| Server IP : 104.21.21.239 / Your IP : 216.73.216.101 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/wwwdevplanner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
session_start();
switch ($_GET['func']):
case 'venue' :
$sql = "UPDATE guests SET ".
"bus_".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['type']))." = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['bus'])),'0')." ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'comment' :
$sql = "UPDATE guests SET ".
"bus_comment = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['comment']))."' ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
endswitch
?>