV,PA_STATUS,PA_NO,PA_SUR,PA_GNAME,PA_NAT,PA_SEX,PA_DOB,PA_POB,PA_POI,PA_DOI,PA_DOE,PA_FAT,PA_MOT,PA_SPO,PA_ADD,PA_PCODE,NO_NAME,NO_ADD,NO_LAND,NO_CITY,NO_TAL,NO_DIS,NO_STATE,NO_COU,NO_PCOD,NO_MOB,NO_TEL,NO_MAIL,NO_CPER,NO_NREL,OT_HAV,OT_STA,OT_ADAT,OT_FILE,OT_SEL,OT_SUR,OT_GNAM,OT_NAT,OT_SEX,OT_DOB,OT_OCC,OT_POB,OT_POI,OT_DOI,OT_DOE,OT_FAT,OT_MOT,OT_ADD,OT_AS,U_ID) values ('$apno','$regno','$appdate','$apimg','$apsel','$subcat','$apname','$apgen','$apdob','$apage','$apfat','$apmot','$aphw','$apms','$apheg','$apweg','$apblood','$apvis','$apprs','$apprv','$apadd','$apland','$apcity','$aptal','$apdis','$apstate','$apcou','$appcod','$aptel','$apmail','$apmname','$apmrel','$imgpass','$imgvisa','$imgair','$pahav','$pastatus','$pano','$pasur','$pagname','$panat','$pasex','$padob','$papob','$papoi','$padoi','$padoe','$pafat','$pamot','$paspo','$paadd','$papcode','$noname','$noadd','$noland','$nocity','$notal','$nodis','$nostate','$nocou','$nopcod','$nomob','$notel','$nomail','$nocper','$nonrel','$othav','$otsta','$otadat','$otfile','$otsel','$otsur','$otgnam','$otnat','$otsex','$otdob','$otocc','$otpob','$otpoi','$otdoi','$otdoe','$otfat','$otmot','$otadd','$otas','$uid')");	
	
		  			?><script>alert("Inserted sucessfully");

</script><?

}

if($_GET['AP_ID']!=""){
		
				{

if($_FILES['imgpass']['name']!="" && $_FILES['apimg']['name']!="")
			 {

$upd =  mysql_query("update newapplication set AP_NO='$apno',REG_NO='$regno',APP_DATE='$appdate',AP_IMG='$apimg',AP_SEL='$apsel',AP_SUBSEL='$subcat',AP_NAME='$apname',AP_GEN='$apgen',AP_DOB='$apdob',AP_AGE='$apage',AP_FAT='$apfat',AP_MOT='$apmot',AP_HW='$aphw',AP_MS='$apms',AP_HEG='$apheg',AP_WEG='$apweg',AP_BLOOD='$apblood',AP_VIS='$apvis',AP_PRS='$apprs',AP_PRV='$apprv',AP_ADD='$apadd',AP_LAND='$apland',AP_CITY='$apcity',AP_TAL='$aptal',AP_DIS='$apdis',AP_STATE='$apstate',AP_COU='$apcou',AP_PCOD='$appcod',AP_TEL='$aptel',AP_MAIL='$apmail',AP_MNAME='$apmname',AP_MREL='$apmrel',IMG_PASS='$imgpass',PA_HAV='$pahav',PA_STATUS='$pastatus',PA_NO='$pano',PA_SUR='$pasur',PA_GNAME='$pagname',PA_NAT='$panat',PA_SEX='$pasex',PA_DOB='$padob',PA_POB='$papob',PA_POI='$papoi',PA_DOI='$padoi',PA_DOE='$padoe',PA_FAT='$pafat',PA_MOT='$pamot',PA_SPO='$paspo',PA_ADD='$paadd',PA_PCODE='$papcode',NO_NAME='$noname',NO_ADD='$noadd',NO_LAND='$noland',NO_CITY='$nocity',NO_TAL='$notal',NO_DIS='$nodis',NO_STATE='$nostate',NO_COU='$nocou',NO_PCOD='$nopcod',NO_MOB='$nomob',NO_TEL='$notel',NO_MAIL='$nomail',NO_CPER='$nocper',NO_NREL='$nonrel',OT_HAV='$othav',OT_STA='$otsta',OT_ADAT='$otadat',OT_FILE='$otfile',OT_SEL='$otsel',OT_SUR='$otsur',OT_GNAM='$otgnam',OT_NAT='$otnat',OT_SEX='$otsex',OT_DOB='$otdob',OT_OCC='$otocc',OT_POB='$otpob',OT_POI='$otpoi',OT_DOI='$otdoi',OT_DOE='$otdoe',OT_FAT='$otfat',OT_MOT='$otmot',OT_ADD='$otadd',OT_AS='$otas',U_ID='$uid' WHERE AP_ID ='".$AP_ID."'");

} 
			 
			 elseif($_FILES['imgpass']['name']!="")
			 {

$upd =  mysql_query("update newapplication set AP_NO='$apno',REG_NO='$regno',APP_DATE='$appdate',AP_SEL='$apsel',AP_SUBSEL='$subcat',AP_NAME='$apname',AP_GEN='$apgen',AP_DOB='$apdob',AP_AGE='$apage',AP_FAT='$apfat',AP_MOT='$apmot',AP_HW='$aphw',AP_MS='$apms',AP_HEG='$apheg',AP_WEG='$apweg',AP_BLOOD='$apblood',AP_VIS='$apvis',AP_PRS='$apprs',AP_PRV='$apprv',AP_ADD='$apadd',AP_LAND='$apland',AP_CITY='$apcity',AP_TAL='$aptal',AP_DIS='$apdis',AP_STATE='$apstate',AP_COU='$apcou',AP_PCOD='$appcod',AP_TEL='$aptel',AP_MAIL='$apmail',AP_MNAME='$apmname',AP_MREL='$apmrel',IMG_PASS='$imgpass',PA_HAV='$pahav',PA_STATUS='$pastatus',PA_NO='$pano',PA_SUR='$pasur',PA_GNAME='$pagname',PA_NAT='$panat',PA_SEX='$pasex',PA_DOB='$padob',PA_POB='$papob',PA_POI='$papoi',PA_DOI='$padoi',PA_DOE='$padoe',PA_FAT='$pafat',PA_MOT='$pamot',PA_SPO='$paspo',PA_ADD='$paadd',PA_PCODE='$papcode',NO_NAME='$noname',NO_ADD='$noadd',NO_LAND='$noland',NO_CITY='$nocity',NO_TAL='$notal',NO_DIS='$nodis',NO_STATE='$nostate',NO_COU='$nocou',NO_PCOD='$nopcod',NO_MOB='$nomob',NO_TEL='$notel',NO_MAIL='$nomail',NO_CPER='$nocper',NO_NREL='$nonrel',OT_HAV='$othav',OT_STA='$otsta',OT_ADAT='$otadat',OT_FILE='$otfile',OT_SEL='$otsel',OT_SUR='$otsur',OT_GNAM='$otgnam',OT_NAT='$otnat',OT_SEX='$otsex',OT_DOB='$otdob',OT_OCC='$otocc',OT_POB='$otpob',OT_POI='$otpoi',OT_DOI='$otdoi',OT_DOE='$otdoe',OT_FAT='$otfat',OT_MOT='$otmot',OT_ADD='$otadd',OT_AS='$otas',U_ID='$uid' WHERE AP_ID ='".$AP_ID."'");

} 
			elseif($_FILES['apimg']['name']!="")
			 {

$upd =  mysql_query("update newapplication set AP_NO='$apno',REG_NO='$regno',APP_DATE='$appdate',AP_IMG='$apimg',AP_SEL='$apsel',AP_SUBSEL='$subcat',AP_NAME='$apname',AP_GEN='$apgen',AP_DOB='$apdob',AP_AGE='$apage',AP_FAT='$apfat',AP_MOT='$apmot',AP_HW='$aphw',AP_MS='$apms',AP_HEG='$apheg',AP_WEG='$apweg',AP_BLOOD='$apblood',AP_VIS='$apvis',AP_PRS='$apprs',AP_PRV='$apprv',AP_ADD='$apadd',AP_LAND='$apland',AP_CITY='$apcity',AP_TAL='$aptal',AP_DIS='$apdis',AP_STATE='$apstate',AP_COU='$apcou',AP_PCOD='$appcod',AP_TEL='$aptel',AP_MAIL='$apmail',AP_MNAME='$apmname',AP_MREL='$apmrel',PA_HAV='$pahav',PA_STATUS='$pastatus',PA_NO='$pano',PA_SUR='$pasur',PA_GNAME='$pagname',PA_NAT='$panat',PA_SEX='$pasex',PA_DOB='$padob',PA_POB='$papob',PA_POI='$papoi',PA_DOI='$padoi',PA_DOE='$padoe',PA_FAT='$pafat',PA_MOT='$pamot',PA_SPO='$paspo',PA_ADD='$paadd',PA_PCODE='$papcode',NO_NAME='$noname',NO_ADD='$noadd',NO_LAND='$noland',NO_CITY='$nocity',NO_TAL='$notal',NO_DIS='$nodis',NO_STATE='$nostate',NO_COU='$nocou',NO_PCOD='$nopcod',NO_MOB='$nomob',NO_TEL='$notel',NO_MAIL='$nomail',NO_CPER='$nocper',NO_NREL='$nonrel',OT_HAV='$othav',OT_STA='$otsta',OT_ADAT='$otadat',OT_FILE='$otfile',OT_SEL='$otsel',OT_SUR='$otsur',OT_GNAM='$otgnam',OT_NAT='$otnat',OT_SEX='$otsex',OT_DOB='$otdob',OT_OCC='$otocc',OT_POB='$otpob',OT_POI='$otpoi',OT_DOI='$otdoi',OT_DOE='$otdoe',OT_FAT='$otfat',OT_MOT='$otmot',OT_ADD='$otadd',OT_AS='$otas',U_ID='$uid' WHERE AP_ID ='".$AP_ID."'");

}

else   {  
				
		   	 $upd =  mysql_query("update newapplication set AP_NO='$apno',REG_NO='$regno',APP_DATE='$appdate',AP_SEL='$apsel',AP_SUBSEL='$subcat',AP_NAME='$apname',AP_GEN='$apgen',AP_DOB='$apdob',AP_AGE='$apage',AP_FAT='$apfat',AP_MOT='$apmot',AP_HW='$aphw',AP_MS='$apms',AP_HEG='$apheg',AP_WEG='$apweg',AP_BLOOD='$apblood',AP_VIS='$apvis',AP_PRS='$apprs',AP_PRV='$apprv',AP_ADD='$apadd',AP_LAND='$apland',AP_CITY='$apcity',AP_TAL='$aptal',AP_DIS='$apdis',AP_STATE='$apstate',AP_COU='$apcou',AP_PCOD='$appcod',AP_TEL='$aptel',AP_MAIL='$apmail',AP_MNAME='$apmname',AP_MREL='$apmrel',PA_HAV='$pahav',PA_STATUS='$pastatus',PA_NO='$pano',PA_SUR='$pasur',PA_GNAME='$pagname',PA_NAT='$panat',PA_SEX='$pasex',PA_DOB='$padob',PA_POB='$papob',PA_POI='$papoi',PA_DOI='$padoi',PA_DOE='$padoe',PA_FAT='$pafat',PA_MOT='$pamot',PA_SPO='$paspo',PA_ADD='$paadd',PA_PCODE='$papcode',NO_NAME='$noname',NO_ADD='$noadd',NO_LAND='$noland',NO_CITY='$nocity',NO_TAL='$notal',NO_DIS='$nodis',NO_STATE='$nostate',NO_COU='$nocou',NO_PCOD='$nopcod',NO_MOB='$nomob',NO_TEL='$notel',NO_MAIL='$nomail',NO_CPER='$nocper',NO_NREL='$nonrel',OT_HAV='$othav',OT_STA='$otsta',OT_ADAT='$otadat',OT_FILE='$otfile',OT_SEL='$otsel',OT_SUR='$otsur',OT_GNAM='$otgnam',OT_NAT='$otnat',OT_SEX='$otsex',OT_DOB='$otdob',OT_OCC='$otocc',OT_POB='$otpob',OT_POI='$otpoi',OT_DOI='$otdoi',OT_DOE='$otdoe',OT_FAT='$otfat',OT_MOT='$otmot',OT_ADD='$otadd',OT_AS='$otas',U_ID='$uid' WHERE AP_ID ='".$AP_ID."'");
					
					}
					}

if($upd){?>

window.location ="mg_reg.php"

</script>

<?php }

if(!$upd){?>

window.location ="mg_reg.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_reg.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_reg.php";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->

function showUser(str)
{

$.ajax({
  type: "GET",
  url: "getsub.php?q="+str,
    success: function(result){
     $("#subcat").html(result);
  }

});
	}

</script>

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

});

</script>

$.ajax({
  type: "GET",
  url: "../get_state.php?cid="+cid,
    success: function(result){
     $("#state").html(result);
  }

});

}
function getcity(sid){
alert
 $.ajax({
  type: "GET",
  url: "../get_city.php?sid="+sid,
    success: function(result){
     $("#city").html(result);
  }

});
}
</script>

} 
 else if(val == 'not'){
 $("#scard").hide();

} 
 }
 </script>

<body>

<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>

</form>

<? include('header.php');?>

</div>

<li class="active">Manage Register Details</li>

</ol>

</div>

<h2 class="page-header">Add New Register Details</h2>

</div>

</div>

<label for="exampleInputEmail1">Online Application No:</label>

</div>

<label for="exampleInputEmail1">Online Registration No:</label>