One Hat Cyber Team

Your IP : 216.73.216.240

Server IP : 162.240.106.28

Server : Linux server.ganesand.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.1.33

Buat File | Buat Folder

Dir : ~/home/thoa/www/admin/

Edit File: mg_register.php

<?php include('config.php');
$avai = mysql_query("select * from available");
$row = mysql_fetch_array($avai);
 ?>

<?php

/*  $con = mysql_connect('localhost', 'root', '');

mysql_select_db("ecomm", $con);   */

error_reporting(0);

?>

<?php

$AP_ID = $_GET['AP_ID'];

$view = mysql_query("select * from newapp where AP_ID = '".$AP_ID."'"); // for editing

$data = mysql_fetch_array($view);

if($_GET['SAI']){

$STS = $_GET['AP_STS'];

if($STS == 0){

$upd_sts =  mysql_query("UPDATE newapp SET AP_STS ='0' WHERE AP_ID ='".$_GET['SAI']."'");  //for changing status

}

else{

$upd_sts =  mysql_query("UPDATE newapp SET AP_STS ='1' WHERE AP_ID ='".$_GET['SAI']."'");

}

if($_GET['del_id']){ ?>

<?php $del = mysql_query("delete from newapp where AP_ID='".$_GET['del_id']."'"); //for deleting status

if($del){?>

alert("Registration detail deleted sucessfully");

window.location= "mg_register.php";

</script>

<?php }

if(!$del){?>

alert("Registration detail  Not deleted sucessfully");

window.location= "mg_register.php";

</script>

<?php }

}

if($_POST['submit']){

$apno = mysql_real_escape_string($_POST['apno']);
			  
			  $regno = mysql_real_escape_string($_POST['regno']);
			  
			  $appdate = mysql_real_escape_string($_POST['appdate']);

$apimg = ($_FILES['apimg']['name']);
			  $tmp_img = $_FILES['apimg']['tmp_name'];
			  move_uploaded_file($tmp_img, "images/".$apimg);
			  
			  $apsel = mysql_real_escape_string($_POST['apsel']);
			  
			  $apname = mysql_real_escape_string($_POST['apname']);
			  
			  $apgen = mysql_real_escape_string($_POST['apgen']);
			  
			  $apdob = mysql_real_escape_string($_POST['apdob']);
			  
			  $apage = mysql_real_escape_string($_POST['apage']);
			  
			  $apfat = mysql_real_escape_string($_POST['apfat']);
			  
			  $apmot = mysql_real_escape_string($_POST['apmot']);
			  
			  $aphw = mysql_real_escape_string($_POST['aphw']);
			  
			  $apms = mysql_real_escape_string($_POST['apms']);
			  
			  $apheg = mysql_real_escape_string($_POST['apheg']);
			  
			  $apweg = mysql_real_escape_string($_POST['apweg']);
			  
			  $apblood = mysql_real_escape_string($_POST['apblood']);

$apvis = mysql_real_escape_string($_POST['apvis']);
			  
			  $apprs = mysql_real_escape_string($_POST['apprs']);
			  
			  $apprv = mysql_real_escape_string($_POST['apprv']);

if($_GET['AP_ID']==""){

$ins = mysql_query("insert into newapp (AP_NO,REG_NO,APP_DATE,AP_IMG,AP_SEL,AP_NAME,AP_GEN,AP_DOB,AP_AGE,AP_FAT,AP_MOT,AP_HW,AP_MS,AP_HEG,AP_WEG,AP_BLOOD,AP_VIS,AP_PRS,AP_PRV) values ('$apno','$regno','$appdate','$apimg','$apsel','$apname','$apgen','$apdob','$apage','$apfat','$apmot','$aphw','$apms','$apheg','$apweg','$apblood','$apvis','$apprs','$apprv')");
		
              		
              
                      }

if($_GET['AP_ID']!=""){

{

$upd =  mysql_query("update newapp set AG_NAME='$sname',  AG_PASS='$sdescription' WHERE AP_ID ='".$AP_ID."'");

}

if($upd){?>

window.location ="mg_register.php"

</script>

<?php }

if(!$upd){?>

window.location ="mg_register.php"

</script>

<?php }

}

?>

function del(id){

var del = confirm("Are you sure Want to delete");

if(del){

window.location.href = "mg_register.php?del_id="+id+"&del=1";

}

else{

window.location.href = "mg_register.php";

}

</script>

} 
 else if(val == 'not'){
 $("#scard").hide();

} 
 }
 </script>

<!DOCTYPE html>

<html>

<head>

<title>Admin Panel</title>

<!--[if lt IE 9]>

<![endif]-->

</head>

tinymce.init({

selector: "textarea",

themes: "modern",

plugins: [

"advlist autolink lists link image charmap print preview anchor",

"searchreplace visualblocks code fullscreen",

"insertdatetime media table contextmenu paste"

],

});

</script>

<body>

<span class="sr-only">Toggle navigation</span>

</button>

<a class="navbar-brand" href="#">Admin</a>

<li><a href="#"><span class="glyphicon glyphicon-user"></span> Profile</a></li>

<li><a href="#"><span class="glyphicon glyphicon-cog"></span> Settings</a></li>

<li><a href="logou.php"><span class="glyphicon glyphicon-log-out"></span> Logout</a></li>

</ul>

</li>

</ul>

</div>

</div>

</nav>

</div>

</form>

<li class="active"><a href="dash.php"><span class="glyphicon glyphicon-dashboard"></span> Dashboard</a></li>
			<li><a href="mg_agent.php"><span class="glyphicon glyphicon-th"></span> Manage Agent</a></li>
			<li><a href="mg_register.php"><span class="glyphicon glyphicon-th"></span> Manage Registration</a></li>
			<li><a href="mg_available.php"><span class="glyphicon glyphicon-th"></span> Manage Available Seats</a></li>

</ul>

</div>

<li class="active">Manage Registration Details</li>

</ol>

</div>

<h2 class="page-header">Add New Registration</h2>

</div>

</div>

<section>
	<div class="container content">
	<div class="row">
	<div class="col-lg-10 col-md-10 col-sm-12 col-xs-12">
	<form role="form" method="post" action="" enctype="multipart/form-data">
  <div class="form-group">
    <label for="email">Application No:</label>
    <input type="text" class="form-control" id="apno" name="apno" value="<?php echo $data['AP_NO']; ?>">
  </div>
  <div class="form-group">
    <label for="pwd">Registration No:</label>
    <input type="text" class="form-control" id="regno" name="regno" value="<?php echo $data['REG_NO']; ?>">
  </div>
  <div class="form-group">
    <label for="pwd">Applied Date:</label>
    <input type="date" class="form-control" id="appdate" name="appdate" value="<?php echo $data['APP_DATE']; ?>">
  </div>

<div class="form-group">
	<label for="exampleInputFile">Upload your passport size photograph:</label>
	<input type="file" name="apimg" id="exampleInputFile">
	<?php if($AP_ID){?>
	<img src = "images/<?php echo $data['AP_IMG'];?>" height="100" width="100"></img>
	<?php }?>
  </div>

<div class="form-group">
  <label for="sel1">Select list:</label>
  <select class="form-control" id="apsel" name="apsel">
    <option value="1">1</option>
    <option value="2">2</option>
    <option value="3">3</option>
    <option value="4">4</option>
  </select>
  </div>
  <div class="form-group">
    <label for="pwd">Name In Full:</label>
    <input type="text" class="form-control" id="apname" name="apname" value="<?php echo $data['AP_NAME'];?>">
  </div>
  <div class="form-group">
     <label for="sel1">Gender:</label>
  <select class="form-control" id="apgen" name="apgen">
    <option value="Male">Male</option>
    <option value="Female">Female</option>
  </select>
  </div>
  <div class="form-group">
     <label for="sel1">DOB:</label>
  <input type="date" class="form-control" id="apdob" name="apdob" value="<?php echo $data['AP_DOB'];?>">
  </div>
  <div class="form-group">
     <label for="sel1">Age:</label>
  <input type="text" class="form-control" id="apage" name="apage" value="<?php echo $data['AP_AGE'];?>">
  </div>
   <div class="form-group">
     <label for="sel1">
   FATHER/LEGAL GUARDIAN'S FULL NAME :
  (INCLUDING SURNAME, IF ANY) (Initials not allowed)</label>
  <input type="text" class="form-control" id="apfat" name="apfat" value="<?php echo $data['AP_FAT'];?>">
  </div>
   <div class="form-group">
     <label for="sel1">
   MOTHER’S FULL NAME 
  (INCLUDING SURNAME, IF ANY) (Initials not allowed) :</label>
  <input type="text" class="form-control" id="apmot" name="apmot" value="<?php echo $data['AP_MOT'];?>">
  </div>
  <div class="form-group">
     <label for="sel1">
   IF MARRIED, FULL NAME OF WIFE/HUSBAND
  (INCLUDING SURNAME, IF ANY) (Initials not allowed).</label>
  <input type="text" class="form-control" id="aphw" name="aphw" value="<?php echo $data['AP_HW'];?>">
  </div>
  <div class="form-group">
     <label for="sel1">Marital Status </label>
  <select class="form-control" id="apms" name="apms">
    <option value="Single">Single</option>
    <option value="Married">Married</option>
  </select>
  </div>
  <div class="form-group">
     <label for="sel1">Height(cms): </label>
  
     <input type="text" class="form-control" id="apheg" name="apheg" value="<?php echo $data['AP_HEG'];?>">
  
  </div>
  <div class="form-group">
     <label for="sel1">Weight(Kg): </label>
  
     <input type="text" class="form-control" id="apweg" name="apweg" value="<?php echo $data['AP_WEG'];?>">
  
  </div>
   <div class="form-group">
     <label for="sel1">Blood Group: </label>
   <select class="form-control" id="apblood" name="apblood" >
    <option value="A+">A+</option>
	<option value="A-">A-</option>
	<option value="B+">B+</option>
	<option value="B-">B-</option>
    <option value="AB+">AB+</option>
	<option value="AB-">AB-</option>
	<option value="O+">O+</option>
	<option value="O-">O-</option>
  </select>
  </div>
  <div class="form-group">
  <label for="comment">Visible Distinguishing Mark, If any :</label>
  <textarea class="form-control" rows="5" id="apvis" name="apvis"><?php echo $data['AP_VIS'];?></textarea>
  </div>
  <div class="form-group">
     <label for="sel1">Present Nationality :</label>
  
     <input type="text" class="form-control" id="apprs" name="apprs" value="<?php echo $data['AP_PRS'];?>">
  
  </div>
  <div class="form-group">
     <label for="sel1">Previous Nationality :</label>
  
     <input type="text" class="form-control" id="apprv" name="apprv" value="<?php echo $data['AP_PRV'];?>">
 
  </div>

<div class="form-group">
  <label for="sel1">No. of Seats Currently Avaiable</label>
   <button id="button12" type="button"  class ="button-click"><blink><?echo $row['A_NOS']?></blink></button>
  </div>
  <div class="checkbox">
  <label><input type="checkbox" value="">I hereby accept to the Terms & Conditions.</label>
  </div>

<button type="submit" class="btn btn-default">Submit</button>
</form>
		
	</div>
	</div>
	</div>
	</section>

<hr>

<div class="panel-heading">Registration Table</div>

<thead>

<tr>

<th data-field="name"  data-sortable="true">newapp No</th>

<th data-field="status" data-sortable="true">Status</th>

<th data-field="action" data-sortable="true">Action</th>

</tr>

</thead>

<tbody>

<?php

$table = mysql_query("select * from newapp");

$AP_ID=1;

while($row=mysql_fetch_array($table))

{

?>

<td><a href= "mg_register.php?AP_ID=<?php echo $row['AP_ID'];?>">Edit</a>/<a href="#" onclick="del(<?php echo $row['AP_ID'];?>)">Delete</a></td>

<td><?php if($row['AP_STS']==1) {?> <a href = "mg_register.php?AP_STS=0&SAI=<?php echo $row['AP_ID'];?>">Active</a> <?php } else {?> <a href = "mg_register.php?AP_STS=1&SAI=<?php echo $row['AP_ID'];?>">InActive </a> <?php } ?></td>

</tr>

<?php

$AP_ID++;

}?>

</tbody>

</table>

</div>

</div>

</body>

</html>