| Server IP : 104.21.21.239 / Your IP : 216.73.216.68 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/planner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
//header('Content-Type: application/json');
//var_dump($_GET);
$sql = '';
switch ($_GET['func']):
case 'enable' :
$sql = "SELECT COUNT(f.id) AS total_count ".
"FROM guests_favors f INNER JOIN guests g ON (f.guest_id = g.id AND f.user_id = g.user_id AND f.event_id = g.event_id) WHERE g.rsvp_".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['venue']))." = 1 AND f.favor_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['fid']))." AND f.venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['venue']))."' AND f.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND f.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ";
break;
case 'size' :
$sql = "SELECT COUNT(f.id) AS total_count ".
"FROM guests_favors f INNER JOIN guests g ON (f.guest_id = g.id AND f.user_id = g.user_id AND f.event_id = g.event_id) WHERE g.rsvp_".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['venue']))." = 1 AND f.favor_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['fid']))." AND f.size ='".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['value']))."' AND f.venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['venue']))."' AND f.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND f.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ";
break;
case 'gender' :
$sql = "SELECT COUNT(f.id) AS total_count ".
"FROM guests_favors f INNER JOIN guests g ON (f.guest_id = g.id AND f.user_id = g.user_id AND f.event_id = g.event_id) WHERE g.rsvp_".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['venue']))." = 1 AND f.favor_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['fid']))." AND f.gender ='".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['value']))."' AND f.venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['venue']))."' AND f.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND f.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ";
break;
endswitch;
//echo '==='.$sql.'===';
//echo json_encode(array('sql' => $sql));
//return;
$result = mysqli_query($GLOBALS['con'], $sql);
if (mysqli_num_rows($result) > 0) :
$row = mysqli_fetch_object($result);
echo json_encode(array('total_count' => $row->total_count));
endif;
?>