One Hat Cyber Team

Your IP: 216.73.216.23
Server IP: 178.33.27.10
Server: Linux cpanel.dev-unit.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Server Software: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
PHP Version: 8.2.11
Buat File | Buat Folder

Edit File: policy-member-change.php

<?php
# Policy member change
# Copyright (C) 2009-2011, AllWorldIT
# Copyright (C) 2008, LinuxRulz
# 
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

include_once("includes/header.php");
include_once("includes/footer.php");
include_once("includes/db.php");
include_once("includes/tooltips.php");

$db = connect_db();

printHeader(array(
		"Tabs" => array(
			"Back to policies" => "policy-main.php",
			"Back to members" => "policy-member-main.php?policy_id=".$_REQUEST['policy_id'],
		),
));

# Display change screen
if ($_POST['frmaction'] == "change") {

# Check a policy member was selected
	if (isset($_POST['policy_member_id'])) {
		# Prepare statement
		$stmt = $db->prepare("SELECT ID, Source, Destination, Comment, Disabled FROM ${DB_TABLE_PREFIX}policy_members WHERE ID = ?");
		$res = $stmt->execute(array($_POST['policy_member_id']));
		$row = $stmt->fetchObject();
		$stmt->closeCursor();
?>
		<p class="pageheader">Update Policy Member</p>

<form action="policy-member-change.php" method="post">
			<div>
				<input type="hidden" name="frmaction" value="change2" />
				<input type="hidden" name="policy_id" value="<?php echo $_POST['policy_id']; ?>" />
				<input type="hidden" name="policy_member_id" value="<?php echo $_POST['policy_member_id']; ?>" />
			</div>
			<table class="entry" style="width: 75%;">
				<tr>
					<td></td>
					<td class="entrytitle textcenter">Old Value</td>
					<td class="entrytitle textcenter">New Value</td>
				</tr>
				<tr>
					<td class="entrytitle texttop">
						Source
						<?php tooltip('policy_member_source'); ?>
					</td>
					<td class="oldval texttop"><?php echo $row->source ?></td>
					<td><textarea name="policy_member_source" cols="40" rows="5"></textarea></td>
				</tr>
				<tr>
					<td class="entrytitle texttop">
						Destination
						<?php tooltip('policy_member_destination'); ?>
					</td>
					<td class="oldval texttop"><?php echo $row->destination ?></td>
					<td><textarea name="policy_member_destination" cols="40" rows="5"></textarea></td>
				</tr>
				<tr>
					<td class="entrytitle texttop">Comment</td>
					<td class="oldval texttop"><?php echo $row->comment ?></td>
					<td><textarea name="policy_member_comment" cols="40" rows="5"></textarea></td>
				</tr>
				<tr>
					<td class="entrytitle">Disabled</td>
					<td class="oldval"><?php echo $row->disabled ? 'yes' : 'no' ?></td>
					<td>
						<select name="policy_member_disabled" />
							<option value="">--</option>
							<option value="0">No</option>
							<option value="1">Yes</option>
						</select>		
					</td>
				</tr>
			</table>
	
			<p />
			
			<div class="textcenter">
				<input type="submit" />
			</div>
		</form>
<?php
	} else {
?>
		<div class="warning">No policy selected</div>
<?php
	}
	
	
	
# SQL Updates
} elseif ($_POST['frmaction'] == "change2") {
?>
	<p class="pageheader">Policy Update Results</p>
<?php
	# Check a policy was selected
	if (isset($_POST['policy_member_id'])) {
		
		$updates = array();

if (!empty($_POST['policy_member_source'])) {
			array_push($updates,"Source = ".$db->quote($_POST['policy_member_source']));
		}
		if (isset($_POST['policy_member_destination']) && $_POST['policy_member_destination'] != "") {
			array_push($updates,"Destination = ".$db->quote($_POST['policy_member_destination']));
		}
		if (!empty($_POST['policy_member_comment'])) {
			array_push($updates,"Comment = ".$db->quote($_POST['policy_member_comment']));
		}
		if (isset($_POST['policy_member_disabled']) && $_POST['policy_member_disabled'] != "") {
			array_push($updates ,"Disabled = ".$db->quote($_POST['policy_member_disabled']));
		}

# Check if we have updates
		if (sizeof($updates) > 0) {
			$updateStr = implode(', ',$updates);
	
			$res = $db->exec("UPDATE ${DB_TABLE_PREFIX}policy_members SET $updateStr WHERE ID = ".$db->quote($_POST['policy_member_id']));
			if ($res) {
?>
				<div class="notice">Policy member updated</div>
<?php
			} else {
?>
				<div class="warning">Error updating policy member!</div>
				<div class="warning"><?php print_r($db->errorInfo()) ?></div>
<?php
			}

# Warn
		} else {
?>
			<div class="warning">No policy member updates</div>
<?php
		}

# Warn
	} else {
?>
		<div class="error">No policy member data available</div>
<?php
	}

} else {
?>
	<div class="warning">Invalid invocation</div>
<?php
}

printFooter();

# vim: ts=4
?>