www.dev2.delv-in.com - UnknownSec 403

upload mass deface mass delete console info server
name : v_admin_consSched_edit.php
 <?php

	if ($_POST['submitBut'] == 'Edit'){

		$Consult_Schedule = new Consult_Schedule;
		$row = $Consult_Schedule->get($_POST['conSchedID'], '', '');
		$conSchedID = $_POST['conSchedID'];
		$date = date('Y-m-d', $row['startTS']);
		$time = date('h:i a', $row['startTS']);
		$duration = ($row['endTS'] - $row['startTS']) / 60;
		$action = 'Edit';

	} else if ($_POST['submitBut'] == 'Save'){
		// return data from form
		$conSchedID = $_POST['conSchedID'];
		$date = $_POST['date'];
		$time = $_POST['time'];
		$duration = $_POST['duration'];
		$action = $_POST['action'];


	} else {
		// initialize variables
		$conSchedID = '';
		$startTS = '';
		$dateTS = strtotime($_POST['date'] . ", " . $_POST['time']) + ($_POST['duration'] * 60);
		$date = date('Y-m-d', $dateTS);
		$time = date('h:i a', $dateTS);
		$action = 'Add';
	}

	echo "

	<div class='col-12 input_form'>

	<H1>". $action . " a Time Block for a Consultation</H1>

	<p>
		Visitors to the web site will be able book a free consultation in any available time block.
		<br>Times are in Pacific Standard Time.
	</p>

	<div class='edit_form_group'>

	<form action='' method='post' name='edit'>
		<input type='hidden' name='conSchedID' value='" . $_POST['conSchedID'] . "'>
		<input type='hidden' name='action' value='" . $action . "'>
	

		<div class='form_full_width right'>
			<input type='submit' name='submitBut' value='Save' class='btn btn_save'>
			<input type='submit' name='submitBut' value='Cancel' class='btn btn_cancel'>
		</div>";

	if ($conSchedID > 0){

		echo "
		<div class='form_label'>ID#: </div>
		<div class='form_input'>".$conSchedID."</div>
		";
	}


	echo "


	<div class='col-12 bot_line'>
		<div class='form_label'>Date:</div>
		<div class='form_input'>
			<input type='text' name='date' id='date' value='". $date . "'>
		</div>
	</div>

	<div class='col-12 bot_line'>
		<div class='form_label'>Time: </div>
		<div class='form_input'>
			<input type='text' name='time' id='time' value='". $time ."'>
		</div>
	</div>

	
	<div class='col-12 bot_line'>
		<div class='form_label'>Duration: </div>
		<div class='form_input'>";
		$SelectObjNum = new SelectObjNum('duration', '30', '75', 15, $duration, '', "[minutes]", '', 'edit', '');

	echo " minutes
		</div>
	</div>

		</form>
</div>
";

?>

<script>

	flatpickr("#date", {
		altInput: true,
		altFormat: "F j, Y",
		dateFormat: "Y-m-d"
	});

	flatpickr("#time", {
		enableTime: true,
		noCalendar: true,
		dateFormat: "h:i K"
	});
</script>
UnknownSec Shell
