One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/public_html/admin/

Edit File: mg_late.php

<?php include('config.php'); ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$LT_ID = $_GET['LT_ID'];

$view = mysql_query("select * from latest where LT_ID = '".$LT_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['LT_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE latest SET LT_STS ='0' WHERE LT_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE latest SET LT_STS ='1' WHERE LT_ID ='".$_GET['SAI']."'");

}

if($_GET['SAI1']){

$US = $_GET['LT_USER'];

if($US == 0){

$upd_sts =  mysql_query("UPDATE latest SET LT_USER ='0' WHERE LT_ID ='".$_GET['SAI1']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE latest SET LT_USER ='1' WHERE LT_ID ='".$_GET['SAI1']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from latest where LT_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Latest content deleted sucessfully");

window.location= "mg_late.php";

</script>

<?php }

if(!$del){?>

alert("Latest content not deleted sucessfully");

window.location= "mg_late.php";

</script>

<?php }

}

if($_POST['submit']){

$lname = mysql_real_escape_string($_POST['lname']);

$lmsg = mysql_real_escape_string($_POST['lmsg']);

if($_GET['LT_ID']==""){

$ins = mysql_query("insert into latest (L_NAME,L_MSG) values('$lname','$lmsg')");

?><script>alert("Inserted sucessfully");

</script><?

}

if($_GET['LT_ID']!=""){
		
				{

$upd =  mysql_query("update latest set L_NAME='$lname',L_MSG='$lmsg' WHERE LT_ID ='".$LT_ID."'");
 
					}

if($upd){?>

window.location ="mg_late.php"

</script>

<?php }

if(!$upd){?>

window.location ="mg_late.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_late.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_late.php";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

forced_root_block : 'p'
		
        plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

toolbar: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image"   
 
    });

</script>

<body>

<a href="#">
					<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>
		
	<div class="col-sm-9 col-sm-offset-3 col-lg-10 col-lg-offset-2 main">			
		<div class="row">
			<ol class="breadcrumb">
				<li><a href="dash.php"><span class="glyphicon glyphicon-home"></span></a></li>

<li class="active">Manage Latest News Details</li>

</ol>

</div>

<h2 class="page-header">Add Latest News</h2>

</div>

</div>

</div>

<label for="exampleInputEmail1">Content</label>

</div>

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>

<hr>

<div class="panel-heading">Latest News Details</div>

<thead>

<tr>

<th data-field="action" data-sortable="true">Action</th>								
								
								<th data-field="status" data-sortable="true">Home News</th>
		
								<th data-field="user" data-sortable="true">User News</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from latest");

$LT_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><a href= "mg_late.php?LT_ID=<?php echo $row['LT_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['LT_ID'];?>)">Delete</a></td>

<td><?php if($row['LT_STS']==1) {?> <a href = "mg_late.php?LT_STS=0&SAI=<?php echo $row['LT_ID'];?>">Active</a> <?php } else {?> <a href = "mg_late.php?LT_STS=1&SAI=<?php echo $row['LT_ID'];?>">InActive </a> <?php } ?></td>

<td><?php if($row['LT_USER']==1) {?> <a href = "mg_late.php?LT_USER=0&SAI1=<?php echo $row['LT_ID'];?>">Active</a> <?php } else {?> <a href = "mg_late.php?LT_USER=1&SAI1=<?php echo $row['LT_ID'];?>">InActive </a> <?php } ?></td>							   
							   </tr>

<?php

$LT_ID++;

}?>

</tbody>

</table>

</div>

</div>

$('li').click(function(event) {
        event.stopPropagation();
        $('> ul', this).toggle();

});
});
	</script>

</body>

</html>