403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/wwwdevplanner/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/wwwdevplanner/mod/budget.php
<?php include('_mod_security.php'); ?>
<?php
	$sql_sub = "SELECT v.category_id, v.id, v.vendor_name, vpr.venue, vpr.total_cost AS proposed_amt, SUM(IF(vp.paid_amt IS NULL, 0, vp.paid_amt)) AS actual_amt FROM ".
				"vendors v INNER JOIN vendor_proposals vpr ON (v.id = vpr.vendor_id) LEFT OUTER JOIN vendor_payments vp ON (vpr.id = vp.proposal_id) ".
				"WHERE vpr.hired = 1 AND v.user_id = ".$_SESSION['user_id']."  AND v.event_id = ".$_SESSION['active_event']." ".
				"GROUP BY vpr.venue, v.category_id, v.id, v.vendor_name, vpr.total_cost ";
	$sql = "SELECT b.venue, b.id, vc.description, b.budget_amt, b.comment, vnd.id AS vendor_id, vnd.vendor_name, SUM(vnd.proposed_amt) AS proposed_amt, SUM(vnd.actual_amt) AS paid_amt, (SUM(vnd.proposed_amt) - SUM(vnd.actual_amt)) AS variance_amt FROM budget b ".
			"INNER JOIN vendor_categories vc ON (b.category_id = vc.id) ".
			"LEFT OUTER JOIN (".$sql_sub." ) vnd on (vc.id = vnd.category_id AND b.venue = vnd.venue) ".
			"WHERE b.user_id = ".$_SESSION['user_id']."  AND b.event_id = ".$_SESSION['active_event']." ";
	$search_parm = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['strSearch']));
	if ($search_parm != '') :
		$sql = $sql." AND ".search_sql($_POST['strSearch'],'vc.description,vnd.vendor_name,b.comment')." ";
	endif;
	$sql = $sql." GROUP BY b.venue, vc.description, b.id, b.budget_amt, b.comment, vnd.id, vnd.vendor_name "." ORDER BY b.venue ASC, vc.description ASC, vnd.vendor_name ASC";
	//echo " ===== ".$sql." ==== ";
	$result = mysqli_query($GLOBALS['con'], $sql);
	$xls_sql = "SELECT venue_decode(b.venue,".$_SESSION['active_event'].",".$_SESSION['user_id'].") AS event_name, vc.description, b.budget_amt, b.comment, vnd.vendor_name, SUM(vnd.proposed_amt) AS proposed_amt, SUM(vnd.actual_amt) AS paid_amt, (SUM(vnd.proposed_amt) - SUM(vnd.actual_amt)) AS variance_amt FROM budget b ".
			"INNER JOIN vendor_categories vc ON (b.category_id = vc.id) ".
			"LEFT OUTER JOIN (".$sql_sub." ) vnd on (vc.id = vnd.category_id AND b.venue = vnd.venue) ".
			"WHERE b.user_id = ".$_SESSION['user_id']."  AND b.event_id = ".$_SESSION['active_event']." ".
			"GROUP BY event_name, vc.description, b.id, b.budget_amt, b.comment, vnd.id, vnd.vendor_name "." ORDER BY b.venue ASC, vc.description ASC, vnd.vendor_name ASC";
	$ix_list = "budget";
	$ix_form = "budget_form";
?>
<script>
	// ****** Prepare popup form settings *****
	var win_page = 'page_form.php';
	var win_width = 600;
	var win_height = 400;
	var print_section = 'div_db_grid';
</script>

<h1>Budget</h1>
<?php get_notes(); ?>
<?php get_help_guide('help_budget'); ?>
<?php include('mod/_db_navigator_bar.php'); ?>

<div class="db-grid" id="div_db_grid">

<table class="dbgrid" align="center" cellpadding="0" cellspacing="2" border="0" >
	<thead>
		<tr>
			<td width="55" align="center" class="data-grid-label">
				Event
			</td>
			<td width="55" align="center" class="data-grid-label">
				Category
			</td>
			<td width="275" align="center" class="data-grid-label">
				Vendor
			</td>
			<td width="75" align="center" class="data-grid-label">
				Budget Amt.
			</td>
			<td width="75" align="center" class="data-grid-label">
				Proposed Amt.
			</td>
			<td width="75" align="center" class="data-grid-label">
				Paid Amt.
			</td>
			<td width="75" align="center" class="data-grid-label">
				Balance Due
			</td>
			<td width="75" align="center" class="data-grid-label">
				Delete
			</td>
		</tr>
	</thead>
	<tbody>
		<?php
			$total_budget_amt = 0;
			$total_proposed_amt = 0;
			$total_paid_amt = 0;
			$total_venue_budget_amt = 0;
			$total_venue_proposed_amt = 0;
			$total_venue_paid_amt = 0;
			$total_cat_budget_amt = 0;
			$total_cat_proposed_amt = 0;
			$total_cat_paid_amt = 0;
			$hold_venue = '';
			$hold_category = '';
			$first_venue = true;
			$first_cat = true;
			while($row = mysqli_fetch_object($result)) :
				if ($row->venue != $hold_venue) :
					if ($first_venue) :
						$first_venue = false;
					else :
						print_total_category($total_cat_budget_amt, $total_cat_proposed_amt, $total_cat_paid_amt, $hold_category);
						print_total_venue($total_venue_budget_amt, $total_venue_proposed_amt, $total_venue_paid_amt, $hold_venue);
					endif;
		?>
					<tr>
						<td colspan="8" class="data-grid-var">
							<?php echo venue_decode($row->venue); ?>
						</td>
					</tr>
		<?php
					$hold_venue = $row->venue;
					$total_venue_budget_amt = 0;
					$total_venue_proposed_amt = 0;
					$total_venue_paid_amt = 0;
					$total_cat_budget_amt = 0;
					$total_cat_proposed_amt = 0;
					$total_cat_paid_amt = 0;
					$hold_category = '';
					$first_cat = true;
				endif;
				if ($hold_category != $row->description) :
					if ($first_cat) :
						$first_cat = false;
					else :
						print_total_category($total_cat_budget_amt, $total_cat_proposed_amt, $total_cat_paid_amt, $hold_category);
					endif;
					$total_cat_budget_amt = 0;
					$total_cat_proposed_amt = 0;
					$total_cat_paid_amt = 0;
					$hold_category = $row->description;
					$total_budget_amt = $total_budget_amt + $row->budget_amt;
					$total_cat_budget_amt = $total_cat_budget_amt + $row->budget_amt;
					$total_venue_budget_amt = $total_venue_budget_amt + $row->budget_amt;
		?>
					<tr>
						<td class="data-grid-var">&nbsp;
						</td>
						<td colspan="2" class="data-grid-var" >
							<a href="index.php?IX=<?php echo $ix_form; ?>&id=<?php echo $row->id; ?>" style="font-style:italic;" >
								<?php echo $row->description; ?>
							</a>
						</td>
						<td class="data-grid-var" align="right">
							<?php echo number_format($row->budget_amt,2); ?>
						</td>
						<td colspan="3" class="data-grid-var">
							<?php //echo $row->comment; ?>
						</td>
						<td class="data-grid-var" align="center" >
							<a href="javascript:confirmDelete('Are you sure?', 'budget_delete&id=<?php echo $row->id; ?>');"><img src="img/delete_icon.gif" style="border:none;"  /></a>
						</td>
					</tr>
		<?php
				endif;
				if (!empty($row->vendor_name)) :
					$total_proposed_amt = $total_proposed_amt + $row->proposed_amt;
					$total_paid_amt = $total_paid_amt + $row->paid_amt;
					$total_cat_proposed_amt = $total_cat_proposed_amt + $row->proposed_amt;
					$total_cat_paid_amt = $total_cat_paid_amt + $row->paid_amt;
					$total_venue_proposed_amt = $total_venue_proposed_amt + $row->proposed_amt;
					$total_venue_paid_amt = $total_venue_paid_amt + $row->paid_amt;
		?>
					<tr>
						<td colspan="2" class="data-grid-var">&nbsp;
						</td>
						<td colspan="2" class="data-grid-var" >
							<a href="index.php?IX=vendor_form&ref=budget&id=<?php echo $row->vendor_id; ?>" >
								<?php echo $row->vendor_name; ?>
							</a>
						</td>
						<td class="data-grid-var" align="right">
							<?php echo number_format($row->proposed_amt,2); ?>
						</td>
						<td class="data-grid-var" align="right">
							<?php echo number_format($row->paid_amt,2); ?>
						</td>
						<td class="data-grid-var" align="right">
							<?php echo number_format($row->variance_amt,2); ?>
						</td>
						<td class="data-grid-var" align="center" >&nbsp;
						</td>
					</tr>
		<?php
				endif;
			endwhile;
			print_total_category($total_cat_budget_amt, $total_cat_proposed_amt, $total_cat_paid_amt, $hold_category);
			print_total_venue($total_venue_budget_amt, $total_venue_proposed_amt, $total_venue_paid_amt, $hold_venue);
		?>
		<tr>
			<td colspan="3" align="left" class="data-grid-var" style="font-weight:bold;">
				Totals for Bar/Bat Mitzvah:
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_budget_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_proposed_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_paid_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_proposed_amt - $total_paid_amt,2); ?>
			</td>
			<td align="center" class="data-grid-var">&nbsp;
			</td>
		</tr>
	</tbody>
</table>

</div>

<?php
	function print_total_category($total_cat_budget_amt, $total_cat_proposed_amt, $total_cat_paid_amt, $category)
	{
?>
		<tr>
			<td align="center" class="data-grid-var">&nbsp;
			</td>
			<td colspan="2" align="left" class="data-grid-var" style="font-weight:bold; font-style:italic;">
				Totals for <?php echo $category; ?>:
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold; font-style:italic;;">
				<?php echo number_format($total_cat_budget_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold; font-style:italic;;">
				<?php echo number_format($total_cat_proposed_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold; font-style:italic;;">
				<?php echo number_format($total_cat_paid_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold; font-style:italic;;">
				<?php echo number_format($total_cat_proposed_amt - $total_cat_paid_amt,2); ?>
			</td>
			<td align="center" class="data-grid-var">&nbsp;
			</td>
		</tr>
<?php
	}
	
	function print_total_venue($total_venue_budget_amt, $total_venue_proposed_amt, $total_venue_paid_amt, $venue)
	{
?>
		<tr>
			<td colspan="8" style="font-size:0px; border-top:0px solid #5c5c5c; padding-top:3px; padding-bottom:3px;">&nbsp;
				<hr />
			</td>
		</tr>
		<tr>
			<td colspan="3" align="left" class="data-grid-var" style="font-weight:bold;">
				Totals for <?php echo venue_decode($venue); ?>:
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_venue_budget_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_venue_proposed_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_venue_paid_amt,2); ?>
			</td>
			<td align="right" class="data-grid-var" style="font-weight:bold;">
				<?php echo number_format($total_venue_proposed_amt - $total_venue_paid_amt,2); ?>
			</td>
			<td align="center" class="data-grid-var">&nbsp;
			</td>
		</tr>
		<tr>
			<td colspan="8" style="font-size:0px; border-top:0px solid #5c5c5c; padding-top:3px; padding-bottom:3px;">&nbsp;
				<hr />
			</td>
		</tr>
<?php
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit