403Webshell
Server IP : 103.118.17.23  /  Your IP : 216.73.216.169
Web Server : Microsoft-IIS/10.0
System : Windows NT RESELLERPLESK22 10.0 build 20348 (Windows Server 2016) AMD64
User : IWAM_plesk(default) ( 0)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  E:/Inetpub/vhosts/mesa.org.in/httpdocs/grievance/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : E:/Inetpub/vhosts/mesa.org.in/httpdocs/grievance/ewlookup.asp
<%@ CodePage="65001" %>
<%
Response.Buffer = EW_RESPONSE_BUFFER
%>
<!--#include file="ewcfg.asp"-->
<!--#include file="aspfn.asp"-->
<!--#include file="userfn.asp"-->
<%
Call ew_Header(False, "utf-8", True)
Dim lookup
Set lookup = New cewlookup
Set Page = lookup
Call lookup.Page_Main
Set lookup = Nothing

'
' Page class for lookup
'
Class cewlookup

	' Page ID
	Public Property Get PageID
		PageID = "lookup"
	End Property

	' Page Object Name
	Public Property Get PageObjName
		PageObjName = "lookup"
	End Property

	' Page Name
	Public Property Get PageName
		PageName = ew_CurrentPage()
	End Property

	' Page URL
	Public Property Get PageUrl
		PageUrl = ew_CurrentPage() & "?"
	End Property

	' Connection
	Dim Connection
	Dim Recordset
	Dim DBID

	' Main
	Sub Page_Main()
		On Error Resume Next
		Dim sql, value, arValue
		Dim filters, filter, i, j, fldtype, flddatatype, bValidData
		Dim pattern, Item, fn
		Dim isAutoSuggest, TotalRecs
		Dim bPostBack
		bPostBack = (Request.Form <> "")
		If Not bPostBack Then
			Call ResponseJson
			Response.Write "{""Result"":""Missing post data.""}"
			Response.End
		End If
		sql = Request.Form("s") & ""
		sql = ew_Decrypt(sql)
		DBID = Request.Form("d") & ""
		Set Connection = ew_Connect(DBID)
		Dim Language
		Set Language = New cLanguage
		If Request.Form("lang").Count > 0 Then
			Language.LanguageId = Request.Form("lang")
		End If
		Call Language.LoadPhrases

		' Global Page Loading event (in userfn*.asp)
		Call Page_Loading
		filters = ""
		If ew_ContainsStr(sql, "{filter}") Then
			pattern = "^f\d+$"
			For Each Item In Request.Form

				' Get the filter values (for "IN")
				If ew_RegExTest(pattern, Item) Then
					filter = ew_Decrypt(Request.Form(Item))
					If filter <> "" Then
						i = Replace(Item,"f","")
						value = Request.Form("v" & i) & ""
						If value = "" Then
							If i > 0 Then ' Empty parent field
								Call ew_AddFilter(filters, "1=0") ' Disallow
							End If
						Else
							arValue = Split(value, EW_LOOKUP_FILTER_VALUE_SEPARATOR)
							fldtype = Request.Form("t" & i) & ""
							flddatatype = ew_FieldDataType(fldtype)
							bValidData = True
							For j = 0 to UBound(arValue)
								If flddatatype = EW_DATATYPE_NUMBER And Not IsNumeric(arValue(j)) Then
									bValidData = False
									Exit For
								Else
									arValue(j) = ew_QuotedValueBase(arValue(j), flddatatype, DBID)
								End If
							Next
							If bValidData Then
								filter = Replace(filter, "{filter_value}", Join(arValue, ","))
							Else
								filter = "1=0"
							End If
							Call ew_AddFilter(filters, filter)
						End If
					End If
				End If
			Next
			sql = Replace(sql, "{filter}", ew_IIf(filters <> "", filters, "1=1"))
		End If

		' Get the query value (for "LIKE" or "=")
		value = ew_AdjustSqlBase(Request.QueryString("q"), DBID) ' Get the query value from querystring
		If value = "" Then value = ew_AdjustSqlBase(Request.Form("q"), DBID)
		If value & "" <> "" Then
			sql = Replace(sql, " LIKE '%{query_value}%'", ew_Like("'%{query_value}%'", DBID))
			sql = Replace(sql, " LIKE '{query_value}%'", ew_Like("'{query_value}%'", DBID))
			sql = Replace(sql, "{query_value}", value)
		End If

		' Replace {query_value_n}
		Dim Match, Matches, v
		pattern = "\{query_value_(\d+)\}"
		If ew_RegExMatch(pattern, sql, Matches) Then
			For Each Match In Matches
				j = Match.SubMatches(0)
				v = ew_AdjustSqlBase(Request.Form("q" & j), DBID)
				sql = Replace(sql, Match, v)
			Next
		End If

		' Page size
		Dim max
		If Request.QueryString("n").Count > 0 Then
			max = ew_IIf(filter = "", CInt(Request.QueryString("n")), -1)
		ElseIf Request.Form("n").Count > 0 Then
			max = ew_IIf(filter = "", CInt(Request.Form("n")), -1)
		Else
			max = 0
		End If
		isAutoSuggest = ew_SameText(Request.Form("ajax"), "autosuggest")
		If isAutoSuggest And max < 1 Then
			max = EW_AUTO_SUGGEST_MAX_ENTRIES
		End If
		If max < 1 Then max = 0

		' Offset
		Dim offset, start, page
		offset = 0
		start = -1

		' Get start from GET/POST
		If Request.QueryString("start").Count > 0 Then
			start = CInt(Request.QueryString("start"))
		ElseIf Request.Form("start").Count > 0 Then
			start = CInt(Request.Form("start"))
		End If
		If start > -1 Then offset = start
		page = -1
		If Request.QueryString("page").Count > 0 Then
			page = CInt(Request.QueryString("page"))
		ElseIf Request.Form("page").Count > 0 Then
			page = CInt(Request.Form("page"))
		End If
		If page > 0 And max > 0 Then
			offset = (page - 1) * max
		End If

		' Get record count
		TotalRecs = ew_GetRecordCount(sql, DBID) ' ASP
		If max <= 0 Then max = TotalRecs
		Dim result, dbType
		If isAutoSuggest Then ' ASP
			dbType = ew_GetConnectionType(DBID)
			If dbType = "MSSQL" Then
				If ew_IsMsSql2012(DBID) Then dbType = "MSSQL2012" ' ASP
			End If
			pattern = "\/\*BeginOrderBy\*\/[\s\S]+\/\*EndOrderBy\*\/"
			sql = ew_GetSelectLimitSql(sql, max, offset, ew_RegExTest(pattern, sql), dbType)
		End If
		Set Recordset = Connection.Execute(sql)
		If ew_Empty(Recordset) Then
			Call ew_CloseConn
			Set result = Dictionary()
			Call result.Add("Result", "ERROR")
			Call result.Add("Message", "Failed to execute SQL")
			If EW_DEBUG_ENABLED Then
				Call result.Set("Message", result.Get("Message") & ": " & sql) ' To be viewed in browser Network panel for debugging
			End If
			Call ResponseJson
			Response.Write "[" & result.ToJson() & "]"
			Set result = Nothing
			Response.End
		End if
		Dim fldcnt, rowcnt
		fldcnt = Recordset.Fields.Count
		fldcnt = fldcnt - 1 ' Adjust for zero index
		If TotalRecs - offset > max Then
			rowcnt = max
		Else
			rowcnt = TotalRecs - offset
		End If
		rowcnt = rowcnt - 1 ' Adjust for zero index

		' Format date
		Dim ardt, rsarr
		ReDim ardt(fldcnt)
		For i = 0 To fldcnt
			ardt(i) = Request.Form("df" & i) ' Get date formats
		Next
		If Not Recordset.EOF Then
			ReDim rsarr(fldcnt, rowcnt)
			If Not isAutoSuggest Or dbType <> "MSSQL2012" And dbType <> "MYSQL" And dbType <> "POSTGRESQL" Then ' ASP
				Recordset.move offset
			End If
			j = 0
			Do While Not Recordset.EOF And j <= rowcnt
				For i = 0 To fldcnt
					rsarr(i, j) = Recordset(i).Value
				Next
				Recordset.MoveNext
				j = j + 1
			Loop
		End If
		Recordset.Close
		Call ew_CloseConn

		' Output
		Dim str
		If IsArray(rsarr) Then
			For j = 0 To UBound(rsarr, 2)
				For i = 0 To UBound(rsarr, 1)
					str = rsarr(i, j) & ""
					If Request.Form("keepCRLF").Count > 0 Then
						str = Replace(str, vbCr, "\\r")
						str = Replace(str, vbLf, "\\n")
						str = Replace(str, vbTab, "\\t")
					Else
						str = Replace(str, vbCr, " ")
						str = Replace(str, vbLf, " ")
						str = Replace(str, vbTab, " ")
					End If
					If Request.Form("df" & i).Count > 0 Then
						dtFormat = Request.Form("df" & i)
						If CInt(dtFormat) >= 0 Then
							str = ew_FormatDateTime(str, dtFormat)
						End If
					End if
					rsarr(i, j) = str
				Next
			Next
			result = ew_ArrayToJson(rsarr)
		Else ' ASP
			result = "[]"
		End If
		If isAutoSuggest Then
			result = "{""Result"": ""OK"", ""Records"": " & result & ", ""TotalRecordCount"": " & TotalRecs
			If (EW_DEBUG_ENABLED) Then
				result = result & ", ""SQL"": """ & Replace(sql, """", "\""") & """"
			End If
			result = result & "}"
		End If

		' Global Page Unloaded event (in userfn*.asp)
		Call Page_Unloaded
		Call ResponseJson

		' Output
		Response.Write result
	End Sub
End Class
%>

Youez - 2016 - github.com/yon3zu
LinuXploit