!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/mina/fono/   drwxr-xr-x
Free 3.95 GB of 27.03 GB (14.61%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     fono_maint.php (20.06 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
//Include Common Files @1-5471E0F2
define("RelativePath", ".");
include(
RelativePath . "/Common.php");
include(
RelativePath . "/Template.php");
include(
RelativePath . "/Sorter.php");
include(
RelativePath . "/Navigator.php");
  
//End Include Common Files

//Include Page implementation @15-39DC296A
include_once("./Header.php");
//End Include Page implementation

Class clsRecordfono { //fono Class @2-6CEED733

//Variables @2-4A82E0A3

    // Public variables
    
var $ComponentName;
    var
$HTMLFormAction;
    var
$PressedButton;
    var
$Errors;
    var
$ErrorBlock;
    var
$FormSubmitted;
    var
$FormEnctype;
    var
$Visible;
    var
$Recordset;

    var
$CCSEvents = "";
    var
$CCSEventResult;

    var
$InsertAllowed;
    var
$UpdateAllowed;
    var
$DeleteAllowed;
    var
$ds;
    var
$EditMode;
    var
$ValidatingControls;
    var
$Controls;

    
// Class variables
//End Variables

//Class_Initialize Event @2-07EA9FD8
    
function clsRecordfono()
    {

        global
$FileName;
        
$this->Visible = true;
        
$this->Errors = new clsErrors();
        
$this->ErrorBlock = "Record fono/Error";
        
$this->ds = new clsfonoDataSource();
        
$this->InsertAllowed = true;
        
$this->UpdateAllowed = true;
        
$this->DeleteAllowed = true;
        if(
$this->Visible)
        {
            
$this->ComponentName = "fono";
            
$CCSForm = split(":", CCGetFromGet("ccsForm", ""), 2);
            if(
sizeof($CCSForm) == 1)
                
$CCSForm[1] = "";
            list(
$FormName, $FormMethod) = $CCSForm;
            
$this->EditMode = ($FormMethod == "Edit");
            
$this->FormEnctype = "multipart/form-data";
            
$this->FormSubmitted = ($FormName == $this->ComponentName);
            
$Method = $this->FormSubmitted ? ccsPost : ccsGet;
            
$this->naziv = new clsControl(ccsTextArea, "naziv", "Naziv", ccsMemo, "", CCGetRequestParam("naziv", $Method));
            
$this->naziv->Required = true;
            
$this->opis = new clsControl(ccsTextArea, "opis", "Opis", ccsMemo, "", CCGetRequestParam("opis", $Method));
            
$this->opis->Required = true;
            
$this->FileUpload1 = new clsFileUpload("FileUpload1", "FileUpload1", "/home/mnnews/public_html/temp/", "/home/mnnews/public_html/prilozifono/", "/([\w\W]+)/i", "", 40000000);
            
$this->datum = new clsControl(ccsTextBox, "datum", "Datum", ccsDate, Array("GeneralDate"), CCGetRequestParam("datum", $Method));
            
$this->datum->Required = true;
            
$this->DatePicker_datum = new clsDatePicker("DatePicker_datum", "fono", "datum");
            
$this->rubrika = new clsControl(ccsListBox, "rubrika", "Rubrika", ccsInteger, "", CCGetRequestParam("rubrika", $Method));
            
$this->rubrika->DSType = dsTable;
            list(
$this->rubrika->BoundColumn, $this->rubrika->TextColumn, $this->rubrika->DBFormat) = array("id_rubrike", "naziv_rubrike", "");
            
$this->rubrika->ds = new clsDBConnection1();
            
$this->rubrika->ds->SQL = "SELECT *  " .
"FROM rubrike";
            
$this->rubrika->Required = true;
            
$this->Button_Insert = new clsButton("Button_Insert");
            
$this->Button_Update = new clsButton("Button_Update");
            
$this->Button_Delete = new clsButton("Button_Delete");
            if(!
$this->FormSubmitted) {
                if(!
is_array($this->datum->Value) && !strlen($this->datum->Value) && $this->datum->Value !== false)
                
$this->datum->SetValue(time());
            }
        }
    }
//End Class_Initialize Event

//Initialize Method @2-F98A764E
    
function Initialize()
    {

        if(!
$this->Visible)
            return;

        
$this->ds->Parameters["urlid"] = CCGetFromGet("id", "");
    }
//End Initialize Method

//Validate Method @2-3CB96069
    
function Validate()
    {
        
$Validation = true;
        
$Where = "";
        
$Validation = ($this->naziv->Validate() && $Validation);
        
$Validation = ($this->opis->Validate() && $Validation);
        
$Validation = ($this->FileUpload1->Validate() && $Validation);
        
$Validation = ($this->datum->Validate() && $Validation);
        
$Validation = ($this->rubrika->Validate() && $Validation);
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "OnValidate");
        return ((
$this->Errors->Count() == 0) && $Validation);
    }
//End Validate Method

//CheckErrors Method @2-989D9A00
    
function CheckErrors()
    {
        
$errors = false;
        
$errors = ($errors || $this->naziv->Errors->Count());
        
$errors = ($errors || $this->opis->Errors->Count());
        
$errors = ($errors || $this->FileUpload1->Errors->Count());
        
$errors = ($errors || $this->datum->Errors->Count());
        
$errors = ($errors || $this->DatePicker_datum->Errors->Count());
        
$errors = ($errors || $this->rubrika->Errors->Count());
        
$errors = ($errors || $this->Errors->Count());
        
$errors = ($errors || $this->ds->Errors->Count());
        return
$errors;
    }
//End CheckErrors Method

//Operation Method @2-D6EC68F7
    
function Operation()
    {
        if(!
$this->Visible)
            return;

        global
$Redirect;
        global
$FileName;

        
$this->ds->Prepare();
        
$this->EditMode = $this->ds->AllParametersSet;
        if(!
$this->FormSubmitted)
            return;

        
$this->FileUpload1->Upload();

        if(
$this->FormSubmitted) {
            
$this->PressedButton = $this->EditMode ? "Button_Update" : "Button_Insert";
            if(
strlen(CCGetParam("Button_Insert", ""))) {
                
$this->PressedButton = "Button_Insert";
            } else if(
strlen(CCGetParam("Button_Update", ""))) {
                
$this->PressedButton = "Button_Update";
            } else if(
strlen(CCGetParam("Button_Delete", ""))) {
                
$this->PressedButton = "Button_Delete";
            }
        }
        
$Redirect = "fono_list.php" . "?" . CCGetQueryString("QueryString", Array("ccsForm"));
        if(
$this->PressedButton == "Button_Delete") {
            if(!
CCGetEvent($this->Button_Delete->CCSEvents, "OnClick") || !$this->DeleteRow()) {
                
$Redirect = "";
            }
        } else if(
$this->Validate()) {
            if(
$this->PressedButton == "Button_Insert") {
                if(!
CCGetEvent($this->Button_Insert->CCSEvents, "OnClick") || !$this->InsertRow()) {
                    
$Redirect = "";
                }
            } else if(
$this->PressedButton == "Button_Update") {
                if(!
CCGetEvent($this->Button_Update->CCSEvents, "OnClick") || !$this->UpdateRow()) {
                    
$Redirect = "";
                }
            }
        } else {
            
$Redirect = "";
        }
    }
//End Operation Method

//InsertRow Method @2-6EFBA1F4
    
function InsertRow()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeInsert");
        if(!
$this->InsertAllowed) return false;
        
$this->ds->naziv->SetValue($this->naziv->GetValue());
        
$this->ds->opis->SetValue($this->opis->GetValue());
        
$this->ds->FileUpload1->SetValue($this->FileUpload1->GetValue());
        
$this->ds->datum->SetValue($this->datum->GetValue());
        
$this->ds->rubrika->SetValue($this->rubrika->GetValue());
        
$this->ds->Insert();
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterInsert");
        if(
$this->ds->Errors->Count() > 0) {
            echo
"Error in Record " . $this->ComponentName . " / Insert Operation";
            
$this->ds->Errors->Clear();
            
$this->Errors->AddError("Database command error.");
        } else {
            
$this->FileUpload1->Move();
        }
        return (!
$this->CheckErrors());
    }
//End InsertRow Method

//UpdateRow Method @2-0E181BE2
    
function UpdateRow()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeUpdate");
        if(!
$this->UpdateAllowed) return false;
        
$this->ds->naziv->SetValue($this->naziv->GetValue());
        
$this->ds->opis->SetValue($this->opis->GetValue());
        
$this->ds->FileUpload1->SetValue($this->FileUpload1->GetValue());
        
$this->ds->datum->SetValue($this->datum->GetValue());
        
$this->ds->rubrika->SetValue($this->rubrika->GetValue());
        
$this->ds->Update();
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterUpdate");
        if(
$this->ds->Errors->Count() > 0) {
            echo
"Error in Record " . $this->ComponentName . " / Update Operation";
            
$this->ds->Errors->Clear();
            
$this->Errors->AddError("Database command error.");
        } else {
            
$this->FileUpload1->Move();
        }
        return (!
$this->CheckErrors());
    }
//End UpdateRow Method

//DeleteRow Method @2-49F28F88
    
function DeleteRow()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeDelete");
        if(!
$this->DeleteAllowed) return false;
        
$this->ds->Delete();
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterDelete");
        if(
$this->ds->Errors->Count() > 0) {
            echo
"Error in Record " . ComponentName . " / Delete Operation";
            
$this->ds->Errors->Clear();
            
$this->Errors->AddError("Database command error.");
        } else {
            
$this->FileUpload1->Delete();
        }
        return (!
$this->CheckErrors());
    }
//End DeleteRow Method

//Show Method @2-9487CF3B
    
function Show()
    {
        global
$Tpl;
        global
$FileName;
        
$Error = "";

        if(!
$this->Visible)
            return;

        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeSelect");

        
$this->rubrika->Prepare();

        
$this->ds->open();

        
$RecordBlock = "Record " . $this->ComponentName;
        
$ParentPath = $Tpl->block_path;
        
$Tpl->block_path = $ParentPath . "/" . $RecordBlock;
        if(
$this->EditMode)
        {
            if(
$this->Errors->Count() == 0)
            {
                if(
$this->ds->Errors->Count() > 0)
                {
                    echo
"Error in Record fono";
                }
                else if(
$this->ds->next_record())
                {
                    
$this->ds->SetValues();
                    if(!
$this->FormSubmitted)
                    {
                        
$this->naziv->SetValue($this->ds->naziv->GetValue());
                        
$this->opis->SetValue($this->ds->opis->GetValue());
                        
$this->FileUpload1->SetValue($this->ds->FileUpload1->GetValue());
                        
$this->datum->SetValue($this->ds->datum->GetValue());
                        
$this->rubrika->SetValue($this->ds->rubrika->GetValue());
                    }
                }
                else
                {
                    
$this->EditMode = false;
                }
            }
        }
        if(!
$this->FormSubmitted)
        {
        }

        if(
$this->FormSubmitted || $this->CheckErrors()) {
            
$Error .= $this->naziv->Errors->ToString();
            
$Error .= $this->opis->Errors->ToString();
            
$Error .= $this->FileUpload1->Errors->ToString();
            
$Error .= $this->datum->Errors->ToString();
            
$Error .= $this->DatePicker_datum->Errors->ToString();
            
$Error .= $this->rubrika->Errors->ToString();
            
$Error .= $this->Errors->ToString();
            
$Error .= $this->ds->Errors->ToString();
            
$Tpl->SetVar("Error", $Error);
            
$Tpl->Parse("Error", false);
        }
        
$CCSForm = $this->EditMode ? $this->ComponentName . ":" . "Edit" : $this->ComponentName;
        
$this->HTMLFormAction = $FileName . "?" . CCAddParam(CCGetQueryString("QueryString", ""), "ccsForm", $CCSForm);
        
$Tpl->SetVar("Action", $this->HTMLFormAction);
        
$Tpl->SetVar("HTMLFormName", $this->ComponentName);
        
$Tpl->SetVar("HTMLFormEnctype", $this->FormEnctype);
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeShow");
        if(!
$this->Visible) {
            
$Tpl->block_path = $ParentPath;
            return;
        }

        
$this->Button_Insert->Visible = !$this->EditMode && $this->InsertAllowed;
        
$this->Button_Update->Visible = $this->EditMode && $this->UpdateAllowed;
        
$this->Button_Delete->Visible = $this->EditMode && $this->DeleteAllowed;
        
$this->naziv->Show();
        
$this->opis->Show();
        
$this->FileUpload1->Show();
        
$this->datum->Show();
        
$this->DatePicker_datum->Show();
        
$this->rubrika->Show();
        
$this->Button_Insert->Show();
        
$this->Button_Update->Show();
        
$this->Button_Delete->Show();
        
$Tpl->parse();
        
$Tpl->block_path = $ParentPath;
        
$this->ds->close();
    }
//End Show Method

} //End fono Class @2-FCB6E20C

class clsfonoDataSource extends clsDBConnection1 {  //fonoDataSource Class @2-6DD878D4

//DataSource Variables @2-3ED2D380
    
var $CCSEvents = "";
    var
$CCSEventResult;
    var
$ErrorBlock;

    var
$InsertParameters;
    var
$UpdateParameters;
    var
$DeleteParameters;
    var
$wp;
    var
$AllParametersSet;


    
// Datasource fields
    
var $naziv;
    var
$opis;
    var
$FileUpload1;
    var
$datum;
    var
$rubrika;
//End DataSource Variables

//Class_Initialize Event @2-63FBF74A
    
function clsfonoDataSource()
    {
        
$this->ErrorBlock = "Record fono/Error";
        
$this->Initialize();
        
$this->naziv = new clsField("naziv", ccsMemo, "");
        
$this->opis = new clsField("opis", ccsMemo, "");
        
$this->FileUpload1 = new clsField("FileUpload1", ccsText, "");
        
$this->datum = new clsField("datum", ccsDate, Array("yyyy", "-", "mm", "-", "dd", " ", "HH", ":", "nn", ":", "ss"));
        
$this->rubrika = new clsField("rubrika", ccsInteger, "");

    }
//End Class_Initialize Event

//Prepare Method @2-1A2D9971
    
function Prepare()
    {
        
$this->wp = new clsSQLParameters($this->ErrorBlock);
        
$this->wp->AddParameter("1", "urlid", ccsInteger, "", "", $this->Parameters["urlid"], "", false);
        
$this->AllParametersSet = $this->wp->AllParamsSet();
        
$this->wp->Criterion[1] = $this->wp->Operation(opEqual, "id", $this->wp->GetDBValue("1"), $this->ToSQL($this->wp->GetDBValue("1"), ccsInteger),false);
        
$this->Where = $this->wp->Criterion[1];
    }
//End Prepare Method

//Open Method @2-65D751E5
    
function Open()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeBuildSelect");
        
$this->SQL = "SELECT *  " .
        
"FROM fono";
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeExecuteSelect");
        
$this->query(CCBuildSQL($this->SQL, $this->Where, $this->Order));
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterExecuteSelect");
        
$this->MoveToPage($this->AbsolutePage);
    }
//End Open Method

//SetValues Method @2-8713090F
    
function SetValues()
    {
        
$this->naziv->SetDBValue($this->f("naziv"));
        
$this->opis->SetDBValue($this->f("opis"));
        
$this->FileUpload1->SetDBValue($this->f("ime_fajla"));
        
$this->datum->SetDBValue(trim($this->f("datum")));
        
$this->rubrika->SetDBValue(trim($this->f("rubrika")));
    }
//End SetValues Method

//Insert Method @2-D493B77A
    
function Insert()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeBuildInsert");
        
$this->SQL = "INSERT INTO fono ("
             
. "naziv, "
             
. "opis, "
             
. "ime_fajla, "
             
. "datum, "
             
. "rubrika"
             
. ") VALUES ("
             
. $this->ToSQL($this->naziv->GetDBValue(), $this->naziv->DataType) . ", "
             
. $this->ToSQL($this->opis->GetDBValue(), $this->opis->DataType) . ", "
             
. $this->ToSQL($this->FileUpload1->GetDBValue(), $this->FileUpload1->DataType) . ", "
             
. $this->ToSQL($this->datum->GetDBValue(), $this->datum->DataType) . ", "
             
. $this->ToSQL($this->rubrika->GetDBValue(), $this->rubrika->DataType)
             .
")";
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeExecuteInsert");
        
$this->query($this->SQL);
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterExecuteInsert");
        if(
$this->Errors->Count() > 0)
            
$this->Errors->AddError($this->Errors->ToString());
        
$this->close();
    }
//End Insert Method

//Update Method @2-3BAD79B8
    
function Update()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeBuildUpdate");
        
$this->SQL = "UPDATE fono SET "
             
. "naziv=" . $this->ToSQL($this->naziv->GetDBValue(), $this->naziv->DataType) . ", "
             
. "opis=" . $this->ToSQL($this->opis->GetDBValue(), $this->opis->DataType) . ", "
             
. "ime_fajla=" . $this->ToSQL($this->FileUpload1->GetDBValue(), $this->FileUpload1->DataType) . ", "
             
. "datum=" . $this->ToSQL($this->datum->GetDBValue(), $this->datum->DataType) . ", "
             
. "rubrika=" . $this->ToSQL($this->rubrika->GetDBValue(), $this->rubrika->DataType);
        
$this->SQL = CCBuildSQL($this->SQL, $this->Where, "");
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeExecuteUpdate");
        
$this->query($this->SQL);
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterExecuteUpdate");
        if(
$this->Errors->Count() > 0)
            
$this->Errors->AddError($this->Errors->ToString());
        
$this->close();
    }
//End Update Method

//Delete Method @2-D32DBEDB
    
function Delete()
    {
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeBuildDelete");
        
$this->SQL = "DELETE FROM fono";
        
$this->SQL = CCBuildSQL($this->SQL, $this->Where, "");
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "BeforeExecuteDelete");
        
$this->query($this->SQL);
        
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "AfterExecuteDelete");
        if(
$this->Errors->Count() > 0)
            
$this->Errors->AddError($this->Errors->ToString());
        
$this->close();
    }
//End Delete Method

} //End fonoDataSource Class @2-FCB6E20C

//Include Page implementation @16-5CD56755
include_once("./Footer.php");
//End Include Page implementation

//Initialize Page @1-E9DD6454
// Variables
$FileName = "";
$Redirect = "";
$Tpl = "";
$TemplateFileName = "";
$BlockToParse = "";
$ComponentName = "";

// Events;
$CCSEvents = "";
$CCSEventResult = "";

$FileName = "fono_maint.php";
$Redirect = "";
$TemplateFileName = "fono_maint.html";
$BlockToParse = "main";
$PathToRoot = "./";
//End Initialize Page

//Authenticate User @1-DC94A87D
CCSecurityRedirect("1", "");
//End Authenticate User

//Initialize Objects @1-4E5F6938
$DBConnection1 = new clsDBConnection1();

// Controls
$Header = new clsHeader();
$Header->BindEvents();
$Header->TemplatePath = "./";
$Header->Initialize();
$fono = new clsRecordfono();
$Footer = new clsFooter();
$Footer->BindEvents();
$Footer->TemplatePath = "./";
$Footer->Initialize();
$fono->Initialize();

$CCSEventResult = CCGetEvent($CCSEvents, "AfterInitialize");
//End Initialize Objects

//Initialize HTML Template @1-A0111C9D
$CCSEventResult = CCGetEvent($CCSEvents, "OnInitializeView");
$Tpl = new clsTemplate();
$Tpl->LoadTemplate(TemplatePath . $TemplateFileName, "main");
$CCSEventResult = CCGetEvent($CCSEvents, "BeforeShow");
//End Initialize HTML Template

//Execute Components @1-8C3AB90F
$Header->Operations();
$fono->Operation();
$Footer->Operations();
//End Execute Components

//Go to destination page @1-6F9FD7CC
if($Redirect)
{
    
$CCSEventResult = CCGetEvent($CCSEvents, "BeforeUnload");
    
$DBConnection1->close();
    
header("Location: " . $Redirect);
    exit;
}
//End Go to destination page

//Show Page @1-531BCE62
$Header->Show("Header");
$fono->Show();
$Footer->Show("Footer");
$Tpl->PParse("main", false);
//End Show Page

//Unload Page @1-A4D34ABE
$CCSEventResult = CCGetEvent($CCSEvents, "BeforeUnload");
$DBConnection1->close();
unset(
$Tpl);
//End Unload Page


?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0048 ]--