403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.217.85
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-dev/public_html/rpt/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-dev/public_html/rpt/event_cancellations.php
<?php
	use classes\lib\CGRewards;

	include('mod/_mod_security.php');

	if (empty($_POST['ecn_guest_type']) || empty($_POST['ecn_venue'])) :
		echo 'Please select Guest Type and Venue!';
		exit();
	endif;
	$criteria = '';
	$filter = '';
	if (!in_array($_POST['ecn_venue'], ['Venue 1', 'Venue 2'])) :
		echo 'Invalid Venue!';
		exit();
	endif;
	$venue = nz(substr($_POST['ecn_venue'], -1), '0');
	$event_id = nz($_GET['eid'], '0');
	if ($_POST['ecn_guest_type'] == 'Concierges') :
		$sql = "
			SELECT 
				ec.concierge_id AS id,
				c.first_name,
				c.last_name,
				(CASE WHEN c.primary_email > ' ' THEN c.primary_email ELSE c.secondary_email END) AS email,
				c.work_phone AS phone,
				h.hotel_id as org_id,
				h.hotel_name AS org
			FROM events_concierges ec
			JOIN concierges c ON (c.concierge_id = ec.concierge_id)
			LEFT JOIN hotels h ON (h.hotel_id = c.hotel_id)
			WHERE ec.event_id = {$event_id}
				AND ec.cancel_{$venue} = 1
			ORDER BY c.first_name, c.last_name
		";
	elseif ($_POST['ecn_guest_type'] == 'Guests') :
		$sql = "
			SELECT 
				eg.guest_id AS id,
				g.first_name,
				g.last_name,
				g.email,
				g.phone,
				NULL as org_id,
				company AS org
			FROM events_guests eg
			JOIN guests g ON (g.guest_id = eg.guest_id)
			WHERE eg.event_id = {$event_id}
				AND eg.cancel_{$venue} = 1
			ORDER BY g.first_name, g.last_name
		";
	else :
		echo 'Invalid Guest Type!';
		exit();
	endif;
	//error_log($sql);
	$result = $db->query($sql) or die('Database Error!');
	$row_count = $result->rowCount();
	if ($row_count <= 0) :
		echo 'No data for report!';
		exit();
	endif;

	$filter .= '<br> Event: ' . lookup_db_field('events', 'event_id', $event_id, 'event_name');
	$filter .= '<br> Guest Type: ' . $_POST['ecn_guest_type'];
	$filter .= '<br> Venue: ' . $_POST['ecn_venue'];
	
	$rpt = get_report_class($_POST['output_format']);
	$rpt->set_report_title('Event Cancellations');
	$rpt->report_start();
	
	$rpt->header_start();
	if (!empty($filter)) :
		$rpt->header_row_start();
		$rpt->header_cell_add('Filters: '.$filter, ['colspan'=>'7', 'class'=>'large']);
		$rpt->header_row_end();
	endif;
	$rpt->header_row_start();
	$rpt->header_cell_add('ID', ['width'=>'70']);
	$rpt->header_cell_add('First Name', ['width'=>'220']);
	$rpt->header_cell_add('Last Name', ['width'=>'220']);
	$rpt->header_cell_add('Email', ['width'=>'320']);
	$rpt->header_cell_add('Phone', ['width'=>'250']);
	$rpt->header_cell_add('Hotel ID', ['width'=>'100']);
	$rpt->header_cell_add('Hotel/Company', ['width'=>'350']);
	$rpt->header_row_end();
	$rpt->header_end();
	
	$rpt->data_start();
	while($row = $result->fetch(PDO::FETCH_OBJ)) :
		$rpt->data_row_start();
		$rpt->data_cell_add($row->id);
		$rpt->data_cell_add($row->first_name);
		$rpt->data_cell_add($row->last_name);
		$rpt->data_cell_add($row->email);
		$rpt->data_cell_add($row->phone);
		$rpt->data_cell_add($row->org_id);
		$rpt->data_cell_add($row->org);
		$rpt->data_row_end();
	endwhile;
	$rpt->data_end();
	
	$rpt->report_end();
	$rpt->output_report();

Youez - 2016 - github.com/yon3zu
LinuXploit