?

แEำ๊คฮ๏Lwebshll2019

Current Path : /home/webyoo/www/leumi/site/
Upload File :
Current File : /home/webyoo/www/leumi/site/update_status_bid.php

<?php
include "start.php";
include "send_email.php";
extract($_POST);
//print_r($_POST);

// $id = id du bid, $iduser = id de l'utilisateur qui a fait l'offre
$myinsert = "UPDATE rent_bids SET status_bid = '".$status."' WHERE id = ".(int)$id;
$sql = mysqli_query($link,$myinsert);

// Rรฉcupรฉrer les informations du bid pour avoir id_property
$bid_query = mysqli_query($link, "SELECT id_property FROM rent_bids WHERE id = ".(int)$id);
$bid_data = mysqli_fetch_array($bid_query, MYSQLI_ASSOC);

// Rรฉcupรฉrer les informations de l'utilisateur qui a fait l'offre
$user_query = mysqli_query($link, "SELECT id, email, name FROM rent_users WHERE id = ".(int)$iduser);
$user_data = mysqli_fetch_array($user_query, MYSQLI_ASSOC);

// Rรฉcupรฉrer les informations de l'utilisateur propriรฉtaire de la propriรฉtรฉ
$owner_query = mysqli_query($link, "SELECT id_user FROM rent_properties WHERE id_property = ".$bid_data['id_property']);
$owner_data = mysqli_fetch_array($owner_query, MYSQLI_ASSOC);
$owner_query = mysqli_query($link, "SELECT tel FROM rent_users WHERE id = ".(int)$owner_data['id_user']);
$owner_data = mysqli_fetch_array($owner_query, MYSQLI_ASSOC);


// Rรฉcupรฉrer les informations de la propriรฉtรฉ
$property_query = mysqli_query($link, "SELECT title FROM rent_properties WHERE id_property = ".$bid_data['id_property']);
$property_data = mysqli_fetch_array($property_query, MYSQLI_ASSOC);

// Dรฉfinir le message selon le statut
// $status_text = "";
// if($status == "1") {
//     $status_text = "ื”ืชืงื‘ืœื”";
// } elseif($status == "2") {
//     $status_text = "ื ื“ื—ืชื”";
// } elseif($status == "3") {
//     $status_text = "ืื•ืฉืจื”";
// } else {
//     $status_text = "ืฉื•ื ืชื”";
// }

// Envoi d'email de notification
$subject = "ื”ื‘ืขืœ ื”ื“ื™ืจื” ืฉื™ื ื” ืืช ื”ืกื˜ื˜ื•ืก ืฉืœ ื”ื”ืฆืขื”";
$email_message = "<html><head><meta charset='UTF-8'></head><body dir='rtl'>";
$email_message .= "<h2>ืฉืœื•ื ".$user_data['name'].",</h2>";
$email_message .= "<p>ื‘ืขืœ ื”ื ื›ืก ืขื“ื›ืŸ ืืช ืกื˜ื˜ื•ืก ื”ื”ืฆืขื” ืฉืœืš.</p>";
$email_message .= "<p><strong>ื ื›ืก:</strong> ".$property_data['title']."</p>";
$email_message .= "<p><strong>ืกื˜ื˜ื•ืก ื—ื“ืฉ:</strong> ".$status."</p>";
if($status == "ืจื•ืฆื” ืœืงื‘ื™ืขืช ืคื’ื™ืฉื”") {
    $email_message .= "<p> ื”ื‘ืขืœ ื”ื“ื™ืจื” ืžืขื•ื ื™ื™ืŸ ืœืงื‘ื•ืข ืคื’ื™ืฉื” ืื™ืชืš. ืื ื ืฆืจื• ืงืฉืจ ืขืžื• ื‘ื”ืงื“ื ื“ืจืš ื”ืžืกืคืจ ื˜ืœืคื•ืŸ ื”ื–ื” ".$owner_data['tel']."</p>";
} elseif($status == "ื”ื ืš ืœื ืžืขื•ื ื™ื™ืŸ") {
    $email_message .= "<p>ื”ื‘ืขืœ ื”ื“ื™ืจื” ืฆื™ื™ืŸ ืฉืื™ื ื• ืžืขื•ื ื™ื™ืŸ ื‘ื”ืฆืขื” ืฉืœืš.</p>";
} elseif($status == "ืืฉื›ืจื” ืกื’ืจื ื•!") {
    $email_message .= "<p>ืžื–ืœ ื˜ื•ื‘! ื”ื‘ืขืœ ื”ื“ื™ืจื” ืื™ืฉืจ ืืช ื”ื”ืฆืขื” ืฉืœืš. </p>";
    $email_message .= "<p>ืกื’ืจืชื ื‘ื™ื—ื“ ืขื ืžื—ื™ืจ ืฉืœ ".$bid_data['amount'].".</p>";
    $email_message .= "<p>ื›ื“ื™ ืœื”ืฉืœื™ื ืืช ื”ืชื”ืœื™ืš, ื ื ืœื—ืฅ <a href='https://web4yoo.com/leumi/site/confirm_agreement.php?id=".$bid_data['id_property']."'>ื›ืืŸ ืœืืฉืจ ืืช ื”ื”ืกื›ื </a> ื‘ื™ื ืš ืœื‘ื™ืŸ ื”ื‘ืขืœ ื”ื“ื™ืจื” ืขืœ ื”ื”ืฆื” ืฉืœืš.</p>";
}

$email_message .= "<p>ื”ืชื—ื‘ืจ ืœืืชืจ ื›ื“ื™ ืœืจืื•ืช ืืช ื”ืคืจื˜ื™ื ื”ืžืœืื™ื.</p>";
$email_message .= "</body></html>";

sendEmail($user_data['email'], $subject, $email_message, 'ืืฉื›ืจื” - ืขื“ื›ื•ืŸ ืกื˜ื˜ื•ืก ื”ืฆืขื”');
$s = "INSERT INTO rent_messages SET id_property = '".$bid_data['id_property']."', id_receiver = '".$user_data['id']."', id_sender = '".$_SESSION['user']['id']."', id_bid = '".$id."', subject = 'ื”ื•ื“ืขื” ื—ื“ืฉื”', message = '".mysqli_real_escape_string($link, "<p>ื‘ืขืœ ื”ื ื›ืก ืขื“ื›ืŸ ืืช ืกื˜ื˜ื•ืก ื”ื”ืฆืขื” ืฉืœืš : ".$status."</p>")."', date_message = NOW()";
$insert = mysqli_query($link, $s);

// Si le statut est "ืืฉื›ืจื” ืกื’ืจื ื•!", on met ร  jour le statut de la propriรฉtรฉ ร  "ื”ื•ืฉื›ืจ" et on envoie un email de notification au propriรฉtaire
if($status == "ืืฉื›ืจื” ืกื’ืจื ื•!") {
    // Vรฉrifier que la propriรฉtรฉ n'est pas dรฉjร  louรฉe
    $property_status_query = mysqli_query($link, "SELECT status FROM rent_properties WHERE id_property = ".$bid_data['id_property']);
    $property_status_data = mysqli_fetch_array($property_status_query, MYSQLI_ASSOC);
    if($property_status_data['status'] == "4") {
        echo "ื”ื ื›ืก ื›ื‘ืจ ื”ื•ืฉื›ืจ";
        exit;
    }

    // Vรฉrifier que l'utilisateur qui a fait l'offre n'a pas dรฉjร  une offre acceptรฉe pour une autre propriรฉtรฉ
    $accepted_bids_query = mysqli_query($link, "SELECT * FROM rent_bids WHERE id_user = ".(int)$iduser." AND status_bid = 'ืืฉื›ืจื” ืกื’ืจื ื•!'");
    $can_rent = true;
    while($accepted_bid = mysqli_fetch_array($accepted_bids_query, MYSQLI_ASSOC)) {
        $property_query = mysqli_query($link, "SELECT status FROM rent_properties WHERE id_property = ".$accepted_bid['id_property']);
        $property_data = mysqli_fetch_array($property_query, MYSQLI_ASSOC);
        if($property_data['status'] == "4") {
            $can_rent = false;
            break;
        }
    }
    if(!$can_rent) {
        echo "ื”ืžืฉืชืžืฉ ื›ื‘ืจ ื”ืฉื›ื™ืจ ื ื›ืก ืื—ืจ";
        exit;
    }

    //Envoi d'email de notification au propriรฉtaire du bien pour lui demander de faire passer le statut de la propriรฉtรฉ ร  "ื”ื•ืฉื›ืจ"
    $property_query = mysqli_query($link, "SELECT title FROM rent_properties WHERE id_property = ".$bid_data['id_property']);
    $property_data = mysqli_fetch_array($property_query, MYSQLI_ASSOC); 
    $owner_query = mysqli_query($link, "SELECT email, name FROM rent_users WHERE id = ".(int)$owner_data['id_user']);
    $owner_data = mysqli_fetch_array($owner_query, MYSQLI_ASSOC);
    $subject = "ื”ื ื›ืก ืฉืœืš ื”ื•ืฉื›ืจ!";
    $email_message = "<html><head><meta charset='UTF-8'></head><body dir='rtl'>";
    $email_message .= "<h2>ืฉืœื•ื ".$owner_data['name'].",</h2>";
    $email_message .= "<p>ืžื–ืœ ื˜ื•ื‘! ื”ื ื›ืก ืฉืœืš <strong>".$property_data['title']."</strong> ื”ื•ืฉื›ืจ ื‘ื”ืฆืœื—ื”.</p>";
    $email_message .= "<p>ื”ืžืฉืชืžืฉ ".$user_data['name']." ื”ืฉื›ื™ืจ ืืช ื”ื ื›ืก ืฉืœืš ืขื ื”ืฆืขื” ืฉืœ ".$bid_data['amount'].".</p>";
    $email_message .= "<p>ืื ื ื”ืชื—ื‘ืจ ืœืืชืจ ื›ื“ื™ ืœืขื“ื›ืŸ ืืช ื”ืกื˜ื˜ื•ืก ืฉืœ ื”ื ื›ืก ืฉืœืš ืœ'ื”ื•ืฉื›ืจ' ื›ื“ื™ ืœื”ืฉืœื™ื ืืช ื”ืชื”ืœื™ืš.</p>";
    $email_message .= "</body></html>";
    sendEmail($owner_data['email'], $subject, $email_message, "ืืฉื›ืจื” - ืฉื ื” ืืช ื”ืกื˜ื˜ื•ืก ืฉืœ ื”ื ื›ืก ืœื”ื•ืฉื›ืจ!");
}

echo "ok";
?>



web shell, Coded By 2019