NG1NDEX
Server IP : 103.233.192.212  /  Your IP : 18.191.154.119
Web Server : Apache/2
System : Linux sv1.inde.co.th 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64
User : sumpatuan ( 1058)
PHP Version : 5.5.38
Disable Function : symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,putenv,passthru,escapeshellarg,escapeshellcmd,pcntl_exec,proc_get_status,proc_nice,proc_terminate,pclose,ini_alter,virtual,openlog,ini_restore
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/sumpatuan/domains/sumpatuan.go.th/public_html/admin/top/action/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /home/sumpatuan/domains/sumpatuan.go.th/public_html/admin/top/action/save-NewsbookMain-edit.php
<?php
require_once('session_backend_administrator.php');
header('Content-Type: text/html; charset=UTF-8');
date_default_timezone_set("Asia/Bangkok"); 
$datetime = date('d/m/Y H.i'); 

if($STT_login=="admin_login_true"){

    if(!isset($_POST['edt_id']) or !isset($_POST['edt_name']) or !isset($_POST['edt_number']) or !isset($_POST['edt_oldnumber']) or !isset($_POST['edt_date']) or !isset($_POST['edt_exp']) or !isset($_POST['edt_namemb']) ){
        echo "<SCRIPT type='text/javascript'>
                alert('กรุณากรอกข้อมูลให้ครบ');
                window.location.replace(document.referrer);
            </SCRIPT>";
        exit;
    }else{

        $data_idnewsbookmb = $con_db_administrator->real_escape_string($_POST['edt_id']);
        $data_namenewsbook = trim($con_db_administrator->real_escape_string($_POST['edt_name']));
        $data_numbernewsbook = trim($con_db_administrator->real_escape_string($_POST['edt_number']));
        $data_oldnumber = $con_db_administrator->real_escape_string($_POST['edt_oldnumber']);

        $data_datenewsbook = date("d/m/Y",strtotime($_POST['edt_date']));
        $data_expnewsbook = date("d/m/Y",strtotime($_POST['edt_exp']));
        $data_checkexpnewsbook = date("Ymd",strtotime($_POST['edt_exp']));

        //// txt_namemb
        $data_namembnewsbook = implode(", ", $_POST['edt_namemb']);
        // $data_namembnewsbook_array = explode(", ", $data_namembnewsbook );
        // echo $data_namembnewsbook;
        // echo "<br>";
        // print_r($data_namembnewsbook_array);
        // exit;
        
        $data_linknewsbook = $con_db_administrator->real_escape_string($_POST['linknewsbook']);
        $data_sttnewsbook = $con_db_administrator->real_escape_string($_POST['statusshow']);
    
        //check date
        $now = date("Ymd");
        $date1 = date("Ymd",strtotime($_POST['edt_date']));
        $date2 = date("Ymd",strtotime($_POST['edt_exp']));
        if($date1 >= $date2){
            echo "<SCRIPT type='text/javascript'>
                    alert('แก้ไข วันที่ลง หรือ วันที่หมดอายุ ให้ถูกต้อง');
                    window.location.replace(document.referrer);
                </SCRIPT>";
            exit;
        }
        if($date2 <= $now){
            echo "<SCRIPT type='text/javascript'>
                    alert('กรอก วันที่หมดอายุ ให้ถูกต้อง');
                    window.location.replace(document.referrer);
                </SCRIPT>";
            exit;
        }

        if($data_numbernewsbook==$data_oldnumber){
            $ud_data = " UPDATE `data_newsbook` SET `name_newsbook`='$data_namenewsbook', `date_newsbook`='$data_datenewsbook', `exp_newsbook`='$data_expnewsbook', 
                        `checkexp_newsbook`='$data_checkexpnewsbook', `namemb_newsbook`='$data_namembnewsbook', `stt_newsbook`='$data_sttnewsbook'
                        WHERE `id_newsbook`='$data_idnewsbookmb' ";  
            $action_ud_data = $con_db_administrator->query($ud_data);
            if(!$action_ud_data){
                echo "<SCRIPT type='text/javascript'>
                        alert('เกิดข้อผิดพลาด! แก้ไขข้อมูลไม่สำเร็จ');
                        window.location.replace(document.referrer);
                    </SCRIPT>";
                exit;
            }else{
                echo "<SCRIPT type='text/javascript'>
                        alert('แก้ไขข้อมูล [ $data_namenewsbook ] สำเร็จ');
                        window.location.replace('../NewsbookMain');
                    </SCRIPT>";
                exit;
            }
        }else{
            $sql_check_number = " SELECT COUNT(`number_newsbook`) FROM `data_newsbook` WHERE `number_newsbook`='$data_numbernewsbook' ";
            $qr_check_number = mysqli_query($con_db_administrator, $sql_check_number) or trigger_error("sql_check_number", E_USER_ERROR);
            $r_check_number = mysqli_fetch_row($qr_check_number);
            $rs_check_number = $r_check_number[0]; 
            
            if($rs_check_number >= 1){
                echo "<SCRIPT type='text/javascript'>
                        alert('หมายเลขระบบ Back Office $data_numbernewsbook ซ้ำ');
                        window.location.replace(document.referrer);
                    </SCRIPT>";
                exit;
            }else{
                
                $ud_data = " UPDATE `data_newsbook` SET `name_newsbook`='$data_namenewsbook', `number_newsbook`='$data_numbernewsbook', `date_newsbook`='$data_datenewsbook',
                            `exp_newsbook`='$data_expnewsbook', `namemb_newsbook`='$data_namembnewsbook', `stt_newsbook`='$data_sttnewsbook'
                            WHERE `id_newsbook`='$data_idnewsbookmb' ";  
                $action_ud_data = $con_db_administrator->query($ud_data);
                if(!$action_ud_data){
                    echo "<SCRIPT type='text/javascript'>
                            alert('เกิดข้อผิดพลาด! แก้ไขข้อมูลไม่สำเร็จ');
                            window.location.replace(document.referrer);
                        </SCRIPT>";
                    exit;
                }else{
                    echo "<SCRIPT type='text/javascript'>
                            alert('แก้ไขข้อมูล [ $data_namenewsbook ] สำเร็จ');
                            window.location.replace('../NewsbookMain');
                        </SCRIPT>";
                    exit;
                }

            }
        }
            
    }

}else{
    echo "<SCRIPT type='text/javascript'>
        alert('กรุณาเข้าสู่ระบบ');
        window.location.replace('../../index');
    </SCRIPT>";
    exit;
}
mysqli_close($con_db_administrator);
?>

Anon7 - 2022
AnonSec Team