Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/QA/   drwxr-xr-x
Free 52.66 GB of 127.8 GB (41.2%)
                            Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    

Viewing file:     EditReport.php (2.49 KB)      -rw-r--r--

<?php
	session_start();

	/** Set Timezone **/
	date_default_timezone_set('Asia/Bangkok');
	
	/**  Define Validate Access  */
	define( '_VALID_ACCESS' , 1 );

	/**  Check Session User Login  */
	if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
		echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
		echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";
		echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
		exit();
	} 
	else {
		/**  Configuration  */
		require_once( "../configuration.php" );
		require_once( $_Config_absolute_path . "/includes/framework.php" );
		require_once( "../includes/Function.php" );
		require_once( "../includes/FunctionDB.php" );
	
		/**  Create Database Object  */
		$dbObj = new DBConn;  
			//=== SESSION
		$Username = $valid_user; 
		$Report_name  = htmlspecialchars(trim($Report_name));
        $Path = "../Qa_pic"; 

		$query1 = "select * from qa_qareport_tb WHERE ReportqaId='".$_REQUEST["ReportqaId"]."'";
		$result1 = mysql_query($query1);
		$rs = mysql_fetch_array($result1);
	
		//###  Upload Image File
		if( $_FILES['Filename']['name'] != "" ) {
			//ЕєдїЕмаНЎКТГаґФБ						
			if(!empty($rs["Filename"])) unlink($QAPicPath.$rs["Filename"]);			
			
			//Upload дїЕмаНЎКТГгЛБи
			//$Filetex = $_FILES['Filetex']['name'];
			$Filename = date('YmdHis').strrchr($_FILES['Filename']['name'], ".");
			@copy( $_FILES['Filename']['tmp_name'] , $QAPicPath.$Filename);
			@unlink( $_FILES['Filename']['tmp_name'] );			

			$query ="UPDATE qa_qareport_tb SET Report_name='$Report_name', Filename='$Filename' WHERE ReportqaId = '".$_REQUEST["ReportqaId"]."'";
	        $dbObj->runQuery($query);

			echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
			echo "<script>alert('ГРєєбЎйдўўйНБЩЕаГХВєГйНВбЕйЗ');</script>";
			echo "<script>window.close(); window.opener.location.reload(); </script>";			
		}
		else{
			$query ="UPDATE qa_qareport_tb SET Report_name='$Report_name' WHERE ReportqaId = '".$_REQUEST["ReportqaId"]."'";
	        $dbObj->runQuery($query);

			echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
			echo "<script>alert('ГРєєбЎйдўўйНБЩЕаГХВєГйНВбЕйЗ');</script>";
			echo "<script>window.close(); window.opener.location.reload(); </script>";
		}

		$dbObj->freeresult($result1);

	} # else	
?>