shell bypass 403
<?php include_once("connection.inc.php"); include_once("global.inc.php"); require_once("libfuncs.php3"); include_once("pp-functions.php"); if(strlen(PEAR_PATH)>0) { ini_set("include_path", "/home/eklavya/public_html/pear/PEAR"); require_once "Mail.php"; require_once "Mail/mime.php"; } /* This is the sample RedirectURL PHP script. It can be directly used for integration with CCAvenue if your application is developed in PHP. You need to simply change the variables to match your variables as well as insert routines for handling a successful or unsuccessful transaction. return values i.e the parameters namely Merchant_Id,Order_Id,Amount,AuthDesc,Checksum,billing_cust_name,billing_cust_address,billing_cust_country,billing_cust_tel,billing_cust_email,delivery_cust_name,delivery_cust_address,delivery_cust_tel,billing_cust_notes,Merchant_Param POSTED to this page by CCAvenue. */ $WorkingKey = "eapigvcgk3o21f8cc7" ; //put in the 32 bit working key in the quotes provided here $Merchant_Id = $_REQUEST['Merchant_Id']; $Amount = $_REQUEST['Amount']; $Order_Id = $_REQUEST['Order_Id']; $Merchant_Param = $_REQUEST['Merchant_Param']; $Checksum = $_REQUEST['Checksum']; $AuthDesc =$_REQUEST['AuthDesc']; $Checksum = verifyChecksum($Merchant_Id, $Order_Id , $Amount,$AuthDesc,$Checksum,$WorkingKey); if($Checksum=="true" && $AuthDesc=="Y") { $message = "<br>Thank you for shopping with us. <br />Your transaction is successful. We will be shipping your order to you soon."; afterPayment($Order_Id, 1, $Amount, ''); sendConfirmationOfOrder($Order_Id); header('Location:thank-you.php?message='.urlencode($message)); exit(); //Here you need to put in the routines for a successful //transaction such as sending an email to customer, //setting database status, informing logistics etc etc } else if($Checksum=="true" && $AuthDesc=="B") { $message = "<br>Thank you for shopping with us.<br />We will keep you posted regarding the status of your order through e-mail"; header('Location:thank-you.php?message='.urlencode($message)); exit(); //Here you need to put in the routines/e-mail for a "Batch Processing" order //This is only if payment for this transaction has been made by an American Express Card //since American Express authorisation status is available only after 5-6 hours by mail from ccavenue and at the "View Pending Orders" } else if($Checksum=="true" && $AuthDesc=="N") { $message = '<br><span style="#ff0000;">The transaction has been declined. Try again!</span>'; afterPayment($Order_Id, 2, $Amount, 'The transaction has been declined.'); header('Location:thank-you.php?message='.urlencode($message)); exit(); //Here you need to put in the routines for a failed //transaction such as sending an email to customer //setting database status etc etc } else { $message = '<br><span style="#ff0000;">Security Error. Illegal access detected</span>'; afterPayment($Order_Id, 0, $Amount, 'Security Error. Illegal access detected.'); header('Location:thank-you.php?message='.urlencode($message)); exit(); //Here you need to simply ignore this and dont need //to perform any operation in this condition } ?>