403Webshell
Server IP : 27.254.96.235  /  Your IP : 216.73.216.44
Web Server : Apache/2
System : Linux cs95 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User : piboonsa ( 1055)
PHP Version : 8.0.30
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  /home/piboonsa/domains/piboonsawasdee.ac.th/public_html/backend/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : /home/piboonsa/domains/piboonsawasdee.ac.th/public_html/backend/add_notice.php
<?php 
	include("passlog.inc.php");
	include("lib/config.php");
	
	$id = $_REQUEST['id'];
	
	if($id){
		$query = $db->query("SELECT * FROM notice WHERE id = '$id' ");
		$rs = $db->getresult($query);
		$img_intro = $rs['img'];
		$status = $rs['status'];
	}
	
	if($_REQUEST['act'] == "delintro"){
		unlink(IMG_INT_NC.$rs['img']);
		$db->query("UPDATE notice SET img = '', updated_date = now(), updated_by = '".$_SESSION['acc_username']."' WHERE id = '$id'");
		$img_intro = "";
	}else if($_REQUEST['act'] == "del"){
		$no = $_REQUEST['no'];
		$query = $db->query("SELECT * FROM notice_img WHERE notice_id = '$id' AND no = '$no'");
		$pp = $db->getresult($query);
		unlink(IMG_NC.$pp['img']);
		$db->query("DELETE FROM notice_img WHERE notice_id = '$id' AND no = '$no'");
	}
?>
<!DOCTYPE HTML>
<html>
<head>
<?php include("top.inc.php");?>
<script type="text/javascript" src="tinymce/tinymce.min.js"></script>
<script language="javascript">
	function chk(myform){
		var msg = ""; 
		if(myform.subject.value == ""){
			document.getElementById("errsubject").style.display = "block";
			msg = "yes";
		}else{
			document.getElementById("errsubject").style.display = "none";
		}
		if(msg == "yes"){
			return false;
		}else{
			return true;
		}
	}
	
	function responsive_filemanager_callback(field_id){
		if(field_id){
			console.log(field_id);
			var url=jQuery('#'+field_id).val();
		}
	}
	
	tinymce.init({
		selector:"textarea.tinymce",
		theme:"modern",
		width: "100%",
		height:400,
		link_list:[{title:'My page 1',
		value:'http://www.tinymce.com'},
		{title:'My page 2',
		value:'http://www.tecrail.com'}],
		plugins: [
			"advlist autolink link lists charmap print preview hr anchor pagebreak",
			"searchreplace wordcount visualblocks visualchars code fullscreen insertdatetime nonbreaking",
			"save table contextmenu directionality emoticons template paste textcolor"
		],
		relative_urls:false,
		browser_spellcheck:true,
		filemanager_title:"Upload File",
		external_filemanager_path:"tinymce/filemanager/",
		file_picker_types:'file image media',
		file_picker_callback:function(cb,value,meta){
			var width=window.innerWidth-30;
			var height=window.innerHeight-60;
			if(width>1800)width=1800;
			if(height>1200)height=1200;
			if(width>600){
				var width_reduce=(width-20)%138;
				width=width-width_reduce+10;
			}
			var urltype=2;
			if(meta.filetype=='image'){
				urltype=1;
			}
			if(meta.filetype=='media'){
				urltype=3;
			}
			var title="RESPONSIVE FileManager";
			if(typeof this.settings.filemanager_title!=="undefined"&&this.settings.filemanager_title){
				title=this.settings.filemanager_title;
			}
			var akey="key";
			if(typeof this.settings.filemanager_access_key!=="undefined"&&this.settings.filemanager_access_key){
				akey=this.settings.filemanager_access_key;
			}
			var sort_by="";
			if(typeof this.settings.filemanager_sort_by!=="undefined"&&this.settings.filemanager_sort_by){
				sort_by="&sort_by="+this.settings.filemanager_sort_by;
			}
			var descending="false";
			if(typeof this.settings.filemanager_descending!=="undefined"&&this.settings.filemanager_descending){
				descending=this.settings.filemanager_descending;
			}
			var fldr="";
			if(typeof this.settings.filemanager_subfolder!=="undefined"&&this.settings.filemanager_subfolder){
				fldr="&fldr="+this.settings.filemanager_subfolder;
			}
			var crossdomain="";
			if(typeof this.settings.filemanager_crossdomain!=="undefined"&&this.settings.filemanager_crossdomain){
				crossdomain="&crossdomain=1";
				if(window.addEventListener){
					window.addEventListener('message',filemanager_onMessage,false);
				}else{
					window.attachEvent('onmessage',filemanager_onMessage);
				}
			}
			tinymce.activeEditor.windowManager.open({title:title,file:this.settings.external_filemanager_path+'dialog.php?type='+urltype+'&descending='+descending+sort_by+fldr+crossdomain+'&lang='+this.settings.language+'&akey='+akey,width:width,height:height,resizable:true,maximizable:true,inline:1},
			{setUrl:function(url){cb(url);}
			});
		},
		external_plugins:{"filemanager":"filemanager/plugin.min.js"},
		codemirror:{indentOnInit:true,path:'CodeMirror'},
		image_advtab:true,toolbar: "insertfile undo redo | styleselect fontsizeselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link | print preview media fullpage | forecolor backcolor emoticons",
		fontsize_formats: "8pt 10pt 12pt 14pt 18pt 24pt 36pt",
	});
	jQuery(document).ready(function($){
		$('.iframe-btn').fancybox({'width':880,'height':570,'type':'iframe','autoScale':false});
		function OnMessage(e){
			var event=e.originalEvent;
			if(event.data.sender==='responsivefilemanager'){
				if(event.data.field_id){
					var fieldID=event.data.field_id;
					var url=event.data.url;$('#'+fieldID).val(url).trigger('change');
					$.fancybox.close();
					$(window).off('message',OnMessage);
				}
			}
		}
		$('.iframe-btn').on('click',function(){
			$(window).on('message',OnMessage);
		});
		$('#download-button').on('click',function(){
			ga('send','event','button','click','download-buttons');
		});
		$('.toggle').click(function(){
			var _this=$(this);
			$('#'+_this.data('ref')).toggle(200);
			var i=_this.find('i');
			if(i.hasClass('icon-plus')){
				i.removeClass('icon-plus');
				i.addClass('icon-minus');
			}else{
				i.removeClass('icon-minus');
				i.addClass('icon-plus');
			}
		});
	});
	function open_popup(url){
		var w=880;var h=570;
		var l=Math.floor((screen.width-w)/2); 
		var t=Math.floor((screen.height-h)/2);
		var win=window.open(url,'ResponsiveFilemanager',"scrollbars=1,width="+w+",height="+h+",top="+t+",left="+l);
	}               
</script>
</head>

<body class="theme-blue">
	<?php 
		include("head.inc.php");
		include("leftside.inc.php");
	?>
    <div class="content">
    	<div class="header">
        	<h1 class="page-title">เพิ่ม/แก้ไข ข่าวประกาศโรงเรียน</h1>
        </div>
        <div class="main-content">
        	<ul class="nav nav-tabs">
              <li class="active"><a href="#div_inf" data-toggle="tab">รายละเอียด</a></li>
              <li><a href="#div_img" data-toggle="tab">รูปภาพ</a></li>
            </ul>
            <div class="row">
            	<br>
                <form id="form1" name="form1" method="post" enctype="multipart/form-data" action="Tdoadd_notice.php" onSubmit="return chk(this);">
                	<div id="myTabContent" class="tab-content">
                        <div class="tab-pane active in" id="div_inf">
                        	<div class="col-md-6">
                                <p class="red"><?=$_REQUEST['msg']?></p>
                                <div class="form-group">
                                    <label>การแสดงผล :</label>&nbsp;&nbsp;&nbsp;
                                    <input type="radio" name="status" value="yes" <?php if($status == "yes" || $status == ""){?> checked <?php }?>> แสดง&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
                                    <input type="radio" name="status" value="no" <?php if($status == "no"){?> checked <?php }?>> ไม่แสดง
                                </div>
                                <div class="form-group">
                                    <label>หัวข้อ<span class="red">*</span></label>	
                                    <input type="text" name="subject" id="subject" class="form-controlspan12 form-control" value="<?=htmlspecialchars_decode($rs['subject'], ENT_QUOTES)?>">
                                    <div id="errsubject" style="display:none" class="red"><?=ERR_BK?></div>
                                </div>
                                <div class="form-group">
                                  <label>รูปปก <span class="small gray">(ขนาดภาพ <?=IMG_W?>x<?=IMG_H?>)</span></label>
                                  <?php 
                                    if($img_intro){
                                        echo '<br><img src="'.IMG_INT_NC.$img_intro.'" width="200" height="150"><br><a href="add_notice.php?act=delintro&id='.$id.'"><u class="red">ลบ</u></a><br><br>';
                                    }
                                  ?>
                                  <input type="file" name="intro_img" id="intro_img" class="form-controlspan12 form-control">
                                </div>
                                <div class="form-group">
                                    <label>รายละเอียดอย่างย่อ</label>
                                    <textarea name="txt_intro" id="txt_intro" cols="" rows="5" class="form-control"><?=htmlspecialchars_decode($rs['txt_intro'], ENT_QUOTES)?></textarea>
                                </div>
                            </div>
                            <div class="col-md-12">
                                <div class="form-group">
                                    <label>รายละเอียด</label>
                                    <textarea name="detail" id="detail" cols="" rows="15" class="form-control tinymce"><?=htmlspecialchars_decode($rs['detail'], ENT_QUOTES)?></textarea>
                                </div>
                                <div class="btn-toolbar list-toolbar" align="center">
                                    <input name="id" type="hidden" value="<?=$id?>">
                                    <input name="Page" type="hidden" value="<?=$_REQUEST['Page']?>">
                                    <button class="btn btn-primary" type="submit" form="form1"><i class="fa fa-save"></i> บันทึก</button>
                                    <input type="button" name="Button" id="button" value="ยกเลิก" class="btn btn-danger" onClick="location.href='notice.php'">
                                </div>
                           </div>
                        </div>
                        <div class="tab-pane fade" id="div_img">
                        	<div class="col-md-12">
                            	<?php 
									$query1 = $db->query("SELECT * FROM notice_img WHERE notice_id = '$id' ORDER BY no");
									if($db->getcountrow($query1) != 0){
										while($pic = $db->getresult($query1)){
											$img[$pic['no']]['name'] = $pic['img'];
											$img[$pic['no']]['title'] = $pic['title'];
										}
									}
									for($i=1;$i<=20;$i++){
								?>
                                    <div class="panel panel-default">
                                        <p class="panel-heading no-collapse">รูปที่ <?=$i?> <span class="gray">(ขนาดรูปภาพ <?=IMG_W?>x<?=IMG_H?>)</span></p>
                                        <div class="panel-body">
                                        	<?php 
												if($img[$i]['name']){
													echo '<div class="col-md-12">
													<img src="'.IMG_NC.$img[$i]['name'].'" width="200" height="150"><br><a href="add_news.php?act=del&id='.$id.'&no='.$i.'"><u class="red">ลบ</u></a><br><br></div>';
												}
													  ?>
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                	<label>รูปภาพ</label>
                                                    <input type="file" name="pic[]" id="pic[]" class="form-controlspan12 form-control">
                                                </div>
                                             </div>
                                             <div class="col-md-6">
                                                <div class="form-group">
                                                    <label>ชื่อภาพ</label>
                                                    <input type="text" name="img_title[]" id="img_title[]" class="form-controlspan12 form-control" value="<?=$img[$i]['title']?>">
                                                </div>
                                            </div>
                                        </div>
                                    </div>
                            	<?php 
									}
								?>
                            </div>
                        </div>
                    </div>
                </form>
            </div>
        	<?php include("foot.inc.php");?>
        </div>
    </div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit