JFIF ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/thietkewebvumi.com/admin_new/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/thietkewebvumi.com/admin_new/mod/order_phone.php
<?php
class order_phone{

	function order_phone (){

		global $CORE, $TBS;
		
		$TBS->LoadTemplate(ADMIN_PATH."skin/order_phone.html");
		
		switch($CORE->input['code']){
			
			default : $this->goList(); break;
			
			case 'post': $this->goPost(); break;
			case 'detail' : $this->goDetail(); break;			
			case 'del': $this->goDel(); break;
	
		}

	}	

function goList(){
	global $CORE, $DB, $TBS, $func;
	$TBS->MergeField('section','list');
	//$row_total = $DB->fetch_row($DB->query("SELECT count(id) as total FROM NNCCMS_order_phone"));
	
	
	
	$query = $DB->query("SELECT * FROM NNCCMS_order_phone ORDER BY time DESC ");
	$i=-1;
	while($row = $DB->fetch_row($query)){
				$i++;
				$arr_sp = explode(',',$row['id_product']);
				$row['products'] = '<ul>';
				foreach($arr_sp as $key=>$val){
					$arr_sp2  = explode('|',$val);
					$row_pro = $DB->fetch_row($DB->query("SELECT title,sprice FROM NNCCMS_product WHERE id = '{$arr_sp2[0]}'"));
					$row['products'] .= '<li><a href="http://okmua.net/p'.$arr_sp2[0].'_'.$func->format_string($row_pro['title']).'.html" target="_blank">'.$row_pro['title'].'('.$arr_sp2[1].')</a></li>';
					$row['giatien'] += $row_pro['sprice']*$arr_sp2[1];
				}
				$row['products'] .= '</ul>';
				
				if($row['chietkhau']>0){
					$row['giatien2'] = $row['giatien'] - ($row['giatien']*$row['chietkhau']/100);
				}else{
					$row['giatien2'] = $row['giatien'];
				}
				$row['giatien2'] =  $func->commify($row['giatien2']);
				$row['giatien'] =  $func->commify($row['giatien']);
				$row['num'] = $i+1;
				$row['txtvnd'] = $func->commify($row['vnd']);
				$row['txtsub_vnd'] = $func->commify($row['sub_vnd']);
				$row['usd'] = round($row['vnd'] / $CORE->vars['exrate'],2);
				$row['sub_usd'] = round($row['sub_vnd'] / $CORE->vars['exrate'],2);
				$row['time'] = date('h:m d/m/Y',$row['time']);		
				switch($row['status']){
					case '0': $row['txtstatus'] = '<span style="color:#006600; cursor:pointer;" onclick="xajax_processOrderPhone('.$row['id'].',1); return false;">Chưa xử lý</span>';break;
					case '1': $row['txtstatus'] = '<span style="color:red; cursor:pointer;" onclick="xajax_processOrderPhone('.$row['id'].',0); return false;">Đã xử lý</span>';break;
					case '2': $row['txtstatus'] = 'Failse';break;
				}					
				$list[] = $row;			
			}
			
			if(is_null($list)) $list = array();
	//Phan trang Page num =============================
			if (!isset($_GET)) $_GET=&$HTTP_GET_VARS;
			$PageNum = (isset($_GET['PageNum'])) ? $_GET['PageNum'] : 1;
			$RecCnt = (isset($_GET['RecCnt'])) ? intval($_GET['RecCnt']) : -1;			
			$PageSize = 20;
			
			include_once(ROOT_PATH.'tbs/tbs_plugin_bypage.php');
			
			$TBS->PlugIn(TBS_BYPAGE, $PageSize,$PageNum,$RecCnt);
			
			$RecCnt = $TBS->MergeBlock('list',$list,'',$PageSize,$PageNum,$RecCnt);
			
			include_once(ROOT_PATH.'tbs/tbs_plugin_navbar.php');
			
			$TBS->PlugIn(TBS_NAVBAR,'nav','',$PageNum,$RecCnt,$PageSize);
			
$TBS->Show(TBS_OUTPUT+TBS_NOTHING);
}

function goPost(){
global $CORE, $DB, $TBS, $func, $print;

$TBS->MergeField('section','post');
// Search - Category
		$q_cat2 = $DB->query("SELECT cid,cname,scat FROM NNCCMS_productcat WHERE scat=0 ORDER BY cpos");
		$fcat2 = '<select name="fcat" style="width:250px;" onchange="xajax_getProductFromCat(this.value);">';
		$fcat2 .= '<option selected="selected" value="0">-Chọn danh mục-</option>';
		while($r_cat2 = $DB->fetch_row($q_cat2)){
			
			$fcat2 .= '<optgroup label="'.$r_cat2['cname'].'">';
			$q_scat2 = $DB->query("SELECT cid,cname FROM NNCCMS_productcat WHERE scat = '".$r_cat2['cid']."' ORDER BY cpos");
			while($r_scat2 = $DB->fetch_row($q_scat2)){
				$fcat2 .= '<option value="'.$r_scat2['cid'].'">+'.$r_scat2['cname'].'</option>';
			}
			$fcat2 .= '</optgroup>';
		}
		$fcat2 .= '</select>';
		
		//$fcat = $func->drop_down_menu('fcat',$CORE->input['fcat'],'NNCCMS_newscat','cid','cname','','Chọn nhóm...');	
		$TBS->Mergefield('fcat2',$fcat2);
		
$TBS->Show(TBS_OUTPUT+TBS_NOTHING);
	if($CORE->input['bsubmit']){
		$arr_id_product = $CORE->input['id_product'];
		$soluong    = $CORE->input['soluong'];
		foreach($arr_id_product as $key=>$val){
			$id_product .= $val.'|'.$soluong[$key].',';
		}
		$id_product = $func->remove_lastchar($id_product,1);
		$title = $CORE->input['title'];
		$cus_name = $CORE->input['cus_name'];
		$cus_add  = $CORE->input['cus_add'];
		$cus_phone  = $CORE->input['cus_phone'];
		$cus_email  = $CORE->input['cus_phone'];
		$chietkhau = intval($CORE->input['chietkhau']);
		$ngay      = $CORE->input['ngay'];
		$status    = $CORE->input['status'];
		$note = $CORE->input['note'];
		$time = time();
		
		if($id_product=='' or $ngay=='' or $chietkhat>100){
			exit();
		}//preg_match('/(?P<name>\w+): (?P<digit>\d+)/', $str, $matches);
	
		
		$DB->query("INSERT INTO `NNCCMS_order_phone` (
`id` ,
`id_product` ,
`title`,
`cus_name` ,
`cus_add` ,
`cus_email` ,
`cus_phone` ,
`chietkhau`,
`ngay` ,
`status` ,
`note`,
`time`
)
VALUES (
'', '$id_product','$title', '$cus_name', '$cus_add', '$cus_email', '$cus_phone','$chietkhau', '$ngay', '$status', '$note', '$time'
);
");
	$print->refresh('?act=order_phone');	
	}

}
function goDetail(){
global $CORE, $DB, $TBS, $func, $print;
$TBS->MergeField('section','show_detail');
// Search - Category
		$q_cat2 = $DB->query("SELECT cid,cname,scat FROM NNCCMS_productcat WHERE scat=0 ORDER BY cpos");
		$fcat2 = '<select name="fcat" style="width:250px;" onchange="xajax_getProductFromCat(this.value);">';
		$fcat2 .= '<option selected="selected" value="0">-Chọn danh mục-</option>';
		while($r_cat2 = $DB->fetch_row($q_cat2)){
			
			$fcat2 .= '<optgroup label="'.$r_cat2['cname'].'">';
			$q_scat2 = $DB->query("SELECT cid,cname FROM NNCCMS_productcat WHERE scat = '".$r_cat2['cid']."' ORDER BY cpos");
			while($r_scat2 = $DB->fetch_row($q_scat2)){
				$fcat2 .= '<option value="'.$r_scat2['cid'].'">+'.$r_scat2['cname'].'</option>';
			}
			$fcat2 .= '</optgroup>';
		}
		$fcat2 .= '</select>';
		
		//$fcat = $func->drop_down_menu('fcat',$CORE->input['fcat'],'NNCCMS_newscat','cid','cname','','Chọn nhóm...');	
		$TBS->Mergefield('fcat2',$fcat2);
		
$id = intval($CORE->input['id']);
$TBS->MergeField('id',$id);
$row = $DB->fetch_row($DB->query("SELECT * FROM NNCCMS_order_phone WHERE id = '$id'"));
if(!$row) return ;
//process product
$arr1 = explode(',',$row['id_product']);
$count = count($arr1);
if($count>1){
foreach($arr1 as $val){
	$arr2 = explode('|',$val);
	$id_product = $arr2[0];
	$quan     = $arr2[1];
	$row_p = $DB->fetch_row($DB->query("SELECT id,title,sprice FROM NNCCMS_product WHERE id = '$id_product'"));
	$html .= '<input type="checkbox" name="id_product[]" value='.$row_p['id'].' checked="checked">'.$row_p['title'].' | Số lượng: <input type="text" maxlength="3" name="soluong[]" style="width:50px;" value="'.$quan.'"> (Đơn giá: '.$row_p['sprice'].' vnđ)<br>';
	
}
}else{
	$arr2 = explode('|',$row['id_product']);
	$id_product = $arr2[0];
	$quan     = $arr2[1];
	$row_p = $DB->fetch_row($DB->query("SELECT id,title,sprice FROM NNCCMS_product WHERE id = '$id_product'"));
	$html .= '<input type="checkbox" name="id_product[]" value='.$row_p['id'].' checked="checked">'.$row_p['title'].' | Số lượng: <input type="text" maxlength="3" name="soluong[]" style="width:50px;" value="'.$quan.'"> (Đơn giá: '.$row_p['sprice'].' vnđ)<br>';
}
$TBS->MergeField('product_checked',$html);
$detail[] = $row;
if(is_null($detail)) $detail = array();
$TBS->MergeBlock('detail',$detail);

$TBS->Show(TBS_OUTPUT+TBS_NOTHING);

if($CORE->input['bsubmit']){
		$arr_id_product = array_unique($CORE->input['id_product']);
		$count_product = count($arr_id_product);
		$soluong    = $CORE->input['soluong'];
	
		$i = 0;
		
		foreach($arr_id_product as $key=>$val){
			if($i < $count_product){
				$id_product2 .= $val.'|'.$soluong[$key].',';
			}else{
				break;
			}
				
		$i++;
			
		}
		$id_product2 = $func->remove_lastchar($id_product2,1);
		
		$title = $CORE->input['title'];
		$cus_name = $CORE->input['cus_name'];
		$cus_add  = $CORE->input['cus_add'];
		$cus_phone  = $CORE->input['cus_phone'];
		$cus_email  = $CORE->input['cus_phone'];
		$chietkhau = intval($CORE->input['chietkhau']);
		$ngay      = $CORE->input['ngay'];
		$status    = $CORE->input['status'];
		$note = $CORE->input['note'];
		$time = time();
		
		if($id_product=='' or $ngay=='' or $chietkhau>100){
			exit();
		}//preg_match('/(?P<name>\w+): (?P<digit>\d+)/', $str, $matches);
	
		$DB->query("UPDATE NNCCMS_order_phone SET id_product = '$id_product2',title='$title',cus_name = '$cus_name', cus_add = '$cus_add', cus_email = '$cus_email', cus_phone = '$cus_phone', chietkhau = '$chietkhau', ngay = '$ngay', status = '$status', note = '$note' WHERE id = '$id'");
		
		
	$print->refresh('?act=order_phone');	
	}


}
function goDel(){
	
		global $CORE, $DB, $print;
		
		if(!$CORE->input['mass']){
		
			$id = intval($CORE->input['id']);
			if($CORE->admin_user['ug_id']==4){
				$DB->query("DELETE FROM NNCCMS_order_phone WHERE id = '".$id."'");
			}else{
			$DB->query("UPDATE NNCCMS_order_phone SET status = 2 WHERE id = '".$id."'");
			}
			//$DB->query("DELETE FROM NNCCMS_order WHERE id = '".$id."'");
		
		}else{
		
			$selected = explode("|",$CORE->input['ids']);
			
			foreach ( $selected as $k => $v ) {
			if($CORE->admin_user['ug_id']==4){
				$DB->query("DELETE FROM NNCCMS_order_phone WHERE id = '".$v."'");
			}else{
				$DB->query("UPDATE NNCCMS_order_phone SET status = 2 WHERE  id = '".$v."'");
			}
				//$DB->query("DELETE FROM NNCCMS_order WHERE id = '".$v."'");
			
			}
			
		}
		
		$url = "index.php?act=order_phone";
		$text = "Delete order ....";
		$print->redirect ($text,$url);	
		
	}	



}


$run	=	new order_phone();


?>

ZeroDay Forums Mini