One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/public_html/admin/

Edit File: mg_order.php

<?php include('config.php'); ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$ORD_ID = $_GET['ORD_ID'];

$view = mysql_query("select * from mainorder where ORD_ID = '".$ORD_ID."'"); // for editing

$data = mysql_fetch_array($view);

/* if($_GET['SAI']){

$STS = $_GET['ORD_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE mainorder SET ORD_STS ='0' WHERE ORD_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE mainorder SET ORD_STS ='1' WHERE ORD_ID ='".$_GET['SAI']."'");

}

} */

if($_GET['SAI1']){

$STS = $_GET['ORD_CANCEL'];

if($STS == 1){

$upd_sts =  mysql_query("UPDATE mainorder SET ORD_CANCEL ='1' WHERE ORD_ID ='".$_GET['SAI1']."'");  //for changing status

if($upd_sts){?>

alert("Order details Cancelled sucessfully");

window.location= "mg_order.php";

</script>

<?php }
}

else{

$upd_sts =  mysql_query("UPDATE mainorder SET ORD_CANCEL ='0' WHERE ORD_ID ='".$_GET['SAI1']."'");
 if($upd_sts){?>

alert("Order status Changed back sucessfully");

window.location= "mg_order.php";

</script>

<?php }
}

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from mainorder where ORD_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Order details deleted sucessfully");

window.location= "mg_order.php";

</script>

<?php }

if(!$del){?>

alert("Agent detail  Not deleted sucessfully");

window.location= "mg_order.php";

</script>

<?php }

}

if($_POST['submit']){

$msg= mysql_real_escape_string($_POST['msg']);
	
		 $v1= mysql_real_escape_string($_POST['orderdate1']);

if($_GET['ORD_ID']!=""){
		
				{

$upd =  mysql_query("update mainorder set ORD_MSG='$msg',ORD_DATE1='$v1' WHERE ORD_ID ='".$ORD_ID."'");
 
				}

if($upd)
				{?>

window.location ="mg_order.php"

</script>

<?php }

if(!$upd){?>

window.location ="mg_order.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_order.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_order.php";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

forced_root_block : 'p'
		
        plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

toolbar: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image"   
 
    });

</script>

$.ajax({
  type: "GET",
  url: "../get_state.php?ORD_ID="+ORD_ID,
    success: function(result){
     $("#state").html(result);
  }

});

}
function getcity(sid){
alert
 $.ajax({
  type: "GET",
  url: "../get_city.php?sid="+sid,
    success: function(result){
     $("#city").html(result);
  }

});
}
</script>

<body>

<nav class="navbar navbar-inverse navbar-fixed-top" role="navigation">
		<div class="container-fluid">
			<div class="navbar-header">
				<a href="#"><button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#sidebar-collapse">
					<span class="sr-only">Toggle navigation</span>
					<span class="icon-bar"></span>
					<span class="icon-bar"></span>
					<span class="icon-bar"></span>
				</button>
				</a>
				<a class="navbar-brand" href="#"><b>Fine Home Delivery Menu</b></a>
				<ul class="user-menu">
					<li class="dropdown pull-right">
						<a href="#" class="dropdown-toggle" data-toggle="dropdown"><img src="own.png" style="border-radius:40%;width:35px;height:35px;"> MR. Ramachandran<span class="caret"></span></a>
						<ul class="dropdown-menu" role="menu">
							<li><a href="logou.php" style="color:red;"><span class="glyphicon glyphicon-off"></span>  Logout</a></li>
						</ul>
					</li>
				</ul>
			</div>
		</div>
	</nav>

</div>

</form>

<? include('header.php');?>

</div>

<li class="active">Manage Order Details</li>

</ol>

</div>

<h2 class="page-header">Order Details</h2>

</div>

</div>

<label for="exampleInputEmail1">Order-ID</label>

<input type="text" class="form-control" name="order" value="<?php echo $data['ORD_ID']; ?>" readonly>

</div>

<label for="exampleInputEmail1">Order Date</label>

</div>

</div>	
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Address</label>
					  <textarea class="form-control" rows="2" id="address" name="address"><?php echo $data['ORD_ADD']; ?></textarea>

</div>						
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Email</label>

</div>

<label for="exampleInputEmail1">Mobile Number</label>

</div>								
							
	             <div class="form-group col-sm-11">

<label for="exampleInputEmail1">Order Details</label>

<thead>

<tr>

<th data-field="id1" data-sortable="true">Item ID</th>
								
								<th data-field="action2" data-sortable="true">Product Code</th>

<th data-field="name1"  data-sortable="true">Product Name</th>
								
								<th data-field="cname1"  data-sortable="true">Price</th>

<th data-field="view1" data-sortable="true">Quantity</th>
								
								<th data-field="action1" data-sortable="true">Total</th>

</tr>

</thead>

<tbody>

<?php

$view1 = mysql_query("select * from orderdetails where ORD_ID = '".$data['ORD_ID']."'");

$ORD_ID1=1;

while($data1 = mysql_fetch_array($view1))
{

?>

<?php

$ORD_ID1++;

}?>

</tbody>

</table>

<div class="form-group col-sm-11">				 
					  <label for="exampleInputEmail1">Total Amount with shipping</label>
					  <textarea class="form-control" rows="2" id="comm" name="comm"><?php echo $data['ORD_TOT']; ?></textarea>
					</div>

<? if($data['ORD_ID']){ ?>
					<div class="form-group col-sm-11">

<label for="exampleInputFile">Bill Image</label>

<label for="exampleInputEmail1"><b>Tracking Details</b></label>

</div>						
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Delivery Date</label>

</div>					
				
	             <div class="form-group col-sm-11">

<label for="exampleInputEmail1">Message</label>

<textarea class="form-control" rows="2" id="msg" name="msg">Order has been Successfully Placed.</textarea>
                 </div>					
				
              <div class="box-footer col-sm-11">

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>

<hr>

<div class="panel-heading">Order Details Table</div>

<thead>

<tr>

<th data-field="name1"  data-sortable="true">Date</th>
								
								<th data-field="cname1"  data-sortable="true">Order ID</th>

<th data-field="view1" data-sortable="true">View</th>
								
								<th data-field="action1" data-sortable="true">Order Details</th>							
								
						    </tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from mainorder ORDER BY ORD_ID DESC");

$ORD_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><?php echo $row['ORD_DATE'];
/* $time1 = strtotime($row['ORD_DATE']);
$myFormatForView = date("d/m/Y", $time1); */

/* echo $myFormatForView; */?></td>
							   
							   <td><?php echo $row['ORD_ID'];?></td>

<td><a href= "mg_order.php?ORD_ID=<?php echo $row['ORD_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['ORD_ID'];?>)">Delete</a></td>
					   
							   
							   
							   <td><?php if($row['ORD_CANCEL']==0) {?> <a href = "mg_order.php?ORD_CANCEL=1&SAI1=<?php echo $row['ORD_ID'];?>">Ordered</a> <?php } else {?> <a href = "mg_order.php?ORD_CANCEL=0&SAI1=<?php echo $row['ORD_ID'];?>">Cancelled</a> <?php } ?></td>								   
							   
							   </tr>

<?php

$ORD_ID++;

}?>

</tbody>

</table>

</div>

</div>

$('li').click(function(event) {
        event.stopPropagation();
        $('> ul', this).toggle();

});
});
	</script>
<style>
.fixed-table-body {
height: auto!important;
}
</style>
</body>

</html>