Beiträge von miro44

<?php


require_once("disp1/init.php");
use Illuminate\Database\Capsule\Manager as Capsule;


$ref = $_SERVER['HTTP_REFERER'];
$refData = parse_url($ref);
if($refData['host'] == 'disp1/'){ //only allow post requests from the URL "client.domain.com"
 if($_POST['name'] == 'update_comment'){
 if($_POST['token'] != '' && $_POST['cid'] != '' && $_POST['pk'] != ''){
 $check_entry = Capsule::table('tblhosting')->where('id',$_POST['pk'])->where('userid',$_POST['cid'])->count(); //check if submitted PID and KID match Database
 if($check_entry == '1'){ 
 $check_exist_entry = Capsule::table('mod_product_comment')->where('PID',$_POST['pk'])->where('KID',$_POST['cid'])->count();
 if($check_exist_entry == '0'){
 $product_token = md5($_POST['pk'].".".$_POST['cid']. "."."0"); //create a token 
 if($product_token == $_POST['token']){ //Check if the submitted token matches the token from the submitted KID and PID.
 try {
 $insertEntry = Capsule::table('mod_product_comment')
 ->insert(['ID' => NULL,'KID' => $_POST['cid'],'PID' => $_POST['pk'],'Comment'=> $_POST['value']]);
 }catch (\Exception $e) {
 logModuleCall('comment', 'error', $e);
 }
 }
 }else{
 $get_id = Capsule::table('mod_product_comment')->where('PID',$_POST['pk'])->where('KID',$_POST['cid'])->first();
 $product_token = md5($_POST['pk'].".".$_POST['cid']. "." .$get_id->ID); //create a token
 if($product_token == $_POST['token']){ //Check if the submitted token matches the token from the submitted KID and PID.
 try {
 $updatedentry = Capsule::table('mod_product_comment')
 ->where('PID', $_POST['pk'])
 ->where('KID', $_POST['cid'])
 ->update(['Comment' => $_POST['value']]);
 }catch (\Exception $e) {
 logModuleCall('comment', 'error', $e);
 }
 }
 } 
 }
 }
 }
}

<link href="templates/xxxx/css/bootstrap-editable.css" rel="stylesheet"/>
<script src="templates/xxx/js/bootstrap-editable.js"></script>
<script>
 $.fn.editable.defaults.mode = 'inline';
 $(document).ready(function() {
 $('.change_comment').editable({
 params: function(params) { 
 params.token = $(this).attr('data-token');
 params.cid = $(this).attr('data-cid');
 return params;
 }
 }); 
 });
</script> 
{include file="$template/includes/tablelist.tpl" tableName="ServicesList" filterColumn="3"}
<script type="text/javascript">
 jQuery(document).ready( function ()
 {
 var table = jQuery('#tableServicesList').removeClass('hidden').DataTable();
 {if $orderby == 'product'}
 table.order([0, '{$sort}'], [3, 'asc']);
 {elseif $orderby == 'amount' || $orderby == 'billingcycle'}
 table.order(1, '{$sort}');
 {elseif $orderby == 'nextduedate'}
 table.order(2, '{$sort}');
 {elseif $orderby == 'domainstatus'}
 table.order(3, '{$sort}');
 {/if}
 table.draw();
 jQuery('#tableLoading').addClass('hidden');
 });
</script>
<div class="table-container clearfix">
 <table id="tableServicesList" class="table table-list hidden">
 <thead>
 <tr>
 <th>{$LANG.orderproduct}</th>
 <th>{$LANG.custom_description}</th>
 <th>{$LANG.clientareaaddonpricing}</th>
 <th>{$LANG.clientareahostingnextduedate}</th>
 <th>{$LANG.clientareastatus}</th>
 <th class="responsive-edit-button" style="display: none;"></th>
 </tr>
 </thead>
 <tbody>
 {foreach key=num item=service from=$services_new}
 {if $service.status|strtolower != 'terminated' && $service.status|strtolower != 'cancelled'}
 <tr>
 <td><strong>{$service.product}</strong>{if $service.domain}<br /><a href="http://{$service.domain}" target="_blank">{$service.domain}</a>{/if}</td>
 <td><a class="change_comment" id=update_comment data-type="text" data-pk={$service.id} data-cid={$clientsdetails.userid} data-token={$service.token} data-url="more/update_comment.php" data-name="update_comment">{$service.comment}</a></td>
 <td class="text-center" data-order="{$service.amountnum}">{$service.amount}<br />{$service.billingcycle}</td>
 <td class="text-center"><span class="hidden">{$service.normalisedNextDueDate}</span>{$service.nextduedate}</td>
 <td class="text-center"><span class="label status status-{$service.status|strtolower}">{$service.statustext}</span></td>
 <td class="responsive-edit-button" style="display: none;">
 <a href="clientarea.php?action=productdetails&id={$service.id}" class="btn btn-block btn-info">
 {$LANG.manageproduct}
 </a>
 </td>
 </tr>
 {/if} 
 {/foreach}
 </tbody>
 </table>
 <div class="text-center" id="tableLoading">
 <p><i class="fa fa-spinner fa-spin"></i> {$LANG.loading}</p>
 </div>
</div>