ok
Mini Shell
<?php session_start();
//DB conncetion
include_once 'includes/config.php';
if (empty($_SESSION['token'])) {
$_SESSION['token'] = bin2hex(random_bytes(32));
$_SESSION["token-expire"] = time() + 3600; // 1 hour = 3600 secs
}
error_reporting(1);
//validating Session
if (strlen($_SESSION['aid'] == 0)) {
header('location:logout.php');
} else {
//Code for record deletion
if ($_GET['teamid']) {
$tid = $_GET['teamid'];
// $tid1 = substr($tid,128);
$len=strlen($tid)-128;
$tid =substr($tid,-$len);
// mysqli_query($con,"delete from tblteams where id ='$tid'");
// echo "<script>alert('Data Deleted');</script>";
// echo "<script>window.location.href='manage-teams.php'</script>";
}
if (isset($_POST['submit'])) {
if (hash_equals($_SESSION["token"], $_POST["token"])) {
$tname = $_POST['teamname'];
$tlname = $_POST['teamleadname'];
$status=0;
// $query = mysqli_query($con, "update tbl_principal set exitdate='$tname',exitremark='$tlname',status=0 where id='$tid'");
$stmt = $mysqli->prepare("UPDATE tbl_principal SET exitdate = ?,exitremark=?,status=? where id=?");
$stmt->bind_param("ssss", $tname , $tlname, $status, $tid);
$stmt->execute();
if ($stmt) {
echo '<script>alert("Principal Exited Successfully.")</script>';
echo "<script>window.location.href ='manage-principal.php'</script>";
} else {
echo '<script>alert("Something Went Wrong. Please try again.")</script>';
}
} else {
echo '<script>alert("Malicious Data found & submitted. Please try again.")</script>';
}
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="description" content="">
<meta name="author" content="">
<title>Exit Principal</title>
<!-- Custom fonts for this template -->
<link href="vendor/fontawesome-free/css/all.min.css" rel="stylesheet" type="text/css">
<link
href="https://fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i"
rel="stylesheet">
<!-- Custom styles for this template -->
<link href="css/sb-admin-2.min.css" rel="stylesheet">
<!-- Custom styles for this page -->
<link href="vendor/datatables/dataTables.bootstrap4.min.css" rel="stylesheet">
</head>
<body id="page-top">
<!-- Page Wrapper -->
<div id="wrapper">
<!-- Sidebar -->
<?php include_once 'includes/sidebar.php';?>
<!-- End of Sidebar -->
<!-- Content Wrapper -->
<div id="content-wrapper" class="d-flex flex-column">
<!-- Main Content -->
<div id="content">
<!-- Topbar -->
<?php include_once 'includes/topbar.php';?>
<!-- End of Topbar -->
<!-- Begin Page Content -->
<div class="container-fluid">
<!-- Page Heading -->
<div class="d-sm-flex align-items-center justify-content-between mb-4">
<h1 class="h3 mb-0 text-gray-800">Exit Principal</h1>
</div>
<form method="post" name="adminprofile">
<!-- DataTales Example -->
<input type="hidden" name="token" value="<?php echo htmlentities($_SESSION['token']); ?>">
<div class="card shadow mb-4">
<div class="card-header py-3">
<h6 class="m-0 font-weight-bold text-primary">Exit/Transfer Principal Form the COllege
</h6>
</div>
<div class="card-body">
<div class="form-group">
<label>Date of Exit</label>
<input type="date" class="form-control" name="teamname" value="" required='true'>
</div>
<div class="form-group">
<label>Reason for Transfer</label>
<input type="text" class="form-control" name="teamleadname" value="" required='true'
placeholder="Transfer/Retired/Other">
</div>
<div class="form-group">
<input type="submit" class="btn btn-primary btn-user btn-block" name="submit"
id="submit" value="Submit">
</div>
</div>
</div>
</form>
</div>
</div>
</div>
<!-- /.container-fluid -->
</div>
<!-- End of Main Content -->
<!-- Footer -->
<?php include_once 'includes/footer.php';?>
<!-- End of Footer -->
</div>
<!-- End of Content Wrapper -->
</div>
</div>
</div>
<!-- End of Page Wrapper -->
<!-- Scroll to Top Button-->
<?php include_once 'includes/footer2.php';?>
<!-- Bootstrap core JavaScript-->
<script src="vendor/jquery/jquery.min.js"></script>
<script src="vendor/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- Core plugin JavaScript-->
<script src="vendor/jquery-easing/jquery.easing.min.js"></script>
<!-- Custom scripts for all pages-->
<script src="js/sb-admin-2.min.js"></script>
<!-- Page level plugins -->
<script src="vendor/datatables/jquery.dataTables.min.js"></script>
<script src="vendor/datatables/dataTables.bootstrap4.min.js"></script>
<!-- Page level custom scripts -->
<script src="js/demo/datatables-demo.js"></script>
</body>
</html>
<?php }?>
Zerion Mini Shell 1.0