403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /HostingSpaces/admin/sms4real.com/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /HostingSpaces/admin/sms4real.com/wwwroot//verifyuserconfirm.php
<?php
include "general.php";
include "connect.php";
include 'sendmailclient.php';

function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	
	

function getUsername( $musername,$domain)
{
 include "connect.php";
 $cnt ="";
// $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where username='". $musername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
  var_dump( mysqli_error($con));
  //echo "me";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
	//echo "nosa";
}

//echo $cnt."kate";
mysqli_close($con);
return $cnt;
}			



function getPhone( $phonenumber,$domain)
{
include "connect.php";
 $cnt ="";
// $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where phonenumber='". $phonenumber ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			





function getEmail( $memail,$domain)
{
 $cnt ="";
 include "connect.php";
 //$con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			








//**************************
//**************************
// end of function


//$_SESSION['accounttype']="euro";
 
// if ($_SESSION['accounttype'] == "" ){
 
  //header('Location: register.php?err=1');
  // die();
// }


 $phonenumber =$_POST["phone"];   
 $email =$_POST["email"];   
 $submit =$_POST["submit"];   
 
 
date_default_timezone_set('Europe/London'); 

if ($submit =="Cancel" ){

     header('Location: login.php');
   die();
}


if (strlen($phonenumber) < 7){
     header('Location: verifyuser.php?err=2');
   die();
}


if($_SESSION['email'] !=$email){
//check if email already exists
$response =getEmail($email,$domain);
if ($response=="yes")
{
     header('Location: verifyuser.php?err=3');
   die();
}
$_SESSION['email'] = $email;
}//end of email verify

if($_SESSION['phone'] !=$phonenumber){
//check if phonenumber already exists
$response =getPhone($phonenumber,$domain);
if ($response=="yes")
{
     header('Location: verifyuser.php?err=4');
   die();
}

$_SESSION['phone']=$phonenumber;

}
//get smscode

$smscode =rand_string(6);
$emailcode =rand_string(10);

//send sms client

$transID= generateTransID();
$username=$_SESSION['username'];

$mess ="Dear ". $username ." use the smscode:   ". $smscode . "   to continue your verification";
$mtype ="1";
$response = sendSMS( $username,$phonenumber, $transID, $domain,$mess,$sender,$mtype);


if ($response=="0" ){ 




$mysub = "Email Verification Code from " . $domain;
$myMessage ="Dear <b>". $username. "</b>,<br><br>";
$myMessage .= "Below is the Email Code to complete your verification exercise<br><br>"; 
$myMessage .= "Email Code : <b>" . $emailcode . "</b><br><br>";
$myMessage .= "Thanks for your interest in our service. " . "<br><br>";
$myMessage .= "<b>Support " . $domain."</b>";

$mysub = "Email Verification Code from " . $domain;
$myMessage2 ="Dear ". $username. ",\n\n";
$myMessage2 .= "Below is the Email Code to complete your verification exercise\n\n"; 
$myMessage2 .= "Email Code : " . $emailcode . "\n\n";
$myMessage2 .= "Thanks for your interest in our service. " . "\n\n";
$myMessage2 .= "Support " . $domain;
//echo $mymail."enough";
$mymail = sendmailtoclient($email,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);

//echo $mymail."moses";

$query ="INSERT INTO Enquiry (username,phonenumber, email,smscode,emailcode,domain, dateused)  VALUES ('". $username."','". $phonenumber ."','". $email."','". $smscode . "','".$emailcode."','". $domain. "','". date('Y-m-d H:i:s')."')";
echo @query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  
//echo $email."<br>";
//echo $mfrom;
//echo $mfromname;

 header('Location: verifyuser.php?err=1');
  mysqli_close($con);
  die();
}




  $_SESSION['verify1'] ="yes"; 
  $_SESSION['emailcode'] =$emailcode;   
  $_SESSION['smscode'] =$smscode; 
  header('Location: verifyfinal.php');
  die();
}
else
{
   header('Location: login.php?err=17');
   die();
}


 
?>

Youez - 2016 - github.com/yon3zu
LinuXploit