| Server IP : 104.21.21.239 / Your IP : 216.73.216.11 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/hotel-dev/public_html/mod/ |
Upload File : |
<?php
use classes\lib\CGRewards;
include('_mod_security.php');
session_start();
try
{
$db->query("BEGIN");
if ($_GET['function'] == 'concierge') :
//$sql = "DELETE FROM events_concierges WHERE event_id = ".nz(trim($_GET['eid']),'0')." AND concierge_id = ".nz(trim($_GET['cid']),'0')." ";
//$db->query($sql);
if (isset($_GET['rsvp_1']) || isset($_GET['conf_1']) || isset($_GET['cancel_1']) || isset($_GET['attended_1']) || isset($_GET['wait_1']) ||
isset($_GET['rsvp_2']) || isset($_GET['conf_2']) || isset($_GET['cancel_2']) || isset($_GET['attended_2']) || isset($_GET['wait_2']) ) :
$set = "rsvp_1 = ".nz(trim($_GET['rsvp_1']),'0').", ".
"conf_1 = ".nz(trim($_GET['conf_1']),'0').", ".
"cancel_1 = ".nz(trim($_GET['cancel_1']),'0').", ".
"attended_1 = ".nz(trim($_GET['attended_1']),'0').", ".
"wait_1 = ".nz(trim($_GET['wait_1']),'0').", ".
"rsvp_2 = ".nz(trim($_GET['rsvp_2']),'0').", ".
"conf_2 = ".nz(trim($_GET['conf_2']),'0').", ".
"cancel_2 = ".nz(trim($_GET['cancel_2']),'0').", ".
"attended_2 = ".nz(trim($_GET['attended_2']),'0').", ".
"wait_2 = ".nz(trim($_GET['wait_2']),'0').", ".
"nbr_of_guests = ".nz(trim($_GET['nbr_of_guests']),'NULL').", ".
"guest_name = ".$db->quote(trim($_GET['guest_name']))." ";
$sql = "INSERT INTO events_concierges SET ".
"event_id = ".nz(trim($_GET['eid']),'0').", ".
"concierge_id = ".nz(trim($_GET['cid']),'0').", ".
$set.
" ON DUPLICATE KEY UPDATE ".$set;
$db->query($sql);
endif;
$sql = "SELECT SUM(nbr_of_guests) as gsum FROM events_concierges ec WHERE ec.event_id = ".nz(trim($_GET['eid']),'0')." ";
$result = $db->query($sql);
if ($row = $result->fetch(PDO::FETCH_OBJ)) :
echo 'Total Guests: '.number_format($row->gsum, 0, '.', ',');
endif;
elseif ($_GET['function'] == 'guest') :
//$sql = "DELETE FROM events_guests WHERE event_id = ".nz(trim($_GET['eid']),'0')." AND guest_id = ".nz(trim($_GET['gid']),'0')." ";
//$db->query($sql);
if (isset($_GET['rsvp_1']) || isset($_GET['conf_1']) || isset($_GET['cancel_1']) || isset($_GET['attended_1']) || isset($_GET['wait_1']) ||
isset($_GET['rsvp_2']) || isset($_GET['conf_2']) || isset($_GET['cancel_2']) || isset($_GET['attended_2']) || isset($_GET['wait_2']) ) :
$set = "rsvp_1 = ".nz(trim($_GET['rsvp_1']),'0').", ".
"conf_1 = ".nz(trim($_GET['conf_1']),'0').", ".
"cancel_1 = ".nz(trim($_GET['cancel_1']),'0').", ".
"attended_1 = ".nz(trim($_GET['attended_1']),'0').", ".
"wait_1 = ".nz(trim($_GET['wait_1']),'0').", ".
"rsvp_2 = ".nz(trim($_GET['rsvp_2']),'0').", ".
"conf_2 = ".nz(trim($_GET['conf_2']),'0').", ".
"cancel_2 = ".nz(trim($_GET['cancel_2']),'0').", ".
"attended_2 = ".nz(trim($_GET['attended_2']),'0').", ".
"wait_2 = ".nz(trim($_GET['wait_2']),'0').", ".
"invitor = ".$db->quote(trim($_GET['invitor'])).", ".
"nbr_of_guests = ".nz(trim($_GET['nbr_of_guests']),'NULL').", ".
"guest_name = ".$db->quote(trim($_GET['guest_name']))." ";
$sql = "INSERT INTO events_guests SET ".
"event_id = ".nz(trim($_GET['eid']),'0').", ".
"guest_id = ".nz(trim($_GET['gid']),'0').", ".
$set.
" ON DUPLICATE KEY UPDATE ".$set;
$db->query($sql);
endif;
$sql = "SELECT SUM(nbr_of_guests) as gsum FROM events_guests eg WHERE eg.event_id = ".nz(trim($_GET['eid']),'0')." ";
$result = $db->query($sql);
if ($row = $result->fetch(PDO::FETCH_OBJ)) :
echo 'Total Guests: '.number_format($row->gsum, 0, '.', ',');
endif;
elseif ($_GET['function'] == 'apply_cg_rewards') :
CGRewards::apply_rewards_to_event(nz($_GET['event_id'], '0'));
echo json_encode(['status' => 'success']);
endif;
$db->query("COMMIT");
}
catch (Exception $e)
{
echo 'error';
$db->query("ROLLBACK");
}