403Webshell
Server IP : 103.234.187.230  /  Your IP : 216.73.216.216
Web Server : Apache
System : Linux lserver42043-ind.megavelocity.net 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/prathamtour.com/application/admin/controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/prathamtour.com/application/admin/controllers/RewardController.php
<?php
/***************************************************************
* Catabatic Technology Pvt. Ltd.
* File Name     : StaticpageController.php
* File Desc.    : Staticpage controller managed all staic content pages
* Created By    : Piyush Tiwari <piyush@catpl.co.in>
* Created Date  : 23 May 2018
* Updated Date  : 23 May 2018
***************************************************************/



class Admin_RewardController extends Zend_Controller_Action
{
    

    public $dbAdapter;
    public $perPageLimit;
    public $siteurl;
    public $DIR_WRITE_MODE;
    
    public function init(){

       /*Initialize db and session access */
         parent::init(); 
       $aConfig = $this->getInvokeArg('bootstrap')->getOptions();
       $this->siteurl           = $aConfig['bootstrap']['siteUrl']; 
		$this->appmode = $aConfig['bootstrap']['appmode'];
		$this->per_page_record   = 20;

        $this->dbAdapter = Zend_Db_Table::getDefaultAdapter();
        $BootStrap = $aConfig['bootstrap'];
        $this->stylecss = $BootStrap['stylecss'];
        $auth        = Zend_Auth::getInstance();
        $authStorage = $auth->getStorage()->read();
        $this->username      = $authStorage->username;
        $this->admin_type    = $authStorage->role;
        $this->large_image_width = $aConfig['bootstrap']['large_image_width'];
        $this->large_image_height = $aConfig['bootstrap']['large_image_height'];

        $this->large_image_height='1280px';
        $this->large_image_width='904px';

        $this->medium_image_width = $aConfig['bootstrap']['medium_image_width'];
        $this->medium_image_height = $aConfig['bootstrap']['medium_image_height'];
        $this->small_image_width = $aConfig['bootstrap']['small_image_width'];
        $this->small_image_height = $aConfig['bootstrap']['small_image_height'];
        
        $this->table = 'tbl_reward';   
        $this->current_time = time();
        $this->imageUrl     = (($this->appmode == 'MODE_BETA') ? 'beta/' : '') . 'public/upload/'.$this->stylecss.'/reward/';
            $this->DIR_WRITE_MODE = 0777;
     
    }
    
    
    
    /**
    * index() method is used to admin login for form call
    * @param Null
    * @return Array 
    */
    
    public function indexAction()
    {
                //Check admin logedin or not

        $this->checklogin();
        $this->view->messages = $this->_helper->flashMessenger->getMessages();
        $crud   = new Admin_Model_CRUD();
        $getData = array();
        if($this->getRequest()->isPost())
        {
        $getData = $this->getRequest()->getPost();
        $searchArr = array(
                        'heading'=>$getData['heading'],
                        'rows'=>$getData['rofferIdows'],
                        'page'=>$getData['page'],
            );
        $resulsetold = $crud->getCount( $this->table,['isMarkForDel' =>0],'Id'); 
//        echo "<pre>";print_r($resulsetold);die;
        $crud->searchArr = $searchArr;
        $resultset = $crud->rv_select_static( $this->table,['*'],['isMarkForDel' =>0 ],['Id '=> 'DESC']);  
                            if (count($resultset) > 0) {
                foreach ($resultset as $resultkey => $resultval) {
                    $expiryDate = explode('-',$resultval['expiryDate']);
                    $result1[] = [
                        'Id' => $resultval['Id'],
                        'category' => $resultval['category'],
                        'heading' => $resultval['heading'],
                        'expiryDate' => $expiryDate[2].'/'.$expiryDate[1].'/'.$expiryDate[0],
                        'image' => '<img src="public/upload/'.$this->stylecss.'/reward/'.$resultval['Id'].'/small/'.$resultval['image'].'" width="60px" height="60px">',
                        
                        'isActive' => $resultval['isActive']==1?'Active':'Deactive',

                    ];
                }
            }
        $result = Zend_Json::encode($result1);
        $newResult = Zend_Json::decode($result,false);     
        $finalResult["total"]=$resulsetold[0]['Id'];
        $finalResult["rows"]=$newResult;
        echo json_encode($finalResult);
        exit;        
        } 
    }
    
    public function editrewardAction()
    {
//Check admin logedin or not
        $this->checklogin();
        $crud = new Admin_Model_CRUD();
        $pId = (int)$this->getRequest()->getParam("id");
               
        if( $this->getRequest()->isPost() ) {
            $getData = $this->getRequest()->getPost();
          
                
                //-------Start Code for Approve and Publish content---------//
               if(isset($getData['save'])=="Save") {
//                         echo "<pre>";print_r($getData);die;
                   $id = $getData['id'];
                 $orignalFIleName = $image = $_FILES["image"]["name"];
            $fileName = '';
                if (!empty($orignalFIleName)) {
				$fileExt = $this->_helper->General->getFileExtension($orignalFIleName);
				$allowedExtensions = ['jpg', 'jpeg', 'gif', 'png', 'webp'];
				if(in_array($fileExt, $allowedExtensions, true)){
                                 $orignalFolderName  = $_SERVER["DOCUMENT_ROOT"] . "/" . $this->imageUrl.$pId ;
                                 $fileExt    = $this->_helper->General->getFileExtension($orignalFIleName);
                                 $fileName   = $this->current_time . '.' . $fileExt;
                                 $fileName1   = $this->current_time;

                           
                             if (!file_exists($orignalFolderName)) {
                                        mkdir($orignalFolderName, $this->DIR_WRITE_MODE, true);
                                        }
                           
                            $temp_file_name = $_FILES["image"]["tmp_name"]; // temprary file name
                            @move_uploaded_file($temp_file_name, $orignalFolderName . "/" . $fileName);
     
                                $originalLargeFolder = $orignalFolderName.'/large';
                                $originalMediumFolder = $orignalFolderName.'/medium';
                                $originalSmallFolder = $orignalFolderName.'/small';

                               $sourceFile = $orignalFolderName . "/" . $fileName;
					$destinationFile = $orignalFolderName . "/" . $fileName1.'.webp';
					$quality = 80;
					if ($crud->convertToWebP($sourceFile, $destinationFile, $quality)) {
								if (!file_exists($originalLargeFolder)) {
									mkdir($originalLargeFolder, 0777, true);
								}
								if (!file_exists($originalMediumFolder)) {
									mkdir($originalMediumFolder, 0777, true);
								}
								if (!file_exists($originalSmallFolder)) {
									mkdir($originalSmallFolder, 0777, true);
								}
								
								@copy($destinationFile, $originalLargeFolder . "/" . $fileName1.'.webp'); 
								@copy($destinationFile, $originalMediumFolder . "/" . $fileName1.'.webp'); 
								@copy($destinationFile, $originalSmallFolder . "/" . $fileName1.'.webp'); 
								$fileName = $fileName1.'.webp';
								unlink("$sourceFile");
						} else {
							$this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
					}
					
							 }else{
					  $this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
					}

                          
                        } 

                          
                    $expiryDate = explode('/',$getData['expiryDate']);
                    $editPageData = [                    
                    
                        'category' => ($getData['category']),                                                               
                        'heading' => ($getData['heading']),                                                               
                        'subHeading' => ($getData['subHeading']),                                                               
                       'expiryDate' => $expiryDate[2].'-'.$expiryDate[1].'-'.$expiryDate[0],                                                             
                        'url' => ($getData['url']),                                                               
                        'tab' => ($getData['tab']),                                                               
                        'isActive' => ($getData['isActive']),
                    ];
                                
                     if( $fileName !='') {
                        $editPageData['image'] = $fileName;
                                }
//                  echo "<pre>";print_r($editPageData);die;
                                $crud->rv_update($this->table, $editPageData, ['Id =?'=>$pId]);
                                $this->view->successMessage ="Page content has been saved successfully.";
                                $this->_helper->flashMessenger->addMessage("Page content has been updated successfully.");
                               $this->_redirect("/admin/reward/index");
                            }
                           
        }

        $result = $crud->getCmsdata($this->table, ['*'], ['Id'=>$pId], ['Id'=>'DESC']);
//        echo "<pre>";print_r($result);die;
        $editdata["Id"] = @$result->Id;
        $editdata["category"] = @$result->category;
        $editdata["heading"] = @$result->heading;
        $editdata["image"] = @$result->image;
        $editdata["subHeading"] = @$result->subHeading;
        $expiryDate = explode('-',$result->expiryDate);
        $editdata["expiryDate"] = $expiryDate[2].'/'.$expiryDate[1].'/'.$expiryDate[0];
        $editdata["url"] = @$result->url;
        $editdata["tab"] = @$result->tab;
       $editdata["isActive"] = @$result->isActive;
//        echo "<pre>";print_r($editdata);die;
       
        $this->view->image = @$result->image; 
        $this->view->editdata = $editdata;
        
                    
    }
    
    
    public function addrewardAction()
    {
       
//Check admin logedin or not
        $this->checklogin();
        $crud = new Admin_Model_CRUD();
               
        if( $this->getRequest()->isPost() ) {
            $getData = $this->getRequest()->getPost();          
            $lastRow = $crud->getCmsdata($this->table, ['Id'], ['Id'], ['Id'=>'DESC']);
            $pId = $lastRow['Id'] + 1;
            if(isset($getData['save'])=="Save") {
              //echo "<pre>";print_r($getData);die;
                 $id = $getData['id'];
               $orignalFIleName = $image = $_FILES["image"]["name"];
            $fileName = '';
                if (!empty($orignalFIleName)) {
				$fileExt = $this->_helper->General->getFileExtension($orignalFIleName);
				$allowedExtensions = ['jpg', 'jpeg', 'gif', 'png', 'webp'];
				if(in_array($fileExt, $allowedExtensions, true)){
                                 $orignalFolderName  = $_SERVER["DOCUMENT_ROOT"] . "/" . $this->imageUrl.$pId ;
                                 $fileExt    = $this->_helper->General->getFileExtension($orignalFIleName);
                                 $fileName   = $this->current_time . '.' . $fileExt;
                                 $fileName1   = $this->current_time;

                           
                                       if (!file_exists($orignalFolderName)) {
                                        mkdir($orignalFolderName, $this->DIR_WRITE_MODE, true);
                                        }
                           
                            $temp_file_name = $_FILES["image"]["tmp_name"]; // temprary file name
                            @move_uploaded_file($temp_file_name, $orignalFolderName . "/" . $fileName);
     
                                $originalLargeFolder = $orignalFolderName.'/large';
                                $originalMediumFolder = $orignalFolderName.'/medium';
                                $originalSmallFolder = $orignalFolderName.'/small';

                               $sourceFile = $orignalFolderName . "/" . $fileName;
					$destinationFile = $orignalFolderName . "/" . $fileName1.'.webp';
					$quality = 80;
					if ($crud->convertToWebP($sourceFile, $destinationFile, $quality)) {
								if (!file_exists($originalLargeFolder)) {
									mkdir($originalLargeFolder, 0777, true);
								}
								if (!file_exists($originalMediumFolder)) {
									mkdir($originalMediumFolder, 0777, true);
								}
								if (!file_exists($originalSmallFolder)) {
									mkdir($originalSmallFolder, 0777, true);
								}
								
								@copy($destinationFile, $originalLargeFolder . "/" . $fileName1.'.webp'); 
								@copy($destinationFile, $originalMediumFolder . "/" . $fileName1.'.webp'); 
								@copy($destinationFile, $originalSmallFolder . "/" . $fileName1.'.webp'); 
								$fileName = $fileName1.'.webp';
						} else {
							$this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
					}
					
							 }else{
					  $this->view->errorMessage ="Only allow  'jpg', 'png', 'webp' "; 
					}

                          
                        } 
                     
                $expiryDate = explode('/',$getData['expiryDate']);
                $savePageData = [                    
                    'category' => ($getData['category']),
                    'heading' => ($getData['heading']),
                    'subHeading' => ($getData['subHeading']),
                    'expiryDate' => $expiryDate[2].'-'.$expiryDate[1].'-'.$expiryDate[0],
                    'url' => ($getData['url']),
                    'tab' => (int)($getData['tab']),
                    'image' =>   $fileName ,
                    'isActive' => ($getData['isActive']),
                    'isMarkForDel' => 0,
                ];
                //   echo "<pre>";print_r($savePageData);die;
                $crud->rv_insert($this->table, $savePageData);
                $this->view->successMessage = "Page content has been saved successfully.";
                $this->_helper->flashMessenger->addMessage("Page content has been added successfully.");
                $this->_redirect("/admin/reward/index");
            
             }  
             
          
        }

       
        $this->view->messages = $this->_helper->flashMessenger->getMessages();
        
                    
    }



    
    public function deleterewardAction() {
        $this->checklogin();
        $crud = new Admin_Model_CRUD();
        $tId = (int) $this->getRequest()->getParam("id");
        //echo $tId;die;
        if ($tId) {
            $checkdata = $crud->rv_select_row($this->table, ['Id'], ['Id' => $tId], ['Id' => 'asc']);
            if (count($checkdata) > 0) {
                $crud->rv_update($this->table, ['isMarkForDel'=> 1], ['Id  =?'=>$tId]);
                $this->_helper->flashMessenger->addMessage("Delete successfully.");
                $this->_redirect("/admin/reward/index");
            } else {
                die('Oops some thing wrong!!.');
            }
        }
    }
    
    
    
    public function sanitize_data($string) {
	$searchArr=array("iframe","script","document","write","alert","%","@","$",";","+","|","#","<",">",")","(","'","\'",",","and "," &","& ","and"," and","0","1","2","3","4","5","6","7","8","9");
	$input_data = strtolower($string);
	$input_data = str_replace($searchArr,"",$input_data);
        
        $input_data= str_replace(" ","-",$input_data);
        //echo $input_data; die;
        return $input_data;
    }
    
    
   
    /**
    * checklogin() method is used to check admin logedin or not
    * @param Null
    * @return Array 
    */
    public function checklogin()
    {
        if(($this->admin_type == "superadmin") || ($this->admin_type == "admin"))
        {
            $auth = Zend_Auth::getInstance();
            $hasIdentity = $auth->hasIdentity();
            /*************** check admin identity ************/
            if(!$hasIdentity)  
            {  
                   $this->_redirect('admin/index/index');  
            } 
        }  else {
            $this->_redirect('admin/index/index');   
        } 
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit