File Manager

✏️ Edit File: /var/www/vhosts/nursoft.al/public_html/EspressoBarUsato/africa/johannesburg/Admin.php

<?php
ob_start(); 
define('INCLUDE_CHECK',1);
include "../../espressophp/dbconnect.php";
error_reporting(0);
include_once("../../espressophp/status.php");
$u="";
$nid= preg_replace("/[^0-9]/", "", $_GET['post_id']);
// Make sure the _GET username is set, and sanitize it
if(isset($_GET["u"])){
	$u = preg_replace('#[^a-z0-9]#i', '', $_GET['u']);
} else {    header("location: index.php");
    exit();
}
// Select the member from the users table
$sql = "SELECT * FROM admin WHERE username='$u' and ln='johannesburg' LIMIT 1";
$user_query = mysqli_query($db_conx, $sql);
// Now make sure that user exists in the table
$numrows = mysqli_num_rows($user_query);
if($numrows < 1){
}
if($u == $log_username && $user_ok == true){
	$isOwner = "yes";

}
else
{
$isOwner == "no";
    header("location: index.php");
    exit();
}
while ($row = mysqli_fetch_array($user_query, MYSQLI_ASSOC)) 
{
$profile_id = $row["id"];	
$emri= $row["emri"];	
}
						if(isset($_POST['email']))
					{
					$regg=mysql_real_escape_string($_POST['email']);
$v21 = "INSERT INTO registed VALUES('','$regg',now(),'johannesburg')";
$vr21 = mysql_query($v21);
if($vr21)
{
echo 'È successo registrarti';
exit();
}else{echo 'La registrazione non è fatto!';
exit();}
					}$basename=basename(__FILE__);
?>
<!DOCTYPE html>
<html lang="en">
<head>
<style>
  #textarea {
    -moz-appearance: textfield-multiline;
    -webkit-appearance: textarea;
    border: 1px solid gray;
    font: medium -moz-fixed;
    font: -webkit-small-control;
    overflow: auto;
    padding: 2px;
    resize: both;
}
</style>
<?php if($_GET["v"] !="NdryshoKontaktet"){ ?>
<script src="//tinymce.cachefly.net/4.2/tinymce.min.js"></script>
<script type="text/javascript">
tinymce.init({
    selector: "textarea",
    theme: "modern",
    plugins: [
        "advlist autolink lists link image charmap print preview hr anchor pagebreak",
        "searchreplace wordcount visualblocks visualchars code fullscreen",
        "insertdatetime media nonbreaking save table contextmenu directionality",
        "emoticons template paste textcolor colorpicker textpattern imagetools"
    ],
    toolbar1: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image",
    toolbar2: "print preview media | forecolor backcolor emoticons",
    image_advtab: true,
    templates: [
        {title: 'Test template 1', content: 'Test 1'},
        {title: 'Test template 2', content: 'Test 2'}
    ]
});
</script>
<?php  } ?>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Espresso Bar Ussato | Johannesburg Admin |</title>
<meta name="viewport" content="width=device-width; initial-scale=1.0; maximum-scale=1.0; user-scalable=no">
<?php include_once "header.php"; ?>  
  
       <section class="main-container col1-layout"> 

          <div class="main container">                               
                            <div class="std"><div class="page-heading">
<div class="container">
<div class="row">
<div class="col-xs-12">
<div class="page-title">
<h2>Admin Panel</h2>
</div>
</div>
</div>
</div>
</div>
<div class="main-container col1-layout wow bounceInUp animated animated" style="visibility: visible;">
<div class="main container">
<div class="std">
<div class="wrapper_bl" style="margin-top: 1px;">
<div class="form_background">
<?php 
if( $_GET['v']=='NdryshoFshiProdukt' && $_GET['kategoria']=='Produkte')
{
$q = "SELECT id,title,foto,johannesburgtitle FROM products order by id desc";
$r = mysql_query($q);
if($r)
{echo"
<table border=1 width=100% style='text-align:center; a{margin-top:-10px;}'>";echo "<tr>";
echo"<td>Photo</td><td>Name</td><td>Update</td>";
while($row=mysql_fetch_array($r))
{
//header("Content-type: text/html");
//$type = "Content-type: ".$row['aphototype'];
$i=$row['foto'];
// Delete Item Question to Admin, and Delete Product if they choose
	echo "<tr>";
		echo "<td width=7%>";
echo "<img src='http://espressobarusato.com/images/$i' width=100% height=50/>";
		echo "</td>";
echo "<td>";
echo "<h6>";
echo "<a style='margin-bottom:70px; position:relative;' href='details.php?pid=$row[id]' class=''> $row[title]</a>";
echo '</h6>';
echo "</td>";
echo "<td>";
echo "<a style='margin-bottom:70px; position:relative;' href='Admin.php?post_id=$row[id]&u=$u&v=NdryshoProdukt&kategoria=$_GET[kategoria]' 
		class='ndrysho'> Update </a> &nbsp; &nbsp; &nbsp; &nbsp; ";

echo "</td>";
echo "</tr>";	
}}
	echo "</table></br></br>";	
}
$emri= mysql_real_escape_string($_POST['emri']);
$description= mysql_real_escape_string($_POST['description']);
$cmimi= $_POST['cmimi'];
$reduced= $_POST['reduced'];
$valuta= $_POST['valuta'];
$tags= mysql_real_escape_string($_POST['tags']);
if(isset($_POST['ndrysho']))
{
$ss2="UPDATE `products` set `johannesburgtitle`='$emri', `johannesburgarticle`='$description',
`tags`='$tags'
 where id='$nid'";
$as2 = mysql_query($ss2);
$ssa2="UPDATE `prices` set `johannesburgprice`='$cmimi', `johannesburgvaluta`='$valuta', `johannesburgreduced`='$reduced' where pid='$nid'";
$asa2 = mysql_query($ssa2);
if($ss2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Succesfully Updated!</b></style>";
echo "</p>";
}}
if( $_GET['v']=='NdryshoProdukt'){
	if($_GET["kategoria"]=="Produkte")
{	
$qa = "select products.id,products.marche,products.title,products.johannesburgtitle,products.article,products.color2,products.aviable,products.johannesburgarticle,products.tags,prices.pid,prices.johannesburgprice,prices.johannesburgreduced,prices.johannesburgvaluta,prices.price,prices.reduced,prices.valuta from products INNER JOIN prices where products.id=prices.pid AND products.id ='$nid'";
}elseif($_GET["kategoria"]!="Produkte")
{
	$qa="Select * FROM permbledhje where id='$nid' ";
}
$rf = mysql_query($qa); echo mysql_error();
$row = mysql_fetch_assoc ($rf); ?>
<form name="signupform" Action="" enctype="multipart/form-data" Method="POST">
<span  style='width:49.7%; text-align:center; font-weight:bold;float:left;'>Johannesburg Version</span><span style='width:49.7%;text-align:center; font-weight:bold; float:right;'>English Version</span>
  <input type="text" style='width:49.7%; float:left;' name="emri" placeholder="Product Name" value="<?php echo $row["johannesburgtitle"]; ?>">
  
  <input type="text" style='width:49.7%; float:right;' value="<?php echo $row["title"]; ?>"readonly>
  </br>
  <style>
  #mceu_21{width:49.5%;float:left;}
  #mceu_66{width:49.5%; float:right;}

</style>
  <textarea name='description' style='height:100px; width:49.5%; float:left;' ><?php echo $row["johannesburgarticle"]; ?></textarea>
   <div id="textarea"style='height:100px; width:49.7%;height:275px; float:right;' ><?php echo $row["article"]; ?></div>
  <input type="text" style=' width:49.7%; float:left;' name="cmimi" placeholder="Price" value="<?php echo $row["johannesburgprice"]; ?>"> 
   <input type="text" style=' width:49.7%; float:right;' value="<?php echo $row["price"]; ?>"readonly> 
  <input type="text" style=' width:49.7%; float:left;' name="reduced" placeholder="Reduced Price" value="<?php echo $row["johannesburgreduced"]; ?>">
    <input type="text" style=' width:49.7%; float:right;'value="<?php echo $row["reduced"]; ?>"readonly>
  <select name="valuta" style=' width:49.7%; float:left;' >
  <option value="<?php echo $row["johannesburgvaluta"]; ?>"><?php echo $row["johannesburgvaluta"]; ?></option>
  <option value="€">€</option>
  <option value="$">$</option>
  <option value="د.إ ">د.إ</option>
 <option value="£">£</option>
  </select>

<select style=' width:49.7%; float:right;' readonly>
  <option value="<?php echo $row["valuta"]; ?>"><?php echo $row["valuta"]; ?></option>
  </select>
  <span  style='text-align:center; font-weight:bold;padding-top:10px;'>TAGS:</span>
  <input type="text" style='width:100%' name="tags" value="<?php echo $row["tags"]; ?>">  </br>
  </br>
  <input type="submit" style="width:30%; padding:7px;color: #FFF;"  class="button1"name="ndrysho" value="Update"></br> </br>
  </br>
  </br>
  </form>
									<?php } ?>
<?php 
$tit= mysql_real_escape_string($_POST['asd3']);
if(isset($_POST['rreth']))
{
$ss2="UPDATE permbledhje SET johannesburgarticle='$tit' Where id='$nid'";
$as2 = mysql_query($ss2);

if($as2)
{
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Succesfully Updated!</b></span>";
}
}
									if( $_GET['v']=='NdryshoRrethNesh'){
$qa = "SELECT pershkrimi,johannesburgarticle FROM permbledhje where id ='$nid'";
$rf = mysql_query($qa);
$row = mysql_fetch_assoc ($rf); 
 echo"<br/>
 <form name='example' enctype='multipart/form-data' action='' method='POST'> 
	<textarea name='asd3'  style=' height:200px; width:47.5%;float:right; padding:10px;'>$row[johannesburgarticle]</textarea></br>
					<div id=textarea style='height:275px; width:100%;' >$row[pershkrimi]</div></br>
									<input type='submit' style=' width:25.5%; padding:10px;' class='button1' value='Update'
									name='rreth'>
									</form>
								</br></br></br>";
									} if( $_GET['v']=='NdryshoKontaktet')
{
$title= mysql_real_escape_string($_POST['title']);
$pershkrimi= mysql_real_escape_string($_POST['pershkrimi']);
$foto= mysql_real_escape_string($_POST['foto']);
if(!empty($title) && isset($_POST['ndkon']))
{
$ss2='UPDATE permbledhje SET johannesburgemail="'.$title.'",johannesburgtitle="'.$pershkrimi.'",johannesburgarticle="'.$foto.'" Where id="2"';
$as2 = mysql_query($ss2);
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Succesfully Updated!</b></style>";
echo "</p>";
}}
$qa12 = "SELECT johannesburgemail,johannesburgarticle,johannesburgtitle FROM permbledhje where id ='2'";
$rf12 = mysql_query($qa12);
$row12= mysql_fetch_assoc ($rf12); ?>
<form name="signupform" Action="" Method="post">
     <textarea name='title' style='width:49.8%; float:left;'><?php echo $row12['johannesburgemail']; ?></textarea>
     <textarea name='pershkrimi' style='width:49.7%; float:right;;'><?php echo$row12['johannesburgtitle']; ?></textarea>
	 <textarea name='foto' style="width: 100%;margin-top: 5px;"><?php echo $row12['johannesburgarticle']; ?></textarea></br>
	 <input type="submit" style="width:30%; padding:7px;" name="ndkon" class='button1' value="Update"></br>
	</form></br></br></br>
									<?php }  if($_GET['v']=='Regjistro'){ 
$emri= $_POST['emri'];
$username= $_POST['username'];
$pass123= $_POST['pass123'];
$email= $_POST['email2'];
if( !empty($pass123) &&  !empty($username))
{
$pass1 = mysql_real_escape_string($pass123);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass1235 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
$s1232="INSERT INTO admin VALUES('','$emri','$email','$username','$pass1235','','','johannesburg')";
$r1232 = mysql_query($s1232);

if($r1232)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;margin-top:-40px;'><b>Succesfully Added!</b></style>";
echo "</p>";
}
else
{
echo mysql_error();
}}?> <br/><br/>	<form method='POST' action=''>
								<div class="contact-form"> 	<input type='text' style=" width:45.5%; padding:10px; "name='emri' placeholder='Name' required></br>
									<input type='text'style=" width:45.5%; padding:10px; " name='username' placeholder='Username' required></br>
									<input type='text' style=" width:45.5%; padding:10px; "name='pass123' placeholder='Password' required></br>
									<input type='text' style=" width:45.5%; padding:10px; "name='email2' placeholder='E-Mail'></br>
									<span><input type="submit" style=" width:25.5%; padding:10px; "value="Submit"></span></form> </div>
								</br></br></br>	<?php } 
if(isset($_POST["pass1"])){
	$p =$_POST['pass1'];
	$p2 =$_POST['pass2'];
	// GET USER IP ADDRESS
    $ip = preg_replace('#[^0-9.]#', '', getenv('REMOTE_ADDR'));
	if( $p == ""  || $p2 == ""){
		echo "You must fill all filds to change your password ";
    } if( $p != $p2){
		echo "Password dosent match";
    }else {
$pass1 = mysql_real_escape_string($p);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass123 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
		// Add user info into the database table for the main site table
            $_SESSION['userid'] = $profile_id ;
			$_SESSION['username'] = $u;
			$_SESSION['password'] = $pass123;
			setcookie("id", $profile_id, strtotime( '+30 days' ), "/", "", "", TRUE);
			setcookie("user", $u, strtotime( '+30 days' ), "/", "", "", TRUE);
    		setcookie("pass", $pass123, strtotime( '+30 days' ), "/", "", "", TRUE); 
		$sql = "UPDATE  admin SET password='$pass123', ip='$ip', lastlogin=now() WHERE username = '$u' AND id = '$profile_id'";
		$query = mysqli_query($db_conx, $sql); 
		if($query)
		{
		echo "<p style='color:green; font-weight:bold; font-size:14px;'>Succesfully Updated!</p>";}
	}
}
if( $_GET['v']=='NdryshoPass' &&  $_COOKIE['pass'] =='true')

{echo"<p style='color:green; font-size:16px; font-weight:bold;'>Password successfully verified!</p>";
									echo'<form name="signupform" Action="" Method="post">
      <input name="pass1" style="width:50%; padding:10px;" type="password" placeholder="Your New Password" maxlength="200"></br>
    <input name="pass2" style="width:50%; padding:10px;"type="password" placeholder="Confirm New Password" maxlength="200"></br>
	 <input type="submit" style="width:30%; padding:7px;"name="submit" value="Update Password"></br></br></br>
	</form>';
									}if($_GET['v'] =='FshiAdm'){
	if(isset($_POST['usid']) && isset($_POST['fshii']))
	{
	$usid=$_POST['usid'];
	$qa = "DELETE FROM admin where id ='$usid' LIMIT 1";
    $rf = mysql_query($qa);
	if($rf)
	{
	echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Deleted successfully!</b></style>";
echo "</p>";
	}
	}
	?>
<table border=1 width='98%'>
<tr style='padding:10px; text-align:center;border:1px solid black;'>
<td style='border:1px solid black;'>id</td>
<td style='border:1px solid black;'>Name</td>
<td style='border:1px solid black;'>Email</td>
<td style='border:1px solid black;'>Username</td>
<td style='border:1px solid black;'>Last Login</td>
<td style='border:1px solid black;'>DELETE</td></tr>
	<?php
$v3 = "select * from admin where ln='johannesburg'";
$vr3 = mysql_query($v3);
while($vrow3 = mysql_fetch_array($vr3)){ ?>
<tr style='padding:10px; text-align:center;'>
<td style='border:1px solid black;'><?php echo $vrow3['id']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['emri']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['email']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['username']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['lastlogin']; ?></td>
<td style='border:1px solid black;'>
<form method='POST' action=''>
<input type='hidden' name='usid' value='<?php echo $vrow3['id']; ?>'>
<button style='width:100%;' name='fshii' class='button'>DELETE</button>
</form>
</td>
</tr>
	<?php }?>
</table></br></br><?php }
if(isset($_POST["pass"])){
$p2 =$_POST['pass'];
$pass1 = mysql_real_escape_string($p2);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass123 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
if($log_password == $pass123)
{
 setcookie( 'pass', 'true', time()+1800);
	header("location: Admin.php?u=$u&v=NdryshoPass");
    exit();	
}else
{
echo "</br></br></br><p style='color:red; font-size:16px; font-weight:bold;'>Password do not match!</p>";
}
} if($_GET['v'] == 'pass') { ?>	
<form method='POST' id='a' action='' style='margin: 0 auto;width: 70%;'></br></br></br>
<p style='color:green; font-size:16px; font-weight:bold;'>Please confirm your password!</p>
          
		<input type='text' name='pass'style='padding: 5px;margin-bottom: 3px;width: 100%;margin: 0 auto;' placeholder='Your Password' required></br>
		<button class='button' style='padding:2px; color:green;width:20%;'> Confirm </button>
		</form></br></br></br>
		
<?php } ?>
<a href="Admin.php?v=NdryshoFshiProdukt&u=<?php echo $u; ?>&kategoria=Produkte" style='width:80.3%;color: #FFF;'class="button1">Update Products</a>
<a href="Admin.php?v=NdryshoKontaktet&u=<?php echo $u; ?>" style='color: #FFF;' class="button1">Update Contacts</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=1" style='color: #FFF;' class="button1">Update About Us</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=7"style='color: #FFF;' class="button1">Update How To Buy</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=8" style='color: #FFF;'class="button1">Update Payment Methods</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=4" style='color: #FFF;' class="button1">Update Delivery Information</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=3" style='color: #FFF;' class="button1">Update Privacy Policy</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=6"style='color: #FFF;' class="button1">Update Terms & Conditions</a>
<a href="Admin.php?v=Regjistro&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Add administrator</a>
<a href="Admin.php?v=FshiAdm&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Delete administrator</a>
<a href="Admin.php?v=pass&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Change password</a>
<a href="logout.php" class="button1"style='color: #FFF;width:80.3%;'>Logout</a><style>.button1 { width:40%; text-align:center;
	color: #FFF;
	font-family: 'Roboto Condensed', sans-serif;
	font-size:1.1em;
	font-weight: normal;
	padding: 10px 30px;
	text-transform: uppercase;
	background:#ABC492;
	display: inline-block;
	margin: 0.1em 0 0;
	-webkit-transition: all 0.3s ease-out;
	-moz-transition: all 0.3s ease-out;
	-ms-transition: all 0.3s ease-out;
	-o-transition: all 0.3s ease-out;
	text-decoration:none;
	transition: all 0.3s ease-out;
}
.button1:hover{
	background:#333;
}
</style>
</div>
</div>
</div>
</div>
</div></div>           
          </div> 
       </section> 
<?php include_once "footer.php"; ?>        
</body>
</html>

Batal

⬅ Naik ke africa 15 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁App_Data	dir	—	2018-02-01 03:51	📂 Buka
🐘About.php	php	5.6 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘Admin.php	php	18.2 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🖼️Africanprideaaaalogo.png	png	129.6 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘Contact.php	php	6.9 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘asd.php	php	8.9 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘captcha.php	php	761 B	2018-02-01 03:51	✏️ Edit 👁️ View
🌐cookies.html	html	2.9 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘details.php	php	32.8 KB	2018-02-01 14:52	✏️ Edit 👁️ View
🐘footer.php	php	5.3 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘header.php	php	21.9 KB	2018-02-01 14:52	✏️ Edit 👁️ View
🐘index.php	php	28.3 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘login.php	php	4.5 KB	2018-02-01 03:51	✏️ Edit 👁️ View
🐘logout.php	php	621 B	2018-02-01 03:51	✏️ Edit 👁️ View
🐘posts.php	php	24.8 KB	2018-02-01 03:51	✏️ Edit 👁️ View