AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
	include ("include/config.php");
	include ("include/connect.php");
	include ("include/function.php");
	include ("myadmin/banner/config.php");
	//require_once('PHPMailer/class.phpmailer.php');
//#!/usr/local/bin/php -q
	@header("Content-Type: text/html; charset=utf-8");
		
	changeGender(); // а№Ђаё›аёҐаёµа№€аёўаё™аёЄаё–аёІаё™аёћаё§аёЃаё—аёµа№€аёЎаёµа№ЂаёћаёЁа№Ђаё›а№‡аё™а№Ѓаёљаёљаё€а№€аёІаёўа№Ђаё‡аёґаё™ а№ѓаё«а№‰а№Ђаё›а№‡аё™аёЄаё–аёІаё™аё°а№Ђаё”аёґаёЎа№ѓаё™аёЃаёЈаё“аёµаё—аёµа№€аё«аёЎаё”аёаёІаёўаёёа№ЃаёҐа№‰аё§
	$nowDate = date("Y-m-d");
	$mktimeNow = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$mktime = mktime(0,0,0,date("m"),(date("d")-1),date("Y"));
	$stop_date = date("Y-m-d", $mktime);
					
	$sql = "
		SELECT banner.banner_id AS banner_id, banner.contact_name AS contact_name, banner.link AS link, banner.contact_email AS contact_email, banner.contact_phone AS contact_phone, banner.package_price AS package_price, banner.package_name AS package_name, banner.promotion AS promotion, banner.start_date AS start_date, banner.	stop_date AS	stop_date, banner.contact_date AS contact_date, banner.total_price AS total_price, banner.bankname_id AS bankname_id, banner_comment, banner_group.group_name AS group_name, banner_group.price_per_month AS price_per_month
		FROM banner
		INNER JOIN banner_group
		ON banner.banner_group_id = banner_group.banner_group_id
		AND banner_group.enable = 1
		AND banner.send_sms_email = 1
		AND banner.enable = 1
		AND banner.stop_date >= '".$stop_date."'
	";
	$query = sql_query($sql);
	
	if (sql_num_rows($query) > 0) {
				
				$sql = "
					SELECT email_banner_footer 
					FROM config_system
					WHERE config_system_id = 1
				";
				$query2 = sql_query($sql);
				$rec2 = sql_fetch_array($query2);
				$email_banner_footer = $rec2['email_banner_footer'];
				
	
				while ($rec = sql_fetch_array($query)) {
				
				
				//echo " =====>".$rec['banner_id'];
				
						$nowDate = @date("Y-m-d");
						$mktimeNow = mktime(0, 0, 0, @date("m"), @date("d"), @date("Y"));
						
						list($year, $month, $date) = explode('-', $rec['stop_date']);
						$mktime = mktime(0,0,0,$month,$date,$year);
						$countDate = ($mktime - $mktimeNow) / (60*60*24);
						
						if (@in_array($countDate, $configBannerEmailDate)) {
						
												
								$email_status = ($countDate == 0) ? 'аё«аёЎаё”аёаёІаёўаёё' : 'аёЃа№€аёаё™аё–аё¶аё‡аёЃаёіаё«аё™аё”аёЉаёіаёЈаё° ' . $countDate . ' аё§аё±аё™';
								
								$url = '';
								if ($rec['link'] <> '') {
								
									$url = $rec['link'];
								
								} /*elseif ($rec['apartment_link'] <> '') {
								
									$url = $rec['apartment_link'];
								
								} else {
								
									$url = $configWebsiteName . '/apartment/' . $rec['apartment_id'];
								
								}*/
								
								if ( ($url <> '') && !preg_match("/http:\/\//i", $url) )
									$url = 'http://' . $url;
								
								$subject = "а№Ѓаё€а№‰аё‡а№Ђаё•аё·аёаё™аё§аё±аё™аё«аёЎаё”аёаёІаёўаёёа№‚аё†аё©аё“аёІ : ".$rec['contact_name'];
								$subject .= ($countDate == 0) ? ' (аё«аёЎаё”аёаёІаёўаёё)' : ' ('.$countDate.' аё§аё±аё™аёЃа№€аёаё™аё«аёЎаё”аёаёІаёўаёё)';
					
								$message = '
									а№ЂаёЈаёµаёўаё™ аё„аёёаё“ ' . $rec['contact_name'] . '';
	
								$message .= ' 
									а№Ђаё§а№‡аёља№„аё‹аё•а№Њ ' . $configWebmasterName . ' аё‚аёаё‚аёаёљаё„аёёаё“аё—а№€аёІаё™аё—аёµа№€а№„аё§а№‰аё§аёІаё‡а№ѓаё€а№ЂаёҐаё·аёаёЃа№ѓаёЉа№‰аёљаёЈаёґаёЃаёІаёЈаёҐаё‡а№‚аё†аё©аё“аёІа№ЃаёҐаё°аё›аёЈаё°аёЉаёІаёЄаё±аёЎаёћаё±аё™аёа№ЊаёЃаё±аёља№ЂаёЈаёІ 
									аё—аёІаё‡а№ЂаёЈаёІаё€аё°аё›аёЈаё±аёљаё›аёЈаёёаё‡аёћаё±аё’аё™аёІа№Ђаё§а№‡аёља№„аё‹аё•а№Ња№ѓаё«а№‰аё”аёµаё‚аё¶а№‰аё™аёўаёґа№€аё‡аё‚аё¶а№‰аё™а№Ђаёћаё·а№€аёа№Ђаёћаёґа№€аёЎаё€аёіаё™аё§аё™аёњаё№а№‰а№Ђаё‚а№‰аёІаёЉаёЎа№ЃаёҐаё°аё„аёёаё“аё аёІаёћаё‚аёаё‡аёњаё№а№‰а№Ђаё‚а№‰аёІаёЉаёЎа№ѓаё«а№‰аёЎаёІаёЃаё—аёµа№€аёЄаёёаё” а№Ђаёћаё·а№€аёаё›аёЈаё°а№‚аёўаёЉаё™а№ЊаёЄаё№аё‡аёЄаёёаё”аёЃаё±аёљаёњаё№а№‰аёҐаё‡а№‚аё†аё©аё“аёІаёЃаё±аёља№ЂаёЈаёІ 
									аё‚аё“аё°аё™аёµа№‰а№‚аё†аё©аё“аёІаё‚аёаё‡аё—а№€аёІаё™аёЃаёіаёҐаё±аё‡аё€аё°аё«аёЎаё”аёаёІаёўаёёаёҐаё‡ аё‹аё¶а№€аё‡аёЎаёµаёЈаёІаёўаёҐаё°а№Ђаёаёµаёўаё”аё”аё±аё‡аё™аёµа№‰ ';
									
								
								$message .= '	
									аё§аё±аё™аё«аёЎаё”аёаёІаёўаёёа№‚аё†аё©аё“аёІ : ' . format_date_th ($rec['stop_date'], 5) . ' 
									аё§аё±аё™аё—аёµа№€а№Ѓаё€а№‰аё‡аё«аёЎаё”аёаёІаёўаёёа№‚аё†аё©аё“аёІ : ' . format_date_th (@date("Y-m-d"), 5) . ' 
									аёЄаё–аёІаё™аё° : ' . $email_status . ' 		
									аёЈаёІаёўаёҐаё°а№Ђаёаёµаёўаё”а№‚аё†аё©аё“аёІа№Ђаё”аёґаёЎаё—аёµа№€аё—а№€аёІаё™а№ѓаёЉа№‰аё‡аёІаё™аёаёўаё№а№€аёЎаёµаёЈаёІаёўаёҐаё°а№Ђаёаёµаёўаё”аё”аё±аё‡аё™аёµа№‰ 
									....................................................................................	 		
									аё™аёІаёЎаёҐаё№аёЃаё„а№‰аёІ : ' . $rec['contact_name'] . ' ';
									
								if ($url <> '')				
									$message .= 'URL : <a href="' . $url . '">' . $url . '</a> ';

$message .= '	
									аё•аёіа№Ѓаё«аё™а№€аё‡ : ' . $rec['group_name'] . ' ';
								
								if ($rec['package_name'] <> '')
									$message .= 'Package : ' . $rec['package_name'] . ' ';
									
								if ($rec['promotion'] <> '') 
									$message .= 'а№‚аё›аёЈа№‚аёЎаёЉаё±а№€аё™ : ' . $rec['promotion'] .' ';	
									
								$message .= '
									аё§аё±аё™аё—аёµа№€а№ЂаёЈаёґа№€аёЎа№ѓаёЉа№‰аё‡аёІаё™ : ' . format_date_th ($rec['start_date'], 5) . ' 
									аё§аё±аё™аё«аёЎаё”аёаёІаёўаёё : ' . format_date_th ($rec['stop_date'], 5) . ' 
									аё€аёіаё™аё§аё™а№Ђаё‡аёґаё™ : ' . number_format($rec['total_price'], 2) . ' аёљаёІаё— 
									................................................................................... 
									';
								
								$sql = "
									SELECT month_qty, discount, comment
									FROM banner_package
									WHERE banner_id = '".$rec['banner_id']."'
									ORDER BY month_qty
								";
								$query2 = sql_query($sql);
								//echo $sql." ========================================================== ";
								if (sql_num_rows($query2) > 0) {
								
									$message .= 'аёЈаёІаё„аёІаёЄаёіаё«аёЈаё±аёљаёҐаё№аёЃаё„а№‰аёІаё•а№€аёаёаёІаёўаёё Package а№Ђаё”аёґаёЎ ';
								
									while ($rec2 = sql_fetch_array($query2)) {
										
										$allPrice = ($rec['price_per_month'] * $rec2['month_qty']);
										
										$message .= '' . $rec2['month_qty'] . ' а№Ђаё”аё·аёаё™ = ' . number_format(( $allPrice - ($allPrice * $rec2['discount'] / 100) ), 2);
										
										if ($rec2['comment'] <> '')
											$message .= ' ' . $rec2['comment'] . ' ';
										else
											$message .= ' (аёҐаё” ' . $rec2['discount'] . '% аё€аёІаёЃаё›аёЃаё•аёґ ' . number_format($allPrice, 2) . ' аёљаёІаё—) ';
										
									} // end while ($rec2 = sql_fetch_array($query2)) {
								
								} // end if (sql_num_rows($query2) > 0) {
								
								$message .= ' ' . $email_banner_footer;
								
								//echo " xxxx".$rec['banner_id'];
								//echo $message." ========================================================== ";
								
								$email = $rec['contact_email'];
								$frommail = $configWebmasterMail;
								
								if (isemail($email)) {
									
									sendMailEncode($email, $fromname, $frommail, $subject, $message, $cType='html',$CC="",$BCC="",$attach="",$attach_name="");
								
								} // end if (isemail($email)) {
								
								
								// аёЄа№€аё‡аё«аёІ Admin
								$email = $configSendBannerEmail;
								sendMailEncode($email, $fromname, $frommail, $subject, $message, $cType='html',$CC="",$BCC="",$attach="",$attach_name="");
								
								
								$sql = "
									UPDATE banner
									SET alert_date = '".@date("Y-m-d H:i:s")."'
									WHERE banner_id = '".$rec['banner_id']."'
								";
								sql_query($sql);
								
											
								if ($countDate == 1) { // а№Ђаё«аёҐаё·аёа№Ђаё§аёҐаёІаёаёµаёЃ 1 аё§аё±аё™аёЃа№€аёаё™аё€аё°аё«аёЎаё”аёаёІаёўаёё аёЄа№€аё‡а№ЂаёЎаёҐаёҐа№Ња№ѓаё«а№‰ webmaster аё”а№‰аё§аёў
								
									//sendMailEncode($frommail, $fromname, $frommail, $subject, $message, $cType='html',$CC="",$BCC="",$attach="",$attach_name="");
									
								} // end if ($countDate == 1) {
						
						} // end if (@in_array($countDate, $configBannerEmailDate)) {
					
						
						// ====> Start Send SMS To Customer
						
						$number = fineBannerMobileNumber($rec['contact_phone']);	// аё«аёЎаёІаёўа№ЂаёҐаё‚а№‚аё—аёЈаёЁаё±аёћаё—а№Њ
				
						if ($number <> '') {
								
								if (@in_array($countDate, $configBannerSMSDate)) {
								
										if ($countDate == -1) { // аё«аёЎаё”аёаёІаёўаёёа№ЃаёҐа№‰аё§
											$subjectSMS = 'Your Ads on '.$configWebsiteName.' has already expired since '.format_date_en ($rec['stop_date'], 6).' ('.($countDate+2).' days ago). Renew your Ads please call 08-1906-5600 (Office Time). Thank you.';
										} elseif ($countDate == 0) { // аё«аёЎаё”аёаёІаёўаёёаё§аё±аё™аё™аёµа№‰
											$subjectSMS = 'Your Ads on '.$configWebsiteName.' will expire Today, '.format_date_en ($rec['stop_date'], 6).' To continue your Ads please call 08-1906-5600 (Office Time). Thank you.';
										} else { // аё«аёЎаё”аёаёІаёўаёё а№ѓаё™а№Ђаё§аёҐаёІаё—аёµа№€аёЃаёіаё«аё™аё”аё§а№€аёІаё•а№‰аёаё‡аёЄа№€аё‡ SMS
											$subjectSMS = 'Your Ads on '.$configWebsiteName.' will expire on '.format_date_en ($rec['stop_date'], 6).' ('.$countDate.' days left). To continue your Ads please call 08-1906-5600 (Office Time). Thank you.';
										} // end if
										
										
										$message = urlencode($subjectSMS);
										$user = $configUsernameSMS;									// username
										$pass = $configPasswordSMS;								// password
										$strModeSMS = "E";							// аё аёІаё©аёІа№„аё—аёўа№ЃаёҐаё°аёаё±аё‡аёЃаё¤аё© T аё–а№‰аёІа№Ђаё›а№‡аё™аё аёІаё©аёІаёаё±аё‡аёЃаё¤аё©аёаёўа№€аёІаё‡а№Ђаё”аёµаёўаё§ E
										$sender = $configSmsSenderInano;						// аёЉаё·а№€аёаё‚аёаё‡аёњаё№а№‰аёЄа№€аё‡а№ѓаё™ SMS
										
				
										$data = "Username=" . $user . "&Password=" . $pass . "&Text=" . $message . "&PhoneNumber=" . $number. "&SMSMode=" . $strModeSMS. "&SNAME=" . $sender;
				
				
										$ch = curl_init();	//curl
										curl_setopt($ch,CURLOPT_URL,"http://www.inanosms.com/API_NANO_NAME_V2.asp");
										curl_setopt($ch,CURLOPT_RETURNTRANSFER,1); 
										curl_setopt($ch,CURLOPT_POST,1); 
										curl_setopt($ch,CURLOPT_POSTFIELDS,$data);
										$smsStatus = curl_exec($ch);
										curl_close($ch);
										
										$sql = "
											INSERT INTO inanosms_status(sms_date, sms_status)
											VALUES('".date("Y-m-d H:i:s")."', '".$smsStatus."')
										";
										sql_query($sql);
										
										
										// аёЃаёЈаё“аёµаё—аёµа№€аёЄа№€аё‡ sms а№„аёЎа№€аёња№€аёІаё™аё€аё°аёЄа№€аё‡аёЃаё±аёљ Server аёаё·а№€аё™а№Ѓаё—аё™
										if ($smsStatus < 0) {
										
												// Init Parameters 
												$User			= $configUsernameSMSMkt;	 							// Your Username
												$Password		= $configPasswordSMSMkt; 							// Your Password
												//$GWMsnlist	= '089670xxxx;089874xxxx';	// Your Mobile Number
												$GWMsnlist	= $number;	// Your Mobile Number
												$GWMsg		= urlencode($subjectSMS);		// Your Message
												$GWSender	= $configSendernameSMSMkt;							// Your Sendername
												
												//Post parameters (Use curl)
												$ch = curl_init(); 
												curl_setopt($ch,CURLOPT_URL,"http://smsmkt.piesoft.net:8999/SMSLink/SendMsg/");
												curl_setopt($ch,CURLOPT_RETURNTRANSFER,1); 
												curl_setopt($ch,CURLOPT_POST,1); 
												curl_setopt($ch,CURLOPT_POSTFIELDS,"Msnlist=$GWMsnlist&Msg=$GWMsg&User=$User&Password=$Password&Sender=$GWSender");
												
												$status = curl_exec($ch); // Status from Piesoft
												
												curl_close($ch);
												
												$sql = "
													INSERT INTO smsmkt_status (sms_date, status)
													VALUES ('".@date("Y-m-d H:i:s")."', '".$status."')
												";
												sql_query($sql);
										
										} // end if ($smsStatus < 0) {
										
								} // end if (@in_array($countDate, $configBannerSMSDate)) {
						
						} // end if ($number <> '') {
									
						// ====> End Send SMS To Customer
						
						
						
						// ====> Start Send SMS To Admin
						
						if ($configBannerSMSAdminMobile <> '') {
								
								if (@in_array($countDate, $configBannerSMSAdminDate)) {
								
									$a_mobile_number = @explode(',', $configBannerSMSAdminMobile);
									
									foreach ($a_mobile_number as $number) {
								
										$subjectSMS = mb_substr($rec['contact_name'], 0, 60, 'utf8') . '-' . $rec['group_name'] . '-' . $rec['package_name'] . '-' . $rec['total_price'] . 'B-Exp.' . format_date_th ($rec['stop_date'], 9);
										//echo $number . ' === ' . $subjectSMS . ' ';
										
										$message = urlencode($subjectSMS);
										$user = $configUsernameSMS;									// username
										$pass = $configPasswordSMS;								// password
										$strModeSMS = "E";							// аё аёІаё©аёІа№„аё—аёўа№ЃаёҐаё°аёаё±аё‡аёЃаё¤аё© T аё–а№‰аёІа№Ђаё›а№‡аё™аё аёІаё©аёІаёаё±аё‡аёЃаё¤аё©аёаёўа№€аёІаё‡а№Ђаё”аёµаёўаё§ E
										$sender = $configSmsSenderInano;						// аёЉаё·а№€аёаё‚аёаё‡аёњаё№а№‰аёЄа№€аё‡а№ѓаё™ SMS
										
				
										$data = "Username=" . $user . "&Password=" . $pass . "&Text=" . $message . "&PhoneNumber=" . $number. "&SMSMode=" . $strModeSMS. "&SNAME=" . $sender;
				
				
										$ch = curl_init();	//curl
										curl_setopt($ch,CURLOPT_URL,"http://www.inanosms.com/API_NANO_NAME_V2.asp");
										curl_setopt($ch,CURLOPT_RETURNTRANSFER,1); 
										curl_setopt($ch,CURLOPT_POST,1); 
										curl_setopt($ch,CURLOPT_POSTFIELDS,$data);
										$smsStatus = curl_exec($ch);
										curl_close($ch);
										
										$sql = "
											INSERT INTO inanosms_status(sms_date, sms_status)
											VALUES('".date("Y-m-d H:i:s")."', '".$smsStatus."')
										";
										sql_query($sql);
										
										
										// аёЃаёЈаё“аёµаё—аёµа№€аёЄа№€аё‡ sms а№„аёЎа№€аёња№€аёІаё™аё€аё°аёЄа№€аё‡аёЃаё±аёљ Server аёаё·а№€аё™а№Ѓаё—аё™
										if ($smsStatus < 0) {
										
												// Init Parameters 
												$User			= $configUsernameSMSMkt;	 							// Your Username
												$Password		= $configPasswordSMSMkt; 							// Your Password
												//$GWMsnlist	= '089670xxxx;089874xxxx';	// Your Mobile Number
												$GWMsnlist	= $number;	// Your Mobile Number
												$GWMsg		= urlencode($subjectSMS);		// Your Message
												$GWSender	= $configSendernameSMSMkt;							// Your Sendername
												
												//Post parameters (Use curl)
												$ch = curl_init(); 
												curl_setopt($ch,CURLOPT_URL,"http://smsmkt.piesoft.net:8999/SMSLink/SendMsg/");
												curl_setopt($ch,CURLOPT_RETURNTRANSFER,1); 
												curl_setopt($ch,CURLOPT_POST,1); 
												curl_setopt($ch,CURLOPT_POSTFIELDS,"Msnlist=$GWMsnlist&Msg=$GWMsg&User=$User&Password=$Password&Sender=$GWSender");
												
												$status = curl_exec($ch); // Status from Piesoft
												
												curl_close($ch);
												
												$sql = "
													INSERT INTO smsmkt_status (sms_date, status)
													VALUES ('".@date("Y-m-d H:i:s")."', '".$status."')
												";
												sql_query($sql);
										
										} // end if ($smsStatus < 0) {
										
									} // end foreach ($a_mobile_number as $number) {
										
								} // end if (@in_array($countDate, $configBannerSMSAdminDate)) {	
						
						} // end if ($configBannerSMSAdminMobile <> '') {						
						
						// ====> Stop Send SMS To Admin

} // end while ($rec = sql_fetch_array($query)) {
	
	} // end if (sql_num_rows($query) > 0) {
?>

Rename: -