One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/public_html/admin/

Edit File: mg_available.php

<? error_reporting(0);
session_start();
include 'config.php';

$_POST['username']=$_SESSION['username'];	
$_POST['password']=$_SESSION['password'];

$sql=mysql_query("select * from admin where USERNAME='".$_POST['username']."' and PASSWORD='".$_POST['password']."'");	
	if(mysql_num_rows($sql)==1)
	{

include('config.php');
$avai = mysql_query("select * from available");
$row = mysql_fetch_array($avai);

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

$A_ID = $_GET['A_ID'];

$view = mysql_query("select * from available where A_ID = '".$A_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['A_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE available SET A_STS ='0' WHERE A_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE available SET A_STS ='1' WHERE A_ID ='".$_GET['SAI']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from available where A_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Register detail deleted sucessfully");

window.location= "mg_available.php";

</script>

<?php }

if(!$del){?>

alert("Register detail  Not deleted sucessfully");

window.location= "mg_available.php";

</script>

<?php }

}

if($_POST['submit']){

$apsel = mysql_real_escape_string($_POST['apsel']);

$subcat = mysql_real_escape_string($_POST['subcat']);
			  
		/* 	  $clas = mysql_real_escape_string($_POST['clas']); */
			  
			  $aseat = mysql_real_escape_string($_POST['aseat']);

if($_GET['A_ID']==""){

$querytot=mysql_query("select *  from available where A_SPACK ='".$subcat."' and A_PACK ='".$apsel."'");
					if($rowtot=mysql_fetch_array($querytot))
					{

?>
<script type="text/javascript">
alert("Package already available");
location.href = 'mg_available.php';</script>
<?				
					
					
					
					}
			
			else{

$ins = mysql_query("insert into available (A_PACK,A_SPACK,A_SEAT) values ('$apsel','$subcat','$aseat')");	
	
		  			?><script>alert("Inserted sucessfully");

</script><?
			           
			}
                      }

if($_GET['A_ID']!=""){
		
				{

$upd =  mysql_query("update available set A_PACK='$apsel',A_SPACK='$subcat',A_SEAT='$aseat' WHERE A_ID ='".$A_ID."'");

}

if($upd){?>

window.location ="mg_available.php"

</script>

<?php }

if(!$upd){?>

window.location ="mg_available.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_available.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_available.php";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->

function showUser(str)
{

$.ajax({
  type: "GET",
  url: "getsub.php?q="+str,
    success: function(result){
     $("#subcat").html(result);
  }

});
	}

</script>

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

});

</script>

$.ajax({
  type: "GET",
  url: "../get_state.php?cid="+cid,
    success: function(result){
     $("#state").html(result);
  }

});

}
function getcity(sid){
alert
 $.ajax({
  type: "GET",
  url: "../get_city.php?sid="+sid,
    success: function(result){
     $("#city").html(result);
  }

});
}
</script>

} 
 else if(val == 'not'){
 $("#scard").hide();

} 
 }
 </script>

<body>

<a href="#">
					<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>
		
	<div class="col-sm-9 col-sm-offset-3 col-lg-10 col-lg-offset-2 main">			
		<div class="row">
			<ol class="breadcrumb">
				<li><a href="dash.php"><span class="glyphicon glyphicon-home"></span></a></li>

<li class="active">Manage Available Seats</li>

</ol>

</div>

<h2 class="page-header">Add Available Details</h2>

</div>

</div>

<form role="form" method="post" action="" enctype="multipart/form-data">
                    
					
					<div class="form-group col-sm-11">
					<label for="sel1">Select Package:</label>
					<?  if($A_ID) {?> 
					<select id="apsel" name="apsel" class="form-control" onchange="showUser(this.value)"> 
					<?php 
					$query1=mysql_query("select *  from available where A_ID = '".$A_ID."'");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['A_PACK'];?>"><?php echo $row1['A_PACK'];?></option>
					<?php }?>
					</select>
					<?}else{?>
					<select class="form-control" id="apsel" name="apsel" onchange="showUser(this.value)"> 
					<?php 
					$query1=mysql_query("select *  from package");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['P_NAME'];?>"><?php echo $row1['P_NAME'];?></option>
					<?php }?>
					</select>
					<? }?>
					</div>
					
					<div class="form-group col-sm-11">	
					<label for="sel1">Select Subpackage:</label>
					<?  if($A_ID) {?> 
					<select id="subcat" name="subcat" class="form-control"> 
					<?php 
					$query1=mysql_query("select *  from available where A_ID = '".$A_ID."'");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['A_SPACK'];?>"><?php echo $row1['A_SPACK'];?></option>
					<?php }?>
					</select>
					<?}else{?>					
					
					<select id="subcat" name="subcat" class="form-control"> 
					<?php 
					$query1=mysql_query("select *  from subpackage");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['SP_NAME'];?>"><?php echo $row1['SP_NAME'];?></option> 
					<?php }?>
					</select>
					<? }?>
					</div>

<label for="exampleInputEmail1">Avaiable Seats:</label>

</div>
					
				
   
   

					
                  <div class="box-footer col-sm-11">

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>

<hr>

<label for="exampleInputEmail1">Total Available Seats:</label>
					<?php 
					$query2=mysql_query("select SUM(A_SEAT) AS T_SEAT  from available");
					while($row2=mysql_fetch_assoc($query2)) {?>

</div>

</section>

<div class="panel-heading">Available Data Table</div>

<thead>

<tr>

<th data-field="sname"  data-sortable="true">Package</th>
								
						        <th data-field="clas"  data-sortable="true">SubPakage</th>

<th data-field="sstatus" data-sortable="true">Status</th>

<th data-field="saction" data-sortable="true">Action</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from available");

$A_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><a href= "mg_available.php?A_ID=<?php echo $row['A_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['A_ID'];?>)">Delete</a></td>

<td><?php if($row['A_STS']==1) {?> <a href = "mg_available.php?A_STS=0&SAI=<?php echo $row['A_ID'];?>">Active</a> <?php } else {?> <a href = "mg_available.php?A_STS=1&SAI=<?php echo $row['A_ID'];?>">InActive </a> <?php } ?></td>

</tr>

<?php

$A_ID++;

}?>

</tbody>

</table>

</div>

</div>

$('li').click(function(event) {
        event.stopPropagation();
        $('> ul', this).toggle();

});
});
	</script>
<script>
$('.top').on('click', function() {
	$parent_box = $(this).closest('.box');
	$parent_box.siblings().find('.bottom').hide();
	$parent_box.find('.bottom').toggle();
});
</script>
<style>
.container .box {
width:auto;
max-width:900px;
}

.container .box .top {
  padding: 12px;
  background-color: blue;
  color: white;
  cursor: pointer;
}

.container .box .bottom {

display: none;
}
</style>
</body>

</html>
	<? } else
	{

$queryu=mysql_query("select * from admin where ID='1'");
$rowu=mysql_fetch_array($queryu); 		
		
		if($rowu)
{
$rowu['A_LOG'];	
$log = $rowu['A_LOG'] - 1;
$upd_sts =  mysql_query("UPDATE admin SET A_LOG ='$log' where ID='1'"); 
}

header("Location: home.php");
	}
?>