403Webshell
Server IP : 103.82.32.14  /  Your IP : 216.73.217.121
Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9
System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : lonmakmf ( 524)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/rubymnik/public_html/admin/baocao/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/rubymnik/public_html/admin/baocao/chitietbaocao.php
<?php
$page = "../";
include '../../configchannel.php';
include '../configtotal.php';
if(!isset($_SESSION['BaoCaoKiemDuyetNguoiLam']) || isset($_GET['Id']))
{
	$resultQL = mysqli_fetch_assoc(Select('NguoiLam', false, "`id` = ".mysql_real_escape_string($_GET['Id'])."" ,'`Id` DESC'));
	if(!isset($resultQL))
	{
		Header( "Location: ../baocao/quanlybaocao.php" );
		exit;
	}
	$_SESSION['BaoCaoKiemDuyetNguoiLam'] = $resultQL;
}
$resultQL = $_SESSION['BaoCaoKiemDuyetNguoiLam'];
if(isset($_GET['baoCao']))
{
	$dataInsert = array(
		'KiemDuyet' => mysql_real_escape_string($_GET['kiemduyet']),
		'NguoiKiemDuyet' => $_SESSION['login']['id']
	);
	Update('BaoCaoNhanVien', $dataInsert, '`Id` = ' . mysql_real_escape_string($_GET['baoCao']) . '');
	exit;
}
else if(isset($_GET['kiemduyetallcomment']))
{
	$dataInsert = array(
		'KiemDuyet' => 1,
		'NguoiKiemDuyet' => $_SESSION['login']['id']
	);
	$stringid = "";
	foreach($_SESSION['BaoCaoComment'] as $key => $item)
	{
		$stringid .= "`Id` = " . $item;
		if($key < count($_SESSION['BaoCaoComment'])-1)
		{
			$stringid .= " OR ";
		}
	}
	Update('BaoCaoNhanVien', $dataInsert, $stringid);
	Header( "Location: " . $_SERVER['HTTP_REFERER']);
	exit;
}
?>
<?php $titlepage = "Báo Cáo Của " . $resultQL['TenNhanVien']; ?>
<?php $page = "../" ?>
<?php  include '../header/taskbar.php'; ?>

<div class="container-fluid">
                        
                        <!-- start page title -->
                        <div class="row">
                            <div class="col-12">
                                <div class="page-title-box">
                                    <h4 class="page-title"><?php echo $titlepage; ?></h4>
									
                                </div>
                            </div>
                        </div>     
                        <!-- end page title --> 
						
                        <div class="row">
                            <div class="col-12">
                                <div class="card">
									<div class="card-body">
										<div class="card-body">
											<?php if($_GET['datestart'] == $_GET['dateend']) : ?>
											<h5>Báo Cáo Ngày <?php echo $_GET['datestart'] ?></h5>
											<?php else : ?>
											<h5>Báo Cáo Từ Ngày <?php echo $_GET['datestart'] ?> đến ngày <?php echo $_GET['dateend'] ?></h5>
											<?php endif; ?>
											<div class="responsive-table-plugin">
											
												<div class="table-rep-plugin">
													<div class="table-responsive" data-pattern="priority-columns">
														<table id="tech-companies-1" class="table table-striped">
															<thead>
																<tr>
																	<th>#</th>
																	<th>Tên Kênh</th>
																	<th>Thể Loại Báo Cáo</th>
																	<th>Nội Dung Báo Cáo</th>
																	<th>Kiểm Duyệt</th>
																	<th></th>
																</tr>
															</thead>
															
															<tbody id="dataload">
																<?php
																$listBaoCao = null;
																$result = Select('QuanLyChannel', false, "`IdNguoiLam` = ".$resultQL['id']."");
																$datea = explode('-', $_GET['dateend']);
																$timea = mktime(0,0,0,$datea[1],$datea[2],$datea[0]);
																$ngaySQLSelect = date('Y-m-d', strtotime('+1 day', $timea));
																$mysqldate = $_GET['datestart'];
																while($res = mysqli_fetch_array($result)) 
																{
																	$resultVideoUpload = Select('BaoCaoNhanVien', false, "`IdChannel` = ".$res['id']." AND `NgayBaoCao` < '".$ngaySQLSelect."' AND `NgayBaoCao` >= '".$mysqldate."'", '`Id` DESC');
																	while($resVideo = mysqli_fetch_array($resultVideoUpload))
																	{
																		$resVideo['InfoChannel'] = $res;
																		$listBaoCao[] = $resVideo;
																	}
																}
																?>
																<?php
																$demstt = 1;
																foreach($listBaoCao as $keyBaoCao => $itemBaoCao)
																{
																?>
																	<tr>
																		
																		<td>
																			<?php echo $demstt++; ?>
																		</td>
																		<td>
																			<a href="https://www.youtube.com/channel/<?php echo $itemBaoCao['InfoChannel']['IdChannel']; ?>" target="_blank"><?php echo$itemBaoCao['InfoChannel']['NameChannel']; ?></a>
																		</td>
																		<td>
																			<?php 
																			if($itemBaoCao['KieuBaoCao'] == 0)
																			{
																				echo 'Upload Video';
																			} else if($itemBaoCao['KieuBaoCao'] == 1)
																			{
																				$_SESSION['BaoCaoComment'][] = $itemBaoCao['Id'];
																				echo 'Comment Video';
																			} else if($itemBaoCao['KieuBaoCao'] == 2)
																			{
																				echo 'Share MXH';
																			}
																			?>
																		</td>
																		<td>
																			<a href="<?php echo $itemBaoCao['NoiDungBaoCao']; ?>" target="_blank"><?php echo substr($itemBaoCao['NoiDungBaoCao'], 0, 70); ?></a>
																			
																		</td>
																		<td id="trangthai-<?php echo $itemBaoCao['Id']; ?>">
																			<?php 
																			if($itemBaoCao['NguoiKiemDuyet'] != 0)
																			{
																				$resultQLKiemDuyet = mysqli_fetch_assoc(Select('NguoiLam', false, "`id` = ".$itemBaoCao['NguoiKiemDuyet']."" ,'`Id` DESC'));
																				$name = explode(" ", $resultQLKiemDuyet['TenNhanVien'])[count(explode(" ", $resultQLKiemDuyet['TenNhanVien']))-1];
																			}
																			if($itemBaoCao['KiemDuyet'] == 0)
																			{
																				echo '<div>Chưa Kiểm Duyệt</div>';
																			} else if($itemBaoCao['KiemDuyet'] == 1)
																			{
																				echo '<div>'.$name.' Chấp Nhận</div>';
																			} else if($itemBaoCao['KiemDuyet'] == 2)
																			{
																				echo '<div >'.$name.' Từ Chối</div>';
																			}
																			?>
																		</td>
																		<td style="width:5px;">
																		<?php if($_SESSION['login']['TiLeNhanChiaSeQuanLy'] > 0 || $_SESSION['login']['Admin'] == 1) : ?>
																			<?php 
																			
																			if($itemBaoCao['KiemDuyet'] == 0)
																			{
																				?>
																				<span id="pheduyet-<?php echo $itemBaoCao['Id']; ?>"><a style="cursor: pointer;" data-value="<?php echo $itemBaoCao['Id']; ?>" name="pheduyet" class="badge bg-success" style="color: white;"><i class="mdi mdi-check-all"></i> Phê Duyệt</a></span>
																				<span id="tuchoi-<?php echo $itemBaoCao['Id']; ?>"><a style="cursor: pointer;" data-value="<?php echo $itemBaoCao['Id']; ?>" name="tuchoi" class="badge bg-danger" style="color: white;"><i class="mdi mdi-close-circle-outline"></i> Từ Chối</a></span>
																				<?php
																			} else if($itemBaoCao['KiemDuyet'] == 1)
																			{
																				?>
																				<span id="pheduyet-<?php echo $itemBaoCao['Id']; ?>" style="display: none;"><a style="cursor: pointer;" data-value="<?php echo $itemBaoCao['Id']; ?>" name="pheduyet" class="badge bg-success" style="color: white;"><i class="mdi mdi-check-all"></i> Phê Duyệt Lại</a></span>
																				<span id="tuchoi-<?php echo $itemBaoCao['Id']; ?>"><a style="cursor: pointer;" data-value="<?php echo $itemBaoCao['Id']; ?>" name="tuchoi" class="badge bg-danger" style="color: white;"><i class="mdi mdi-close-circle-outline"></i> Từ Chối Lại</a></span>
																				
																				<?php
																			} else if($itemBaoCao['KiemDuyet'] == 2)
																			{
																				?>
																				<span id="pheduyet-<?php echo $itemBaoCao['Id']; ?>"><a style="cursor: pointer;" data-value="<?php echo $itemBaoCao['Id']; ?>" name="pheduyet" class="badge bg-success" style="color: white;"><i class="mdi mdi-check-all"></i> Phê Duyệt Lại</a></span>
																				<span id="tuchoi-<?php echo $itemBaoCao['Id']; ?>" style="display: none;"><a style="cursor: pointer;" data-value="<?php echo $itemBaoCao['Id']; ?>" name="tuchoi" class="badge bg-danger" style="color: white;"><i class="mdi mdi-close-circle-outline"></i> Từ Chối Lại</a></span>
																				<?php
																			}
																			?>
																			
																			<?php endif; ?>
																			
																		</td>
																	</tr>
																	<?php
																}
																?>
															</tbody>
														</table>
													</div> <!-- end .table-responsive -->
												</div> <!-- end .table-rep-plugin-->
											</div> <!-- end .responsive-table-plugin-->
										</div>
                                </div> <!-- end card -->
                            </div> <!-- end col -->
                        </div>
                        <!-- end row -->
                        
                    </div> <!-- container -->


<?php  include '../header/footer.php'; ?>
<script>
$(document).ready(function(){
	$("[name='pheduyet']").click(function(e){
		var dataid = nhansu = $(this).data("value");
		$.ajax({url: "chitietbaocao.php?baoCao="+dataid+"&kiemduyet=1", success: function(result){
			$("#trangthai-" + dataid).html('<div style="color: #b2ff9e; font-weight: bold;">Đã Chấp Nhận</div>');
			$("#pheduyet-" + dataid).css("display", "none");
			$("#tuchoi-" + dataid).css("display", "block");
		}});
		
	});
	$("[name='tuchoi']").click(function(e){
		var dataid = nhansu = $(this).data("value");
		$.ajax({url: "chitietbaocao.php?baoCao="+dataid+"&kiemduyet=2", success: function(result){
			$("#trangthai-" + dataid).html('<div style="color: #ff525a; font-weight: bold;">Từ Chối</div>');
			$("#tuchoi-" + dataid).css("display", "none");
			$("#pheduyet-" + dataid).css("display", "block");
		}});
		
	});
});
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit