This file is indexed.

/usr/share/hoteldruid/includes/dati_form_prenotazione.php is in hoteldruid 2.0.3-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
<?php

##################################################################################
#    HOTELDRUID
#    Copyright (C) 2001-2012 by Marco Maria Francesco De Santis (marco@digitaldruid.net)
#
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU Affero General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    any later version accepted by Marco Maria Francesco De Santis, which
#    shall act as a proxy as defined in Section 14 of version 3 of the
#    license.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU Affero General Public License for more details.
#
#    You should have received a copy of the GNU Affero General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
##################################################################################

$mess_dati_form = "";
if ($manda_cognome != "NO") {
$mess_dati_form .= "<input type=\"hidden\" name=\"cognome\" value=\"$cognome\">
<input type=\"hidden\" name=\"nome\" value=\"$nome\">";
} # fine if ($manda_cognome != "NO")
for ($n_t = 1 ; $n_t <= $num_tipologie ; $n_t++) {
if ($manda_dati_assegnazione != "NO") {
$mess_dati_form .= "<input type=\"hidden\" name=\"inizioperiodo$n_t\" value=\"".${"inizioperiodo".$n_t}."\">
<input type=\"hidden\" name=\"fineperiodo$n_t\" value=\"".${"fineperiodo".$n_t}."\">
<input type=\"hidden\" name=\"appartamento$n_t\" value=\"".${"appartamento".$n_t}."\">
<input type=\"hidden\" name=\"nometipotariffa$n_t\" value=\"".${"nometipotariffa".$n_t}."\">
<input type=\"hidden\" name=\"numpersone$n_t\" value=\"".${"numpersone".$n_t}."\">
<input type=\"hidden\" name=\"assegnazioneapp$n_t\" value=\"".${"assegnazioneapp".$n_t}."\">
<input type=\"hidden\" name=\"num_app_richiesti$n_t\" value=\"".${"num_app_richiesti".$n_t}."\">
<input type=\"hidden\" name=\"lista_app$n_t\" value=\"".${"lista_app".$n_t}."\">
<input type=\"hidden\" name=\"spezzetta$n_t\" value=\"".${"spezzetta".$n_t}."\">";
} # fine if ($manda_dati_assegnazione != "NO")
$mess_dati_form .= "<input type=\"hidden\" name=\"tipo_sconto$n_t\" value=\"".${"tipo_sconto".$n_t}."\">
<input type=\"hidden\" name=\"sconto$n_t\" value=\"".${"sconto".$n_t}."\">
<input type=\"hidden\" name=\"tipo_val_sconto$n_t\" value=\"".${"tipo_val_sconto".$n_t}."\">
<input type=\"hidden\" name=\"conferma_prenota$n_t\" value=\"".${"conferma_prenota".$n_t}."\">
<input type=\"hidden\" name=\"caparra$n_t\" value=\"".${"caparra".$n_t}."\">
<input type=\"hidden\" name=\"tipo_val_caparra$n_t\" value=\"".${"tipo_val_caparra".$n_t}."\">
<input type=\"hidden\" name=\"commissioni$n_t\" value=\"".${"commissioni".$n_t}."\">
<input type=\"hidden\" name=\"tipo_val_commissioni$n_t\" value=\"".${"tipo_val_commissioni".$n_t}."\">
<input type=\"hidden\" name=\"giorno_stima_checkin$n_t\" value=\"".${"giorno_stima_checkin".$n_t}."\">
<input type=\"hidden\" name=\"ora_stima_checkin$n_t\" value=\"".${"ora_stima_checkin".$n_t}."\">
<input type=\"hidden\" name=\"min_stima_checkin$n_t\" value=\"".${"min_stima_checkin".$n_t}."\">
<input type=\"hidden\" name=\"tipo_commento$n_t\" value=\"".${"tipo_commento".$n_t}."\">";
if (!@get_magic_quotes_gpc()) $mess_dati_form .= "<input type=\"hidden\" name=\"commento$n_t\" value=\"".htmlspecialchars(${"commento".$n_t})."\">";
else $mess_dati_form .= "<input type=\"hidden\" name=\"commento$n_t\" value=\"".htmlspecialchars(stripslashes(${"commento".$n_t}))."\">";
if (!@get_magic_quotes_gpc()) $mess_dati_form .= "<input type=\"hidden\" name=\"met_paga_caparra$n_t\" value=\"".htmlspecialchars(${"met_paga_caparra".$n_t})."\">";
else $mess_dati_form .= "<input type=\"hidden\" name=\"met_paga_caparra$n_t\" value=\"".htmlspecialchars(stripslashes(${"met_paga_caparra".$n_t}))."\">";
if (!@get_magic_quotes_gpc()) $mess_dati_form .= "<input type=\"hidden\" name=\"origine_prenota$n_t\" value=\"".htmlspecialchars(${"origine_prenota".$n_t})."\">";
else $mess_dati_form .= "<input type=\"hidden\" name=\"origine_prenota$n_t\" value=\"".htmlspecialchars(stripslashes(${"origine_prenota".$n_t}))."\">";
for ($numca = 1 ; $numca <= $numcostiagg ; $numca++) {
$costoagg = "costoagg".$numca."_".$n_t;
$idcostoagg = "idcostoagg".$numca."_".$n_t;
$numsettimane = "numsettimane".$numca."_".$n_t;
$nummoltiplica_ca = "nummoltiplica_ca".$numca."_".$n_t;
$id_periodi_costo = "id_periodi_costo".$numca."_".$n_t;
$mess_dati_form .= "<input type=\"hidden\" name=\"$idcostoagg\" value=\"".$$idcostoagg."\">
<input type=\"hidden\" name=\"$costoagg\" value=\"".$$costoagg."\">
<input type=\"hidden\" name=\"$numsettimane\" value=\"".$$numsettimane."\">
<input type=\"hidden\" name=\"$nummoltiplica_ca\" value=\"".$$nummoltiplica_ca."\">";
if ($$id_periodi_costo) $mess_dati_form .= "<input type=\"hidden\" name=\"$id_periodi_costo\" value=\"".$$id_periodi_costo."\">";
} # fine for $numca
} # fine for $n_t
$mess_dati_form .= "<input type=\"hidden\" name=\"numcostiagg\" value=\"$numcostiagg\">
<input type=\"hidden\" name=\"id_utente_ins\" value=\"$id_utente_ins\">
<input type=\"hidden\" name=\"mos_tut_dat\" value=\"$mos_tut_dat\">
<input type=\"hidden\" name=\"num_tipologie\" value=\"$num_tipologie\">";
if ($manda_dati_assegnazione != "NO") $mess_dati_form .= "<input type=\"hidden\" name=\"prenota_vicine\" value=\"$prenota_vicine\">";
else $mess_dati_form .= "<input type=\"hidden\" name=\"id_transazione\" value=\"$id_transazione\">";
if ($idmessaggi) $mess_dati_form .= "<input type=\"hidden\" name=\"idmessaggi\" value=\"$idmessaggi\">";

if ($echo_dati_form != "NO") echo $mess_dati_form;

?>