403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/xampp/htdocs-khalafsons/khalafmaint/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/xampp/htdocs-khalafsons/khalafmaint/autopagek.php
<div style="display:none;">
<?php
//$message_text = mysqli_real_escape_string($con,$message_text);
include('db_con.php');
session_start();
$status = $_GET['status'];

//////////////////////////////////////////////////////////

$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$country = $geo["geoplugin_countryName"];
//echo" mmm $user_ip";

///////////////////////////////////////////////////////////////////////////////////////

//////////////////////////////////////////////////////////
$curr_day = date("d");
$curr_month = date("M");
$curr_year = date("Y");
/////////////////////////////////////////////////////////////// 
?>

</div>

<?php

if($status =='save_report')
{

	$my_id = $_GET['my_id'];
	$report_date = $_GET['report_date'];
	$report_details = $_GET['report_details'];
	$staff_name = $_GET['staff_name'];
	$report_status = $_GET['report_status'];
	$bld_name = $_GET['bld_name'];
	$no_flat = $_GET['bld_flat'];
	$tec_name = $_GET['tec_name'];
	
	$get_report_date ="select * from report_datingtb where cur_day='$curr_day' AND cur_month='$curr_month' AND cur_year='$curr_year'  ";
	$run_get_report_date = mysqli_query($con,$get_report_date);
	$check_get_report_date = mysqli_num_rows($run_get_report_date);

	
	if($check_get_report_date >0){
	
	$insert_report ="insert into reporttb(user_id,report_date,report_details,property_name,flat_no,property_staff,work_status,tech_name,cur_country,cur_city,cur_day,cur_month,cur_year,cur_time)
	values ('$my_id','$report_date','$report_details','$bld_name','$no_flat','$staff_name','$report_status','$tec_name','$country','$city','$curr_day','$curr_month','$curr_year',CURTIME() )";
	$run_insert_report = mysqli_query($con,$insert_report);
	if($run_insert_report){echo"<span style='color:green;'>New Report Has Been Added.</span>";}else{echo"<span style='color:red;'>Something went wrong try again</spa>";}
	
	}else{
	
	
	$insert_dating_report ="insert into report_datingtb (user_id,cur_day,cur_month,cur_year,cur_time) values('$my_id','$curr_day','$curr_month','$curr_year',CURTIME())";
	$run_dating_report = mysqli_query($con,$insert_dating_report);

	$insert_report ="insert into reporttb(user_id,report_date,report_details,property_name,flat_no,property_staff,work_status,tech_name,cur_country,cur_city,cur_day,cur_month,cur_year,cur_time)
	values ('$my_id','$report_date','$report_details','$bld_name','$no_flat','$staff_name','$report_status','$tec_name','$country','$city','$curr_day','$curr_month','$curr_year',CURTIME() )";
	$run_insert_report = mysqli_query($con,$insert_report);
	if($run_insert_report){echo"<span style='color:green;'>New Report Has Been Added.</span>";}else{echo"<span style='color:red;'>Something went wrong try again</spa>";}
}
}


/////////////////////////////////////////////////////////////////////////////////////

if($status =='disp_report')
{


?>
	  <div id="more_option_div" class="more_option_div" ><button onclick="close_more_report_div();" class="close_more_report_div_btn" >x</button>
	   <div class="sub_option_div" >
	  <button class="edit_report_btn" style="color:blue;margin-top:5px;" >Print</button>
	  <button onclick="edit_report();" class="edit_report_btn" style="color:green;">Edit</button>
	  <button onclick="del_report();" class="edit_report_btn" style="color:red;">Delete</button>
	  </div></div>
<?php
$get_date_rept ="select * from report_datingtb ORDER  BY ID desc";
$run_get_date_rept = mysqli_query($con,$get_date_rept);
while($row_get_date_rept = mysqli_fetch_array($run_get_date_rept))
{
	$date_id = $row_get_date_rept['id'];
	$report_day = $row_get_date_rept['cur_day'];
	$report_month = $row_get_date_rept['cur_month'];
	$report_year = $row_get_date_rept['cur_year'];
	//$report_date = "$report_day-$report_month-$report_year";

 ?>	
 
	<div class="date_record" >
	  <?php echo $report_day; ?> - <?php echo $report_month;  ?> - <?php echo $report_year; ?>

	  <span id="<?php echo $date_id; ?>" onclick="print_single_report(this.id);" class="printer_btn" >Print</span>
	  <span id="<?php echo $date_id; ?> " onclick="add_same_day_rep(this.id);" class="add_same_date_btn" >+</span>
	</div>
		
<?php		
$get_rept ="select * from reporttb where cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";
$run_get_rept = mysqli_query($con,$get_rept);
while($row_get_rept = mysqli_fetch_array($run_get_rept))
{
	$report_id = $row_get_rept['id'];
	$staff_name = $row_get_rept['property_staff'];
	$report_details = $row_get_rept['report_details'];
	$property_name = $row_get_rept['property_name'];
	$flat_no = $row_get_rept['flat_no'];
	$work_status = $row_get_rept['work_status'];
	$tech_name = $row_get_rept['tech_name'];


?>   
	



    <div id="<?php echo $report_id ?>" class="com_output_div" ondblclick="show_more_option_div(this.id);" onmousedown="close_more_report_div();" >

    <span class="com_span_mid" ><?php echo $staff_name; ?></span>
    <span class="com_span_big" ><?php echo $report_details; ?></span>
    <span class="com_span_mid" ><?php echo $property_name; ?></span>
    <span class="com_span_small" ><?php echo $flat_no; ?></span>
    <span class="com_span_small" ><?php echo $work_status; ?></span>
    <span class="com_span_small" ><?php echo $tech_name; ?></span>
    <span class="com_span_date" ></span>
    </div>
	
<?php } } 

}

//////////////////////////////////////////////////////////////////////////////////////////////////////////////////// 

if($status =='del_report')
{
$report_id = $_GET['report_id'];
$del_rept ="DELETE FROM  reporttb WHERE id='$report_id'";
$run_get_rept = mysqli_query($con,$del_rept);
	
}

/////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status =="save_edit_report")
{
	
	$report_id = $_GET['report_id'];
	$report_details = $_GET['report_details'];
	$staff_name = $_GET['staff_name'];
	$report_status = $_GET['report_status'];
	$bld_name = $_GET['bld_name'];
	$no_flat = $_GET['bld_flat'];
	$tec_name = $_GET['tec_name'];
	
	/*$insert_report ="insert into reporttb()
	values ('$my_id','$report_date','$report_details','$bld_name','$no_flat','$staff_name','$report_status','$tec_name','$country','$city','$curr_day','$curr_month','$curr_year',CURTIME() )";
	$run_insert_report = mysqli_query($con,$insert_report);
	if($run_insert_report){echo"<span style='color:green;'>New Report Has Been Added.</span>";}else{echo"<span style='color:red;'>Something went wrong try again</spa>";}
	*/
	
	$update_report = "UPDATE reporttb SET report_details='$report_details',property_name='$bld_name',flat_no='$no_flat',property_staff='$staff_name',work_status='$report_status',tech_name='$tec_name' WHERE id='$report_id' ";
	$run_update_report = mysqli_query($con,$update_report);
	if($run_update_report){echo"<span style='color:green;'>Report Has Been Updated.</span>";}else{echo"<span style='color:red;'>Something went wrong try again</spa>";}
	
}



////////////////////////////////////////////////////////////////////////////////////////////////////////////////


if($status =='addon_report')
{
	
	$my_id = $_GET['my_id'];
	$addon_date_id = $_GET['addon_date_id'];
	$report_date = $_GET['report_date'];
	$report_details = $_GET['report_details'];
	$staff_name = $_GET['staff_name'];
	$report_status = $_GET['report_status'];
	$bld_name = $_GET['bld_name'];
	$no_flat = $_GET['bld_flat'];
	$tec_name = $_GET['tec_name'];
	
	$get_report_date ="select * from report_datingtb where id='$addon_date_id'  ";
	$run_get_report_date = mysqli_query($con,$get_report_date);
	while($row_report_date = mysqli_fetch_array($run_get_report_date)){
		
		$add_cur_day = $row_report_date['cur_day'];
		$add_cur_month = $row_report_date['cur_month'];
		$add_cur_year = $row_report_date['cur_year'];
	
	$insert_report ="insert into reporttb(user_id,report_date,report_details,property_name,flat_no,property_staff,work_status,tech_name,cur_country,cur_city,cur_day,cur_month,cur_year)
	values ('$my_id','$report_date','$report_details','$bld_name','$no_flat','$staff_name','$report_status','$tec_name','$country','$city','$add_cur_day','$add_cur_month','$add_cur_year' )";
	$run_insert_report = mysqli_query($con,$insert_report);
	if($run_insert_report){echo"<span style='color:green;'>New Report Has Been Added.</span>";}else{echo"<span style='color:red;'>Something went wrong try again</spa>";}
	

}	
	
	
}

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status =='print_single_report')
{
$date_report_id = $_GET['date_report_id'];
$get_date_rept ="select * from report_datingtb where id='$date_report_id' ";
$run_get_date_rept = mysqli_query($con,$get_date_rept);
while($row_get_date_rept = mysqli_fetch_array($run_get_date_rept))
{
	$date_id = $row_get_date_rept['id'];
	$report_day = $row_get_date_rept['cur_day'];
	$report_month = $row_get_date_rept['cur_month'];
	$report_year = $row_get_date_rept['cur_year'];
	//$report_date = "$report_day-$report_month-$report_year";

 ?>	
 
	<div class="date_record" >
	  <?php echo $report_day; ?> - <?php echo $report_month;  ?> - <?php echo $report_year; ?>

	  <!--span id="<?php echo $date_id; ?>" onclick="print_single_report(this.id);" class="printer_btn" >Print</span>
	  <span id="<?php echo $date_id; ?> " onclick="add_same_day_rep(this.id);" class="add_same_date_btn" >+</span-->
	</div>
		
<?php		
$get_rept ="select * from reporttb where cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";
$run_get_rept = mysqli_query($con,$get_rept);
while($row_get_rept = mysqli_fetch_array($run_get_rept))
{
	$report_id = $row_get_rept['id'];
	$staff_name = $row_get_rept['property_staff'];
	$report_details = $row_get_rept['report_details'];
	$property_name = $row_get_rept['property_name'];
	$flat_no = $row_get_rept['flat_no'];
	$work_status = $row_get_rept['work_status'];
	$tech_name = $row_get_rept['tech_name'];


?>   
	



    <div id="<?php echo $report_id ?>" class="com_output_div" ondblclick="show_more_option_div(this.id);" onmousedown="close_more_report_div();" style="border-bottom:1px solid #505252;" >

    <span class="com_span_mid" ><?php echo $staff_name; ?></span>
    <span class="com_span_big" ><?php echo $report_details; ?></span>
    <span class="com_span_mid" ><?php echo $property_name; ?></span>
    <span class="com_span_small" ><?php echo $flat_no; ?></span>
    <span class="com_span_small" ><?php echo $work_status; ?></span>
    <span class="com_span_small" ><?php echo $tech_name; ?></span>
    <span class="com_span_date" ></span>
    </div>
	
<?php } } 
	
}	

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status =="print_all_report")
{
$get_date_rept ="select * from report_datingtb ORDER  BY ID desc";
$run_get_date_rept = mysqli_query($con,$get_date_rept);
while($row_get_date_rept = mysqli_fetch_array($run_get_date_rept))
{
	$date_id = $row_get_date_rept['id'];
	$report_day = $row_get_date_rept['cur_day'];
	$report_month = $row_get_date_rept['cur_month'];
	$report_year = $row_get_date_rept['cur_year'];

 ?>	
 
	<div class="date_record" >
	  <?php echo $report_day; ?> - <?php echo $report_month;  ?> - <?php echo $report_year; ?>

	</div>
		
<?php		
$get_rept ="select * from reporttb where cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";
$run_get_rept = mysqli_query($con,$get_rept);
while($row_get_rept = mysqli_fetch_array($run_get_rept))
{
	$report_id = $row_get_rept['id'];
	$staff_name = $row_get_rept['property_staff'];
	$report_details = $row_get_rept['report_details'];
	$property_name = $row_get_rept['property_name'];
	$flat_no = $row_get_rept['flat_no'];
	$work_status = $row_get_rept['work_status'];
	$tech_name = $row_get_rept['tech_name'];


?>   
	



    <div id="<?php echo $report_id ?>" class="com_output_div" ondblclick="show_more_option_div(this.id);" onmousedown="close_more_report_div();" style="border-bottom:1px solid #505252;" >

    <span class="com_span_mid" ><?php echo $staff_name; ?></span>
    <span class="com_span_big" ><?php echo $report_details; ?></span>
    <span class="com_span_mid" ><?php echo $property_name; ?></span>
    <span class="com_span_small" ><?php echo $flat_no; ?></span>
    <span class="com_span_small" ><?php echo $work_status; ?></span>
    <span class="com_span_small" ><?php echo $tech_name; ?></span>
    <span class="com_span_date" ></span>
    </div>
	
<?php } } 	
}


/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
if($status =='search_report')
{	
	$build_name = $_GET['build_name'];
	$flat_no = $_GET['flat_no'];
	$work_status = $_GET['work_status'];
	$tech_name = $_GET['tech_name'];
	$staff_name = $_GET['staff_name'];

	?>
	  <div id="more_option_div" class="more_option_div" ><button onclick="close_more_report_div();" class="close_more_report_div_btn" >x</button>
	  <div class="sub_option_div" >
	  <button class="edit_report_btn" style="color:blue;margin-top:5px;" >Print</button>
	  <button onclick="edit_report();" class="edit_report_btn" style="color:green;">Edit</button>
	  <button onclick="del_report();" class="edit_report_btn" style="color:red;">Delete</button>
	  </div></div>
<?php
$get_date_rept ="select * from report_datingtb ORDER  BY ID desc";
$run_get_date_rept = mysqli_query($con,$get_date_rept);
while($row_get_date_rept = mysqli_fetch_array($run_get_date_rept))
{
	$date_id = $row_get_date_rept['id'];
	$report_day = $row_get_date_rept['cur_day'];
	$report_month = $row_get_date_rept['cur_month'];
	$report_year = $row_get_date_rept['cur_year'];
	//$report_date = "$report_day-$report_month-$report_year";

 ?>	
 
	<!--div class="date_record" >
	  <?php echo $report_day; ?> - <?php echo $report_month;  ?> - <?php echo $report_year; ?>

	  <span id="<?php echo $date_id; ?>" onclick="print_single_report(this.id);" class="printer_btn" >Print</span>
	  <span id="<?php echo $date_id; ?> " onclick="add_same_day_rep(this.id);" class="add_same_date_btn" >+</span>
	</div-->

<?php	
	$build_name = $_GET['build_name'];
	$flat_no = $_GET['flat_no'];
	$work_status = $_GET['work_status'];
	$tech_name = $_GET['tech_name'];
	$staff_name = $_GET['staff_name'];

    if($build_name =="Buliding name" AND $flat_no =="" AND $work_status =="Work status" AND $tech_name =="" AND $staff_name =="" ){exit();}
	elseif($build_name !=="Buliding name" AND $flat_no !=="" AND $work_status !=="Work status" AND $tech_name !=="" AND $staff_name !=="" ){
$get_rept ="select * from reporttb where property_name='$build_name' AND flat_no='$flat_no' AND work_status='$work_status' AND tech_name='$tech_name' AND property_staff='$staff_name' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
	elseif($build_name !=="Buliding name" AND $flat_no !=="" AND $work_status !=="Work status" AND $tech_name !==""){
$get_rept ="select * from reporttb where property_name='$build_name' AND flat_no='$flat_no' AND work_status='$work_status' AND tech_name='$tech_name' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		elseif($build_name !=="Buliding name" AND $flat_no !=="" AND $work_status !=="Work status" ){
$get_rept ="select * from reporttb where property_name='$build_name' AND flat_no='$flat_no' AND work_status='$work_status' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		elseif($build_name !=="Buliding name" AND $flat_no !=="" ){
$get_rept ="select * from reporttb where property_name='$build_name' AND flat_no='$flat_no' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";			
	}

		elseif($build_name !=="Buliding name" AND $staff_name !=="" ){
$get_rept ="select * from reporttb where property_name='$build_name' AND property_staff='$staff_name' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		 elseif($build_name !=="Buliding name" AND $work_status !=="Work status"){
$get_rept ="select * from reporttb where property_name='$build_name' AND work_status='$work_status' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";			
	}
		elseif($build_name !=="Buliding name" ){
$get_rept ="select * from reporttb where property_name='$build_name' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		elseif($flat_no !=="" ){
$get_rept ="select * from reporttb where flat_no='$flat_no' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		elseif($work_status !=="Work status"){
$get_rept ="select * from reporttb where work_status='$work_status' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		elseif($tech_name !==""){
$get_rept ="select * from reporttb where tech_name='$tech_name' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}
		elseif($staff_name !=="" ){
$get_rept ="select * from reporttb where property_staff='$staff_name' AND cur_day='$report_day' AND cur_month='$report_month' AND cur_year='$report_year' ORDER  BY ID desc";		
	}

//$get_rept ="select * from reporttb where property_name='$build_name'or flat_no='$flat_no' or work_status='$work_status' or tech_name='$tech_name' or property_staff='$staff_name' ORDER  BY ID desc";
$run_get_rept = mysqli_query($con,$get_rept);
$check_get_rept = mysqli_num_rows($run_get_rept);
if($check_get_rept <1 ){}else{
?>
	<div class="date_record" >
	  <?php echo $report_day; ?> - <?php echo $report_month;  ?> - <?php echo $report_year; ?>

	  <!--span idk="<?php echo $date_id; ?>" onclick="print_single_search_report();" class="printer_btn" >Print</span-->
	  
	  <span id="<?php echo $date_id; ?> " onclick="add_same_day_rep(this.id);" class="add_same_date_btn" >+</span>
	</div>
<?php	

while($row_get_rept = mysqli_fetch_array($run_get_rept))
{
	$report_id = $row_get_rept['id'];
	$staff_name = $row_get_rept['property_staff'];
	$report_details = $row_get_rept['report_details'];
	$property_name = $row_get_rept['property_name'];
	$flat_no = $row_get_rept['flat_no'];
	$work_status = $row_get_rept['work_status'];
	$tech_name = $row_get_rept['tech_name'];


?>   
	



    <div id="<?php echo $report_id ?>" class="com_output_div" ondblclick="show_more_option_div(this.id);" onmousedown="close_more_report_div();" >

    <span class="com_span_mid" ><?php echo $staff_name; ?></span>
    <span class="com_span_big" ><?php echo $report_details; ?></span>
    <span class="com_span_mid" ><?php echo $property_name; ?></span>
    <span class="com_span_small" ><?php echo $flat_no; ?></span>
    <span class="com_span_small" ><?php echo $work_status; ?></span>
    <span class="com_span_small" ><?php echo $tech_name; ?></span>
    <span class="com_span_date" ></span>
    </div>
	
<?php } }

}  
}





//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////




















?>

Youez - 2016 - github.com/yon3zu
LinuXploit