shell bypass 403
<?php $this->load->view('admin/sidebar.php');?>
</div>
<div class="content-right">
<?php $this->load->view('admin/header.php');?>
<div class="main-content1">
<div class="dash-block">
<div class="col-md-12">
<div class="box box-primary direct-chat direct-chat-primary">
<div class="box-header with-border">
<h3 class="box-title">Order List</h3>
<?php
$_staus = $this->input->get('order_staus');
?>
<form method="get" action="<?=base_url('admin/view_order')?>" enctype= 'multipart/form-data'>
<div class="row">
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> From </label>
<input type="text" class="form-control datepicker" name="to_date" value="<?php echo $this->input->get('to_date');?>">
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> To </label>
<input type="text" class="form-control datepicker" name="from_date" value="<?php echo $this->input->get('from_date');?>">
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Order Status </label>
<select name='order_staus' class="form-control">
<option value=""></option>
<option <?php if($_staus =='Processing') { echo "selected";}?> value="Processing">Processing</option>
<option <?php if($_staus =='on the way') { echo "selected";}?> value="on the way">On the way</option>
<option <?php if($_staus =='On Hold') { echo "selected";}?> value="On Hold">On Hold</option>
<option <?php if($_staus =='Completed') { echo "selected";}?> value="Completed">Completed</option>
<option <?php if($_staus =='Returned') { echo "selected";}?> value="Returned">Returned</option>
<option <?php if($_staus =='Refunded') { echo "selected";}?> value="Refunded">Refunded</option>
<option <?php if($_staus =='Cancelled') { echo "selected";}?> value="Cancelled">Cancelled</option>
</select>
</div>
<div class="col-md-3">
<p style="margin:0px;"> </p>
<button class="btn btn-submit pull-right">Get Result</button>
</div>
</div>
</form>
<div class="row">
<form action="<?=base_url('admin/order_export_csv')?>" method="get">
<p style="margin:0px;"> </p>
<input type="hidden" class="form-control " name="from_date" value="<?php echo $this->input->get('from_date');?>">
<input type="hidden" class="form-control " name="to_date" value="<?php echo $this->input->get('to_date');?>">
<input type="hidden" class="form-control " name="order_staus" value="<?php echo $this->input->get('order_staus');?>">
<button class="btn btn-submit pull-right">TO CSV</button>
</form>
</div>
</div>
<!-- /.box-header -->
<div class="box-body">
<table class="table table-bordered data" id="example" style="width:100%">
<thead>
<tr>
<td>S.No</td>
<td>Customer</td>
<td>Order No.</td>
<td>Total Amount</td>
<td>Status</td>
<td>Payment Mode</td>
<td>Order Date</td>
<td>Action</td>
</tr>
</thead>
<tbody class="data">
<?php
$or_type = array('Processing','on the way','On Hold');
// echo $this->db->last_query();
$iii=0;
if(isset($order_res) && $order_res==true):
$sno = 1;
foreach($order_res as $row){
// print_r($row);
// $iii++;
$can_btn = $edit_btn= $rep_btn="";
$iii++;
$view_btn =' <a target="_blank" href="'.base_url('admin/order_print/'.$row->id).'" title="Print Order" id="'.$row->id.'"><i class="fa fa-print"></i></a> ';
$can_btn =' <a href="'.base_url('admin/order_view_details/'.$row->id).'" title="Order List" id="'.$row->id.'"><i class="fa fa-eye"></i></a> ';
// if(in_array($row->order_staus,$or_type)){
$rep_btn =' <a href="'.base_url('admin/order_details/'.$row->id).'" title="Edit Order" id="'.$row->id.'"><i class="fa fa-edit"></i></a> ';
// }
$de_conf="return confirm('Are you sure?')";
$delete_btn =' <a onclick="'.$de_conf.'" href="'.base_url('admin/delete_order_details/'. base64_encode($row->order_no)).'" title="Edit Order" id="'.$row->id.'"><i class="fa fa-trash"></i></a> ';
if($row->status=='1'){
// $can_btn =' <span class="btn_return" title="Cancel Order" id="'.$row->id.'"><i class="fa fa-trash"></i></a> ';
}
$color="";
if(!$row->user_id){$color="style='color:blue;'";}
echo "<tr>";
echo "<td>$iii</td>";
echo "<td $color>$row->full_name</td>";
echo "<td>$row->order_no</td>";
echo "<td><i class='fa fa-rupee-sign'></i> $row->order_price</td>";
echo "<td>$row->order_staus</td>";
echo "<td>$row->payment_method <b>($row->pay_status)</b></td>";
echo "<td>$row->order_date</td>";
echo "<td>$view_btn $rep_btn $can_btn $delete_btn </td>";
echo "</tr>";
}
endif;
?>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
<?php $this->load->view('admin/footer');?>
</div>
</div>
<div class="modal fade address-detail">
<div class="modal-dialog modal-lg">
<div class="modal-content">
<div class="modal-header">
<h5 class="modal-title">Delivery Detail</h5>
<button class="close" data-dismiss="modal">×</button>
</div>
<div class="modal-body">
<table id="data" class="TableStyle">
</table>
</div>
</div>
</div>
</div>
<!-- eyemodel Modal -->
<div class="modal" id="eyemodel">
<div class="modal-dialog">
<div class="modal-content">
<!-- Modal Header -->
<div class="modal-header">
<h4 class="modal-title">Cancel Description</h4>
<button type="button" class="close" data-dismiss="modal">×</button>
</div>
<!-- Modal body -->
<div class="modal-body">
<h5 id="cancel_desc_data"></h5>
</div>
<!-- Modal footer -->
<div class="modal-footer">
<button type="button" class="btn btn-danger" data-dismiss="modal">Close</button>
</div>
</div>
</div>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="<?=base_url('admin_assets/js/tableHTMLExport.js')?>"></script>
<script type="text/javascript">
$(document).ready(function() {
$(".table-bordered").wrapAll("<div class='table-responsive'></div>");
});
$(document).ready(function () {
$('#example').DataTable();
});
$('#csv').on('click',function(){
$("#example").tableHTMLExport({type:'csv',filename:'OrderReport.csv'});
})
</script>
<script type="text/javascript">
$(".order_status").click(function() {
var con = confirm("Are you sure ");
var order_id=$(this).attr("id");
var status = $(this).closest("tr").find('select#status').val();
if(con==true){
$.ajax({
url:"<?=base_url('admin/order_status_changer')?>",
method:"post",
data:{"order_id_for_status":order_id,"status":status},
success: function(res){//for response
if(res==1){
alert("Sucess! Status Update Successfully");
}else if(res==0){
alert("Select Next Order Status");
return false;
}else if(res==2){
alert("No Cancel After Complete");
return false;
}
}
});
}else{
alert("Internal Problem");
return false;
}
});
$(".address-view").click(function(){
var order_id = $(this).attr("id");
if(order_id!=""){
$.ajax({
method:"post",
url:"<?=base_url('admin/view_order_address')?>",
data:{"order_id":order_id},
success:function(res){
$("#data").html(res);
}
})
}
})
$(function(){
$("#checkbox").click(function(){
if($('input:checkbox').prop('checked')){
$('input:checkbox').prop('checked',true);
} else{
$('input:checkbox').prop('checked',false);
}
});
});
$(".app").click(function(){
if (!$('.checkbox').is(':checked')) {
alert('not checked');
return false;
}else{
var values = new Array();
var bulkstatus = $("#bulkstatus").val();
$.each($("input[name='tablerecords[]']:checked"), function() {
var data = $(this).parents('tr:eq(0)');
var status = $(this).closest("tr").find('select#status').val();
/*values.push({ 'callphone':$(data).find('td:eq(0)').text(), 'rating':$(data).find('td:eq(2)').text() , 'location':$(data).find('td:eq(3)').text()}); */
values.push({'callphone':$(this).val(),'mult_status':status});
});
$.ajax({
method:"POST",
url:"<?=base_url('admin/bulk_order_status_changer')?>",
data:{"data":values,"bulkstatus":bulkstatus},
success:function(res){
//$(".reload_block").html(res);
alert(res);
}
});
}
//console.log(values);
});
$(document).ready(function() {
$('.js-example-basic-multiple').select2();
});
$("#pincode_filter").change(function(){
var pincode = $(this).val();
$(".data").html("");
if(pincode!=""){
$.ajax({
type:"post",
data:{"pincode":pincode},
url:"pincode_filter_ajax",
success:function(res){
$(".data").html(res);
}
})
}
})
$("#city_filter").change(function(){
var city = $(this).val();
$(".data").html("");
if(city!=""){
$.ajax({
type:"post",
data:{"city":city},
url:"pincode_filter_ajax",
success:function(res){
$(".data").html(res);
}
})
}
})
$("#state_filter").change(function(){
var state = $(this).val();
$(".data").html("");
if(state!=""){
$.ajax({
type:"post",
data:{"state":state},
url:"pincode_filter_ajax",
success:function(res){
$(".data").html(res);
}
})
}
})
$(".eyemodel").click(function(){
var desc = $(this).data("desc");
if(desc==""){
$("#cancel_desc_data").text("No Cancel Description");
}else{
$("#cancel_desc_data").text(desc);
}
})
</script>
</body>
</html>