| Server IP : 104.21.21.239 / Your IP : 216.73.216.11 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/planner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
session_start();
//var_dump($_GET);
//$set = "comment = '".mysqli_real_escape_string($GLOBALS['con'], trim(urldecode($_GET['note'])))."' ";
$set = "comment = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['note']))."', ".
"followup_date = ".nzdate(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['date']))).", ".
"followup_complete = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['complete'])),'0')." ";
$sql = "SELECT * FROM notes WHERE ix = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['notes_ix']))."' AND ix_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['notes_ix_id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
$result = mysqli_query($GLOBALS['con'], $sql);
if (mysqli_num_rows($result) > 0) :
$sql = "UPDATE notes SET ".$set.
"WHERE ix = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['notes_ix']))."' AND ix_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['notes_ix_id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
else :
$sql = "INSERT INTO notes SET ".
"user_id = ".$_SESSION['user_id'].", ".
"event_id = ".$_SESSION['active_event'].", ".
"ix = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['notes_ix']))."', ".
"ix_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['notes_ix_id'])).", ".
$set;
endif;
//echo $sql;
//mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
mysqli_query($GLOBALS['con'], $sql) or die('Database error!');
?>