shell bypass 403
<?php $this->load->view('admin/sidebar.php');?>
</div>
<div class="content-right">
<?php $this->load->view('admin/header.php');?>
<div class="main-content1">
<div class="dash-block">
<div class="col-md-12">
<div class="box box-primary direct-chat direct-chat-primary">
<!-- /.box-header -->
<div class="box-body">
<table class="table table-bordered data" id="example" style="width:100%">
<thead>
<tr>
<td>S.No</td>
<td>Customer</td>
<td>Order No.</td>
<td>Total Amount</td>
<td>Status</td>
<td>Payment Mode</td>
<td>Order Date</td>
<td>Action</td>
</tr>
</thead>
<tbody class="data">
<?php
$or_type = array('Processing','on the way','On Hold');
//
$iii=0;
$this->db->where('user_id',$user_id);
$query = $this->db->get('tb_order');
if($query->num_rows()>0):
$sno = 1;
foreach($query->result() as $row){
// print_r($row);
// $iii++;
$can_btn = $edit_btn= $rep_btn="";
$iii++;
$view_btn =' <a target="_blank" href="'.base_url('admin/order_print/'.$row->id).'" title="Print Order" id="'.$row->id.'"><i class="fa fa-print"></i></a> ';
$can_btn =' <a href="'.base_url('admin/order_view_details/'.$row->id).'" title="Order List" id="'.$row->id.'"><i class="fa fa-eye"></i></a> ';
if(in_array($row->order_staus,$or_type)){
$rep_btn =' <a href="'.base_url('admin/order_details/'.$row->id).'" title="Edit Order" id="'.$row->id.'"><i class="fa fa-edit"></i></a> ';
}
if($row->status=='1'){
// $can_btn =' <span class="btn_return" title="Cancel Order" id="'.$row->id.'"><i class="fa fa-trash"></i></a> ';
}
$color="";
if(!$row->user_id){$color="style='color:blue;'";}
echo "<tr>";
echo "<td>$iii</td>";
echo "<td $color>$row->full_name</td>";
echo "<td>$row->order_no</td>";
echo "<td><i class='fa fa-rupee-sign'></i> $row->order_price</td>";
echo "<td>$row->order_staus</td>";
echo "<td>$row->payment_method <b>($row->pay_status)</b></td>";
echo "<td>$row->order_date</td>";
echo "<td>$view_btn $rep_btn $can_btn </td>";
echo "</tr>";
}
endif;
?>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
<?php $this->load->view('admin/footer');?>
</div>
</div>
<div class="modal fade address-detail">
<div class="modal-dialog modal-lg">
<div class="modal-content">
<div class="modal-header">
<h5 class="modal-title">Delivery Detail</h5>
<button class="close" data-dismiss="modal">×</button>
</div>
<div class="modal-body">
<table id="data" class="TableStyle">
</table>
</div>
</div>
</div>
</div>
<!-- eyemodel Modal -->
<div class="modal" id="eyemodel">
<div class="modal-dialog">
<div class="modal-content">
<!-- Modal Header -->
<div class="modal-header">
<h4 class="modal-title">Cancel Description</h4>
<button type="button" class="close" data-dismiss="modal">×</button>
</div>
<!-- Modal body -->
<div class="modal-body">
<h5 id="cancel_desc_data"></h5>
</div>
<!-- Modal footer -->
<div class="modal-footer">
<button type="button" class="btn btn-danger" data-dismiss="modal">Close</button>
</div>
</div>
</div>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="<?=base_url('admin_assets/js/tableHTMLExport.js')?>"></script>
<script type="text/javascript">
$(document).ready(function() {
$(".table-bordered").wrapAll("<div class='table-responsive'></div>");
});
$(document).ready(function () {
$('#example').DataTable();
});
$('#csv').on('click',function(){
$("#example").tableHTMLExport({type:'csv',filename:'OrderReport.csv'});
})
</script>
<script type="text/javascript">
$(".order_status").click(function() {
var con = confirm("Are you sure ");
var order_id=$(this).attr("id");
var status = $(this).closest("tr").find('select#status').val();
if(con==true){
$.ajax({
url:"<?=base_url('admin/order_status_changer')?>",
method:"post",
data:{"order_id_for_status":order_id,"status":status},
success: function(res){//for response
if(res==1){
alert("Sucess! Status Update Successfully");
}else if(res==0){
alert("Select Next Order Status");
return false;
}else if(res==2){
alert("No Cancel After Complete");
return false;
}
}
});
}else{
alert("Internal Problem");
return false;
}
});
$(".address-view").click(function(){
var order_id = $(this).attr("id");
if(order_id!=""){
$.ajax({
method:"post",
url:"<?=base_url('admin/view_order_address')?>",
data:{"order_id":order_id},
success:function(res){
$("#data").html(res);
}
})
}
})
$(function(){
$("#checkbox").click(function(){
if($('input:checkbox').prop('checked')){
$('input:checkbox').prop('checked',true);
} else{
$('input:checkbox').prop('checked',false);
}
});
});
$(".app").click(function(){
if (!$('.checkbox').is(':checked')) {
alert('not checked');
return false;
}else{
var values = new Array();
var bulkstatus = $("#bulkstatus").val();
$.each($("input[name='tablerecords[]']:checked"), function() {
var data = $(this).parents('tr:eq(0)');
var status = $(this).closest("tr").find('select#status').val();
/*values.push({ 'callphone':$(data).find('td:eq(0)').text(), 'rating':$(data).find('td:eq(2)').text() , 'location':$(data).find('td:eq(3)').text()}); */
values.push({'callphone':$(this).val(),'mult_status':status});
});
$.ajax({
method:"POST",
url:"<?=base_url('admin/bulk_order_status_changer')?>",
data:{"data":values,"bulkstatus":bulkstatus},
success:function(res){
//$(".reload_block").html(res);
alert(res);
}
});
}
//console.log(values);
});
$(document).ready(function() {
$('.js-example-basic-multiple').select2();
});
$("#pincode_filter").change(function(){
var pincode = $(this).val();
$(".data").html("");
if(pincode!=""){
$.ajax({
type:"post",
data:{"pincode":pincode},
url:"pincode_filter_ajax",
success:function(res){
$(".data").html(res);
}
})
}
})
$("#city_filter").change(function(){
var city = $(this).val();
$(".data").html("");
if(city!=""){
$.ajax({
type:"post",
data:{"city":city},
url:"pincode_filter_ajax",
success:function(res){
$(".data").html(res);
}
})
}
})
$("#state_filter").change(function(){
var state = $(this).val();
$(".data").html("");
if(state!=""){
$.ajax({
type:"post",
data:{"state":state},
url:"pincode_filter_ajax",
success:function(res){
$(".data").html(res);
}
})
}
})
$(".eyemodel").click(function(){
var desc = $(this).data("desc");
if(desc==""){
$("#cancel_desc_data").text("No Cancel Description");
}else{
$("#cancel_desc_data").text(desc);
}
})
</script>
</body>
</html>