shell bypass 403

Cubjrnet7 Shell


name : dispatch-details-process.php
<?php 
include('login-status.php');
include("global.inc.php");
include("connection.inc.php");

if(strlen(PEAR_PATH)>0)
{
  ini_set("include_path", "/home/eklavya/public_html/pear/PEAR");
  require_once "Mail.php";
  require_once "Mail/mime.php";
}

$order_id = isset($_REQUEST['o'])?trim($_REQUEST['o']):'';
$EditArray['order_bill_no'] = isset($_REQUEST['order_bill_no'])?trim($_REQUEST['order_bill_no']):'';
$EditArray['order_bill_date'] = isset($_REQUEST['order_bill_date'])?trim($_REQUEST['order_bill_date']):'';
$EditArray['order_dispatch_date'] = isset($_REQUEST['order_dispatch_date'])?trim($_REQUEST['order_dispatch_date']):'';

$EditArray['order_num_of_packets'] = isset($_REQUEST['order_num_of_packets'])?trim($_REQUEST['order_num_of_packets']):'';
$EditArray['order_docket_no'] = isset($_REQUEST['order_docket_no'])?$_REQUEST['order_docket_no']:'';
$EditArray['order_dispatch_mode'] = isset($_REQUEST['order_dispatch_mode'])?trim($_REQUEST['order_dispatch_mode']):'';
$EditArray['order_service_provider_id'] =  isset($_REQUEST['service_provider'])?trim($_REQUEST['service_provider']):'';

$ErrorFields = array();
$validationMessage = array();

if(validation($EditArray, $ErrorFields, $validationMessage))
{
	$implode = implode(', ', $EditArray['order_docket_no']);
	$VarQuery = 'UPDATE customer_order SET '.
						' order_bill_no = "'.$EditArray['order_bill_no'].'", '.
						' order_bill_date = "'.date('Y-m-d', strtotime($EditArray['order_bill_date'])).'", '.
						' order_num_of_packets = "'.$EditArray['order_num_of_packets'].'", '.
						' order_docket_no = "'.$implode.'", '.
						' order_dispatch_mode = "'.$EditArray['order_dispatch_mode'].'", '.
						' order_dispatch_date = "'.date('Y-m-d', strtotime($EditArray['order_dispatch_date'])).'", '.
						' order_status = "'.MATERIAL_DISPATCHED_CODE.'", '.
						' order_service_provider_id = "'.$EditArray['order_service_provider_id'].'"'.
					' WHERE order_id = "'.$order_id.'"';
	$VarResult = mysqli_query($db, $VarQuery) or die(mysqli_error());
	
	$VarQuery = "SELECT cust_name, cust_surname, cust_email, order_total ".
							 " FROM customer_order LEFT JOIN customer ON (cust_id = order_cust_id)".
							" WHERE order_id = '".$order_id."'";
							
	$VarResult = mysqli_query($db, $VarQuery) or die(mysqli_error());
	
	$row = mysqli_fetch_object($VarResult);
  	
	$name = $row->cust_name.' '.$row->cust_surname;
	$email = $row->cust_email;
	$order_total = $row->order_total;
	$to = $name.'<'.$email.'>';
	$subject = 'Pitara :: Order status';
	$mail_content = 'Dear '.$name.',<br /><br />'.

                  'Greetings from Eklavya!<br />'.
                  'According to your online order reference no '.$order_id.'. Following are the details about the order.<br />'. 
                  'No.of packets: '.$EditArray['order_num_of_packets'].'<br />'.
                  'Dispatched through : '.$dispatch_mode_array[$EditArray['order_dispatch_mode']].'<br />'.
                  'Dispatch date:  '.$EditArray['order_dispatch_date'].', docket/dispatch document no. '.$implode.'<br />'.
                  'Invoice No.:  '.$EditArray['order_bill_no'].' of Rs. '.$order_total.' dated '.$EditArray['order_bill_date'].'.<br /><br />'.
                   
                  'Please acknowledge the receipt of the consignment.<br />'.
                  'Thanks,<br /><br />'.
                   
                  'Pitara Team<br />'.
                  'Eklavya<br />'.
                  'E-10, Shankar Nagar, B.D.A.Colony<br />'.
                  'Shivaji Nagar, Bhopal (M.P.) -  462 016<br />'.
                  'Tel: 0755-4030710, 2550976, 2671017, 6549033,<br />'.
                  'Fax: 0755-2551108<br />'.
                  '<a href="www.eklavya.in">www.eklavya.in</a><br />'.
                  'Please consider the environment before printing this e-mail<br />';

	# Send order mail
  if(strlen(PEAR_PATH)>0)
  {
   	$subject = 'Your pitara order (Number: '.$order_id.', Material Dispatched) ';									 
    sendmail($name, $email, $subject, $mail_content); 
  }								
	$_SESSION['successMessage'] = 'Dispatch details saved successfully! Click on Close button to close this screen.';
	header('Location: dispatch-details.php?o='.$order_id);
	exit();	
				
}else
{
 	$implode = implode(', ', $EditArray['order_docket_no']);
	$EditArray['order_docket_no'] = $implode;	 
	$_SESSION['EditArray'] = $EditArray;
	$_SESSION['ErrorFields'] = implode(',', $ErrorFields);
	$_SESSION['validationMessage'] = implode('<br />', $validationMessage);
	
	header('Location: dispatch-details.php?o='.$order_id);
	exit();	
}
function validation($EditArray, &$ErrorFields, &$validationMessage)
{
	$isInVlid = 0;
	if(strlen($EditArray['order_bill_no']) == 0)
	{
		$ErrorFields[] = '#order_bill_no';
		$validationMessage[] = 'Enter bill number.';
		$isInVlid = 1;
	}
	if(strlen($EditArray['order_bill_date']) == 0)
	{
		$ErrorFields[] = '#order_bill_date';
		$validationMessage[] = 'Select bill date.';
		$isInVlid = 1;
	}
	if(strlen($EditArray['order_dispatch_date']) == 0)
	{
		$ErrorFields[] = '#order_dispatch_date';
		$validationMessage[] = 'Select dispatch date.';
		$isInVlid = 1;
	}
	if(strlen($EditArray['order_num_of_packets']) == 0)
	{
		$ErrorFields[] = '#order_num_of_packets';
		$validationMessage[] = 'Enter number of packets required for packing.';
		$isInVlid = 1;
	}
	if(count($EditArray['order_docket_no']) != $EditArray['order_num_of_packets'])
	{
	 	$ErrorFields[] = '#order_num_of_packets';
  	$validationMessage[] = 'Number of packets and number of docket# should match.';
  	$isInVlid = 1;																					 
	}
	for($i=0;$i<$EditArray['order_num_of_packets'];$i++)
	{
  	if(strlen($EditArray['order_docket_no'][$i]) == 0)
  	{
  		$ErrorFields[] = '#order_docket_no'.$i;
  		$validationMessage[] = 'Enter docket number.';
  		$isInVlid = 1;
  	}
	}	
	if(strlen($EditArray['order_dispatch_mode']) == 0)
	{
		$ErrorFields[] = '#order_dispatch_mode';
		$validationMessage[] = 'Select the dispatch mode.';
		$isInVlid = 1;
	}
	if(strlen($EditArray['order_service_provider_id']) == 0)
	{
		$ErrorFields[] = '#order_service_provider_id';
		$validationMessage[] = 'Select the courier name.';
		$isInVlid = 1;
	}
	
	if($isInVlid)
	{
		return false;
	}	
	return true;
}
?>

© 2025 Cubjrnet7