| Server IP : 104.21.21.239 / Your IP : 216.73.216.25 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/hotel-dev/public_html/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
form_prep('cgr_form', 'basic_info');
if ($_POST['ajax_event_submitted'] == '1') :
form_reload_check();
if (isset($_POST['active_tab'])) :
$active_tab = $_POST['active_tab'];
else :
$active_tab = 'basic_info';
endif;
$ar_err = array();
form_validate('concierge_id', 'int', true);
form_validate('cgr_type_id', 'int', true);
form_validate('points', 'int', true);
if (!$err_flag) :
$set = "concierge_id = ".nz(trim($_POST['concierge_id']),'0').", ".
"event_id = ".nz(trim($_POST['event_id']),'NULL').", ".
"cgr_type_id = ".nz(trim($_POST['cgr_type_id']),'0').", ".
"points = ".nz(trim($_POST['points']),'0').", ".
"comments = ".$db->quote(trim($_POST['comments'])).", ".
sql_set_update();
if ($action == 'Edit') :
$sql = "UPDATE cg_rewards set ".$set.
"WHERE id = ".nz(trim($_REQUEST['id']), '0')." ";
$db->query($sql) or die('Database Error!');
post_set_update();
else :
if ($action == 'Add New') :
$sql = "INSERT INTO cg_rewards SET ".
sql_set_create().
$set;
$db->query($sql) or die('Database Error!');
$_REQUEST['id'] = last_id();
$_POST['id'] = $_REQUEST['id'];
post_set_create_update();
endif;
endif;
$form_message = "Saved sucessfully!";
form_uid_reset();
if ($_POST['xsubmit'] == 'Save & Close') :
echo "<SCRIPT>";
echo "appstack_pop()";
echo "</SCRIPT>";
endif;
if ($_POST['xsubmit'] == 'Save & New') :
echo "<SCRIPT>";
echo "window.location.href = 'index.php?IX=cgr_form&ref=".urlencode($_REQUEST['ref'])."'";
echo "</SCRIPT>";
endif;
else :
$active_tab = $err_tab;
$form_message = "Errors found!";
endif;
else:
if ($action == 'Edit') :
$sql = "SELECT * FROM cg_rewards WHERE id = ".nz(trim($_REQUEST['id']), '0')." ";
$result = $db->query($sql) or die('Database Error!');
if ($result->rowCount() > 0) :
$row = $result->fetch(PDO::FETCH_OBJ);
$_POST['id'] = $row->id;
$_POST['concierge_id'] = $row->concierge_id;
$_POST['event_id'] = $row->event_id;
$_POST['cgr_type_id'] = $row->cgr_type_id;
$_POST['points'] = $row->points;
$_POST['comments'] = $row->comments;
post_set_load_create_update();
else :
echo form_fatal_error('Invalid Operation!');
return;
endif;
else :
if (!empty($_REQUEST['concierge_id'])) :
$_POST['concierge_id'] = $_GET['concierge_id'];
endif;
endif;
endif;
?>
<script>
var active_page = '<?php echo $_REQUEST['IX']; ?>';
var active_tab = '';
update_header = function() {
if ($("#cgr_type_id").val() > "" ) {
$("#header_repeater").text(" - " + $("#cgr_type_id :selected").text());
}
}
function populate_points() {
$("#points").val($('#cgr_type_id :selected').data('value'));
}
$(document).ready(function() {
switch_tab('<?php echo $active_tab; ?>');
update_header();
$(':input:not(.search)').change(function() {sheet_dirty = true; } );
});
</script>
<h1>CG Reward - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php echo form_message($form_message); ?>
<form name="frm_cgr" id="frm_cgr" method="post" action="">
<input name="ajax_event_submitted" type="hidden" value="1" />
<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
<input name="active_tab" id="active_tab" type="hidden" value="basic_info" />
<?php form_button_strip('top'); ?>
<div class="tab_strip">
<?php
form_tab_header('basic_info', 'Basic Info', 'admin,eventmgr');
?>
</div>
<div class="cleardiv">
</div>
<div class="tab_content" id="tab_content_basic_info">
<div class="form_header">
Basic Info
</div>
<div class="input_column">
<?php
form_field('id', 'text', 10, 0, false, false, true, '', '', 'id', 'CG Reward ID');
form_field('concierge_id', 'text', 10, 0, false, false, true, '', '', 'concierge_id', 'Concierge ID');
$sql = "SELECT id, cgr_type, points FROM cg_reward_types ORDER BY cgr_type ";
$result = $db->query($sql) or die('Database Error!');
//$ar_cgr_types = $result->fetchAll(PDO::FETCH_KEY_PAIR);
$ar_cgr_types = $result->fetchAll(PDO::FETCH_GROUP);
form_field('cgr_type_id', 'select', 50, 0, true, false, false, '', '', 'cgr_type_id', 'Reward Type', $ar_cgr_types, 'populate_points();', 'update_header();');
form_field('points', 'text', 5, 0, true, false, false, '', '', 'points', 'Points');
$sql = "SELECT event_id, CONCAT(event_name, ' - ', event_date_time) FROM events ORDER BY event_date_time DESC ";
$result = $db->query($sql) or die('Database Error!');
$ar_events = $result->fetchAll(PDO::FETCH_KEY_PAIR);
form_field('event_id', 'select', 50, 0, false, false, false, '', '', 'event_id', 'Event', $ar_events);
form_field('comments', 'text', 100, 0, true, false, false, '', '', 'comments', 'Comments');
?>
</div>
</div>
<!-- -------------------------------------------------------------------------------------------------------------- -->
<?php form_button_strip('bottom'); ?>
</form>