403Webshell
Server IP : 138.197.176.125  /  Your IP : 216.73.217.122
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux SuiteCRM-8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : root ( 0)
PHP Version : 8.3.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/jetcounter/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/jetcounter/create_tenant.php
<?php

include("wp-config.php");
/*$master_url = constant("MASTER_URL");
$tenent_url = constant("TENENT_URL");
$master_URL = $master_url.'webservice.php';
$MasterUsername = constant("MasterUsername");
$master_Key = constant("master_Key");*/

$master_URL = 'https://master.saleshiker.com/webservice.php';
$MasterUsername = 'admin';
$master_Key = 'pS5R2XZDXJ2eLRv';
require_once 'Zend/Loader.php';
require_once 'HTTP/Client.php';

if(!empty($_REQUEST['es'])){
	
	$encryptData = $_REQUEST['es'];
	//$decryptedString = wpcodetips_twoway_encrypt($encryptData,'d');
	$decryptedString = base64_decode($encryptData);
	
	$finalData = json_decode($decryptedString,true);

	$lead_id = $finalData['lid'];
	$company_name = $finalData['cnm'];

	if(!empty($lead_id) && !empty($company_name)){
		Zend_Loader::loadClass(Zend_Json);
		if(!function_exists('getBody'))
		{
			function getBody($response) {
				return Zend_Json::decode($response["body"]);
			}
		}
		$httpc = new HTTP_CLIENT();
		$httpc->get("$master_URL?operation=getchallenge&username=$MasterUsername");
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		if($jsonResponse['success']==false) 
			die('getchallenge failed:'.$jsonResponse['error']['errorMsg']);

		$challengeToken = $jsonResponse['result']['token'];
		$generatedKey = md5($challengeToken.$master_Key);
		$httpc->post("$master_URL", 
		array('operation'=>'login', 'username'=>$MasterUsername, 'accessKey'=>$generatedKey), true);
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		if($jsonResponse['success']==false)
			die('login failed:'.$jsonResponse['error']['errorMsg']);
		$sessionId = $jsonResponse['result']['sessionName']; 
		$userId = $jsonResponse['result']['userId'];
		/*$plan = $jsonResponse['result']['plan'];*/
		$expiry_date = date('Y-m-d', strtotime("+14 days"));
		
		//check lead already exist or not in master crm
		$query = "select lead_datbasename,lead_tenant_status, email, lead_uniqueid from vtiger_leaddetails  where leadid=?";
		$arrayName = array($lead_id);
		$objectJson = Zend_JSON::encode($query);
		$objectJsonParam = Zend_JSON::encode($arrayName);
		$params = array("sessionName"=>$sessionId, "operation"=>'custom_query', "query"=>$objectJson, "params"=>$objectJsonParam);
		$httpc->post("$master_URL", $params, true);
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		$resultArray = $jsonResponse['result']['fields'];

		if(empty($resultArray['lead_datbasename']) && empty($resultArray['lead_tenant_status'])){

			$query = "update vtiger_leaddetails set lead_tenant_status='Pending', lead_expiry_date = '$expiry_date' where leadid=?";
			$arrayName = array($lead_id);
			$objectJson = Zend_JSON::encode($query);
			$objectJsonParam = Zend_JSON::encode($arrayName);
			$params = array("sessionName"=>$sessionId, "operation"=>'custom_query', "query"=>$objectJson, "params"=>$objectJsonParam);
			$httpc->post("$master_URL", $params, true);
			$response = $httpc->currentResponse();
			$jsonResponse = Zend_JSON::decode($response['body']);

			//wp_redirect(site_url().'/?page_id=2225&recordid='.$lead_id.'&company_name='.$company_name);
			$redi =site_url().'/check-lead/?recordid='.$lead_id.'&company_name='.$company_name.'&website='.$company_name;
			echo "<script type='text/javascript'>window.top.location='$redi';</script>"; exit;
		}else{
			echo "<html><head><link rel='SHORTCUT ICON' href='favicon.ico'><style>@import url('https://fonts.googleapis.com/css2?family=Assistant&display=swap');</style></head><body style='font-family: Assistant, sans-serif !important;'>Sorry! You have already set up your CRM instance.</body></html>";
			exit;
		}
	}else{
		echo "<html><head><link rel='SHORTCUT ICON' href='favicon.ico'><style>@import url('https://fonts.googleapis.com/css2?family=Assistant&display=swap');</style></head><body style='font-family: Assistant, sans-serif !important;'>Something went wrong with the URL. Please try again later!</body></html>";
		exit;
	}
	
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit