403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-dev/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-dev/public_html/mod/survey_template_form.php
<?php
	use classes\lib\SurveyEngine;

	include('_mod_security.php');

	form_prep('frm_survey_template', 'basic_info');
	if ($_POST['ajax_event_submitted'] == '1') :
		$config = HTMLPurifier_Config::createDefault();
		$purifier = new HTMLPurifier($config);
		$_POST['default_email_html'] = $purifier->purify($_POST['default_email_html']);
		form_prep_submit();
		form_validate_all();
		if (!$err_flag) :
			try {
				$db->beginTransaction();
				$set = sql_set_update(true) . form_generate_set();
				if ($action == 'Edit') :
					$sql = "UPDATE survey_templates set ".$set.
						"WHERE id = ".nz(trim($_REQUEST['id']), '0')." ";
					$db->query($sql) or die('Database Error!');
					post_set_update();
				else :
					if ($action == 'Add New') :
						$sql = "INSERT INTO survey_templates SET ".
							sql_set_create().
							$set;
						$db->query($sql) or die('Database Error!');
						$_REQUEST['id'] = last_id();
						$_POST['id'] = $_REQUEST['id'];
						post_set_create_update();
					endif;
				endif;
				$db->commit();
			} catch(Exception $e) {
				db_err_rollback($e);
			}
			$form_message = "Saved sucessfully!";
			form_uid_reset();
			if ($_POST['xsubmit'] == 'Save & Close') :
				echo "<SCRIPT>";
				echo "appstack_pop()";
				echo "</SCRIPT>";
			endif;
			if ($_POST['xsubmit'] == 'Save & New') :
				echo "<SCRIPT>";
				echo "window.location.href = 'index.php?IX=survey_template_form&ref=".urlencode($_REQUEST['ref'])."'";
				echo "</SCRIPT>";
			endif;
			if ($_POST['xsubmit'] == 'Copy') :
				$copied_template_id = SurveyEngine::copy_template(nz(trim($_REQUEST['id']), '0'));
				echo "<SCRIPT>";
				echo "window.location.href = 'index.php?IX=survey_template_form&id=".$copied_template_id."'";
				echo "</SCRIPT>";
			endif;
		else :
			$active_tab = $err_tab;
			$form_message = "Errors found!";
		endif;
	else:
		if ($action == 'Edit') :
			$sql = "SELECT * FROM survey_templates WHERE id = ".nz(trim($_REQUEST['id']), '0')." ";
			if (!get_row_to_post($sql)) :
				echo form_fatal_error('Invalid Operation!');
				return;
			endif;
		else :
		endif;
	endif;
	
?>

<script>
	var active_page = '<?php echo $_REQUEST['IX']; ?>';
	var active_tab = '';

	update_header = function()
	{
		if ($("#description").val() > "" ) {
			$("#header_repeater").text(" - " + $("#description").val());
		}
	}
	
	$(document).ready(function() {
		switch_tab('<?php echo $active_tab; ?>');
		update_header();
		$(':input:not(.search)').change(function() {sheet_dirty = true; } );
		editor = $('#default_email_html').trumbowyg({
			removeformatPasted: true,
			btns: ['fontfamily'],
			btns: [
				['viewHTML'],
				['undo', 'redo'], // Only supported in Blink browsers
				['formatting'],
				['strong', 'em', 'del'],
				['superscript', 'subscript'],
				['link'],
				['insertImage'],
				['justifyLeft', 'justifyCenter', 'justifyRight', 'justifyFull'],
				['unorderedList', 'orderedList'],
				['horizontalRule'],
				['removeformat'],
				['fullscreen'],
				['fontfamily'],
			],
		});
	});
</script>

<h1>Survey Template - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php echo form_message($form_message); ?>

<form name="frm_survey_template" id="frm_survey_template" method="post" action="">
	<input name="ajax_event_submitted" type="hidden" value="1" />
	<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
	<input name="active_tab" id="active_tab" type="hidden" value="basic_info" />
	<?php
		form_button_strip('top', [
			'save_as' => ['show' => true, 'caption' => 'Copy', 'js' => "sheet_dirty = false; document.getElementById('xsubmit').value = this.value; this.form.submit();"],
		]);
		form_tab_strip_start();
		form_tab_header('basic_info', 'Basic Info', 'admin,eventmgr');
		if (!empty($_REQUEST['id'])) :
			form_tab_header('questions', 'Questions', 'admin,eventmgr');
		endif;
		form_tab_strip_end();
		//******************************************************************************************
		form_tab_start('basic_info', 'Basic Info');

		form_column_start();
		form_field('id', 'text', 10, 0, false, false, true, '', '', 'id', 'Template ID');
		form_field('description', 'text', 50, 0, true, false, false, '', '', 'description', 'Description', [], '', 'update_header();');
		form_field('default_email_subject', 'text', 150, 0, false, false, false, '', '', 'default_email_subject', 'Default Email Subject');
		form_field(['fname'=>'default_email_reply_name', 'ftype'=>'text', 'fsize'=>100, 'frequired'=>false, 'fdbname'=>'default_email_reply_name', 'flabel'=>'Default Email Reply To Name']);
		form_field(['fname'=>'default_email_reply_address', 'ftype'=>'text', 'datatype'=>'email', 'fsize'=>100, 'frequired'=>false, 'fdbname'=>'default_email_reply_address', 'flabel'=>'Default Email Reply To Address']);
		$sql = "SELECT id, cgr_type, points FROM cg_reward_types ORDER BY cgr_type ";
		$result = $db->query($sql) or die('Database Error!');
		$ar_cgr_types = $result->fetchAll(PDO::FETCH_GROUP);
		form_field('default_cgr_type_id', 'select', 50, 0, false, false, false, '', '', 'default_cgr_type_id', 'Default Reward Type', $ar_cgr_types, );
		form_column_end();

		form_column_start('max-width:750px;');
		form_field(['fname'=>'placeholder', 'ftype'=>'select', 'fsize'=>25, 'frequired'=>false, 'fdbname'=>'', 'flabel'=>'Placeholder - select to insert into HTML below', 'ar_group'=>SurveyEngine::PLACEHOLDERS, 'onchange'=>'insert_text_at_cursor(\'[\' + $(this).val() + \']\', false, \'default_email_html\'); return false;']);
		form_field(['fname'=>'default_email_html', 'ftype'=>'textarea', 'fsize'=>70, 'frows'=>20, 'frequired'=>false, 'fdbname'=>'default_email_html', 'flabel'=>'Default Email HTML (TIP: use SHIFT+ENTER for Carriage Return)']);
		form_column_end();

		form_tab_end();

		if (!empty($_REQUEST['id'])) :
			//******************************************************************************************
			form_tab_start('questions', 'Questions');
			$ix_form = 'survey_template_question_form&survey_template_id='.trim(nz($_REQUEST['id'], '-1'));
			db_navigator_bar(['table_id'=>'db_grid_questions', 'form'=>$ix_form, 'print_section'=>'db_grid_questions', 'call'=>'survey_template_questions_ajax', 'sort_col'=>'3', 'sort_order'=>'0', 'subtab'=>'true', 'parm1'=>" AND stq.survey_template_id = ".nz($_REQUEST['id'], '0')." ", 'func'=>'grid' ]);
			form_tab_end();
		endif;

		form_button_strip('bottom', [
			'save_as' => ['show' => true, 'caption' => 'Copy', 'js' => "sheet_dirty = false; document.getElementById('xsubmit').value = this.value; this.form.submit();"],
		]);
	?>
</form>

<script src="trumbowyg/dist/trumbowyg.min.js?ver=<?php echo filemtime(__DIR__.'/../trumbowyg/dist/trumbowyg.min.js') ?>"></script>
<script src="trumbowyg/dist/plugins/fontfamily/trumbowyg.fontfamily.min.js?ver=<?php echo filemtime(__DIR__.'/../trumbowyg/dist/plugins/fontfamily/trumbowyg.fontfamily.min.js') ?>"></script>

Youez - 2016 - github.com/yon3zu
LinuXploit