HEX
Server: LiteSpeed
System: Linux s1049.use1.mysecurecloudhost.com 4.18.0-477.27.2.lve.el8.x86_64 #1 SMP Wed Oct 11 12:32:56 UTC 2023 x86_64
User: xedaptot (3356)
PHP: 8.3.31
Disabled: NONE
Upload Files
File: /home/xedaptot/360.naniguide.com/viewer/ajax/store_form_data.php
<?php
error_reporting(E_ALL & ~E_WARNING & ~E_NOTICE & ~E_DEPRECATED);
ob_start();
require_once("../../db/connection.php");
$form_data = array();
parse_str($_POST['form_data'], $form_data);
$id_virtualtour = (int)$_POST['id_virtualtour'];
$id_room = (int)$form_data['id_room'];
$title = strip_tags($form_data['title']);
$email = strip_tags($form_data['email']);
if(isset($form_data['form_field_1'])) {
    $form_field_1 = $form_data['form_field_1'];
    $form_field_1 = strip_tags($form_field_1);
} else {
    $form_field_1 = "";
}
if(isset($form_data['form_field_2'])) {
    $form_field_2 = $form_data['form_field_2'];
    $form_field_2 = strip_tags($form_field_2);
} else {
    $form_field_2 = "";
}
if(isset($form_data['form_field_3'])) {
    $form_field_3 = $form_data['form_field_3'];
    $form_field_3 = strip_tags($form_field_3);
} else {
    $form_field_3 = "";
}
if(isset($form_data['form_field_4'])) {
    $form_field_4 = $form_data['form_field_4'];
    $form_field_4 = strip_tags($form_field_4);
} else {
    $form_field_4 = "";
}
if(isset($form_data['form_field_5'])) {
    $form_field_5 = $form_data['form_field_5'];
    $form_field_5 = strip_tags($form_field_5);
} else {
    $form_field_5 = "";
}
if(isset($form_data['form_field_6'])) {
    $form_field_6 = $form_data['form_field_6'];
    $form_field_6 = strip_tags($form_field_6);
} else {
    $form_field_6 = "";
}
if(isset($form_data['form_field_7'])) {
    $form_field_7 = $form_data['form_field_7'];
    $form_field_7 = strip_tags($form_field_7);
} else {
    $form_field_7 = "";
}
if(isset($form_data['form_field_8'])) {
    $form_field_8 = $form_data['form_field_8'];
    $form_field_8 = strip_tags($form_field_8);
} else {
    $form_field_8 = "";
}
if(isset($form_data['form_field_9'])) {
    $form_field_9 = $form_data['form_field_9'];
    $form_field_9 = strip_tags($form_field_9);
} else {
    $form_field_9 = "";
}
if(isset($form_data['form_field_10'])) {
    $form_field_10 = $form_data['form_field_10'];
    $form_field_10 = strip_tags($form_field_10);
} else {
    $form_field_10 = "";
}
$query = "INSERT INTO svt_forms_data(id_virtualtour,id_room,title,field1,field2,field3,field4,field5,field6,field7,field8,field9,field10,datetime) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,NOW());";
if($smt = $mysqli->prepare($query)) {
    $smt->bind_param('iisssssssssss',  $id_virtualtour,$id_room,$title,$form_field_1,$form_field_2,$form_field_3,$form_field_4,$form_field_5,$form_field_6,$form_field_7,$form_field_8,$form_field_9,$form_field_10);
    $result = $smt->execute();
    if ($result) {
        ob_end_clean();
        echo json_encode(array("status"=>"ok","email"=>$email));
        exit;
    }
}
ob_end_clean();
echo json_encode(array("status"=>"error"));
exit;