Linux cesa-www-main 6.1.0-49-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
Apache/2.4.68 (Debian)
Server IP : 10.218.0.2 & Your IP : 216.73.216.28
Domains :
Cant Read [ /etc/named.conf ]
User : www-data
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
var /
www /
cesa.co.za /
app /
ajax /
Delete
Unzip
Name
Size
Permission
Date
Action
memberlogin.php
100
B
-rw-r--r--
2018-03-06 12:55
officedata.php
6.56
KB
-rw-r--r--
2020-01-24 10:30
searchresults.php
7
KB
-rw-r--r--
2020-01-24 10:25
Save
Rename
<?php include_once("/usr/www/users/saacea/php/inc_db.php"); $province=$_REQUEST["Province"]; $containing=$_REQUEST["FirmName"]; $Agricultural=$_REQUEST["SpecArch"]; $Civil=$_REQUEST["SpecCivil"]; $Electrical=$_REQUEST["SpecElec"]; $Mechanical=$_REQUEST["SpecMech"]; $Mining=$_REQUEST["SpecMin"]; $QuantitySurveying=$_REQUEST["SpecQS"]; $TownPlanning=$_REQUEST["SpecTownP"]; $Other=$_REQUEST["SpecOther"]; $sql = "SELECT tblMemberFirms.DeclarationReceived, tblMemberFirms.FirmName,tblMemberFirmOffices.FullOrPartTime, tblMemberFirmOffices.OfficeID, tblMemberFirmOffices.GeoLocation FROM tblMemberFirms, tblMemberFirmOffices WHERE tblMemberFirms.FirmID = tblMemberFirmOffices.FirmID AND tblMemberFirmOffices.FullOrPartTime = 'Full Time' AND tblMemberFirms.MemberStatus='Member' "; switch ($province) { case 'any' : break; default : $sql.=" AND tblMemberFirmOffices.Province = '$province'"; break; } //end switch if ($containing) { $sql.=" AND tblMemberFirms.FirmName LIKE '%$containing%'"; } // sql_criteria $count_criteria = $Acoustics + $Agricultural + $BuildingServices + $Chemical + $Civil + $Development + $Electrical + $Electronic + $Environmental + $Geotechnical + $Industrial + $Mechanical + $Marine + $Mining + $Process + $Structural + $Transportation + $Architecture + $RuralDevelopment + $ProjectManagement + $QuantitySurveying + $TownPlanning + $Multidisciplinary + $DisputeResolution + $ExpertWitness + $InformationSystems + $FacilitiesManagement + $GIS; if ($count_criteria == 0) { $sql_criteria = ""; } else { $sql_criteria = " AND ("; do { if ($Acoustics == "1") { $sql_criteria .= " OR tblMemberFirms.Acoustics = $Acoustics"; $countposition++; } else { $sql_criteria .= ""; } if ($Agricultural == "1") { $sql_criteria .= " OR tblMemberFirms.Agricultural = $Agricultural "; $countposition++; } else { $sql_criteria .= ""; } if ($BuildingServices == "1") { $sql_criteria .= " OR tblMemberFirms.BuildingServices = $BuildingServices "; $countposition++; } else { $sql_criteria .= ""; } if ($Chemical == "1") { $sql_criteria .= " OR tblMemberFirms.Chemical = $Chemical "; $countposition++; } else { $sql_criteria .= ""; } if ($Civil == "1") { $sql_criteria .= " OR tblMemberFirms.Civil = $Civil "; $countposition++; } else { $sql_criteria .= ""; } if ($Development == "-") { $sql_criteria .= " OR tblMemberFirms.Development = $Development "; $countposition++; } else { $sql_criteria .= ""; } if ($Electrical == "1") { $sql_criteria .= " OR tblMemberFirms.Electrical = $Electrical "; $countposition++; } else { $sql_criteria .= ""; } if ($Electronic == "1") { $sql_criteria .= " OR tblMemberFirms.Electronic = $Electronic "; $countposition++; } else { $sql_criteria .= ""; } if ($Environmental == "1") { $sql_criteria .= " OR tblMemberFirms.Environmental = $Environmental "; $countposition++; } else { $sql_criteria .= ""; } if ($Geotechnical == "1") { $sql_criteria .= " OR tblMemberFirms.Geotechnical = $Geotechnical "; $countposition++; } else { $sql_criteria .= ""; } if ($Industrial == "1") { $sql_criteria .= " OR tblMemberFirms.Industrial = $Industrial "; $countposition++; } else { $sql_criteria .= ""; } if ($Mechanical == "1") { $sql_criteria .= " OR tblMemberFirms.Mechanical = $Mechanical "; $countposition++; } else { $sql_criteria .= ""; } if ($Marine == "1") { $sql_criteria .= " OR tblMemberFirms.Marine = $Marine "; $countposition++; } else { $sql_criteria .= ""; } if ($Mining == "1") { $sql_criteria .= " OR tblMemberFirms.Mining = $Mining "; $countposition++; } else { $sql_criteria .= ""; } if ($Process == "1") { $sql_criteria .= " OR tblMemberFirms.Process = $Process "; $countposition++; } else { $sql_criteria .= ""; } if ($Structural == "1") { $sql_criteria .= " OR tblMemberFirms.Structural = $Structural "; $countposition++; } else { $sql_criteria .= ""; } if ($Transportation == "1") { $sql_criteria .= " OR tblMemberFirms.Transportation = $Transportation "; $countposition++; } else { $sql_criteria .= ""; } if ($Architecture == "1") { $sql_criteria .= " OR tblMemberFirms.Architecture = $Architecture "; $countposition++; } else { $sql_criteria .= ""; } if ($RuralDevelopment == "1") { $sql_criteria .= " OR tblMemberFirms.RuralDevelopment = $RuralDevelopment "; $countposition++; } else { $sql_criteria .= ""; } if ($ProjectManagement == "1") { $sql_criteria .= " OR tblMemberFirms.ProjectManagement = $ProjectManagement "; $countposition++; } else { $sql_criteria .= ""; } if ($QuantitySurveying == "1") { $sql_criteria .= " OR tblMemberFirms.QuantitySurveying = $QuantitySurveying "; $countposition++; } else { $sql_criteria .= ""; } if ($TownPlanning == "1") { $sql_criteria .= " OR tblMemberFirms.TownPlanning = $TownPlanning "; $countposition++; } else { $sql_criteria .= ""; } if ($Multidisciplinary == "1") { $sql_criteria .= " OR tblMemberFirms.Multidisciplinary = $Multidisciplinary "; $countposition++; } else { $sql_criteria .= ""; } if ($DisputeResolution == "1") { $sql_criteria .= " OR tblMemberFirms.DisputeResolution = $DisputeResolution "; $countposition++; } else { $sql_criteria .= ""; } if ($ExpertWitness == "1") { $sql_criteria .= " OR tblMemberFirms.ExpertWitness = $ExpertWitness "; $countposition++; } else { $sql_criteria .= ""; } if ($InformationSystems == "1") { $sql_criteria .= " OR tblMemberFirms.InformationSystems = $InformationSystems "; $countposition++; } else { $sql_criteria .= ""; } if ($FacilitiesManagement == "1") { $sql_criteria .= " OR tblMemberFirms.FacilitiesManagement = $FacilitiesManagement "; $countposition++; } else { $sql_criteria .= ""; } if ($GIS == "1") { $sql_criteria .= " OR tblMemberFirms.GIS = $GIS "; $countposition++; } else { $sql_criteria .= ""; } $countposition++; } while ($countposition < $count_criteria); $sql_criteria .= ") "; $sql_criteria = str_replace(" OR )", ")", $sql_criteria); $sql_criteria = str_replace("( OR ", "( ", $sql_criteria); $sql.=$sql_criteria; } $result = mysql_query($sql); $result_rows = mysql_num_rows($result); if ($result_rows > 0 ) { echo "<p class=\"footer\">The following <b>" . $result_rows . " results</b> match your search criteria.<br>Please note: The order of the displayed results have been randomised to provide equal opportunity for our members.</p><p class=\"footer\">Click on a company name for further information</p>"; echo "<table width=\"600\" border=\"0\" cellpadding=\"5\" cellspacing=\"0\"><tr><th>Member</th><th>Geographic Region</th></tr>"; // Randomise using array functions instead of ansi sql order by $numbers = range(0,$result_rows-1); srand((double)microtime()*1000000); shuffle($numbers); while (list(,$number) = each($numbers)) { if ($number >=$result_rows) { } else { $moverow = mysql_data_seek($result,$number); } $row = mysql_fetch_array($result); echo "<tr><td><a href=\"#\" onclick=\"showoffice(". $row["OfficeID"]. "); return false; \">" . $row["FirmName"] . "</a></td><td>" . $row["GeoLocation"]."</td></tr>"; } echo "</table>"; } else { echo "<p><b>Sorry, there were no matches for your search criteria.</b></p>"; } ?>