LittleDemon WebShell

<?php
if ((!isset($_SESSION['gen256']))  ) {
  echo "<script>
        window.open('login.php','_self');
    </script>";  
}

?>
<?php 
if ($_SESSION['gen256']['role']=='0') {

    $output='';

    $output .= " <div class='alert alert-warning' role='alert'>
  Oopps!!<b>You are not allowed to access this page contact the System Admin</b> <a href='index.php?p=activity&page=1'>Click to view Activities</a>
</div>";
    // code...
    echo $output;
}else{

?>






<?php
$aid=$_GET['aid'];
                $query="SELECT * FROM activity WHERE id='$aid' ORDER BY id DESC";

                 
                $result = mysqli_query($conn,$query);
                $count = 1;
                while($row = mysqli_fetch_assoc($result) ){
                    $actiivityid = $row['id'];
                    $activity = $row['activity'];
                   
                
                    ?> 
    




    <div class="row">
  
    <div class="col-lg-12">
        <div class="panel panel-default">
            <div class="panel-heading">
                New Activity / Service
            </div>
            <div class="panel-body">
                <form method="post" enctype="multipart/form-data">
                <div class="row">
                    <div class="col-lg-6">

     <div class="form-group">
  <label>Activity Name:</label>
  <input type="text" class="form-control" value="<?php echo $activity; ?>" name="activity" required>
</div>

  


 <div class="col-lg-6">

    <!-- <div class="form-group">
    <label>Comment:</label>
    
    <textarea class="form-control" name="hcomment"></textarea>
</div> -->
 

    




<!-- <div class="form-group">
    <input type="submit" name="registerfamily" value="Register House">
</div> -->

<div class="form-group">
    <input type="submit" name="register" class="btn btn-sm btn-success" value="New Activity">
</div>

    </div>
    </div>
   

</div>

  
</form>

</div>
 <a href="index.php?p=activity&page=1">View Activities</a>
</div>
</div>
</div>



    <?php
                    $count ++;
                }
            ?>  


            <?php
include "dbconfig/db.php";
if(isset($_POST['register'])){
    
    $activity = strip_tags($_POST['activity']);
 
    // $hcomment = strip_tags($_POST['hcomment']);
    
   


   $sql = "UPDATE activity SET activity='$activity' WHERE id='$aid'";

    
    mysqli_query($conn,$sql);
     echo "<script>alert('Service/ Activity Edited')</script>";
     
        echo"<script>
            window.open('index.php?p=editact&aid=$aid','_self');
            </script>"; 


}


?>














<?php }; ?>