One Hat Cyber Team

Your IP: 216.73.216.1
Server IP: 185.238.29.86
Server: Linux server2 6.8.12-6-pve #1 SMP PREEMPT_DYNAMIC PMX 6.8.12-6 (2024-12-19T19:05Z) x86_64
Server Software: nginx/1.18.0
PHP Version: 8.1.31
Buat File | Buat Folder

Edit File: analyze_product.php

<?php
/* this function will output all the data in the database for one product. */
/* it can be used for analyzing problems */
if(!@include 'approve.php') die( "approve.php was not found!");

?><!DOCTYPE html> 
<html lang="en"><head><meta charset="utf-8">
<title>Prestashop Analyze Product</title>
</head><body>
<h1>Prestashop Analyze Product</h1>
This function will output all data in the database for one product (except for cart and order data). 
It serves to help support people all the relevant data without the 
need to give them direct access to the database.
<?php
if(isset($_GET['id_product'])) 
 $product = intval($_GET['id_product']);
else 
	$product = "";
echo 'Enter the product id: <form name=prodform><input name=id_product size=2 value='.$product.'></form>';
if(isset($_GET['id_product'])) 
{ $langs = array();
 $res = dbquery("SELECT * FROM "._DB_PREFIX_."lang WHERE active=1");
 while($row = mysqli_fetch_assoc($res))
 { $langs[$row["id_lang"]] = $row["iso_code"];
 }
 print_r($langs);
 
 $res = dbquery("SELECT * FROM ". _DB_PREFIX_."product WHERE id_product=".$product);
 if(mysqli_num_rows($res) == 0) echo " NO product ";
 while($row = mysqli_fetch_row($res))
 { echo " _product ";
 foreach($row AS $field) echo $field."-";
 }
 $res = dbquery("SELECT * FROM ". _DB_PREFIX_."product_shop WHERE id_product=".$product);
 if(mysqli_num_rows($res) == 0) echo " NO product_shop ";
 while($row = mysqli_fetch_assoc($res))
 { echo " _product_shop - ".$row["id_shop"]." ";
 foreach($row AS $field) echo $field."-";
 }
 $res = dbquery("SELECT * FROM ". _DB_PREFIX_."product_lang WHERE id_product=".$product);
 if(mysqli_num_rows($res) == 0) echo " NO product_lang ";
 while($row = mysqli_fetch_assoc($res))
 { echo " _product_lang - ".$row["id_shop"]."-".$langs[$row["id_lang"]]." ";
 foreach($row AS $field) echo $field."-";
 }
 $res = dbquery("SELECT * FROM ". _DB_PREFIX_."category_product WHERE id_product=".$product);
 if(mysqli_num_rows($res) == 0) echo " No category ";
 else echo " Categories: ";
 while($row = mysqli_fetch_assoc($res))
 { echo $row["id_category"]."-".$row["position"].", ";
 }
 
 echo " ==============================================";
 $res = dbquery("SELECT * FROM ". _DB_PREFIX_."image WHERE id_product=".$product);
 while($row = mysqli_fetch_assoc($res))
 { echo " _image ".$row["id_image"]."-".$row["position"]."-".$row["cover"]." Shops:";
 $res2 = dbquery("SELECT * FROM ". _DB_PREFIX_."image_shop WHERE id_image=".$row["id_image"]);
 if(!$res2)
		echo "No-Image-Shop";
	else
	{ while($row2 = mysqli_fetch_assoc($res2))
 { echo $row2["id_shop"]."-".$row2["cover"].",";
 }
	}
 $res2 = dbquery("SELECT * FROM ". _DB_PREFIX_."image WHERE id_image=".$row["id_image"]);
	if(mysqli_num_rows($res2) != 1)
	{ echo " Unusual number of image entries: ";
	 while($row2 = mysqli_fetch_assoc($res2))
 { echo " ";
		foreach($row2 AS $field) echo $field."-";
 }
	}
	echo " ";
 $res2 = dbquery("SELECT * FROM ". _DB_PREFIX_."image_lang WHERE id_image=".$row["id_image"]);
 if(!$res2)
		echo "No-Image-Lang";
	else
 { while($row2 = mysqli_fetch_assoc($res2))
 { echo " ".$langs[$row2["id_lang"]].": ".$row2["legend"].",";
 }
	}
 $res2 = dbquery("SELECT * FROM "._DB_PREFIX_._PRESTOOLS_PREFIX_."imgspace WHERE id_image=".$row["id_image"]);
	if(mysqli_num_rows($res2) ==0) echo " No imgspace ";
	{ while($row2 = mysqli_fetch_assoc($res2))
 { echo " Imgspace: ";
	 foreach($row2 AS $field) echo $field."-";
 }
	}
 }

/* now we look in all remaining tables for fields containing "product" */
 /* any such table will be printed */
 echo " ==============================================";
 $len = strlen(_DB_PREFIX_);
 $query = "SHOW TABLES";
 $res = dbquery($query);
 while($row = mysqli_fetch_row($res))
 { if(in_array(substr($row[0], $len), array("product","product_lang","product_shop","image"))) continue;
 if(in_array(substr($row[0], $len), array("cart_product","order_detail","category_product","search_index"))) continue;

$rx = dbquery("SHOW COLUMNS FROM ".$row[0]);
	$fieldfound = "";
 while($colrow = mysqli_fetch_row($rx))
	{ $pos = strpos($colrow[0], "product");
 if ($pos === false) continue;
	 $fieldfound = $colrow[0];
	 /* now we look whether there is a field id_product */
	 if($fieldfound != "id_product")
	 { while($colrow = mysqli_fetch_row($rx))
	 { if($colrow[0] == "id_product")
		 $fieldfound = $colrow[0];
		}
	 }
	 break;
	}
	if($fieldfound != "")
 { echo " ";
 $res3 = dbquery("SELECT * FROM ".$row[0]." WHERE ".$fieldfound."=".$product);
 while($row3 = mysqli_fetch_row($res3))
 { echo " ".$row[0]." ";
 foreach($row3 AS $field) echo $field."-";
	 }
	 if(mysqli_num_rows($res3) == 0)
		 echo $row[0]."-".$fieldfound;
 }
 }
	
}