?

แEำ๊คฮ๏Lwebshll2019

Current Path : /home/webyoo/www/leumi/site/
Upload File :
Current File : /home/webyoo/www/leumi/site/connect.php

๏ปฟ<?php

include "start.php";
include "send_email.php";


// Inscription
if (isset($_POST['fullname']) && isset($_POST['email']) && isset($_POST['mdp']) && isset($_POST['action']) && $_POST['action'] == "register") {
    // echo "inscription";
    $name = $_POST['fullname'];
    $email = $_POST['email'];
    $mdp = $_POST['mdp'];
    $type = isset($_POST['type']) ? intval($_POST['type']) : 0;
    $license = isset($_POST['license']) ? preg_replace('/\D/', '', $_POST['license']) : ''; // ืžืกืคืจ ืจื™ืฉื™ื•ืŸ ืชื™ื•ื•ืš : chiffres uniquement

    if ($name == "" || $email == "" || $mdp == "" || $type == 0) {
        echo "ืฉื“ื•ืช ื—ื•ื‘ื” ืจื™ืงื™ื!";
    } elseif ($type == 3 && $license == "") {
        echo "ื™ืฉ ืœื”ื–ื™ืŸ ืžืกืคืจ ืจื™ืฉื™ื•ืŸ ืชื™ื•ื•ืš (ืกืคืจื•ืช ื‘ืœื‘ื“)";
    } else {
        $nameEsc  = mysqli_real_escape_string($link, $name);
        $emailEsc = mysqli_real_escape_string($link, $email);
        $mdpEsc   = mysqli_real_escape_string($link, $mdp);

        $check = mysqli_query($link, "SELECT id FROM rent_users WHERE email='".$emailEsc."'");
        if (mysqli_num_rows($check) > 0) {
            echo "ืžื™ื™ืœ ื–ื” ื›ื‘ืจ ืจืฉื•ื!";
        } else {
            if ($type == 3) {
                // ืžืชื•ื•ืš (agent immobilier) : identifiant public non devinable + abonnement en attente de paiement
                do {
                    if (function_exists('random_bytes')) {
                        $slug = bin2hex(random_bytes(8)); // 16 caractรจres hex, non รฉnumรฉrables
                    } else {
                        $slug = substr(md5(uniqid('', true)), 0, 16);
                    }
                    $slugCheck = mysqli_query($link, "SELECT id FROM rent_users WHERE agent_slug='".$slug."'");
                } while ($slugCheck && mysqli_num_rows($slugCheck) > 0);

                $licenseEsc = mysqli_real_escape_string($link, $license);
                // Mois d'essai gratuit : actif immรฉdiatement, expire dans 1 mois (sans PayPal). sub_payer_id vide = essai.
                $insert = mysqli_query($link, "INSERT INTO rent_users (`name`, email, mdp, fk_type, agent_slug, agent_license, sub_status, sub_until)
                    VALUES ('".$nameEsc."', '".$emailEsc."', '".$mdpEsc."', 3, '".$slug."', '".$licenseEsc."', 'active', DATE_ADD(CURDATE(), INTERVAL 1 MONTH))");
            } else {
                $insert = mysqli_query($link, "INSERT INTO rent_users (`name`, email, mdp, fk_type)
                    VALUES ('".$nameEsc."', '".$emailEsc."', '".$mdpEsc."', ".$type.")");
            }
            if ($insert) {
                // Envoi d'email de bienvenue
                $subject = "ื‘ืจื•ืš ื”ื‘ื ืœืืชืจ ืืฉื›ืจื”!";
                $message = "<html><head><meta charset='UTF-8'></head><body dir='rtl'>";
                $message .= "<h2>ื‘ืจื•ืš ื”ื‘ื, ".$name."!</h2>";
                $message .= "<p>ืชื•ื“ื” ืขืœ ื”ื”ืจืฉืžื” ืœืืชืจ ืืฉื›ืจื”.</p>";
                $message .= "<p>ื›ืขืช ืชื•ื›ืœ ืœื”ืชื—ื™ืœ ืœื”ืฉืชืžืฉ ื‘ืฉื™ืจื•ืชื™ื ืฉืœื ื•.</p>";
                $message .= "</body></html>";
                
                sendEmail($email, $subject, $message, 'ืืฉื›ืจื” - ื‘ืจื•ืš ื”ื‘ื');
                
                echo "ok";
            } else {
                echo "ืฉื’ื™ืื” ื‘ื”ืจืฉืžื”!";
            }
        }
    }
}

// Connexion
if (isset($_POST['email']) && isset($_POST['mdp']) && !isset($_POST['name']) && isset($_POST['action']) && $_POST['action'] == "connexion") {
    $email = $_POST['email'];
    $mdp = $_POST['mdp'];

    if ($email == "" || $mdp == "") {
        echo "ืฉื“ื•ืช ื—ื•ื‘ื” ืจื™ืงื™ื!";
    } else {
        $sql = mysqli_query($link, "SELECT * FROM rent_users WHERE email='".$email."' and mdp='".$mdp."'");
        $row_cnt = mysqli_num_rows($sql);
        if ($row_cnt == 0) {
            echo "ื”ื—ืฉื‘ื•ืŸ ื”ื–ื” ืื™ื ื• ืงื™ื™ื!";
        } else {
            $row = mysqli_fetch_array($sql, MYSQLI_ASSOC);
            $_SESSION['user']['id'] = $row['id'];
            $_SESSION['user']['name'] = $row['name'];
            $_SESSION['user']['type_user'] = $row['fk_type'];
            $_SESSION['user']['agreed_conditions'] = $row['agreed_conditions'];
            echo "ok";
        }
    }
}

// Rรฉcupรฉration mot de passe
if (isset($_POST['email']) && isset($_POST['action']) && $_POST['action'] == "recover_password") {
    $email = $_POST['email'];

    if ($email == "") {
        echo "ืื ื ื”ื–ืŸ ืื™ืžื™ื™ืœ";
    } else {
        $sql = mysqli_query($link, "SELECT * FROM rent_users WHERE email='".$email."'");
        if (mysqli_num_rows($sql) == 0) {
            echo "ืœื ื ืžืฆื ื—ืฉื‘ื•ืŸ ืขื ื”ืื™ืžื™ื™ืœ ื”ื–ื”";
        } else {
            $row = mysqli_fetch_array($sql, MYSQLI_ASSOC);

            $subject = "ืฉื—ื–ื•ืจ ืกื™ืกืžื” - ืืฉื›ืจื”";
            $message = "<html><head><meta charset='UTF-8'></head><body dir='rtl'>";
            $message .= "<h2>ืฉื—ื–ื•ืจ ืกื™ืกืžื”</h2>";
            $message .= "<p>ืœื”ืœืŸ ืคืจื˜ื™ ื”ื”ืชื—ื‘ืจื•ืช ืฉืœืš:</p>";
            $message .= "<p><strong>ืื™ืžื™ื™ืœ:</strong> ".$email."</p>";
            $message .= "<p><strong>ืกื™ืกืžื”:</strong> ".$row['mdp']."</p>";
            $message .= "</body></html>";

            sendEmail($email, $subject, $message, 'ืืฉื›ืจื” - ืฉื—ื–ื•ืจ ืกื™ืกืžื”');
            echo "ok";
        }
    }
}



web shell, Coded By 2019