403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.68
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-prod/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-prod/public_html/mod/guest_events_ajax.php
<?php
	//ini_set('display_errors',1);
	//error_reporting(E_ALL & ~E_NOTICE);
?>
<?php include('_mod_security.php'); ?>
<?php
	//header('Content-Type: application/json');
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Event Name', 'dbcol' => 'e.event_name', 'width' => '270px'));
			$dbg->add_column(array('label' => 'Date', 'dbcol' => 'e.event_date_time', 'width' => '80px'));
			$dbg->add_column(array('label' => 'Time', 'dbcol' => 'e.event_date_time', 'width' => '70px'));
			$dbg->add_column(array('label' => 'RSVP', 'dbcol' => 'eg.rsvp_1', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'Conf', 'dbcol' => 'eg.conf_1', 'sortable' => false, 'searchable' => false, 'width' => '40px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'Cancel', 'dbcol' => 'eg.cancel_1', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'ATT', 'dbcol' => 'eg.attended_1', 'sortable' => false, 'searchable' => false, 'width' => '40px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'Wait', 'dbcol' => 'eg.wait_1', 'sortable' => false, 'searchable' => false, 'width' => '40px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'RSVP', 'dbcol' => 'eg.rsvp_2', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'Conf', 'dbcol' => 'eg.conf_2', 'sortable' => false, 'searchable' => false, 'width' => '40px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'Cancel', 'dbcol' => 'eg.cancel_2', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'ATT', 'dbcol' => 'eg.attended_2', 'sortable' => false, 'searchable' => false, 'width' => '40px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => 'Wait', 'dbcol' => 'eg.wait_2', 'sortable' => false, 'searchable' => false, 'width' => '40px', 'align' => 'center', 'filter' => true));
			$dbg->add_column(array('label' => '# Guests', 'dbcol' => 'eg.nbr_of_guests', 'sortable' => false, 'searchable' => false, 'width' => '60px', 'align' => 'center'));
			$dbg->add_column(array('label' => 'Guest Name', 'dbcol' => 'eg.guest_name', 'sortable' => false, 'searchable' => false, 'width' => '80px', 'align' => 'center'));
			$dbg->add_column(array('label' => 'Invitor', 'dbcol' => 'eg.invitor', 'sortable' => false, 'searchable' => false, 'width' => '80px', 'align' => 'center'));
			$dbg->end_header();
			$dbg->start_sub_header();
			$dbg->add_sub_column(array('label' => 'Venue 1', 'start' => 4, 'cols' => 5));
			$dbg->add_sub_column(array('label' => 'Venue 2', 'start' => 9, 'cols' => 5));
			$dbg->end_sub_header();
			$dbg->end_header_section();
			$sql = "SELECT eg.*, e.* FROM events e LEFT OUTER JOIN events_guests eg ON (e.event_id = eg.event_id AND eg.guest_id = ".nz($_GET['parm1'], '0').") ".
					"WHERE ".$dbg->search_spec()."  ".$_GET['parm2']." ".$_GET['parm3']." ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row();
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->event_id.'" >'.$row->event_name.'</a>');
					$dbg->add_cell(date('m/d/Y', strtotime($row->event_date_time)));
					$dbg->add_cell(date('g:i A', strtotime($row->event_date_time)));
					$dbg->add_cell('<input id="rsvp_1_'.$row->event_id.'" type="checkbox" '.(($row->cancel_1 == 1) ? ' disabled ' : '').' '.bool_to_check($row->rsvp_1).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'rsvp_1\', this);" />');
					$dbg->add_cell('<input id="conf_1_'.$row->event_id.'" type="checkbox" '.(($row->rsvp_1 != 1) ? ' disabled ' : '').' '.bool_to_check($row->conf_1).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'conf_1\', this);" />');
					$dbg->add_cell('<input id="cancel_1_'.$row->event_id.'" type="checkbox" '.(($row->rsvp_1 != 1 && $row->cancel_1 != 1) ? ' disabled ' : '').' '.bool_to_check($row->cancel_1).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'cancel_1\', this);" />');
					$dbg->add_cell('<input id="attended_1_'.$row->event_id.'" type="checkbox" '.(($row->rsvp_1 != 1) ? ' disabled ' : '').' '.bool_to_check($row->attended_1).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'attended_1\', this);" />');
					$dbg->add_cell('<input id="wait_1_'.$row->event_id.'" type="checkbox" '.bool_to_check($row->wait_1).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'wait_1\', this);" />');
					$dbg->add_cell('<input id="rsvp_2_'.$row->event_id.'" type="checkbox" '.(($row->cancel_2 == 1) ? ' disabled ' : '').' '.bool_to_check($row->rsvp_2).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'rsvp_2\', this);" />');
					$dbg->add_cell('<input id="conf_2_'.$row->event_id.'" type="checkbox" '.(($row->rsvp_2 != 1) ? ' disabled ' : '').' '.bool_to_check($row->conf_2).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'conf_2\', this);" />');
					$dbg->add_cell('<input id="cancel_2_'.$row->event_id.'" type="checkbox" '.(($row->rsvp_2 != 1 && $row->cancel_2 != 1) ? ' disabled ' : '').' '.bool_to_check($row->cancel_2).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'cancel_2\', this);" />');
					$dbg->add_cell('<input id="attended_2_'.$row->event_id.'" type="checkbox" '.(($row->rsvp_2 != 1) ? ' disabled ' : '').' '.bool_to_check($row->attended_2).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'attended_2\', this);" />');
					$dbg->add_cell('<input id="wait_2_'.$row->event_id.'" type="checkbox" '.bool_to_check($row->wait_2).' value="1" onchange="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'wait_2\', this);" />');
					$dbg->add_cell('<input id="nbr_of_guests_'.$row->event_id.'" type="text" maxlen="3" '.(($row->rsvp_1 != 1 && $row->rsvp_2 != 1 && $row->wait_1 != 1 && $row->wait_2 != 1) ? ' disabled ' : '').' value="'.$row->nbr_of_guests.'" onblur="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'nbr_of_guests\', this);" />');
					$dbg->add_cell('<input id="guest_name_'.$row->event_id.'" type="text" maxlen="99" '.(($row->rsvp_1 != 1 && $row->rsvp_2 != 1 && $row->wait_1 != 1 && $row->wait_2 != 1 || $row->nbr_of_guests <= 1) ? ' disabled ' : '').' value="'.$row->guest_name.'" onblur="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'guest_name\', this);" />');
					$dbg->add_cell('<input id="invitor_'.$row->event_id.'" type="text" maxlen="50" '.(($row->rsvp_1 != 1 && $row->rsvp_2 != 1 && $row->wait_1 != 1 && $row->wait_2 != 1) ? ' disabled ' : '').' value="'.$row->invitor.'" onblur="guest_event_update(\''.trim($_GET['parm1']).'\', \''.$row->event_id.'\', \'invitor\', this);" />');
					$dbg->end_row();
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded, 'extra_data'=> ''));
			return;
			break;
		case 'delete' :
			return;
			break;
	endswitch;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit