shell bypass 403
<?php
error_reporting(E_ALL);
define("FROM_NAME",'Chakmak Blog');
define("FROM_EMAIL",'[email protected]');
define("TO_EMAIL",'[email protected]');
define("TO_EMAIL_1",'[email protected]');
define("TO_EMAIL_2",'[email protected]');
define("TO_CC",$_POST['email']);
define('SUBJECT','Chakmak Blog Subscription Form');
if($_POST['f_name']!=' ' && $_POST['member']!=' ')
{
$name= $_POST['f_name'];
$subscription = $_POST['member'];
$address = $_POST['add'];
$city = $_POST['city'];
$zip= $_POST['pcode'];
$state = $_POST['state'];
$email = $_POST['email'];
$contact = $_POST['p_number'];
include('class.phpmailer.php');
// To E mail
$mail = new PHPMailer();
$mail->From=FROM_EMAIL;
$mail->FromName=FROM_NAME;
$mail->ContentType ="text/html";
$mail->AddAddress(TO_EMAIL);
$mail->Subject=SUBJECT;
$metter="We Get Subscription Enquiry From Chakmak Blog and Entered Details Are : <br />";
$metter.="<strong>Name:</strong> ".$name."<br />";
$metter.="<strong>Subscription Type: </strong>".$subscription."<br />";
$metter.="<strong>Address:</strong> ".$address."<br />".$city."<br>";
$metter.= $zip."<br>".$state;
$metter.="<br><strong>Email:</strong> ".$email."<br />";
$metter.="<strong>Contact No.:</strong> ".$contact."<br />";
$metter.="<strong>Please Contact This Person As Soon As Possible As We are Assuring Them, That They Will Contacted in 24 business Hours!!!</strong><br><br>";
$mail->Body = stripslashes($metter);
if($mail->Send())
{
$mail->ClearAddresses();
}
// To E mail 1
$mail11 = new PHPMailer();
$mail11->From=FROM_EMAIL;
$mail11->FromName=FROM_NAME;
$mail11->ContentType ="text/html";
$mail11->AddAddress(TO_EMAIL_1);
$mail11->Subject=SUBJECT;
$mail11->Body = stripslashes($metter);
if($mail11->Send())
{
$mail11->ClearAddresses();
}
// To E mail 2
$mail2 = new PHPMailer();
$mail2->From=FROM_EMAIL;
$mail2->FromName=FROM_NAME;
$mail2->ContentType ="text/html";
$mail2->AddAddress(TO_EMAIL_2);
$mail2->Subject=SUBJECT;
$mail2->Body = stripslashes($metter);
if($mail2->Send())
{
$mail2->ClearAddresses();
}
// To CC
$mail1 = new PHPMailer();
$mail1->From=FROM_EMAIL;
$mail1->FromName=FROM_NAME;
$mail1->ContentType ="text/html";
$mail1->AddAddress(TO_CC);
$mail1->Subject=SUBJECT;
$metter="<a href='http://chakmak-blog.blogspot.in/'><img alt='Visit Chakmak Blog' title='Visit Chakmak Blog' src='http://www.eklavya.in/chakmak/subscription_form/Blogheader.png'></a>";
$metter.="<h2 align='center'>We will get back to you In Next 24 Business Hours!!!</h2>";
$metter.="<h3 align='center'>Thank you for taking interest in Chakmak</h3>";
$metter.="<h3 align='center'>For Daily Updates Please Visit: <br><a href='https://www.facebook.com/chakmak.magazine'>https://www.facebook.com/chakmak.magazine</a></h3>";
$mail1->Body = stripslashes($metter);
if($mail1->Send())
{
$mail1->ClearAddresses();
}
}
?>
<html>
<head>
<title>Chakmak Blog Subscription</title>
</head>
<body>
<p>Thanks For Your Subscription</p>
<p>We will get back to you In Next 24 Business Hours!!!</p>
<p><a href="http://www.eklavya.in/chakmak/subscription_form/chakmak.html">Go back to the Subscription Form</a></p>
</body>