Graybyt3 Was Here

Linux 91889.tw 3.10.0 #1 SMP Mon Dec 9 19:36:21 MSK 2019 x86_64
Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40
104.237.1.91

File Name : insert.php

<?php require_once('../../connect.php'); ?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
$theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
 break;    
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
  }
return $theValue;
}
//*************************************************  serv_kind_insert   *********************************************************

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "kind_insert")) {
	if ($_FILES['photo_url']['error']==4 && $_FILES['photo_url']['name']=="") {

$save_fileName="";

}

else{			
			
		    $File_Extension = explode(".", $_FILES['photo_url']['name']);

$File_Extension = $File_Extension[1];

$save_fileName =date("yndHis").".".$File_Extension;

copy($_FILES['photo_url']['tmp_name'], "../upload/serv/".$save_fileName);}
$insertSQL = sprintf("INSERT INTO serv_kind (title_e,title,sort,insert_man,news_date,insert_date,photo_url) VALUES (%s,%s, %s, %s, %s, %s, %s)",
GetSQLValueString($_POST['title_e'], "text"),
GetSQLValueString($_POST['title'], "text"),
GetSQLValueString($_POST['sort'], "int"),
GetSQLValueString($_POST['insert_man'], "text"),
GetSQLValueString($_POST['news_date'], "text"),
GetSQLValueString($_POST['insert_date'], "date"),
GetSQLValueString($save_fileName, "text"));

//echo $insertSQL;

//exit();
mysql_select_db($database_connect, $connect);
$Result1 = mysql_query($insertSQL, $connect) or die(mysql_error());
echo "<meta http-equiv='content-type' content='text/html; charset=UTF-8'><script >";
echo "alert(\"資料新增成功!!\");";
echo "window.location.href='kind.php'";
echo "</script>";
}
?>

System Information
*ReClick For Close
File : BlackDragon /m/upload/serv/251013163822.php

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	admin/admin	0775	2024-03-24 04:15:08
..	dir	-	admin/admin	0775	2024-03-24 04:36:17
delete.php	text/plain	1.39 KB	admin/admin	0664	2024-03-24 04:15:07
edit.php	text/html	2.11 KB	admin/admin	0664	2024-03-24 04:15:07
error_log	text/plain	7.45 KB	admin/admin	0664	2024-03-24 04:15:07
insert.php	text/x-php	2.09 KB	admin/admin	0664	2024-03-24 04:15:07
kind.php	text/html	8.31 KB	admin/admin	0664	2024-03-24 04:15:08
kind_edit.php	text/html	7.48 KB	admin/admin	0664	2024-03-24 04:15:08
kind_insert.php	text/html	7.17 KB	admin/admin	0664	2024-03-24 04:15:08