403Webshell
Server IP : 104.21.73.108  /  Your IP : 216.73.216.59
Web Server : Apache/2
System : Linux cat167-197.static.lnwhostname.com 5.10.0-20-amd64 #1 SMP Debian 5.10.158-2 (2022-12-13) x86_64
User : paphayomho ( 1042)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/paphayomho/domains/paphayomhospital.go.th/public_html/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/paphayomho/domains/paphayomhospital.go.th/public_html/new/add.php
<?php 
require 'db.php';
checkLogin();

if(isset($_POST['save'])) {
    $title = $_POST['title'];
    $date = $_POST['date_range'];
    $desc = $_POST['description'];
    $type = $_POST['footer_type'];

    $conn->query("INSERT INTO hospital_activities (title, date_range, description, footer_type) VALUES ('$title', '$date', '$desc', '$type')");
    $act_id = $conn->insert_id;

    // อัปโหลดรูปภาพ
    foreach($_FILES['imgs']['tmp_name'] as $key => $tmp_name) {
        $file_name = time()."_".$_FILES['imgs']['name'][$key];
        if(move_uploaded_file($tmp_name, "uploads/".$file_name)) {
            $conn->query("INSERT INTO activity_images (activity_id, image_path) VALUES ('$act_id', '$file_name')");
        }
    }
    header("Location: dashboard.php");
}
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet">
</head>
<body class="bg-light">
    <div class="container mt-5" style="max-width: 700px">
        <div class="card shadow border-0">
            <div class="card-body p-4">
                <h3>เพิ่มกิจกรรมใหม่</h3>
                <form method="POST" enctype="multipart/form-data">
                    <input type="text" name="title" class="form-control mb-3" placeholder="หัวข้อ" required>
                    <input type="text" name="date_range" class="form-control mb-3" placeholder="ช่วงวันที่ (เช่น 5-9 ม.ค. 69)" required>
                    <textarea name="description" class="form-control mb-3" rows="4" placeholder="รายละเอียด"></textarea>
                    <select name="footer_type" class="form-select mb-3">
                        <option>กิจกรรมตึกมินิธัญญารักษ์</option>
                        <option>ทีม MCATT ลงพื้นที่เยียวยา</option>
                    </select>
                    <label class="form-label">เลือกรูปภาพประกอบ (หลายรูป)</label>
                    <input type="file" name="imgs[]" class="form-control mb-4" multiple>
                    <button name="save" class="btn btn-primary">บันทึกข้อมูล</button>
                    <a href="dashboard.php" class="btn btn-link">กลับหน้าหลัก</a>
                </form>
            </div>
        </div>
    </div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit