One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/www/admin/

Edit File: mg_enquiry.php

<?php include('config.php');
$avai = mysql_query("select * from enquiry");
$row = mysql_fetch_array($avai);
 ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$EQ_NO = $_GET['EQ_NO'];

$view = mysql_query("select * from enquiry where EQ_NO = '".$EQ_NO."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from enquiry where EQ_NO='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Enquiry detail deleted sucessfully");

window.location= "mg_enquiry.php";

</script>

<?php }

if(!$del){?>

alert("Enquiry detail  not deleted sucessfully");

window.location= "mg_enquiry.php";

</script>

<?php }

}

if($_POST['submit']){
      
  		       	  
			  $eqdate = mysql_real_escape_string($_POST['eqdate']);
			  $eqno = mysql_real_escape_string($_POST['eqno']);
			  $eqtit = mysql_real_escape_string($_POST['eqtit']);			  
			  $eqname = mysql_real_escape_string($_POST['eqname']);
			  $eqcity = mysql_real_escape_string($_POST['eqcity']);
			  $eqmob = mysql_real_escape_string($_POST['eqmob']);
			  $eqtel = mysql_real_escape_string($_POST['eqtel']);
			  $eqmail = mysql_real_escape_string($_POST['eqmail']);
			  $eqsel = mysql_real_escape_string($_POST['eqsel']);
			  $eqcls = mysql_real_escape_string($_POST['eqcls']);
			  $eqmon = mysql_real_escape_string($_POST['eqmon']);
			  $eqbook = mysql_real_escape_string($_POST['eqbook']);
			  $eqdays = mysql_real_escape_string($_POST['eqdays']);
			  $eqnos = mysql_real_escape_string($_POST['eqnos']);
			  $eqbl2 = mysql_real_escape_string($_POST['eqbl2']);
			  $eqbl6 = mysql_real_escape_string($_POST['eqbl6']);
			  $eqab6 = mysql_real_escape_string($_POST['eqab6']);
			  $eqage = mysql_real_escape_string($_POST['eqage']);
			  $eqkwab = mysql_real_escape_string($_POST['eqkwab']);
			  $eqre = mysql_real_escape_string($_POST['eqre']);
			  $eqre1 = mysql_real_escape_string($_POST['eqre1']);			  
		  
$display = "Assalamu alaikum. Enquiry No: ".$_POST['eqno'].". " .$_POST['eqtit']." ".$_POST['eqname']. " We thanking you for inquiring about our package of: ".$_POST['eqsel'].". Class: " .$_POST['eqcls']. " Month of: " .$_POST['eqmon'].". For: "  .$_POST['eqdays']. " Days. Through customer care executive Sha Haj Service (India) Pvt Ltd. Mobile 24x6: 94451 50009.";
			  
			$i=1; 
			if($_GET['EQ_NO']==""){

$ins = mysql_query("insert into enquiry (EQ_DATE,EQ_TIT,EQ_NAME,EQ_CITY,EQ_MOBILE,EQ_PHONE,EQ_MAIL,EQ_PACK,EQ_CLS,EQ_MTH,EQ_BOOK,EQ_DAYS,EQ_NOS,EQ_BL2,EQ_BL6,EQ_AB6,EQ_AGE,EQ_KWAB,EQ_RE,EQ_RE1,EQ_DIS) values ('$eqdate','$eqtit','$eqname','$eqcity','$eqmob','$eqtel','$eqmail','$eqsel','$eqcls','$eqmon','$eqbook','$eqdays','$eqnos','$eqbl2','$eqbl6','$eqab6','$eqage','$eqkwab','$eqre','$eqre1','$display')");	
	
		  			?><script>alert("Inserted sucessfully");

</script><?
	if($i=='1')
{
						$username = 'SHAHAJ';
						$key = '9fc19b3ab1XX';
						$mobile = $eqmob;
						$sender = 'SHAHAJ';
						$accusage = '1';
						
						$smstext   =   $display;
						
						$message = urlencode($smstext);
						
						$data1 = 'user='.$username.'&key='.$key."&mobile=".$mobile."&message=".$message."&senderid=".$sender."&accusage=".$accusage ;

$ch = curl_init('http://mobicomm.dove-sms.com/submitsms.jsp?'.$data1);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
						$response = curl_exec($ch);
						curl_close($ch);
						$i++;
}		           
		
                      }

if($_GET['EQ_NO']!=""){
		
				{

$upd =  mysql_query("update enquiry set EQ_TIT='$eqtit',EQ_NAME='$eqname',EQ_CITY='$eqcity',EQ_MOBILE='$eqmob',EQ_PHONE='$eqtel',EQ_MAIL='$eqmail',EQ_PACK='$eqsel',EQ_CLS='$eqcls',EQ_MTH='$eqmon',EQ_BOOK='$eqbook',EQ_DAYS='$eqdays',EQ_NOS='$eqnos',EQ_BL2='$eqbl2',EQ_BL6='$eqbl6',EQ_AB6='$eqab6',EQ_AGE='$eqage',EQ_KWAB='$eqkwab',EQ_RE='$eqre',EQ_RE1='$eqre1',EQ_DIS='$display' WHERE EQ_NO ='".$EQ_NO."'");

if($i=='1')
{
						$username = 'SHAHAJ';
						$key = '9fc19b3ab1XX';
						$mobile = $eqmob;
						$sender = 'SHAHAJ';
						$accusage = '1';
						
						$smstext   =   $display;
						
						$message = urlencode($smstext);
						
						$data1 = 'user='.$username.'&key='.$key."&mobile=".$mobile."&message=".$message."&senderid=".$sender."&accusage=".$accusage ;

$ch = curl_init('http://mobicomm.dove-sms.com/submitsms.jsp?'.$data1);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
						$response = curl_exec($ch);
						curl_close($ch);
						$i++;
}						
					
					}

if($upd){?>

window.location ="mg_enquiry.php"

</script>

<?php
			}

if(!$upd){?>

window.location ="mg_enquiry.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_enquiry.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_enquiry.php";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->
<script>
function checkAvailability(mobile) {
$("#loaderIcon").show();
jQuery.ajax({
url: "check_enquiry.php",
data:'username='+$("#eqmob").val(),
type: "POST",

success:function(data){
$("#user-availability-status").html(data);
$("#loaderIcon").hide();
},
error:function (){}
});

}
</script>
 <script>
 $(document).ready(function() {
 $("#pyes").hide();
 });
</script>
<script>

function showUser(str)
{
 if(str!='Ziyarah'){
 $("#pyes").show(); 
 }

else if(str=='Ziyarah'){
 $("#pyes").hide();
 } 
 if(str=='Haj'){
 $("#phaj").show();
 }
 else if(str!='Haj')
 {
 $("#phaj").hide();	 
 }
$.ajax({
  type: "GET",
  url: "getsub.php?q="+str,
    success: function(result){
     $("#subcat").html(result);
  }

});
	}

</script>

tinymce.init({

selector: "textarea",

themes: "modern",

plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

});

</script>

$.ajax({
  type: "GET",
  url: "../get_state.php?cid="+cid,
    success: function(result){
     $("#state").html(result);
  }

});

}
function getcity(sid){
alert
 $.ajax({
  type: "GET",
  url: "../get_city.php?sid="+sid,
    success: function(result){
     $("#city").html(result);
  }

});
}
</script>

<body>

<a href="#">
					<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>

</form>

<? include('header.php');?>

</div>

<li class="active">Manage Enquiry</li>

</ol>

</div>

<h2 class="page-header">Add/Edit Enquiry Details</h2>

</div>

</div>

<label for="exampleInputEmail1">Enquiry Date:</label>
	<?php if($EQ_NO){?>
	                <input type="date" class="form-control" id="eqdate" name="eqdate" value="<?php echo $data['EQ_DATE']; ?>">
	<?php } else {?>
                    <input type="date" class="form-control" id="eqdate" name="eqdate" value="<?php echo date('Y-m-d') ?>">
	<?php }?>
                    </div>
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Enquiry No:</label>
	<?php if($EQ_NO)
	{?>
	                <input type="text" class="form-control" id="eqno" name="eqno" value="<?php echo $data['EQ_NO']; ?>" readonly autofocus>
	<?php } else {
$queryno=mysql_query("SELECT * FROM enquiry ORDER BY EQ_NO DESC LIMIT 1");
$rowno=mysql_fetch_array($queryno);
		?>
                    <input type="text" class="form-control" id="eqno" name="eqno" value="<?php echo $rowno['EQ_NO']+1; ?>" readonly autofocus>
	<?php }?>
                    </div>
					
					
					
					
	<?php if($EQ_NO){
$queryagt=mysql_query("SELECT * FROM agentdetails where AID='".$data['EQ_AGENT']."'");
$rowagt=mysql_fetch_array($queryagt);
		if($rowagt){?>					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Agent Name:</label>

<input type="text" class="form-control" value="<?php echo $rowagt['NAME']; ?>" readonly>

</div>	
		<?php } else { ?>
			
			
	<?	} }?>
                    			
					
					
					
					
					
					
					
					
					<div class="form-group col-sm-11">
					     <label for="sel1">Title: </label>
						<select class="form-control" id="eqtit" name="eqtit" onChange="outputtit(this)" required>
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_TIT']; ?>"><?php echo $data['EQ_TIT']; ?></option>	
					<? } else {?>
					<option value="">SELECT</option> 	
					<? } ?>					
					<option value="Haji" selected="selected">Haji</option>
					<option value="Haja">Haja</option>
						</select>
					</div>  					
					
					
					
					
					
					
					<div class="form-group col-sm-11">

<input type="text" class="form-control" id="eqname" name="eqname" value="<?php echo $data['EQ_NAME']; ?>" onBlur="outputname(this)" required>

</div>

<div class="form-group col-sm-11">

</div>						
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Mobile Number :   </label>

<input type="text" class="form-control" id="eqmob" name="eqmob" value="<?php echo $data['EQ_MOBILE']; ?>" onBlur="checkAvailability(this)" required>

</div>	
					
					<div class="form-group col-sm-11">					
						  <span id="user-availability-status"></span>
                    </div>	
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Telephone Number :   </label>

</div>
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Email Id:  </label>

</div>

<div class="form-group col-sm-11">
					<label for="sel1">Select Package:</label>
					<?  if($EQ_NO) {?> 
					<select id="eqsel" name="eqsel" class="form-control" onselect="outputValue(this)"> 
					<?php 
					$query1=mysql_query("select *  from enquiry where EQ_NO = '".$EQ_NO."'");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['EQ_PACK'];?>"><?php echo $row1['EQ_PACK'];?></option>
					<?php 
					$query2=mysql_query("select *  from package");
					while($row2=mysql_fetch_array($query2)) {?>
					<option value="<?php echo $row2['P_NAME'];?>"><?php echo $row2['P_NAME'];?></option>
					<?php }?>
					<?php }?>
					</select>
					<?}else{?>
					<select class="form-control" id="eqsel" name="eqsel" onChange="outputValue(this)" required> 
					<option value="">SELECT</option> 						
					<?php 
					$query2=mysql_query("select *  from package");
					while($row2=mysql_fetch_array($query2)) {?>
				
					<option value="<?php echo $row2['P_NAME'];?>"<?php if (Haj ==  $row2['P_NAME']): ?> selected="selected"<?php endif; ?>><?php echo $row2['P_NAME'];?></option>
					<?php }?>
					</select>
					<? }?>
					</div>
					
					
					<div class="form-group col-sm-11">	
					<label for="sel1">Select Class:</label>
					<?  if($EQ_NO) {?> 
					<select id="eqcls" name="eqcls" class="form-control" onChange="outputcls(this)"> 
					<?php 
					$queryc=mysql_query("select *  from enquiry where EQ_NO = '".$EQ_NO."'");
					while($rowc=mysql_fetch_array($queryc)) {?>
					<option value="<?php echo $rowc['EQ_CLS'];?>"><?php echo $rowc['EQ_CLS'];?></option> 
					<?php 
					$queryc=mysql_query("select *  from class");
					while($rowc=mysql_fetch_array($queryc)) {?>
					<option value="<?php echo $rowc['C_NAME'];?>"><?php echo $rowc['C_NAME'];?></option> 
					<?php }?>
					<?php }?>
					</select>
					<?}else{?>	
					<select id="eqcls" name="eqcls" class="form-control" onChange="outputcls(this)" required>
					<option value="">SELECT</option> 					
					<?php 
					$queryc=mysql_query("select *  from class");
					while($rowc=mysql_fetch_array($queryc)) {?>
					<option value="<?php echo $rowc['C_NAME'];?>" <?php if (Silver ==  $rowc['C_NAME']): ?> selected="selected"<?php endif; ?>><?php echo $rowc['C_NAME'];?></option> 
					<?php }?>
					</select>
					<? }?>
					</div>
					
					
					<div class="form-group col-sm-11">
					<label for="sel1">Select Month:</label>
					<select id="eqmon" name="eqmon" class="form-control" onChange="outputmth(this)" required> 					
					<?  if($EQ_NO) {?> 
					<?php 
					$query1=mysql_query("select *  from enquiry where EQ_NO = '".$EQ_NO."'");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['EQ_MTH'];?>" ><?php echo $row1['EQ_MTH'];?></option>
					<?php }?>
					<?}else {?>
					<option value="">SELECT</option> 	
					<? } ?>	
					<?php 
					$querym=mysql_query("select *  from month");
					while($rowm=mysql_fetch_array($querym)) {?>
					<option value="<?php echo $rowm['M_LIST'];?>" <?php if (August ==  $rowm['M_LIST']): ?> selected="selected"<?php endif; ?>><?php echo $rowm['M_LIST'];?></option>
					<?php }?>
					</select>

</div>

<label for="exampleInputEmail1">No of Days. :</label>
					<?  if($EQ_NO) {?> 
                      <input type="number" class="form-control" id="eqdays" name="eqdays" value="<?php echo $data['EQ_DAYS']; ?>" onBlur="outputdays(this)">
					<? } else {?>
                      <input type="number" class="form-control" id="eqdays" name="eqdays" value="30" onBlur="outputdays(this)" required>					
					<? } ?>							
                    </div>		
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">How many nos. :</label>
					  
					<select class="form-control" id="eqnos" name="eqnos">
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_NOS']; ?>"><?php echo $data['EQ_NOS']; ?></option>	
					<? } else {?>
					<option value="">SELECT</option> 	
					<? } ?>					
					<option value="1" selected="selected">1</option>
					<option value="2">2</option>
					<option value="3">3</option>
					<option value="4">4</option>
					<option value="5">5</option>
					<option value="6">6</option>
					<option value="7">7</option>
					<option value="8">8</option>
					<option value="9">9</option>
					<option value="10">10</option>

</select>

</div>

<label for="exampleInputEmail1">Infant 0-2 :</label>

<select class="form-control" id="eqbl2" name="eqbl2">
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_BL2']; ?>"><?php echo $data['EQ_BL2']; ?></option>	
					<? } else {?>
					<option value="">SELECT</option> 	
					<? } ?>		
					<option value="NO" selected="selected">NO</option>					
					<option value="1">1</option>
					<option value="2">2</option>
					<option value="3">3</option>
					<option value="4">4</option>
					<option value="5">5</option>
					</select>					  
					  
					  
                    </div>

<label for="exampleInputEmail1">Child 3-6 :</label>
					  
					<select class="form-control" id="eqbl6" name="eqbl6">
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_BL6']; ?>"><?php echo $data['EQ_BL6']; ?></option>	
					<? } else {?>
					<option value="">SELECT</option> 	
					<? } ?>		
					<option value="NO" selected="selected">NO</option>					
					<option value="1">1</option>
					<option value="2">2</option>
					<option value="3">3</option>
					<option value="4">4</option>
					<option value="5">5</option>
					</select>

</div>

<label for="exampleInputEmail1">Child 7-9 :</label>
					  
					<select class="form-control" id="eqab6" name="eqab6">
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_AB6']; ?>"><?php echo $data['EQ_AB6']; ?></option>	
					<? } else {?>
					<option value="">SELECT</option> 	
					<? } ?>		
					<option value="NO" selected="selected">NO</option>					
					<option value="1">1</option>
					<option value="2">2</option>
					<option value="3">3</option>
					<option value="4">4</option>
					<option value="5">5</option>
					</select>

</div>

<label for="exampleInputEmail1">Age Details :</label>
					<?  if($EQ_NO) {?> 
                      <input type="number" class="form-control" id="eqage" name="eqage" value="<?php echo $data['EQ_AGE']; ?>">
					<? } else {?>
                      <input type="number" class="form-control" id="eqage" name="eqage" value="30">					
					<? } ?>						
                    </div>

<div class="form-group col-sm-11">
					     <label for="sel1">How you found out about us?: </label>
						<select class="form-control" id="eqkwab" name="eqkwab">
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_KWAB']; ?>"><?php echo $data['EQ_KWAB']; ?></option>	
					<? } else {?>
					<option value="select">SELECT</option> 	
					<? } ?>					
					<option value="Newspaper">Newspaper</option>
					<option value="Television">Television</option>
					<option value="Website" selected="selected">Website</option>
					<option value="SMS">SMS</option>
					<option value="Brochure">Brochure</option>
					<option value="Reference">Reference</option>
					<option value="Friends">Friends</option>	
					<option value="Colleagues">Colleagues</option>
					<option value="Tour Operator">Tour Operator</option>
					<option value="Agent">Agent</option>
					<option value="Others">Others</option>				
						</select>
					</div>

<label for="exampleInputEmail1">Remaker :</label>
					<?  if($EQ_NO) {?> 
                      <input type="text" class="form-control" id="eqre" name="eqre" value="<?php echo $data['EQ_RE']; ?>">
					<? }else{ ?>
					  <input type="text" class="form-control" id="eqre" name="eqre" value="I WILL CALL YOU">
					<? } ?>
                    </div>	
			
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Remaker Other:</label>
					<?  if($EQ_NO) {?> 
                      <input type="text" class="form-control" id="eqre1" name="eqre1" value="<?php echo $data['EQ_RE1']; ?>">
					<? }else{ ?>
					  <input type="text" class="form-control" id="eqre1" name="eqre1" value="WE WILL CALL YOU">
					<? } ?>
                    </div>

<div class="form-group col-sm-11">
					     <label for="sel1">Whether package booked after last enquiry?: </label>
						<select class="form-control" id="eqbook" name="eqbook">
					<?  if($EQ_NO) {?> 
					<option value="<?php echo $data['EQ_BOOK']; ?>"><?php echo $data['EQ_BOOK']; ?></option>	
					<? } else {?>
					<option value="select">SELECT</option> 	
					<? } ?>					
					<option value="Yes">Yes</option>
					<option value="No">No</option>
						</select>
					</div>

<label >Assalamu alaikum .Enquiry No.:<span id="output6" style="color:red;"></span> <span id="output5" style="color:red;"></span> <span id="output1" style="color:red;"></span> 
					 We thanking you for inquiring about our package of <span id="output" style="color:red;"></span> class: <span id="output2" style="color:red;"></span> Month of: <span id="output3" style="color:red;"></span> For : <span id="output4" style="color:red;"></span> Days. Through customer care executive Sha Haj Service (India) Pvt Ltd. Mobile 24x6: 94451 50009. </label>
                    </div>

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>
<hr>

<div class="panel-heading">Enquiry Data Table</div>

<thead>

<tr>

<th data-field="spack"  data-sortable="true">Enquiry Date</th>

<th data-field="sname"  data-sortable="true">Enquiry No</th>

<th data-field="epack"  data-sortable="true">Package</th>

<th data-field="eagent"  data-sortable="true">Agent or Not</th>

<th data-field="sstatus" data-sortable="true">Status</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from enquiry ORDER BY EQ_NO DESC");

$EQ_NO=1;

while($row=mysql_fetch_array($table))

{

?>

<td><?php echo $EQ_NO;?></td>
							   <?  $time1 = strtotime($row['EQ_DATE']);
								$myFormat = date("d/m/Y", $time1); ?>
							   
							   <td><?php echo $myFormat;?></td>		
							   
							   <td><?php echo $row['EQ_NO'];?></td>
							   
							   <td><?php echo $row['EQ_NAME'];?></td>
							   
							   <td><?php echo $row['EQ_PACK'];?></td>							   
							   
							   <td><?php if($row['EQ_AGENT']){echo "YES";}else{echo "NO"; }?></td>							   
							   					   
							   <td><a href= "mg_enquiry.php?EQ_NO=<?php echo $row['EQ_NO'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['EQ_NO'];?>)">Delete</a></td>

</tr>

<?php

$EQ_NO++;

}?>

</tbody>

</table>

</div>

</div>

$('li').click(function(event) {
        event.stopPropagation();
        $('> ul', this).toggle();

});
});
	</script>
<script>
$('.top').on('click', function() {
	$parent_box = $(this).closest('.box');
	$parent_box.siblings().find('.bottom').hide();
	$parent_box.find('.bottom').toggle();
});
</script>
<script>
window.onload = function() {
    document.getElementById('output6').innerHTML = eqno.value;
}
</script>
<style>
.container .box {
width:auto;
max-width:900px;
}

.container .box .top {
  padding: 12px;
  background-color: blue;
  color: white;
  cursor: pointer;
}

.container .box .bottom {

display: none;
}
</style>
</body>

</html>