One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/public_html/admin/

Edit File: mg_price.php

<?php include('config.php');
$avai = mysql_query("select * from price");
$row = mysql_fetch_array($avai);
 ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$SP_ID = $_GET['SP_ID'];

$view = mysql_query("select * from price where SP_ID = '".$SP_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['SP_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE price SET SP_STS ='0' WHERE SP_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE price SET SP_STS ='1' WHERE SP_ID ='".$_GET['SAI']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from price where SP_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Register detail deleted sucessfully");

window.location= "mg_price.php";

</script>

<?php }

if(!$del){?>

alert("Register detail  Not deleted sucessfully");

window.location= "mg_price.php";

</script>

<?php }

}

if($_POST['submit']){

$apsel = mysql_real_escape_string($_POST['apsel']);

$subcat = mysql_real_escape_string($_POST['subcat']);
			  
			  $clas = mysql_real_escape_string($_POST['clas']); 
 
			  $apri = mysql_real_escape_string($_POST['apri']); 
			  
			  $totpak = mysql_real_escape_string($_POST['totpak']);

if($_GET['SP_ID']==""){

$querytot=mysql_query("select *  from price where SP_NAME ='".$subcat."' and P_NAME ='".$apsel."' and C_NAME='".$clas."'");
					if($rowtot=mysql_fetch_array($querytot))
					{

?>
<script type="text/javascript">
alert("Payment Price already have");
location.href = 'mg_price.php';</script>
<?				
					
					
					
					}
			
			else{

$ins = mysql_query("insert into price (P_NAME,SP_NAME,C_NAME,SP_AMT,TOT_AMT) values ('$apsel','$subcat','$clas','$apri','$totpak')");	
	
		  			?><script>alert("Inserted sucessfully");

</script><?
			           
			}
                      }

if($_GET['SP_ID']!=""){
		
				{

$upd =  mysql_query("update price set P_NAME='$apsel',SP_NAME='$subcat',C_NAME='$clas',SP_AMT='$apri',TOT_AMT='$totpak' WHERE SP_ID ='".$SP_ID."'");

}

if($upd){?>

window.location ="mg_price.php"

</script>

<?php }

if(!$upd){?>

window.location ="mg_price.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_price.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_price.php";

}

</script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->
 <script>
 $(document).ready(function() {
 $("#pyes").hide();
 });
</script>
<script>

function showUser(str)
{
 if(str!='Ziyarah'){
 $("#pyes").show(); 
 }

else if(str=='Ziyarah'){
 $("#pyes").hide();
 } 
 if(str=='Haj'){
 $("#phaj").show();
 }
 else if(str!='Haj')
 {
 $("#phaj").hide();	 
 }
$.ajax({
  type: "GET",
  url: "getsub.php?q="+str,
    success: function(result){
     $("#subcat").html(result);
  }

});
	}

</script>

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

});

</script>

$.ajax({
  type: "GET",
  url: "../get_state.php?cid="+cid,
    success: function(result){
     $("#state").html(result);
  }

});

}
function getcity(sid){
alert
 $.ajax({
  type: "GET",
  url: "../get_city.php?sid="+sid,
    success: function(result){
     $("#city").html(result);
  }

});
}
</script>

<body>

<a href="#">
					<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>

</form>

<? include('header.php');?>

</div>

<li class="active">Manage Payment Price</li>

</ol>

</div>

<h2 class="page-header">Add/Edit Payment Price Details</h2>

</div>

</div>

<form role="form" method="post" action="" enctype="multipart/form-data">
                    
					
					<div class="form-group col-sm-11">
					<label for="sel1">Select Package:</label>
					<?  if($SP_ID) {?> 
					<select id="apsel" name="apsel" class="form-control" onchange="showUser(this.value)"> 
					<?php 
					$query1=mysql_query("select *  from price where SP_ID = '".$SP_ID."'");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['P_NAME'];?>"><?php echo $row1['P_NAME'];?></option>
					<?php }?>
					</select>
					<?}else{?>
					<select class="form-control" id="apsel" name="apsel" onchange="showUser(this.value)"> 
					<?php 
					$query1=mysql_query("select *  from package");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['P_NAME'];?>"><?php echo $row1['P_NAME'];?></option>
					<?php }?>
					</select>
					<? }?>
					</div>
					
					<div class="form-group col-sm-11">	
					<label for="sel1">Select Subpackage:</label>
					<?  if($SP_ID) {?> 
					<select id="subcat" name="subcat" class="form-control"> 
					<?php 
					$query1=mysql_query("select *  from price where SP_ID = '".$SP_ID."'");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['SP_NAME'];?>"><?php echo $row1['SP_NAME'];?></option>
					<?php }?>
					</select>
					<?}else{?>					
					
					<select id="subcat" name="subcat" class="form-control"> 
					<?php 
					$query1=mysql_query("select *  from subpackage");
					while($row1=mysql_fetch_array($query1)) {?>
					<option value="<?php echo $row1['SP_NAME'];?>"><?php echo $row1['SP_NAME'];?></option> 
					<?php }?>
					</select>
					<? }?>
					</div>
					
					<div class="form-group col-sm-11">	
					<label for="sel1">Select Class:</label>
					<?  if($SP_ID && $data['C_NAME']!="") {?> 
					<select id="clas" name="clas" class="form-control"> 
					<?php 
					$queryc=mysql_query("select *  from class where C_NAME='".$data['C_NAME']."'");
					while($rowc=mysql_fetch_array($queryc)) {?>
					<option value="<?php echo $rowc['C_NAME'];?>"><?php echo $rowc['C_NAME'];?></option> 
					<?php }?>
					</select>
					<?}else{?>	
					<select id="clas" name="clas" class="form-control"> 
					<?php 
					$queryc=mysql_query("select *  from class");
					while($rowc=mysql_fetch_array($queryc)) {?>
					<option value="<?php echo $rowc['C_NAME'];?>"><?php echo $rowc['C_NAME'];?></option> 
					<?php }?>
					</select>
					<? }?>
					</div>

<label for="exampleInputEmail1">Currenly User Paying Price:</label>

</div>
					
					
					<div class="form-group col-sm-11">

<label for="exampleInputEmail1">Total Package Price:</label>

</div>					
					
  

					
                  <div class="box-footer col-sm-11">

<button type="submit" name="submit" value="submit" class="btn btn-primary">Submit</button>

<button type="reset" class="btn btn-primary">Reset</button>

</div>

</form>

</div>

</section>

<div class="panel-heading">Payment Price Data Table</div>

<thead>

<tr>

<th data-field="sname"  data-sortable="true">Package</th>
								
						        <th data-field="spack"  data-sortable="true">SubPakage</th>

<th data-field="clas"  data-sortable="true">Class</th>

<th data-field="sstatus" data-sortable="true">Status</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from price");

$SP_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><a href= "mg_price.php?SP_ID=<?php echo $row['SP_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['SP_ID'];?>)">Delete</a></td>

</tr>

<?php

$SP_ID++;

}?>

</tbody>

</table>

</div>

</div>

$('li').click(function(event) {
        event.stopPropagation();
        $('> ul', this).toggle();

});
});
	</script>
<script>
$('.top').on('click', function() {
	$parent_box = $(this).closest('.box');
	$parent_box.siblings().find('.bottom').hide();
	$parent_box.find('.bottom').toggle();
});
</script>
<style>
.container .box {
width:auto;
max-width:900px;
}

.container .box .top {
  padding: 12px;
  background-color: blue;
  color: white;
  cursor: pointer;
}

.container .box .bottom {

display: none;
}
</style>
</body>

</html>