403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/sms4real.com/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/sms4real.com/wwwroot/regsubfinal.php
<?php
include "general.php";
include 'sendmailclient.php';

function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	
	

function getUsername( $musername,$domain)
{
 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
 $query ="select * from userlogin where username='". $musername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			



function getPhone( $phonenumber,$domain)
{
 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
 $query ="select * from userlogin where phonenumber='". $phonenumber ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			





function getEmail( $memail,$domain)
{
 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
 $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}			


 function reguserlogin( $username,$pass,$phonenumber,$domain,$email,$country,$state,$smscode,$emailcode,$accounttype,$terms)
{

$clientip =  getMyIP();
$activationcode = $smscode.$emailcode;

$username=removePosion($username);
$address=removePosion($address);
$pass=removePosion($pass);
$referrer=removePosion($state);
$fullname=removePosion($phonenumber);

if ($accounttype == "free"){
   $acctype ="1";
}
else
{
   $acctype ="2";
}


if ($terms == "accepted"){
   $mterms ="1";
}
else
{
   $mterms ="0";
}


$query= "insert into  userlogin (username,pass,clientip,phonenumber,mlock,datecreated,lastlogin,domain,email,activationcode,league,country,state,law) values ('". $username ."','". $pass."','".$clientip."','".$phonenumber."','0','".date('Y-m-d H:i:s')."','".date('Y-m-d H:i:s')."','".$domain."','".$email."','".$activationcode."','".$acctype."','".$country."','".$state."','".$mterms."')";


 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
   
// $query="insert messagesentsingle(transid,username,phonenumber,message,sender,status,domain,dateused) values ('".$transid."','".$username."','".$phonenumber. "','". $mess. "','". $sender. "','0','". $domain. "','".  date('Y-m-d H:i:s')."')";
  
  
// $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}


}


function regsmsaccount( $username,$currency,$domain)
{

$username=removePosion($username);
if ($currency =="Naira")
  {
     $query="insert into smsaccount (username,balnaira,domain) values ('".$username."','10.0','".$domain."')";
  }
  

if ($currency =="Dollar")
  {
     $query="insert into smsaccount (username,baldollar,domain) values ('".$username."','0.20','".$domain."')";
  }
  

if ($currency =="Euro")
  {
     $query="insert into smsaccount (username,baleuro,domain) values ('".$username."','0.20','".$domain."')";
  }
  
 

 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
if(!$result= mysqli_query($con,$query))
{
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}

}


function regsmsprofile( $username,$currency,$domain)
{

$username=removePosion($username);

//insert into smsprofile (username,subprofile,rateprofile,domain) values ('system','1','1','247sms.com');

if ($currency =="Naira")
  {
     $query="insert into smsprofile (username,subprofile,rateprofile,domain) values ('".$username."','1','1','".$domain."')";
  }
  

if ($currency =="Dollar")
  {
     $query="insert into smsprofile (username,subprofile,rateprofile,domain) values ('".$username."','3','8','".$domain."')";
  }
  

if ($currency =="Euro")
  {
    $query="insert into smsprofile (username,subprofile,rateprofile,domain) values ('".$username."','2','5','".$domain."')";
  }
  
 

 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
if(!$result= mysqli_query($con,$query))
{
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}

}

//888888888888888888

function regleague( $username,$premier,$laliga,$ligue1,$uefa,$domain,$advert)
{

$username=removePosion($username);


if ($advert =="")
   $madvert ="0";
else
   $madvert ="1";
   
   
if ($premier =="")
   $mpremier ="0";
else
   $mpremier ="1";
   
if ($laliga =="")
   $mlaliga ="0";
else
   $mlaliga ="1";
   
if ($ligue1 =="")
   $mligue1 ="0";
else
   $mligue1 ="1";
   
   if ($uefa =="")
   $muefa ="0";
else
   $muefa ="1";
   
   

     $query="insert into goalsalert (username,premiership,laliga,ligue1,uefa,domain,standingeng,standingspa,standingfrance,advert) values ('".$username."','".$mpremier."','".$mlaliga."','".$mligue1."','".$muefa."','".$domain."','1','1','1','".$madvert."')";

  

 $cnt ="";
 $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 if (mysqli_connect_errno())
   {
    echo mysqli_error($con);
   //echo "-1";
   die();
   }
if(!$result= mysqli_query($con,$query))
{
   mysqli_close($con);
   return "-1";
  
}
else
{
 $cnt= "0";
 mysqli_close($con);
 return $cnt; 
}

}




//**************************
//**************************
// end of function


date_default_timezone_set('Africa/Lagos'); 

 
 
 

 if ($_SESSION['currency'] == "" ){
 
  header('Location: register.php?err=14');
   die();
 }

if ($_SESSION['emailcode'] == "" ){
 
  header('Location: registerfinal.php?err=14');
   die();
 }
 
 if ($_SESSION['smscode'] == "" ){
 
  header('Location: registerfinal.php?err=14');
   die();
 }
 
 

 $user_emailcode =$_POST["emailcode"];   
 $user_smscode =$_POST["smscode"];   

 
 if ($_SESSION['emailcode'] != $user_emailcode ){
 
  header('Location: registerfinal.php?err=3');
   die();
 }
 
 if ($_SESSION['smscode'] != $user_smscode ){
 
  header('Location: registerfinal.php?err=2');
   die();
 }

 
 
$username= $_SESSION['username'] ;   
$pass = $_SESSION['pass'] ;   
$email =$_SESSION['email'] ;   
$phonenumber= $_SESSION['phonenumber'] ;   
$state = $_SESSION['state'] ;   
$country = $_SESSION['country'] ;   
$premier = $_SESSION['premier'];
$laliga = $_SESSION['laliga'];
$ligue1 = $_SESSION['ligue1'];
$uefa = $_SESSION['uefa'];   
$currency = $_SESSION['currency'];
$terms = $_SESSION['terms'];
$advert = $_SESSION['advert']; 

//check if username already exists
$response =getUsername($username,$domain);
if ($response=="yes")
{
     header('Location: register.php?err=10');
   die();
}


//check if email already exists
$response =getEmail($email,$domain);
if ($response=="yes")
{
     header('Location: register.php?err=11');
   die();
}



//check if phonenumber already exists
$response =getPhone($phonenumber,$domain);
if ($response=="yes")
{
     header('Location: register.php?err=12');
   die();
}

//register susbcriber to database

$response =reguserlogin( $username,$pass,$phonenumber,$domain,$email,$country,$state,$smscode,$emailcode,$accounttype,$terms);

if ($response=="-1")
{
     header('Location: registerfinal.php?err=1');
   die();
}

//$accounttype = //$_SESSION['accounttype'];


$response= regsmsaccount( $username,$currency,$domain);



if ($response=="-1")
{
     header('Location: registerfinal.php?err=1');
   die();
}

$response= regsmsprofile( $username,$currency,$domain);

if ($response=="-1")
{
     header('Location: registerfinal.php?err=1');
   die();
}



$response= regleague( $username,$premier,$laliga,$ligue1,$uefa,$domain,$advert);

if ($response=="-1")
{
     header('Location: registerfinal.php?err=1');
   die();
}
//send sms client

$transID= generateTransID();
if ($currency =="Euro")
{
$mess ="Dear ". $username ."Welcome to :   ". $domain . ". Your registration is completed. And 0.20 Eurocent credited to your account to test our service.";
}

if ($currency =="Dollar")
{
$mess ="Dear ". $username ."Welcome to :   ". $domain . ". Your registration is completed. And 0.20 dollarcent credited to your account to test our service.";
}

if ($currency =="Naira")
{
 $mess ="Dear ". $username ."Welcome to :   ". $domain . ". Your registration is completed. And N10.00 credited to your account to test our service.";
}

$mtype ="1";
$response = sendSMS( $username,$phonenumber, $transID, $domain,$mess,$sender,$mtype);

if ($response=="0" )
{ 

$mysub = "Registration Completed - " . $domain;
$myMessage ="Dear <b>". $username. "</b>,<br><br>";
$myMessage .= "Your registration is completed. You provided us the following information:<br><br>"; 
$myMessage .= "Email  : <b>" . $email . "</b><br>";
$myMessage .= "Phonenumber  : <b>" . $phonenumber . "</b><br>";
$myMessage .= "Football Leagues  : <b>" . $premier. " ". $laliga. " ". $ligue1. " ". $uefa . "</b><br>";
$myMessage .= "Currency  : <b>" . $currency . "</b><br>";
$myMessage .= "State  : <b>" . $state . "</b><br>";
$myMessage .= "Country  : <b>" . $country . "</b><br><br>";
$myMessage .= "Thanks for your interest in our service. " . "<br>";
$myMessage .= "<b>Support " . $domain."</b>";

$$myMessage2 ="Dear ". $username. ",\n\n";
$myMessage2 .= "Your registration is completed. You provided us the following information:\n\n"; 
$myMessage2 .= "Email  : " . $email . "\n";
$myMessage2 .= "Phonenumber  : " . $phonenumber . "\n";
$myMessage2 .= "Football Leagues  : " . $premier. " ". $laliga. " ". $ligue1. " ". $uefa . "\n";
$myMessage2 .= "Currency  : " . $currency . "\n";
$myMessage2 .= "State  : " . $state . "\n";
$myMessage2 .= "Country  : " . $country . "\n\n";
$myMessage2 .= "Thanks for your interest in our service. " . "\n";
$myMessage2 .= "Support " . $domain."";


$mymail = sendmailtoclient($email,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);
 
  header('Location: login.php?err=0');
  die();
}
else
{
   header('Location: registerfinal.php?err=1');
   die();
}


 
?>

Youez - 2016 - github.com/yon3zu
LinuXploit