| Server IP : 172.67.201.108 / Your IP : 216.73.216.55 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/wwwdevplanner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
session_start();
switch ($_GET['func']):
case 'received' :
$sql = "UPDATE guests SET ".
"gift_received = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['received'])),'0')." ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'amt' :
$sql = "UPDATE guests SET ".
"gift_amt = ".nzfloat(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['amt'])),'0')." ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'card' :
$sql = "UPDATE guests SET ".
"gift_card = ".nzfloat(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['card'])),'0')." ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'other' :
$sql = "UPDATE guests SET ".
"gift_other = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['other']))."' ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'comment' :
$sql = "UPDATE guests SET ".
"gift_comment = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['comment']))."' ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'thank_you' :
$sql = "UPDATE guests SET ".
"gift_thank_you = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['thank_you'])),'0')." ".
" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
endswitch
?>