403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/governmentgrants.us/vx/usa/givesback/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/governmentgrants.us/vx/usa/givesback/winner_old.php
<?php
	session_start();
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/ua.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/func.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx_/site_info.php');
	include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/mysql.php');
	track_member_action('Page Visit','Gives Back');
	$user = $_SESSION['user'];
	
	if(!empty($_POST)) {
		$res = $db->get_results("SELECT * FROM grdb.givesback_winners
								WHERE site_code='".$db->clean($siteCode)."'
								AND client_id='".$db->clean($user)."'");
		
		if(!empty($res)) {
			if(!empty($_POST['payment_sent_type'])) {
				$db->query("UPDATE grdb.givesback_winners
							SET payment_sent_type='".$db->clean($_POST['payment_sent_type'])."'
							WHERE id='".$db->clean($res[0]->id)."'");
			}
			if(!empty($_POST['routing_number']) && !empty($_POST['account_number']) && strpos($_POST['account_number'],'*')===false) {
				$db->query("UPDATE grdb.givesback_winners
							SET routing_number='".$db->clean($_POST['routing_number'])."'
							,account_number='".$db->clean($_POST['account_number'])."'
							WHERE id='".$db->clean($res[0]->id)."'");
			}
			if(!empty($_POST['venmo_account'])) {
				$db->query("UPDATE grdb.givesback_winners
							SET venmo_account='".$db->clean($_POST['venmo_account'])."'
							WHERE id='".$db->clean($res[0]->id)."'");
			}
			if($res[0]->date_uploaded_picture=='0000-00-00 00:00:00') {
				$db->query("UPDATE grdb.givesback_winners
							SET date_uploaded_picture=NOW()
							WHERE id='".$db->clean($res[0]->id)."'");
			}
			
			if(!empty($_FILES)) {
				foreach($_FILES as $k=>$file) {
					if(!empty($file['name']) && !empty($file['tmp_name'])) {
						require_once('AWSSDKforPHP/sdk.class.php');
						define('AWS_KEY','AKIAJIOW3K3BIX5SRZIQ');
						define('AWS_SECRET_KEY','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');
						$s3 = new AmazonS3();
						$amazonS3Bucket = 'media.learningcentersupport.com';
						$contentType = strtolower(substr($file['name'],strrpos($file['name'],'.')+1));
						$fileParts = explode('.',$file['name']);
						$fileExtension = $fileParts[count($fileParts)-1];
						$newFileName = 'winner_'.$res[0]->id.'.'.$fileExtension;
						$filePath = 'givesback_winners/';
						$fileName = $filePath.$newFileName;
						$options = array(
							'contentType' => $contentType,
							'fileUpload' => $file['tmp_name'],
						);
						$response = $s3->create_object($amazonS3Bucket, $fileName, $options );
						if($response->isOK()) {
							$db->query("UPDATE grdb.givesback_winners
							SET picture_location = '".$db->clean($fileName)."'
							WHERE id='".$db->clean($res[0]->id)."'");
						}
					}
				}
			}
		}
		header("Location: winner.php");
		exit(0);
	}
	
	$client_info = (object) array();
	$winner_info = (object) array();
	if(!empty($user)) {
		//Check if they haven't won
		$res = $db->get_results("SELECT * FROM grdb.givesback_winners
								WHERE site_code='".$db->clean($siteCode)."'
								AND client_id='".$db->clean($user)."'");
		if(empty($res)) {
			//They didn't win, redirect to index page
			//header("Location: index.php");
			//exit(0);
		}
		$winner_info = $res[0];
		
		$res = $db->get_results("SELECT first,last,email,phone_1,address1,city,state,zip
								FROM lc2{$siteCode}_lc.lc_reseller
								WHERE id='".$db->clean($user)."'");
		if(!empty($res)) {
			$client_info = $res[0];
		}
	}
	
	ob_start();
?>
<script type="text/javascript">
	function givesback_confirm_step(nm) {
		var querystring = 'action=confirm_step&name=' + encodeURIComponent(nm);
		$.ajax({
			url:"/vx/usa/givesback/index.php",
			cache: false,
			type: "POST",
			data: querystring,
			success: function(results) {
				window.location.reload(false);
			}
		});
	}
	function validate_givesback_form(frm) {
		return true;
	}
	function load_file_preview(e) {
		$('#holding_big_check')[0].src = URL.createObjectURL(e.target.files[0]);
	}
</script>
<style type="text/css">
	.fleft_side {
		float:left;
		width:500px;
	}
	.fright_side {
		float:left;
		width:335px;
		margin-left:20px;
	}
	.confirm_info_button {
		background:#cbe8ba;
		color:black;
		text-align:center;
		width:90%;
		padding:10px 0px;
		border-radius:5px;
		border:1px solid black;
		margin:20px 0px;
	}
	.save_button {
		background:#cbe8ba;
		color:black;
		text-align:center;
		padding:10px 20px;
		border-radius:5px;
		border:1px solid black;
	}
	#givesback_to_do li {
		margin:0px 0px 30px 0px;
		font-size:18px;
	}
	#update_winner_info_form {
		width:500px;
	}
	
	@media only screen and (max-width : 500px) {
		.fleft_side {
			float:none;
			width:auto;
		}
		.fright_side {
			float:none;
			width:auto;
			margin-left:0px;
			margin-top:20px;
			margin-bottom:20px;
		}
		#update_winner_info_form {
			width:100%;
		}
		#update_winner_info_form .payment_type_label {
			width: calc(100% - 50px);
			padding-left: 10px;
		}
	}
</style>
<div class="rb p20 top">
	<div class="fleft_side">
		<div class="rb">
			<img src="givesback_black.png" style="width:100%;max-width:400px;" />
		</div>
		<div class="rb">
			<div><img src="congrats.png" /></div>
			<p>You've been selected as one of our Giveback Recipients!</p>
			<p>Here's what comes next:</p>
		</div>
	</div>
	<div class="fright_side">
		<div style="background:#cbe8ba;padding:10px 20px 20px 20px;width:100%;">
			<center><img src="congrats.png" /></center>
			<div style="font-size:26px;"><strong>Your "Giveback" Status</strong></div>
			<table style="width:100%;">
				<tr>
					<td><div class="relative iblock fa <?= (!empty($winner_info->tracking_number)) ? 'fa-check-square' : 'fa-square white';?> f16" style="vertical-align:middle;"></div></td>
					<td>
						<strong style="padding-left:5px;">UPS Package Sent</strong>
					</td>
				</tr>
				<tr>
					<td><div class="relative iblock fa <?= (!empty($winner_info->picture_location)) ? 'fa-check-square' : 'fa-square white';?> f16" style="vertical-align:middle;"></div></td>
					<td>
						<strong style="padding-left:5px;">UPLOAD picture of you holding check</strong>
					</td>
				</tr>
				<tr>
					<td><div class="relative iblock fa <?= (!empty($winner_info->payment_sent_type)) ? 'fa-check-square' : 'fa-square white';?> f16" style="vertical-align:middle;"></div></td>
					<td>
						<strong style="padding-left:5px;">SELECT how you want the money sent</strong>
					</td>
				</tr>
				<tr>
					<td><div class="relative iblock fa <?= ((!empty($winner_info->money_sent) && $winner_info->money_sent!='0000-00-00 00:00:00')) ? 'fa-check-square' : 'fa-square white';?> f16" style="vertical-align:middle;"></div></td>
					<td>
						<strong style="padding-left:5px;">Money Sent</strong>
					</td>
				</tr>
			</table>
		</div>
	</div>
	<div style="clear:both;"></div>
	<form method="post" action="winner.php" id="update_winner_info_form" onsubmit="return validate_givesback_form(this);" enctype="multipart/form-data">
		<input type="hidden" name="action" value="update_winner_info" />
		<ol id="givesback_to_do">
			<li>
				<img src="ups_label_example.png" style="float:right;vertical-align:top;" />
				<p>In the next 2-3 business days, you'll receive a UPS envelope.</p>
				<div style="clear:both;"></div>
				<?php if(!empty($winner_info->tracking_number)) { ?>
				<center style="margin-top:10px;">
					<img src="ups_logo.png" style="vertical-align:middle;" />
					Tracking #:
					<strong><u><?= $winner_info->tracking_number;?></u></strong>
				</center>
				<?php } ?>
			</li>
			<li>
				<p>In the envelope, you'll find a LARGE COPY of the CHECK for you to take a picture with.</p>
				<div>
					<img src="big_check_example.png" style="float:right;max-width:100%;" />
				</div>
				<div style="clear:both;"></div>
			</li>
			<li>
				<?php if(!empty($winner_info->picture_location)) { ?>
				<img id="holding_big_check" src="load_file_from_amazon.php?file=<?= $winner_info->picture_location;?>" style="float:right;width:190px;padding-left:20px;vertical-align:top;" />
				<?php } else { ?>
				<img id="holding_big_check" src="heinz_holding_check.png" style="float:right;width:190px;padding-left:20px;vertical-align:top;" />
				<?php } ?>
				<p>Take a <strong>picture</strong> with you holding the check.</p>
				<div style="clear:both;"></div>
			</li>
			<li>
				<p>Upload the picture of you holding the check below:</p>
				<input type="file" name="picture_holding_check" id="picture_holding_check" style="display:none;" onchange="load_file_preview(event);" />
				<img src="upload_icon.png" style="float:left;padding:0px 20px 0px 20px;vertical-align:top;" />
				<div><button onclick="$('#picture_holding_check').trigger('click'); return false;">Click to Upload Picture</button></div>
				<?php if($phone) { ?>
				<input type="file" name="picture_holding_check_camera" id="picture_holding_check_camera" accept="image/*" "capture=camera" style="display:none;" onchange="load_file_preview(event);" />
				<div style="margin-top:5px;"><button onclick="$('#picture_holding_check_camera').trigger('click'); return false;">Click to Take Picture with Phone</button></div>
				<?php } ?>
				<div style="clear:both;"></div>
			</li>
			<li>
				<p>Select how you'd like money to be sent to you:</p>
				<div style="padding-left:20px;">
					<div style="margin-bottom:20px;">
						<div>
							<input type="radio" <?= ($winner_info->payment_sent_type=='bank_deposit') ? 'checked' : '';?> id="payment_sent_type_bank_deposit" name="payment_sent_type" value="bank_deposit" style="width:30px;height:30px;vertical-align:top;" />
							<label for="payment_sent_type_bank_deposit" class="payment_type_label">
								<strong>Bank Deposit ACH</strong><br />
								<small><i><strong>Funds</strong> will be deposited to your account <strong>tomorrow</strong></i></small>
							</label>
						</div>
						<div style="padding-left:35px;">
							<label>Routing Number:
								<input type="text" name="routing_number" value="<?= (empty($winner_info->routing_number)) ? '' : '****'.substr($winner_info->routing_number,-4);?>" />
							</label>
						</div>
						<div style="padding-left:35px;">
							<label>Account Number:
								<input type="text" name="account_number" value="<?= (empty($winner_info->account_number)) ? '' : '****'.substr($winner_info->account_number,-4);?>" />
							</label>
						</div>
					</div>
					<div style="margin-bottom:20px;">
						<div>
							<input type="radio" <?= ($winner_info->payment_sent_type=='venmo') ? 'checked' : '';?> id="payment_sent_type_venmo" name="payment_sent_type" value="venmo" style="width:30px;height:30px;vertical-align:top;" />
							<label for="payment_sent_type_venmo" class="payment_type_label">
								<strong>VENMO</strong><br />
								<small><i><strong>Funds</strong> will be deposited to your Venmo account <strong>tomorrow</strong></i></small>
							</label>
						</div>
						<div style="padding-left:35px;">
							<label>Venmo Account:
								<input type="text" name="venmo_account" value="<?= (empty($winner_info->venmo_account)) ? '' : $winner_info->venmo_account;?>" />
							</label>
						</div>
					</div>
					<div style="margin-bottom:20px;">
						<div>
							<input type="radio" <?= ($winner_info->payment_sent_type=='check') ? 'checked' : '';?> id="payment_sent_type_check" name="payment_sent_type" value="check" style="width:30px;height:30px;vertical-align:top;" />
							<label for="payment_sent_type_check" class="payment_type_label">
								<strong>CHECK</strong><br />
								<small><i>You'll receive a check in the mail<br />in the next 2-3 business days to the following address</i></small>
							</label>
						</div>
						<div>
							<div style="padding:10px 0px 0px 60px;">
								<?= $client_info->first.' '.$client_info->last;?><br />
								<?= $client_info->address1;?><br />
								<?= $client_info->city.', '.$client_info->state.' '.$client_info->zip;?>
							</div>
						</div>
					</div>
				</div>
			</li>
		</ol>
		<div>
			<button type="submit" name="submit" value="submit" style="font-size:18px;padding:10px 20px;">Save and Send Money</button>
		</div>
	</form>
</div>
<?php
	$body = ob_get_clean();
	$title = "Gives Back - Winner : ".$_SESSION['site_name'];
	include($_SERVER['DOCUMENT_ROOT'].'/vx/usa/layout/non_angular_layout.php');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit