| Server IP : 172.67.201.108 / Your IP : 216.73.217.99 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/wwwdevplanner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
session_start();
//var_dump($_GET);
$current_venue = mysqli_real_escape_string($GLOBALS['con'], $_GET['venue']);
switch ($_GET['field']) :
case 'food' :
$sql = "UPDATE guests SET food_".$current_venue." = '".mysqli_real_escape_string($GLOBALS['con'], $_GET['text'])."' ".
" WHERE id = ".nz($_GET['gid'], '0')." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
case 'food_comment' :
$sql = "UPDATE guests SET food_".$current_venue."_comment = '".mysqli_real_escape_string($GLOBALS['con'], $_GET['text'])."' ".
" WHERE id = ".nz($_GET['gid'], '0')." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
break;
endswitch;
?>