Linux cesa-www-main 6.1.0-49-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
Apache/2.4.68 (Debian)
Server IP : 10.218.0.2 & Your IP : 216.73.216.28
Domains :
Cant Read [ /etc/named.conf ]
User : www-data
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
var /
www /
cesa.co.za /
relay /
include /
Delete
Unzip
Name
Size
Permission
Date
Action
reporting
[ DIR ]
drwxr-sr-x
2020-01-14 08:25
2010_team.php
23.67
KB
-rw-r--r--
2017-07-03 10:50
approvals.php
3.7
KB
-rw-r--r--
2018-08-20 08:15
approvals_uni.php
3.51
KB
-rw-r--r--
2018-08-20 08:15
areas.php
8.49
KB
-rw-r--r--
2019-08-01 13:22
com_reg.php
6.77
KB
-rw-r--r--
2019-08-01 13:23
con_area.php
2.08
KB
-rw-r--r--
2017-08-02 09:09
con_man.php
8.61
KB
-rw-r--r--
2014-07-04 12:12
countrylist.php
11.91
KB
-rw-r--r--
2014-07-04 12:12
db.php
729
B
-rw-r--r--
2019-08-31 09:37
db.php.bak
323
B
-rw-r--r--
2014-07-04 12:12
entrants.php
2.22
KB
-rw-r--r--
2014-07-04 12:12
error_log
17.92
KB
-rw-r--r--
2014-07-04 12:12
footer.php
137
B
-rw-r--r--
2014-07-04 13:40
generateXML.php
649
B
-rw-r--r--
2014-07-04 12:12
index20130626.php
4.14
KB
-rw-r--r--
2014-07-04 12:12
login.php
1.4
KB
-rw-r--r--
2018-09-03 08:01
mailer.php
1.99
KB
-rw-r--r--
2017-07-03 10:50
menu.php
5.54
KB
-rw-r--r--
2019-06-12 10:15
payments.php
6.37
KB
-rw-r--r--
2018-08-20 08:15
phpinfo.php
24
B
-rw-r--r--
2014-07-04 12:12
reg.php
567
B
-rw-r--r--
2019-08-31 09:46
reports.php
1.81
KB
-rw-r--r--
2014-07-04 12:14
sec.php
650
B
-rw-r--r--
2014-07-04 12:14
social_app.php
4.48
KB
-rw-r--r--
2018-08-20 08:15
team.php
33.2
KB
-rw-r--r--
2019-08-01 13:25
team_mail.php
2.81
KB
-rw-r--r--
2017-07-03 10:50
timing_report.php
1.57
KB
-rw-r--r--
2014-07-04 12:14
timing_report_2012.php
10.96
KB
-rw-r--r--
2015-08-19 08:40
uni_reg.php
5.5
KB
-rw-r--r--
2019-08-01 13:26
uni_team.php
33.04
KB
-rw-r--r--
2019-08-01 13:23
Save
Rename
<br/><?php if (isset($_GET['act'])) { if ($_GET['act']=='add') {//add if (isset($_POST['frm_sub'])) { $uquery="SELECT COUNT(id) FROM saace_team WHERE status='1' AND paid='1'"; $ures=mysql_query($uquery); if ($ures) { $urow=mysql_fetch_assoc($ures); if (100>(int)$urow['COUNT(id)']) { $uquery="SELECT comp_id FROM saace_user WHERE id='".$_SESSION['uid']."'"; $ures=mysql_query($uquery); if ($ures) { $urow=mysql_fetch_assoc($ures); $insquery="INSERT INTO saace_team (name,paid,comp_id,type,status,team_type) VALUES ('".$_POST['name']."','1','".$urow['comp_id']."','".$_POST['type']."','1','".$_POST['TeamType']."')"; mysql_query($insquery); } $tquery="SELECT * FROM saace_teamtype WHERE id='".$_POST['type']."'"; $tres=mysql_query($tquery); if ($tres) { $trow=mysql_fetch_assoc($tres); } $selquery="SELECT * FROM saace_company WHERE id='".$urow['comp_id']."'"; $selres=mysql_query($selquery); if ($selres) { $selrow=mysql_fetch_assoc($selres); $mstr="<html><body><p>Dear ".$selrow['contact']."<br/><br/>Thank you for entering ".$_POST['name']." (".$trow['name'].") for the 2009 CESA Relay race. <br/><br/> Please note that the cost for registering this team is R".$trow['cost']."<br/><br/>You will be issued with an invoice on which you will find the banking details.<br/><br/>Once payment is confirmed your team registrations will be confirmed.<br/><br/>CESA Relay Admin. <br/><br/><a href='mailto:events@cesa.co.za'>events@cesa.co.za</a></p></body></html>"; //mail client $headers = "From: ".$admin_email."\r\n"."Reply-To: ".$admin_email."\r\nMIME-Version: 1.0\r\nContent-type: text/html; charset=iso-8859-1\r\nBcc: events@cesa.co.za\r\n"; mail($selrow['email'],'CESA Team entry recorded',$mstr,$headers); $mstr="<html><body><p>".$selrow['contact']." from ".$selrow['name']." has registered a team for the 2009 CESA Relay race.<br/><br/>Please login to <a href='http://www.cesa.co.za/relay'>http://www.cesa.co.za/relay</a> to approve the reservations.<br/><br/>CESA Website</p></body></html>"; //mail client $headers = "From: ".$admin_email."\r\n"."Reply-To: ".$admin_email."\r\nMIME-Version: 1.0\r\nContent-type: text/html; charset=iso-8859-1\r\nBcc: events@cesa.co.za\r\n"; mail($admin_email,'CESA Team entry',$mstr,$headers); } echo "<h1>Team Added</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { echo "<h1>No new teams can be added</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } } } else { echo "<form method='POST' action='".$pagename."?sec=team&act=add' onsubmit=\"return validate_form(this)\">\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'><!--Add new team--></th> </tr> <tr> <td width="13%">Name</td> <td width="87%"><input type='text' name='name'> Please enter the name for the team. </td> </tr> <tr> <td>Category</td> <td> <select name='type'> <?php $uquery="SELECT comp_id FROM saace_user WHERE id='".$_SESSION['uid']."'"; $ures=mysql_query($uquery); if ($ures) { $urow=mysql_fetch_assoc($ures); $twquery="SELECT * FROM saace_team WHERE comp_id='".$urow['comp_id']."' AND type='4'"; $twres=mysql_query($twquery); if (mysql_num_rows($twres)>0) { $twpresent=1; } else { $twpresent=0; } $tquery="SELECT * FROM saace_teamtype" ; // WHERE id = 4 "; $tres=mysql_query($tquery); if ($tres) { while ($trow=mysql_fetch_assoc($tres)) { if (!($trow['id']==4&&$twpresent==1)) { echo "<option value='".$trow['id']."'>".$trow['name'].' (R'.$trow['cost'].')'."</option>\n"; } } } } ?> </select> Please not that the cost for each team is indicated in ( ) next to the team type. </td> </tr> <tr> <td>Team Type</td> <td><select name="TeamType" id="TeamType"> <option value="Comp">Competitive</option> <option value="Rec">Recreational</option> </select></td> </tr> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Add Team'/></td> </tr> </table> </form> <?php } } elseif ($_GET['act']=='tmadd') {//add member if (isset($_POST['frm_sub'])) { $insquery="INSERT INTO saace_teammembers (name,team_id,ID_num) VALUES ('".$_POST['name']."','".$_GET['tid']."','".$_POST['ID_num']."')"; mysql_query($insquery); echo "<h1>Team Member Added</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { echo "<form method='POST' onsubmit=\"return validate_form(this)\" action='".$pagename."?sec=team&act=tmadd&tid=".$_GET['tid']."'>\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'>Add new team member</th> </tr> <tr> <td>Name</td> <td><input type='text' name='name'> Please enter the name for the team member. </td> </tr> <tr> <?php //get comp type $ctquery="SELECT team_type FROM saace_team WHERE id='".$_GET['tid']."'"; $ctres=mysql_query($ctquery); if ($ctres) { $ctrow=mysql_fetch_assoc($ctres); } if ($ctrow['team_type'] == 'Comp'){ ?> <td>ID Number</td> <td><input type='text' name='ID_num'> Please enter the ID / Passport number for the team member. </td> </tr> <?php };?> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Add Team Member'/></td> </tr> </table> </form> <?php } } elseif ($_GET['act']=='war1add') {//add tug war male member if (isset($_POST['frm_sub'])) { $insquery="INSERT INTO saace_teammembers (name,team_id,tugcat,ID_num) VALUES ('".$_POST['name']."','".$_GET['tid']."','1','".$_POST['ID_num']."')"; mysql_query($insquery); echo "<h1>Team Member Added</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { echo "<form method='POST' onsubmit='return validate_form(this)' action='".$pagename."?sec=team&act=war1add&tid=".$_GET['tid']."'>\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'>Add new team member</th> </tr> <tr> <td>Name</td> <td><input type='text' name='name'> Please enter the name for the team member.</td> </tr> <tr> <td>ID Number</td> <td><input type='text' name='ID_num'> Please enter the ID / Passport number for the team member. </td> </tr> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Add Team Member'/></td> </tr> </table> </form> <?php } } elseif ($_GET['act']=='war2add') {//add tug war female member if (isset($_POST['frm_sub'])) { $insquery="INSERT INTO saace_teammembers (name,team_id,tugcat,ID_num) VALUES ('".$_POST['name']."','".$_GET['tid']."','2','".$_POST['ID_num']."')"; mysql_query($insquery); echo "<h1>Team Member Added</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { echo "<form method='POST' onsubmit=\"return validate_form(this)\" action='".$pagename."?sec=team&act=war2add&tid=".$_GET['tid']."'>\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'>Add new team member</th> </tr> <tr> <td>Name</td> <td><input type='text' name='name'> Please enter the name for the team member.</td> </tr> <tr> <td>ID Number</td> <td><input type='text' name='ID_num'> Please enter the ID / Passport number for the team member. </td> </tr> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Add Team Member'/></td> </tr> </table> </form> <?php } } elseif ($_GET['act']=='war3add') {//add tug war child member if (isset($_POST['frm_sub'])) { $insquery="INSERT INTO saace_teammembers (name,team_id,tugcat,ID_num) VALUES ('".$_POST['name']."','".$_GET['tid']."','3','".$_POST['ID_num']."')"; mysql_query($insquery); echo "<h1>Team Member Added</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { echo "<form method='POST' onsubmit=\"return validate_form(this)\" action='".$pagename."?sec=team&act=war3add&tid=".$_GET['tid']."'>\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'>Add new team member</th> </tr> <tr> <td>Name</td> <td><input type='text' name='name'> Please enter the name for the team member.</td> </tr> <tr> <td>ID Number</td> <td><input type='text' name='ID_num'> Please enter the ID / Passport number for the team member. </td> </tr> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Add Team Member'/></td> </tr> </table> </form> <?php } } elseif ($_GET['act']=='edi') {//edit if (isset($_POST['frm_sub'])) { $updquery="UPDATE saace_team SET name='".$_POST['name']."',type='".$_POST['type']."' WHERE id='".$_GET['id']."'"; mysql_query($updquery); echo "<h1>Team Edited</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { $query="SELECT * FROM saace_team WHERE id='".$_GET['id']."'"; $result=mysql_query($query); if ($result) { $row=mysql_fetch_assoc($result); echo "<form method='POST' onsubmit=\"return validate_form(this)\" action='".$pagename."?sec=team&act=edi&id=".$_GET['id']."'>\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'>Edit team</th> </tr> <tr> <td>Name</td> <td><input type='text' name='name' value='<?php echo $row['name'];?>'></td> </tr> <tr> <td>Team Type</td> <td> <select name='type'> <?php $tquery="SELECT * FROM saace_teamtype ORDER BY id ASC"; $tres=mysql_query($tquery); if ($tres) { while ($trow=mysql_fetch_assoc($tres)) { if ($trow['id']==$row['type']) { echo "<option value='".$trow['id']."' selected>".$trow['name']."</option>\n"; } else { echo "<option value='".$trow['id']."'>".$trow['name']."</option>\n"; } } } ?> </select></td> </tr> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Edit Team' /></td> </tr> </table> </form> <?php } } } elseif ($_GET['act']=='tmedi') {//edit member if (isset($_POST['frm_sub'])) { $updquery="UPDATE saace_teammembers SET name='".$_POST['name']."',ID_num='".$_POST['ID_num']."' WHERE id='".$_GET['id']."'"; mysql_query($updquery); echo "<h1>Team Member Edited</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } else { $query="SELECT * FROM saace_teammembers WHERE id='".$_GET['id']."'"; $result=mysql_query($query); if ($result) { $row=mysql_fetch_assoc($result); echo "<form method='POST' onsubmit=\"return validate_form(this)\" action='".$pagename."?sec=team&act=tmedi&id=".$_GET['id']."'>\n"; ?> <table width='100%' border='0' cellpadding='0' cellspacing='0'> <tr> <th colspan='2' align='left'>Edit team member</th> </tr> <tr> <td>Name</td> <td><input type='text' name='name' value='<?php echo $row['name'];?>'></td> </tr> <tr> <td>ID Number</td> <td width="20"><input type='text' name='ID_num' maxlength="8" size="15" value='<?php echo $row['ID_num'];?>'></td> <td><input type='text' name='ID_num' value='<?php echo $row['ID_num'];?>'></td> </tr> <tr> <td colspan='2'><input type='submit' name='frm_sub' value='Edit Team Member'/></td> </tr> </table> </form> <p> <?php } } } elseif ($_GET['act']=='del') {//delete $delquery="DELETE FROM saace_team WHERE id='".$_GET['id']."'"; mysql_query($delquery); echo "<h1>Team Deleted</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } elseif ($_GET['act']=='susp') {//suspend $susquery="UPDATE saace_team SET status='0' WHERE id='".$_GET['id']."'"; mysql_query($susquery); echo "<h1>Team Suspended</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } elseif ($_GET['act']=='acti') {//restore $susquery="UPDATE saace_team SET status='1' WHERE id='".$_GET['id']."'"; mysql_query($susquery); echo "<h1>Team Activated</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } elseif ($_GET['act']=='tmdel') {//member delete $delquery="DELETE FROM saace_teammembers WHERE id='".$_GET['id']."'"; mysql_query($delquery); echo "<h1>Team Member Deleted</h1><a href='".$pagename."?sec=team'>Go to teams</a>\n"; } } else {//list ?> </p> <!-- <h1>Please note that the registration of teams for the relay has closed.</h1> --> <br /> <table width='70%' border='0' cellpadding='0' cellspacing='0'> <tr> <th align='left'>Team Name</th> <th align='left'>Team Type</th> <th align='left'>Team Members</th> <th align='left' width='13%'>Actions</th> </tr> <?php $bgcnt=1; $uquery="SELECT comp_id FROM saace_user WHERE id='".$_SESSION['uid']."'"; $ures=mysql_query($uquery); if ($ures) { $urow=mysql_fetch_assoc($ures); $query="SELECT * FROM saace_team WHERE comp_id='".$urow['comp_id']."'ORDER BY name ASC"; $result=mysql_query($query); if ($result) { while ($row=mysql_fetch_assoc($result)) { echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; echo "<td>".$row['name']."</td>\n"; $tquery="SELECT * FROM saace_teamtype WHERE id='".$row['type']."'ORDER BY name ASC"; $tresult=mysql_query($tquery); if ($tresult) { $trow=mysql_fetch_assoc($tresult); echo "<td>".$trow['name']."</td>\n"; } echo "<td></td>\n"; echo "<td>\n"; echo " <a href='".$pagename."?sec=team&act=edi&id=".$row['id']."'><img border='0' src='img/edit.gif' alt='Edit'/></a>\n"; echo " <a href='".$pagename."?sec=team&act=del&id=".$row['id']."' onclick='javascript: return confirm(\"Are you sure you want to delete this team - ".$row['name']."?\");'><img border='0' src='img/delete.gif' alt='Delete'/></a>\n"; if ($row['paid']=='1') { if ($row['status']=='0') { echo " <a href='".$pagename."?sec=team&act=acti&id=".$row['id']."'><img border='0' src='img/restore.gif' alt='Activate'/></a>\n"; } else { echo " <a href='".$pagename."?sec=team&act=susp&id=".$row['id']."'><img border='0' src='img/suspend.gif' alt='Suspend'/></a>\n"; } } echo "</td>\n"; echo "</tr>\n"; $bgcnt++; $twc1=0; $twc2=0; $twc3=0; //team member// $tmquery="SELECT * FROM saace_teammembers WHERE team_id='".$row['id']."' ORDER BY id ASC"; $tmresult=mysql_query($tmquery); if ($tmresult) { $tmcnt=0; while ($tmrow=mysql_fetch_assoc($tmresult)) { echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; echo "<td></td>\n"; echo "<td></td>\n"; echo "<td>".$tmrow['name']."</td>\n"; echo "<td>\n"; echo " <a href='".$pagename."?sec=team&act=tmedi&id=".$tmrow['id']."'><img border='0' src='img/edit.gif' alt='Edit'/></a>\n"; echo " <a href='".$pagename."?sec=team&act=tmdel&id=".$tmrow['id']."' onclick='javascript: return confirm(\"Are you sure you want to delete this team member - ".$tmrow['name']."?\");'><img border='0' src='img/delete.gif' alt='Delete'/></a>\n"; echo "</td>\n"; echo "</tr>\n"; $tmcnt++; $bgcnt++; if ($tmrow['tugcat']=='1') $twc1++; if ($tmrow['tugcat']=='2') $twc2++; if ($tmrow['tugcat']=='3') $twc3++; } //end while if ($row['type']=='4') { $tugquery="SELECT * FROM saace_tugwar WHERE id='1'"; $tugresult=mysql_query($tugquery); if ($tugresult) { $tugrow=mysql_fetch_assoc($tugresult); echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; $bgcnt++; if ($twc1<$tugrow['people']) { echo "<td colspan='4'><a href='".$pagename."?sec=team&act=war1add&tid=".$row['id']."'>Add New Member - ".$tugrow['name']." </a></td></tr>\n"; } else { echo "<td colspan='4'>No New ".$tugrow['name']." Members can be added</a></td></tr>\n"; } } //women// $tugquery="SELECT * FROM saace_tugwar WHERE id='2'"; $tugresult=mysql_query($tugquery); if ($tugresult) { $tugrow=mysql_fetch_assoc($tugresult); echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; $bgcnt++; if ($twc2<$tugrow['people']) { echo "<td colspan='4'><a href='".$pagename."?sec=team&act=war2add&tid=".$row['id']."'>Add New Member - ".$tugrow['name']." </a></td></tr>\n"; } else { echo "<td colspan='4'>No New ".$tugrow['name']." Members can be added</a></td></tr>\n"; } } //children// $tugquery="SELECT * FROM saace_tugwar WHERE id='3'"; $tugresult=mysql_query($tugquery); if ($tugresult) { $tugrow=mysql_fetch_assoc($tugresult); echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; $bgcnt++; if ($twc3<$tugrow['people']) { echo "<td colspan='4'><a href='".$pagename."?sec=team&act=war3add&tid=".$row['id']."'>Add New Member - ".$tugrow['name']." </a></td></tr>\n"; } else { echo "<td colspan='4'>No New ".$tugrow['name']." Members can be added</a></td></tr>\n"; } } } else { if ($tmcnt<$trow['people']) { echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; $bgcnt++; echo "<td colspan='4'><a href='".$pagename."?sec=team&act=tmadd&tid=".$row['id']."'>Add New Team Member</a></td></tr>\n"; } else { echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; $bgcnt++; echo "<td colspan='4'>Team is full</td></tr>\n"; } } } else { echo "<tr><td colspan='4'>No team members have been added yet</td></tr>\n"; } //end team member// } //end while echo "<tr"; if ($bgcnt%2==0) { echo " class='odd'"; } else { echo " class='even'"; } echo ">\n"; $bgcnt++; echo "<td colspan='4'> <a href='".$pagename."?sec=team&act=add'><!--Add New Team--></a> </td></tr>\n" /* <strong>Please note that the registration of teams is now closed.</strong>*/; } else { echo "<tr><td colspan='4'>No teams have been added yet</td></tr>\n"; } } ?> </table> <p> <?php } ?> </p> <p><?php // conditional show area ?>*Note: Once your team has been approved you can activate it by clicking on the <img src="img/restore.gif" width="14" height="14" /> icon.<br /> To make changes to a team simply click on <img src="img/edit.gif" width="16" height="16" /> icon and make the required changes.<br /> To delete a team simply click on the <img src="img/delete.gif" width="16" height="16" /> icon. </p>