One Hat Cyber Team

Your IP : 172.70.80.191

Server IP : 188.114.96.4

Server : Linux thuru 6.5.11-4-pve #1 SMP PREEMPT_DYNAMIC PMX 6.5.11-4 (2023-11-20T10:19Z) x86_64

Server Software : Apache/2.4.51 (Unix) OpenSSL/1.0.2k-fips

PHP Version : 7.3.33

Buat File | Buat Folder

Dir : ~/home/thuruk/public_html/App/New/admin/dashboard/

Edit File: search_specific_plant.php

<?php

session_start();

/*if(!isset($_SESSION['login_status'])){

header('location:../index.php');

}*/

?>

<?php include('../../connections.php'); ?>

<?php

$upload_status="";

if(isset($_POST['submit'])){

$target_dir = "../../Images/Plant/";

$target_file = $target_dir . basename($_FILES["image"]["name"]);

move_uploaded_file($_FILES["image"]["tmp_name"], $target_file);

$url = "https://thurukepakaru.com/App/New/Images/Plant/".basename($_FILES["image"]["name"]);

$location = $_POST['location'];

$qrcode = $_POST['qrcode'];

$name =$_POST['other_plant_name']==""?$_POST['plant_name']:$_POST['other_plant_name'];

$latitude = $_POST['latitude'];

$longitude = $_POST['longitude'];

$description = $_POST['description'];

$user_id = $_POST['user_id'];

$height= $_POST['height'];

$mobile_number = $_POST['mobile_number'];

$date= $_POST['day'];//date('y-m-d');

$query="INSERT INTO `newuser_plants`(`user_plant_id`, `user_id`, `plant_name`, `plant_description`, `created_date`, `plant_image`, `location`, `height`,`lat`, `lng`,`created_type`,`rating` ,`status`) VALUES ('$qrcode','$mobile_number','$name','$description','$date','$url','$location','$height','$latitude','$longitude','admin','','activate')";

$result = mysqli_query($connect,$query) or die(mysqli_error($connect));

if($result){

$upload_status="success";

}else{

$upload_status="fail";

}

}else if(isset($_POST['update'])){

$description = mysqli_real_escape_string($connect,$_POST['plant_description']);

$location = mysqli_real_escape_string($connect,$_POST['location']);

$plant_name = mysqli_real_escape_string($connect,$_POST['plant_name']);

$lat = mysqli_real_escape_string($connect,$_POST['lat']);

$long = mysqli_real_escape_string($connect,$_POST['lng']);

$id = mysqli_real_escape_string($connect,$_POST['id']);

$query="UPDATE `newuser_plants` SET `plant_name`='$plant_name',`plant_description`='$description',`location`='$location',`lat`='$lat',`lng`='$long' WHERE user_plant_id='$id'";

$result = mysqli_query($connect,$query) or die(mysqli_error($connect));

if($result){

$upload_status="success";

}else{

$upload_status="fail";

}

}else if(isset($_GET['plant_id'])){

$plant_id = $_GET['plant_id'];

$query="DELETE FROM `newuser_plants` WHERE user_plant_id='$plant_id'";

$result = mysqli_query($connect,$query) or die(mysqli_error($connect));

if($result){

$upload_status="success";

}else{

$upload_status="fail";

}

}else if(isset($_POST['star'])){

$id = mysqli_real_escape_string($connect,$_POST['id']);

$rating =mysqli_real_escape_string($connect,$_POST['star']);

$query="UPDATE `newuser_plants` SET rating ='$rating' WHERE user_plant_id='$id'";

$result = mysqli_query($connect,$query) or die(mysqli_error($connect));

if($result){

$upload_status="success";

}else{

$upload_status="fail";

}

?>

<!DOCTYPE html>

<head>

<title>Thuru</title>

</head>

<body>

<?php include('header.php');?>

<?php include('side_bar.php');?>

<h4 class="card-title">Search Tree</h4>

</div>

<label>

Date

</label>

</div>

<button type="submit" class="btn btn-info btn-fill pull-right">SUBMIT</button>

</div>

</div>

</form>

</div>

</div>

<thead>

<th data-field="name" data-sortable="true">Owner Name</th>

<th data-field="Identity" data-sortable="true">Plant Name</th>

<th data-field="Contact" data-sortable="true">Plant description</th>

<th data-field="Username" data-sortable="true">Created Date</th>

<th data-field="Lat" data-sortable="true">Latitude</th>

<th data-field="Long" data-sortable="true">Longitude</th>

<th data-field="location" data-sortable="true">Location</th>

<th data-field="12ds" data-sortable="true">Created By</th>

<th data-field="a" data-sortable="true">Image</th>

<th data-field="rating" data-sortable="true">Rating</th>

<th data-field="actions" class="td-actions text-right">Actions</th>

</thead>

<tbody>

<?php

if(isset($_GET['date'])){

$date  = $_GET['date'];
   
                         $query = "SELECT * FROM `users` inner join `newuser_plants` WHERE users.user_id=newuser_plants.user_id AND newuser_plants.status='activate' AND  newuser_plants.created_date='$date'";

}else{

$query = "SELECT * FROM `users` inner join `newuser_plants` WHERE users.user_id=newuser_plants.user_id AND newuser_plants.status='activate' LIMIT 10";

}

$result = mysqli_query($connect,$query) or die(mysqli_error($connect));
                      
                        $i;

while($row=mysqli_fetch_assoc($result)){

$id = $row['user_plant_id'];

$i++;

echo ' <tr>

<td>'.$row['plant_name'].'</td>

<td>'.$row['plant_description'].'</td>

<td>'.$row['created_date'].'</td>

<td>'.$row['location'].'</td>

<td>'.$row['created_type'].'</td>

<td>'.$row['rating'].'  <div class="modal fade" id="rating'.$id.'" role="dialog"><div class="modal-dialog">

<button type="button" class="close" data-dismiss="modal">&times;</button>

</div>

<h4 class="modal-title" style="margin-right:40">Add Rating</h4>

<input class="star star-5" id="star-5" type="radio" name="star" value="1" /> <label class="star star-5" for="star-5"></label>1 <input value="2" class="star star-4" id="star-4" type="radio" name="star" /> <label class="star star-4" for="star-4"></label>2 <input  value="3" class="star star-3" id="star-3" type="radio" name="star" /> <label class="star star-3" for="star-3"></label>3 <input value="4" class="star star-2" id="star-2" type="radio" name="star" /> <label class="star star-2" for="star-2"></label>4 <input value="5" class="star star-1" id="star-1" type="radio" name="star" /> <label class="star star-1" for="star-1"></label>5

</div>

<button class="btn btn-info" name="rating">SUBMIT</button>

</form>

</div>

</div> <td>

</td>

</tr>

<button type="button" class="close" data-dismiss="modal">&times;</button>

</div>

<h4 class="modal-title">  Update</h4>

<div>

<p>Plant Name</p>

<p>Descripion</p>

<p>Location</p>

<p>Latitude</p>

<p>Longitude</p>

<br>

<button class="btn btn-info " name="update">UPDATE</button>

</div>

</form>

</div>

';

}

?>

</tbody>

</table>

</div>

<nav>

©

document.write(new Date().getFullYear())

</script>

<a href="https://inoxzasolutions.com/">Inoxza Solutions</a>Innovations Forever

</p>

</nav>

</div>

</footer>

</div>

</body>

$(function() {

$(document).on({

mouseover: function(event) {

$(this).find('.far').addClass('star-over');

$(this).prevAll().find('.far').addClass('star-over');

},

mouseleave: function(event) {

$(this).find('.far').removeClass('star-over');

$(this).prevAll().find('.far').removeClass('star-over');

}

}, '.rate');

$(document).on('click', '.rate', function() {

if ( !$(this).find('.star').hasClass('rate-active') ) {

$(this).siblings().find('.star').addClass('far').removeClass('fas rate-active');

$(this).find('.star').addClass('rate-active fas').removeClass('far star-over');

$(this).prevAll().find('.star').addClass('fas').removeClass('far star-over');

} else {

console.log('has');

}

});

</script>

function showOtherNmae(value){

if(value =="Other"){

document.getElementById('plantName').style.display = 'block';

}else{

document.getElementById('plantName').style.display = 'none';

}

function validateMobileNumber(mobile_number){

$.ajax({url: "validate_user.php", data:{mobile_number:mobile_number},method:"POST",success: function(result){

if(result == 0){

document.getElementById("validationMessage").innerHTML="Mobile Number are Available";

document.getElementById('validationMessage').style.color = 'green';

document.getElementById("button").disabled = false;

}else{

document.getElementById("validationMessage").innerHTML="Mobile Number are not Available";

document.getElementById('validationMessage').style.color = 'red';

document.getElementById("button").disabled = true;

}

}});

}

function setFormValidation(id) {

$(id).validate({

highlight: function(element) {

$(element).closest('.form-group').removeClass('has-success').addClass('has-error');

$(element).closest('.form-check').removeClass('has-success').addClass('has-error');

},

success: function(element) {

$(element).closest('.form-group').removeClass('has-error').addClass('has-success');

$(element).closest('.form-check').removeClass('has-error').addClass('has-success');

},

errorPlacement: function(error, element) {

$(element).closest('.form-group').append(error).addClass('has-error');

},

});

}

$(document).ready(function() {

document.getElementById("otherName").disabled = true;

setFormValidation('#RegisterValidation');

});

</script>

var $table = $('#bootstrap-table');

$table.bootstrapTable({

toolbar: ".toolbar",

clickToSelect: true,

showRefresh: true,

search: true,

showToggle: true,

showColumns: true,

pagination: true,

searchAlign: 'left',

pageSize: 8,

clickToSelect: false,

pageList: [8, 10, 25, 50, 100],

formatShowingRows: function(pageFrom, pageTo, totalRows) {

//do nothing here, we don't want to show the text "showing x of y from..."

},

formatRecordsPerPage: function(pageNumber) {

return pageNumber + " rows visible";

},

icons: {

refresh: 'fa fa-refresh',

toggle: 'fa fa-th-list',

columns: 'fa fa-columns',

detailOpen: 'fa fa-plus-circle',

detailClose: 'fa fa-minus-circle'

}

});

//activate the tooltips after the data table is initialized

$('[rel="tooltip"]').tooltip();

$(window).resize(function() {

$table.bootstrapTable('resetView');

});

</script>

$('.datepicker').datetimepicker({

format: 'YYYY-MM-DD',

icons: {

time: "fa fa-clock-o",

date: "fa fa-calendar",

up: "fa fa-chevron-up",

down: "fa fa-chevron-down",

previous: 'fa fa-chevron-left',

next: 'fa fa-chevron-right',

today: 'fa fa-screenshot',

clear: 'fa fa-trash',

close: 'fa fa-remove'

}

});

</script>

</html>