403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-prod/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-prod/public_html/mod/hotel_form.php
<?php include('_mod_security.php'); ?>
<?php
	form_prep('hotels', 'basic_info');
	if ($_POST['ajax_event_submitted'] == '1') :
		form_reload_check();
		if (isset($_POST['active_tab'])) :
			$active_tab = $_POST['active_tab'];
		else :
			$active_tab = 'basic_info';
		endif;
		$ar_err = array();
		form_validate('category', 'string', true, 'additional_info');
		form_validate('nbr_of_rooms', 'int', false, 'additional_info');
		form_validate('high_room_rate', 'float', false, 'additional_info');
		form_validate('low_room_rate', 'float', false, 'additional_info');
		form_validate('hotel_name', 'string', true);
		form_validate('street', 'string', true);
		form_validate('city', 'string', true);
		form_validate('state', 'string', true);
		form_validate('zip', 'string', true);
		form_validate('route_id', 'int', true);
		form_validate('sequence_nbr', 'int', true);
		form_validate('neighborhood_id', 'int', true);
		if (!$err_flag) :
			$set = "hotel_name = ".$db->quote(trim($_POST['hotel_name'])).", ".
					"bldg_nbr = ".$db->quote(trim($_POST['bldg_nbr'])).", ".
					"street = ".$db->quote(trim($_POST['street'])).", ".
					"cross_street = ".$db->quote(trim($_POST['cross_street'])).", ".
					"city = ".$db->quote(trim($_POST['city'])).", ".
					"state = ".$db->quote(trim($_POST['state'])).", ".
					"zip = ".$db->quote(trim($_POST['zip'])).", ".
					"delivery_address = ".$db->quote(trim($_POST['delivery_address'])).", ".
					"route_id = ".nz($_POST['route_id'], '0').", ".
					"sequence_nbr = ".nz(trim($_POST['sequence_nbr']),'0').", ".
					"neighborhood_id = ".nz(trim($_POST['neighborhood_id']), '0').", ".
					"main_phone = ".$db->quote(trim($_POST['main_phone'])).", ".
					"fax = ".$db->quote(trim($_POST['fax'])).", ".
					"concierge_phone = ".$db->quote(trim($_POST['concierge_phone'])).", ".
					"hotel_retail_visitor_center = ".$db->quote(trim($_POST['hotel_retail_visitor_center'])).", ".
					"nbr_of_rooms = ".nz(trim($_POST['nbr_of_rooms']),'0').", ".
					"high_room_rate = ".nzfloat(trim($_POST['high_room_rate']),'0').", ".
					"low_room_rate = ".nzfloat(trim($_POST['low_room_rate']),'0').", ".
					"category = ".$db->quote(trim($_POST['category'])).", ".
					"concierge_service = ".$db->quote(trim($_POST['concierge_service'])).", ".
					"cgs = ".nz(trim($_POST['cgs']),'0').", ".
					"ce = ".nz(trim($_POST['ce']),'0').", ".
					"status = ".nz(trim($_POST['status']),'0').", ".
					"comments = ".$db->quote(trim($_POST['comments'])).", ".
					sql_set_update();
			if ($action == 'Edit') :
				$sql = "UPDATE hotels set ".$set.
					"WHERE hotel_id = ".nz(trim($_REQUEST['id']), '0')." ";
				$db->query($sql) or die('Database Error!');
				//echo '==='.$sql.'===';
				post_set_update();
			else :
				if ($action == 'Add New') :
					$sql = "INSERT INTO hotels SET ".
						sql_set_create().
						$set;
					//echo '==='.$sql.'===';
					$db->query($sql) or die('Database Error!');
					$_REQUEST['id'] = last_id();
					$_POST['hotel_id'] = $_REQUEST['id'];
					post_set_create_update();
				endif;
			endif;
			$form_message = "Saved sucessfully!";
			form_uid_reset();
			if ($_POST['xsubmit'] == 'Save & Close') :
				echo "<SCRIPT>";
				//echo "window.location.href = 'index.php?IX=".$_REQUEST['ref']."'";
				echo "appstack_pop()";
				echo "</SCRIPT>";
			endif;
			if ($_POST['xsubmit'] == 'Save & New') :
				echo "<SCRIPT>";
				echo "window.location.href = 'index.php?IX=hotel_form&ref=".urlencode($_REQUEST['ref'])."&neighborhood_id=".$_GET['neighborhood_id']."'";
				echo "</SCRIPT>";
			endif;
		else :
			$active_tab = $err_tab;
			$form_message = "Errors found!";
		endif;
	else:
		if ($action == 'Edit') :
			$sql = "SELECT * FROM hotels WHERE hotel_id = ".nz(trim($_REQUEST['id']), '0')." ";
			$result = $db->query($sql) or die('Database Error!');
			if ($result->rowCount() > 0) :
				$row = $result->fetch(PDO::FETCH_OBJ);
				$_POST['hotel_id'] = $row->hotel_id;
				$_POST['hotel_name'] = $row->hotel_name;
				$_POST['bldg_nbr'] = $row->bldg_nbr;
				$_POST['street'] = $row->street;
				$_POST['cross_street'] = $row->cross_street;
				$_POST['city'] = $row->city;
				$_POST['state'] = $row->state;
				$_POST['zip'] = $row->zip;
				$_POST['delivery_address'] = $row->delivery_address;
				$_POST['route_id'] = $row->route_id;
				$_POST['sequence_nbr'] = $row->sequence_nbr;
				$_POST['neighborhood_id'] = $row->neighborhood_id;
				$_POST['main_phone'] = $row->main_phone;
				$_POST['fax'] = $row->fax;
				$_POST['concierge_phone'] = $row->concierge_phone;
				$_POST['hotel_retail_visitor_center'] = $row->hotel_retail_visitor_center;
				$_POST['nbr_of_rooms'] = $row->nbr_of_rooms;
				$_POST['high_room_rate'] = $row->high_room_rate;
				$_POST['low_room_rate'] = $row->low_room_rate;
				$_POST['category'] = $row->category;
				$_POST['concierge_service'] = $row->concierge_service;
				$_POST['cgs'] = $row->cgs;
				$_POST['ce'] = $row->ce;
				$_POST['status'] = $row->status;
				$_POST['comments'] = $row->comments;
				post_set_load_create_update();
			else :
				echo form_fatal_error('Invalid Operation!');
				return;
			endif;
		else :
			if (!empty($_REQUEST['neighborhood_id'])) :
				$_POST['neighborhood_id'] = $_GET['neighborhood_id'];
			endif;
			if (!empty($_REQUEST['route_id'])) :
				$_POST['route_id'] = $_GET['route_id'];
			endif;
			$_POST['status'] = 1;
		endif;
	endif;
	
?>

<script>
	var active_page = '<?php echo $_REQUEST['IX']; ?>';
	var active_tab = '';
	
	update_header = function()
	{
		if ($("#hotel_name").val() > "" )
		{
			$("#header_repeater").text(" - " + $("#hotel_name").val());
		}
	}
	
	populate_neighborhood = function()
	{
		$.ajax({
			url: "ajax.php?call=hotel_ajax&function=get_neighborhood&zip=" + $('#zip').val(),
			cache: false,
			dataType: "json",
			headers: {
				"Accept": "application/json"
			},
			success: function(json) {
				if (json.neighborhood_id != 0)
				{
					$('#neighborhood_id').val(json.neighborhood_id);
				}
			}
			 ,error: function (request, status, error) { alert(status + ", " + error); }
		})
	}
	
	$(document).ready(function()	
		{
			switch_tab('<?php echo $active_tab; ?>');
			update_header();
			$(':input:not(.search)').change(function() {sheet_dirty = true; } );
			//dTable['db_grid_contacts'].order( [ 1, 'asc' ], [ 2, 'asc' ] ).draw();
			//dTable['db_grid_concierges'].order( [ 1, 'asc' ], [ 2, 'asc' ] ).draw();
		}
	)
</script>

<h1>Hotel - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php echo form_message($form_message); ?>

<form style="" name="frm_hotel" id="frm_hotel" method="post" action="">
	<input name="ajax_event_submitted" type="hidden" value="1" />
	<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
	<input name="active_tab" id="active_tab" type="hidden" value="basic_info" />
	<?php form_button_strip('top'); ?>
	<div class="tab_strip">
		<?php
			form_tab_header('basic_info', 'Basic Info', '');
			form_tab_header('additional_info', 'Additional Info', '');
			if (!empty($_REQUEST['id'])) :
				form_tab_header('contacts', 'Contacts', 'admin,eventmgr,gte');
				form_tab_header('concierges', 'Concierges', 'admin,eventmgr,gte');
				form_tab_header('products', 'Products', 'admin,gte');
				form_tab_header('deliveries', 'Deliveries', 'admin,distributor,driver,gte');
				form_tab_header('verifications', 'Verifications', 'admin,verifier,gte');
			endif;
		?>
	</div>
	<div class="cleardiv">
		&nbsp;
	</div>
	<div class="tab_content" id="tab_content_basic_info">
		<div class="form_header">
			Basic Info
		</div>
		<div class="input_column">
			<?php
				form_field('hotel_id', 'text', 10, 0, false, false, true, '', '', 'hotel_id', 'Hotel ID');
				form_field('hotel_name', 'text', 75, 0, true, false, false, '', '', 'hotel_name', 'Hotel Name', array(), '', 'update_header();');
				form_field('bldg_nbr', 'text', 50, 0, false, false, false, '', '', 'bldg_nbr', 'BLDG #');
				form_field('street', 'text', 50, 0, true, false, false, '', '', 'street', 'Street');
				form_field('cross_street', 'text', 50, 0, false, false, false, '', '', 'cross_street', 'Cross Street');
				form_field('city', 'text', 50, 0, true, false, false, '', '', 'city', 'City');
				form_field('state', 'text', 50, 0, true, false, false, '', '', 'state', 'State');
				form_field('zip', 'text', 10, 0, true, false, false, '', '', 'zip', 'Zip');
			?>
		</div>
		<div class="input_column">
			<?php
				form_field('delivery_address', 'text', 100, 0, false, false, false, '', '', 'delivery_address', 'Delivery Address');
				$sql = "SELECT route_id, CONCAT(route_code, ' - ', route) FROM routes ORDER BY route_code ";
				$result = $db->query($sql) or die('Database Error!');
				$ar_routes = $result->fetchAll(PDO::FETCH_KEY_PAIR);
				form_field('route_id', 'select', 50, 0, true, false, false, '', '', 'route_id', 'Route', $ar_routes);
				form_field('sequence_nbr', 'text', 6, 0, true, false, false, '', '', 'sequence_nbr', 'Sequence #');
				$sql = "SELECT neighborhood_id, neighborhood_name FROM neighborhoods ORDER BY neighborhood_name ";
				$result = $db->query($sql) or die('Database Error!');
				$ar_neighborhoods = $result->fetchAll(PDO::FETCH_KEY_PAIR);
				form_field('neighborhood_id', 'select', 50, 0, true, false, false, '', '', 'neighborhood_id', 'Neighborhood', $ar_neighborhoods);
				form_field('main_phone', 'text', 50, 0, false, false, false, '', '', 'main_phone', 'Main Phone');
				form_field('fax', 'text', 50, 0, false, false, false, '', '', 'fax', 'Fax');
				form_field('concierge_phone', 'text', 50, 0, false, false, false, '', '', 'concierge_phone', 'Concierge Phone');
				form_field('hotel_retail_visitor_center', 'select', 50, 0, false, false, false, '', '', 'hotel_retail_visitor_center', 'Hotel/Retail/Visitor Center', APP_HOTEL_RETAIL_VISITOR_CTR);
			?>
		</div>
		<div class="input_column">
			<?php
				$ar_status = array('1'=>'Active', '0'=>'Inactive', '2'=>'Suspend', '3'=>'Name Change', '4'=>'Future', );
				form_field('status', 'radiogroup', 50, 0, false, false, false, '', '', 'status', 'Status', $ar_status);
			?>
		</div>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_additional_info">
		<div class="form_header">
			Additional Info
		</div>
		<div class="input_column">
			<?php
				form_field('nbr_of_rooms', 'text', 5, 0, false, false, false, '', '', 'nbr_of_rooms', '# of Rooms');
				form_field('high_room_rate', 'text', 50, 0, false, false, false, '', '', 'high_room_rate', 'High Room Rate $');
				form_field('low_room_rate', 'text', 50, 0, false, false, false, '', '', 'low_room_rate', 'Low Room Rate $');
				form_field('category', 'text', 50, 0, true, false, false, '', '', 'category', 'Category');
				form_field('concierge_service', 'select', 50, 0, false, false, false, '', '', 'concierge_service', 'Concierge Service', APP_CONCIERGE_SERVICES);
			?>
		</div>
		<div class="input_column">
			<?php
				$sql = "SELECT COUNT(concierge_id) AS counter FROM concierges WHERE hotel_id = ".nz($_REQUEST['id'], '0')." AND nycahc_member = 1 ";
				$result_association = $db->query($sql) or die('Database Error!');
				$row_association = $result_association->fetch(PDO::FETCH_OBJ);
				if ($row_association->counter > 0) :
					$_POST['association_hotel'] = 1;
				endif;
				form_field('association_hotel', 'checkbox', 50, 0, false, true, true, '', '', '', 'Association Hotel');
				form_field('comments', 'textarea', 70, 9, false, false, false, '', '', 'comments', 'Comments');
			?>
		</div>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_contacts">
		<div class="form_header">
			Contacts
		</div>
		<?php
			$ix_form = 'contact_form&hotel_id='.trim(nz($_REQUEST['id'], '-1'));
			db_navigator_bar(array('table_id'=>'db_grid_contacts', 'form'=>$ix_form, 'print_section'=>'db_grid_contacts', 'call'=>'contacts_ajax', 'sort_col'=>'2', 'sort_order'=>'0', 'subtab'=>'true', 'parm1'=>" AND c.hotel_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid' ));
		?>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_concierges">
		<div class="form_header">
			Concierges
		</div>
		<?php
			$ix_form = 'concierge_form&hotel_id='.trim(nz($_REQUEST['id'], '-1'));
			db_navigator_bar(array('table_id'=>'db_grid_concierges', 'form'=>$ix_form, 'print_section'=>'db_grid_concierges', 'call'=>'concierges_ajax', 'sort_col'=>'7', 'sort_order'=>'1', 'subtab'=>'true', 'parm1'=>" AND c.hotel_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid', 'filter_cols'=>'0,0,0,0,0,0,0,0,0,0,1,0' ));
		?>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_products">
		<div class="form_header">
			Products
		</div>
		<?php
			$ix_form = 'product_form&hotel_id='.trim(nz($_REQUEST['id'], '-1'));
			db_navigator_bar(array('table_id'=>'db_grid_products', 'form'=>$ix_form, 'print_section'=>'db_grid_products', 'call'=>'products_ajax', 'sort_col'=>'1', 'sort_order'=>'0', 'subtab'=>'true', 'parm1'=>" AND hp.hotel_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid' ));
		?>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_deliveries">
		<div class="form_header">
			Deliveries
		</div>
		<?php
			$ix_form = 'delivery_form&hotel_id='.trim(nz($_REQUEST['id'], '-1'));
			db_navigator_bar(array('table_id'=>'db_grid_deliveries', 'form'=>$ix_form, 'print_section'=>'db_grid_deliveries', 'call'=>'deliveries_ajax', 'sort_col'=>'1', 'sort_order'=>'1', 'subtab'=>'true', 'parm1'=>" AND d.hotel_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid' ));
		?>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<div class="tab_content" id="tab_content_verifications">
		<div class="form_header">
			Verifications
		</div>
		<?php
			$ix_form = 'verification_form&hotel_id='.trim(nz($_REQUEST['id'], '-1'));
			db_navigator_bar(array('table_id'=>'db_grid_verifications', 'form'=>$ix_form, 'print_section'=>'db_grid_verifications', 'call'=>'verifications_ajax', 'sort_col'=>'1', 'sort_order'=>'1', 'subtab'=>'true', 'parm1'=>" AND v.hotel_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid' ));
		?>
	</div>
	<!-- -------------------------------------------------------------------------------------------------------------- -->
	<?php form_button_strip('bottom'); ?>
</form>

Youez - 2016 - github.com/yon3zu
LinuXploit