FM / program

/home/wespack/public_html/tritex.com.my/admin/program/

/home/wespack/public_html/tritex.com.my/admin/program

Name	Size	Mode	Actions
css/	-	0755	rm
images/	-	0755	rm
js/	-	0755	rm
upload/	-	0755	rm
_notes/	-	0755	rm
.htaccess	91	0444	edit dl rm
capwes.php	15580	0644	edit dl rm
category.php	14202	0644	edit dl rm
chartjs.html	37827	0644	edit dl rm
company.php	17038	0644	edit dl rm
create-folder.php	1101	0644	edit dl rm
currency.php	3766	0644	edit dl rm
error_log	20766173	0644	edit dl rm
fb-callback.php	2399	0644	edit dl rm
fb-delete-post.php	1956	0644	edit dl rm
fb-post-update.php	9649	0644	edit dl rm
fb_config.php	382	0644	edit dl rm
fb_login.php	1510	0644	edit dl rm
folder.php	17240	0644	edit dl rm
footer.php	25663	0644	edit dl rm
footer_24092017.php	24005	0644	edit dl rm
forgot-password.php	3501	0644	edit dl rm
graph1.php	4652	0644	edit dl rm
graph2.php	4862	0644	edit dl rm
graph3.php	4863	0644	edit dl rm
graph4.php	4938	0644	edit dl rm
graph5.php	4938	0644	edit dl rm
graph6.php	4945	0644	edit dl rm
graphapps.php	2617	0644	edit dl rm
header.php	2606	0644	edit dl rm
image-list.php	7698	0644	edit dl rm
index.php	9981	0644	edit dl rm
index27092017.php	17186	0644	edit dl rm
index_24092017.php	16566	0644	edit dl rm
index_ori.php	9981	0644	edit dl rm
insert-ajax.php	1622	0644	edit dl rm
invoice-details.php	10242	0644	edit dl rm
invoice-folder.php	8602	0644	edit dl rm
invoice-list.php	8262	0644	edit dl rm
login.php	2035	0644	edit dl rm
menu.php	9474	0644	edit dl rm
m_group.php	8791	0644	edit dl rm
m_group_p.php	5567	0644	edit dl rm
m_group_u.php	5843	0644	edit dl rm
m_profile.php	11289	0644	edit dl rm
m_user.php	10178	0644	edit dl rm
m_user_app.php	6062	0644	edit dl rm
original_file.php	4581	0644	edit dl rm
product-update.php	9194	0644	edit dl rm
product-update29092017.php	7940	0644	edit dl rm
profile.php	8754	0644	edit dl rm
project.php	15265	0644	edit dl rm
sales-tracking.php	11350	0644	edit dl rm
setup.php	20151	0644	edit dl rm
survey_report.php	4595	0644	edit dl rm
tritex.php	15467	0644	edit dl rm
type.php	10274	0644	edit dl rm
update-file.php	16960	0644	edit dl rm
update.php	3105	0644	edit dl rm
upload-05102017.php	7111	0644	edit dl rm
upload-ajax.php	946	0644	edit dl rm
upload-image.php	24332	0644	edit dl rm
upload-inv-file.php	1520	0644	edit dl rm
upload-invoice-push.php	2036	0644	edit dl rm
upload-invoice-pushios.php	2032	0644	edit dl rm
upload-invoice.php	14096	0644	edit dl rm
upload-ori.php	4571	0644	edit dl rm
upload-products-29092017.php	37037	0644	edit dl rm
upload-products.php	41271	0644	edit dl rm
upload-to-fb-batch.php	4674	0644	edit dl rm
upload-to-fb.php	2169	0644	edit dl rm
upload.php	11459	0644	edit dl rm
upload09102017.php	10089	0644	edit dl rm
upload29092017.php	6781	0644	edit dl rm
user.php	21183	0644	edit dl rm
visitor2.php	2149	0644	edit dl rm
visitor3.php	2149	0644	edit dl rm
visitor4.php	1923	0644	edit dl rm
visitors.php	2133	0644	edit dl rm
wespack.php	15482	0644	edit dl rm

Edit: /home/wespack/public_html/tritex.com.my/admin/program/upload09102017.php (10089B)

<?PHP
ob_start();
session_start();
error_reporting(0);
include "../function/config.php";

//receive input
$p_name=$_POST['p_name'];
$p_category=$_POST['p_category'];
$p_color=$_POST['p_color'];
$p_mfi0=addslashes($_POST['p_mfi']);
$p_mfi=htmlentities($p_mfi0);
$p_filter=$_POST['p_filter'];
$p_packing=strip_tags($_POST['p_packing']);
$p_price0=$_POST['p_price'];
$p_description=strip_tags($_POST['p_description']);
$uploader=$_SESSION['user_id'];
$publish=$_POST['publish'];

$image_info = getimagesize($_FILES["file"]["tmp_name"]);
$image_width = $image_info[0];
$image_height = $image_info[1];

$fp2=$_FILES["file2"]["tmp_name"];
$fs2=filesize($fp2);
$image_info2 = getimagesize($_FILES["file2"]["tmp_name"]);
$image_width2 = $image_info2[0];
$image_height2 = $image_info2[1];

$fp3=$_FILES["file3"]["tmp_name"];
$fs3=filesize($fp3);
$image_info3 = getimagesize($_FILES["file3"]["tmp_name"]);
$image_width3 = $image_info3[0];
$image_height3 = $image_info3[1];

$fp4=$_FILES["file4"]["tmp_name"];
$fs4=filesize($fp4);
$image_info4 = getimagesize($_FILES["file4"]["tmp_name"]);
$image_width4 = $image_info4[0];
$image_height4 = $image_info4[1];

$file_type=$_FILES["file"]["type"];
$file_name=$_FILES["file"]["name"];
	
$file_name2=$_FILES["file2"]["name"];
$file_name3=$_FILES["file3"]["name"];
$file_name4=$_FILES["file4"]["name"];
	
?>
<!DOCTYPE html>
<html lang="en">

<head>

<title>WESPACK</title>

<link href="../../gallery/vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
<?PHP
if($image_width < 1000 || $image_height < 1000)
{ 
?>
<div class="alert alert-danger text-center" role="alert">
<strong>Product image must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.</strong>
</div>
<p align="center">
<button onclick="goBack()">Ok</button>
</p>

else if($fs2!="" && ($image_width2 < 1000 || $image_height2 < 1000))
{ 
?>
<div class="alert alert-danger text-center" role="alert">
<strong>Optional Image number 2 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.</strong>
</div>
<p align="center">
<button onclick="goBack()">Ok</button>
</p>

else
{

$query_currency=mysqli_query($con,"SELECT * FROM currency WHERE currency_id='1'");
 $fetch_currency=mysqli_fetch_array($query_currency);
					
 $cur_id=$fetch_currency['currency_id'];
 $cur_symbol=$fetch_currency['symbol'];
 $cur_rates=$fetch_currency['rates'];
 $currency=$cur_rates;
 $p_price=$p_price0/$currency;

$cat_time=time();
//check existing data in database
if(isset($_POST['update']))
{
$pid=$_POST['update'];
$check_product = mysqli_query($con,"SELECT * FROM products WHERE p_id='$pid'");
}
else
{$check_product = mysqli_query($con,"SELECT * FROM products WHERE p_name='$p_name' AND p_category='$p_category'");}

$product_row = mysqli_fetch_array($check_product);
if($product_row>1 )
{
   //record exist - cancel 
   
   if(isset($_POST['update'])) // if request from update
   {}

else
   {header("Location:upload-products.php?save_stat=1");}
   
}
else if($p_name=='' || $p_category=='' || $p_color==''|| $p_mfi==''|| $p_filter==''|| $p_packing==''|| $p_description=='')
{ header("Location:upload-products.php?save_stat=3");}
else
{
	
	$file_created=time();

$file_names=$file_name;
       $file_names = preg_replace('/\s+/', '_', $file_names);
       $file_types=$_FILES["file"]["type"];
       $new_file_name_full="1".time().$file_names;
	   
	  move_uploaded_file($_FILES["file"]["tmp_name"],
	  "../../products/" .$new_file_name_full);
	  $p_image_path=$new_file_name_full;
	  
	  
   //insert into database
   $sql="INSERT INTO products (p_id,p_category,p_name,p_color,p_mfi,p_filter,p_packing,p_price,p_description,p_image_path,p_display_status,p_created,uploader,publish,updated) VALUES ('','$p_category','$p_name','$p_color','$p_mfi','$p_filter','$p_packing','$p_price0','$p_description','$p_image_path','1','$cat_time','$uploader','$publish','$file_created')";
   $result = mysqli_query($con, $sql);
   
   //move to Facebook ip picked
   if($publish==5 & ($file_name2=='' && $file_name3=='' && $file_name4=='')){
		
		//fb post text description
		echo $feed_contents="
		Product : $p_name
		Color : $p_color
		MFI : $p_mfi
		Filter : $p_filter
		Packing : $p_packing 
		Description : $p_description
		";
		require "upload-to-fb.php";
	}else{}
   
   //query last id
   $query_last_product=mysqli_query($con,"SELECT p_id FROM products ORDER BY p_id DESC limit 1");
   $fetch_last_product=mysqli_fetch_array($query_last_product);
   $p_id_last=$fetch_last_product['p_id'];

//insert core price
   $sql_price="INSERT INTO core_price (cp_id,rm_price,p_id) VALUES ('','$p_price0','$p_id_last')";
   $result_price = mysqli_query($con, $sql_price);
   
    
	
    if($file_name2!=='' && $file_name3!=='' && $file_name4!=='' )//if all optional image uploaded, do it all
	{
		
		$file_type2=$_FILES["file2"]["type"];
		$file_names2= preg_replace('/\s+/', '_', $file_name2);
		$new_file_name_full2="2".time().$file_names2;
		move_uploaded_file($_FILES["file2"]["tmp_name"],
		"../../products/" .$new_file_name_full2);
		$p_image_path2=$new_file_name_full2;

$file_type3=$_FILES["file3"]["type"];
		$file_names3= preg_replace('/\s+/', '_', $file_name3);
		$new_file_name_full3="3".time().$file_names3;
		move_uploaded_file($_FILES["file3"]["tmp_name"],
		"../../products/" .$new_file_name_full3);
		$p_image_path3=$new_file_name_full3;

$file_type4=$_FILES["file4"]["type"];
		$file_names4= preg_replace('/\s+/', '_', $file_name4);
		$new_file_name_full4="4".time().$file_names4;
		move_uploaded_file($_FILES["file4"]["tmp_name"],
		"../../products/" .$new_file_name_full4);
		$p_image_path4=$new_file_name_full4;

$sqlALL="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','$p_image_path2','$p_image_path3','$p_image_path4')";
		$resultALL = mysqli_query($con, $sqlALL);
			  
	  //if facebook option picked, post all optional image to facebook
	  if($publish==5){

//fb post text description
			$feed_contents="
			Product : $p_name
			Color : $p_color
			MFI : $p_mfi
			Filter : $p_filter
			Packing : $p_packing 
			Description : $p_description
			";
			require "upload-to-fb-batch.php";
		}else{}
		
		
     }
	else
	{
			
			
			//if not all optional image file uploaded, upload one by one
			$file_name2=$_FILES["file2"]["name"];
			if($file_name2!='')
			{
			   $file_type2=$_FILES["file2"]["type"];
			   $file_names2= preg_replace('/\s+/', '_', $file_name2);
			   $new_file_name_full2="2".time().$file_names2;
			   move_uploaded_file($_FILES["file2"]["tmp_name"],
			  "../../products/" .$new_file_name_full2);
			  $p_image_path2=$new_file_name_full2;
			  $sql2="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','$p_image_path2','','')";
			  $result2 = mysqli_query($con, $sql2);
			}
			$file_name3=$_FILES["file3"]["name"];
			if($file_name3!='')
			{
			$file_type3=$_FILES["file3"]["type"];
				$file_names3= preg_replace('/\s+/', '_', $file_name3);
			 $new_file_name_full3="3".time().$file_names3;
			 move_uploaded_file($_FILES["file3"]["tmp_name"],
			  "../../products/" .$new_file_name_full3);
			  $p_image_path3=$new_file_name_full3;
			   $sql3="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','','$p_image_path3','')";
			 $result3 = mysqli_query($con, $sql3);
			 
			}
			
			$file_name4=$_FILES["file4"]["name"];
			if($file_name4!='')
			{
			$file_type4=$_FILES["file4"]["type"];
			$file_names4= preg_replace('/\s+/', '_', $file_name4);
			 $new_file_name_full4="4".time().$file_names4;
			 move_uploaded_file($_FILES["file4"]["tmp_name"],
			  "../../products/" .$new_file_name_full4);
			  $p_image_path4=$new_file_name_full4;
		
			   $sql4="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','','','$p_image_path4')";
			   $result4 = mysqli_query($con, $sql4);
			   
			  
			}
			else
			{}
			 //if facebook option picked, post all optional image to facebook
			  if($publish==5){
		
				//fb post text description
				$feed_contents="
				Product : $p_name
				Color : $p_color
				MFI : $p_mfi
				Filter : $p_filter
				Packing : $p_packing 
				Description : $p_description
				";
				require "upload-to-fb-batch.php";
			}else{} 
	}
	   
  
  header("Location:upload-products.php?save_stat=2");
}

}
	 ob_end_flush();
?>

WESPACK

Product image must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.

Optional Image number 2 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.

Optional Image number 3 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.

Optional Image number 4 must be at least 1000PX x 1000PX. Please resize your image to 1000PX x 1000PX then upload it again.

1 ) { //record exist - cancel if(isset($_POST['update'])) // if request from update {} else {header("Location:upload-products.php?save_stat=1");} } else if($p_name=='' || $p_category=='' || $p_color==''|| $p_mfi==''|| $p_filter==''|| $p_packing==''|| $p_description=='') { header("Location:upload-products.php?save_stat=3");} else { $file_created=time(); $file_names=$file_name; $file_names = preg_replace('/\s+/', '_', $file_names); $file_types=$_FILES["file"]["type"]; $new_file_name_full="1".time().$file_names; move_uploaded_file($_FILES["file"]["tmp_name"], "../../products/" .$new_file_name_full); $p_image_path=$new_file_name_full; //insert into database $sql="INSERT INTO products (p_id,p_category,p_name,p_color,p_mfi,p_filter,p_packing,p_price,p_description,p_image_path,p_display_status,p_created,uploader,publish,updated) VALUES ('','$p_category','$p_name','$p_color','$p_mfi','$p_filter','$p_packing','$p_price0','$p_description','$p_image_path','1','$cat_time','$uploader','$publish','$file_created')"; $result = mysqli_query($con, $sql); //move to Facebook ip picked if($publish==5 & ($file_name2=='' && $file_name3=='' && $file_name4=='')){ //fb post text description echo $feed_contents=" Product : $p_name Color : $p_color MFI : $p_mfi Filter : $p_filter Packing : $p_packing Description : $p_description "; require "upload-to-fb.php"; }else{} //query last id $query_last_product=mysqli_query($con,"SELECT p_id FROM products ORDER BY p_id DESC limit 1"); $fetch_last_product=mysqli_fetch_array($query_last_product); $p_id_last=$fetch_last_product['p_id']; //insert core price $sql_price="INSERT INTO core_price (cp_id,rm_price,p_id) VALUES ('','$p_price0','$p_id_last')"; $result_price = mysqli_query($con, $sql_price); if($file_name2!=='' && $file_name3!=='' && $file_name4!=='' )//if all optional image uploaded, do it all { $file_type2=$_FILES["file2"]["type"]; $file_names2= preg_replace('/\s+/', '_', $file_name2); $new_file_name_full2="2".time().$file_names2; move_uploaded_file($_FILES["file2"]["tmp_name"], "../../products/" .$new_file_name_full2); $p_image_path2=$new_file_name_full2; $file_type3=$_FILES["file3"]["type"]; $file_names3= preg_replace('/\s+/', '_', $file_name3); $new_file_name_full3="3".time().$file_names3; move_uploaded_file($_FILES["file3"]["tmp_name"], "../../products/" .$new_file_name_full3); $p_image_path3=$new_file_name_full3; $file_type4=$_FILES["file4"]["type"]; $file_names4= preg_replace('/\s+/', '_', $file_name4); $new_file_name_full4="4".time().$file_names4; move_uploaded_file($_FILES["file4"]["tmp_name"], "../../products/" .$new_file_name_full4); $p_image_path4=$new_file_name_full4; $sqlALL="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','$p_image_path2','$p_image_path3','$p_image_path4')"; $resultALL = mysqli_query($con, $sqlALL); //if facebook option picked, post all optional image to facebook if($publish==5){ //fb post text description $feed_contents=" Product : $p_name Color : $p_color MFI : $p_mfi Filter : $p_filter Packing : $p_packing Description : $p_description "; require "upload-to-fb-batch.php"; }else{} } else { //if not all optional image file uploaded, upload one by one $file_name2=$_FILES["file2"]["name"]; if($file_name2!='') { $file_type2=$_FILES["file2"]["type"]; $file_names2= preg_replace('/\s+/', '_', $file_name2); $new_file_name_full2="2".time().$file_names2; move_uploaded_file($_FILES["file2"]["tmp_name"], "../../products/" .$new_file_name_full2); $p_image_path2=$new_file_name_full2; $sql2="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','$p_image_path2','','')"; $result2 = mysqli_query($con, $sql2); } $file_name3=$_FILES["file3"]["name"]; if($file_name3!='') { $file_type3=$_FILES["file3"]["type"]; $file_names3= preg_replace('/\s+/', '_', $file_name3); $new_file_name_full3="3".time().$file_names3; move_uploaded_file($_FILES["file3"]["tmp_name"], "../../products/" .$new_file_name_full3); $p_image_path3=$new_file_name_full3; $sql3="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','','$p_image_path3','')"; $result3 = mysqli_query($con, $sql3); } $file_name4=$_FILES["file4"]["name"]; if($file_name4!='') { $file_type4=$_FILES["file4"]["type"]; $file_names4= preg_replace('/\s+/', '_', $file_name4); $new_file_name_full4="4".time().$file_names4; move_uploaded_file($_FILES["file4"]["tmp_name"], "../../products/" .$new_file_name_full4); $p_image_path4=$new_file_name_full4; $sql4="INSERT INTO product_image_description(pid_id,p_id,image_path2,image_path3,image_path4) VALUES ('','$p_id_last','','','$p_image_path4')"; $result4 = mysqli_query($con, $sql4); } else {} //if facebook option picked, post all optional image to facebook if($publish==5){ //fb post text description $feed_contents=" Product : $p_name Color : $p_color MFI : $p_mfi Filter : $p_filter Packing : $p_packing Description : $p_description "; require "upload-to-fb-batch.php"; }else{} } header("Location:upload-products.php?save_stat=2"); } } ob_end_flush(); ?>