F3RGUSO WEBSHELL 403

Edit file

File name : TourPackage.php

Content :

<?php

* To change this license header, choose License Headers in Project Properties.

* To change this template file, choose Tools | Templates

* and open the template in the editor.

/**

* Description of Tour_package

* @author Suharshana DsW

*/
class TourPackage {

public $id;
    public $title;
    public $dates;
    public $image_name;
    public $price;
    public $short_description;
    public $description;
    public $queue;
    public $map;

public function __construct($id) {

if ($id) {

$query = "SELECT *  FROM `tour_package` WHERE `id`=" . $id;

$db = new Database();

$result = mysql_fetch_array($db->readQuery($query));

$this->id = $result['id'];
            $this->title = $result['title'];
            $this->dates = $result['dates'];
            $this->image_name = $result['image_name'];
            $this->price = $result['price'];
            $this->short_description = $result['short_description'];
            $this->description = $result['description'];
            $this->queue = $result['queue'];
            $this->map = $result['map'];

return $this;
        }
    }

public function create() {
       
        $query = "INSERT INTO `tour_package` (`title`,`tour_type`,`dates`,`image_name`,`price`,`short_description`,`description`,`map`,`queue`) VALUES  ('"
                . $this->title . "', '"
                . $this->tour_type . "', '"
                . $this->dates . "', '"
                . $this->image_name . "', '"
                . $this->price . "', '"
                . $this->short_description . "', '"
                . $this->description . "', '"
                . $this->map . "', '"
                . $this->queue . "')";

$db = new Database();

$result = $db->readQuery($query);
        if ($result) {
            $last_id = mysql_insert_id();
            return $this->__construct($last_id);
        } else {
            return FALSE;
        }
    }

public function all() {

$query = "SELECT * FROM `tour_package` ORDER BY queue ASC";
        $db = new Database();
        $result = $db->readQuery($query);
        $array_res = array();

while ($row = mysql_fetch_array($result)) {
            array_push($array_res, $row);
        }
        return $array_res;
    }

public function allToursByType($type) {

$query = "SELECT * FROM `tour_package` WHERE `tour_type`= $type ORDER BY queue ASC";
        $db = new Database();
        $result = $db->readQuery($query);
        $array_res = array();

while ($row = mysql_fetch_array($result)) {
            array_push($array_res, $row);
        }
        return $array_res;
    }

public function update() {

$query = "UPDATE  `tour_package` SET "
                . "`title` ='" . $this->title . "', "
                . "`dates` ='" . $this->title . "', "
                . "`image_name` ='" . $this->image_name . "', "
                . "`price` ='" . $this->price . "', "
                . "`short_description` ='" . $this->short_description . "', "
                . "`description` ='" . $this->description . "', "
                . "`queue` ='" . $this->queue . "' "
                . "WHERE `id` = '" . $this->id . "'";

$db = new Database();

$result = $db->readQuery($query);
        if ($result) {
            return $this->__construct($this->id);
        } else {
            return FALSE;
        }
    }

public function delete() {
        $this->deleteTourDates();
        unlink(Helper::getSitePath() . "upload/tour-package/" . $this->image_name);
        $query = 'DELETE FROM `tour_package` WHERE id="' . $this->id . '"';

$db = new Database();

return $db->readQuery($query);
    }

public function deleteTourDates() {

$TOUR_DATE = new TourDate(NULL);
        $alldates = $TOUR_DATE->getTourDatesById($this->id);

foreach ($alldates as $date) {

$IMG = $TOUR_DATE->image_name = $date["image_name"];
            unlink(Helper::getSitePath() . "upload/tour-package/date/" . $IMG);
            unlink(Helper::getSitePath() . "upload/tour-package/date/thumb/" . $IMG);

$TOUR_DATE->id = $date["id"];

$TOUR_DATE->delete();
        }
    }

public function deleteNormal() {

$this->deleteNormalPhotos();
        unlink(Helper::getSitePath() . "upload/tour-package/" . $this->image_name);
        $query = 'DELETE FROM `tour_package` WHERE id="' . $this->id . '"';
        $db = new Database();

return $db->readQuery($query);
    }

public function deleteNormalPhotos() {

$TOUR_PACKAGE_PHOTO = new TourPackagePhotosNormal(NULL);

$allPhotos = $TOUR_PACKAGE_PHOTO->getTourPhotosById($this->id);

foreach ($allPhotos as $photo) {

$IMG = $TOUR_PACKAGE_PHOTO->image_name = $photo["image_name"];
            unlink(Helper::getSitePath() . "upload/tour-package/gallery/" . $IMG);
            unlink(Helper::getSitePath() . "upload/tour-package/gallery/thumb/" . $IMG);

$TOUR_PACKAGE_PHOTO->id = $photo["id"];

$TOUR_PACKAGE_PHOTO->delete();
        }
    }

public function arrange($key, $img) {

$query = "UPDATE `tour_package` SET `queue` = '" . $key . "'  WHERE id = '" . $img . "'";

$db = new Database();

$result = $db->readQuery($query);

return $result;
    }

}

F3RGUSO WEBSHELL COUNTER 403

Edit file