403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/imusiccircle/paypal_testing/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/imusiccircle/paypal_testing/paypal_notify.php
<?php
// inspect IPN validation result and act accordingly

	unset($paypal_data);
	$data = $_POST;

	foreach ($data as $name => $value) {
		$text .= $name . '=' . $value . '<br>';
	}
	$paypal_data['text']       = $text . $_SERVER['REMOTE_ADDR'];
	$paypal_data['createdate'] = date("Y-m-d H:i:s");

	$sql = mysql_install($paypal_data, 'paypal_log', 'add', '', '', 2);
	bind_pdo($sql, array());

	if ($_POST) {
		$ip = $_SERVER['REMOTE_ADDR'];
		//$ip = '173.0.82.126';
		if(substr($ip, 0, -7) == '173.0'){
			if ($data['txn_id'] && $data['payment_status']) {
				$sql     = "SELECT count(*) as count FROM `order` where paypal_id = ? and id != ?";
				$has_txn = bind_pdo($sql, array($data['txn_id'], intval($data['custom'])), "selectone");
				if ($has_txn['count'] == 0) {
					unset($tmp_order_data);
					if ($data['payment_status'] == 'Completed' && $data['txn_type'] == 'web_accept') {
						$tmp_order_data['status'] = 'paid';
					} elseif ($data['payment_status'] == 'Refunded') {
						$tmp_order_data['status'] = 'refunded';
					} else {
						$tmp_order_data['status'] = 'cancel';
					}
					send_order_notification($tmp_order_data['status'], intval($data['custom']));
					$tmp_order_data['paypal_id']   = $data['txn_id'];
					$tmp_order_data['paypal_date'] = date("Y-m-d H:i:s");
					$tmp_order_data['status']      = 'paid';
					$sql                           = mysql_install($tmp_order_data, 'order', 'edit', 'id');
					$tmp_order_data['id']          = intval($data['custom']);
					$arraykey                      = array_keys($tmp_order_data);
					unset($parameters);
					for ($i = 0; $i < count($arraykey); $i++) {
						$parameters[$i] = $tmp_order_data[$arraykey[$i]];
					}
					bind_pdo($sql, $parameters);
					/*
					if($data['payment_status']=='Completed'){
						$MatchTeamApp->sendMail(intval($data['custom']));
					}*/
				}
			}
		}
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit