Fallagassrini Bypass Shell

<?
set_include_path(get_include_path() . PATH_SEPARATOR . __DIR__ . '/../');
include("../../configuration.php");
include("../../includes/fonctions.php");
setlocale(LC_TIME, 'fr_FR.UTF-8');



// Construire la requête en fonction des filtres sélectionnés
$conditions = [];



if (!empty($_GET['country_code'])) {
    $country_code = $_GET['country_code'];
    $conditions[] = "country_code = '".$country_code."'";
}
if (!empty($_GET['postal_code'])) {
    $postal_code = $_GET['postal_code'];
    $conditions[] = "LEFT(postal_code,2)='".$postal_code."' ";
}


$where = (!empty($conditions)) ? "WHERE " . implode(" AND ", $conditions) : "";





$myquery = "SELECT id,token,rating,reviews,email_1,email_2,email_3,country_code,place_id,name,postal_code,phone,full_address,categorie , photo_locale 
             FROM vis $where 
             ORDER BY name 
             ";
             
$visites = $db->get_results($myquery);

$output = '';


if (!empty($visites)) {
	$total_affiche = count($visites);

    foreach ($visites as $vis) {
        

        // Remplacement des virgules par des points pour rating et reviews
        $vis->rating = str_replace(",", ".", $vis->rating);
        $vis->reviews = str_replace(",", ".", $vis->reviews);

        
        // Gestion des emails
        $emails = $vis->email_1;
        $emails .= (!empty($vis->email_2)) ? '<br>' . $vis->email_2 : '';
        $emails .= (!empty($vis->email_3)) ? '<br>' . $vis->email_3 : '';
		
		

		
		

        // Construction de la ligne de tableau
        $output .= "<tr>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->id}</td>";
		$output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->name}</td>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->postal_code}</td>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->phone}</td>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$emails}</td>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->full_address}</td>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->rating}</td>";
        $output .= "<td class='voir' style='cursor:pointer;' id='{$vis->id}'>{$vis->reviews}</td>";
		
		$output .= "<td class='voir text-center' style='cursor:pointer;' id='{$vis->id}'>" .
			($vis->photo_locale
				? "<i class='fas fa-check text-success' title='OUI'></i>"
				: "<i class='fas fa-times text-danger' title='NON'></i>"
			) .
		"</td>";



			 $output .= "<td class='voir text-center' style='cursor:pointer;' id='{$vis->id}'>" .
			"<span class='badge badge-light'>" .
				"<i class='{$tableau_categorie[$vis->categorie]['icon']} text-{$tableau_categorie[$vis->categorie]['classe']}' title='{$tableau_categorie[$vis->categorie]['label']}'></i>" .
			"</span>" .
		"</td>";

		
		$output .= "<td class='delete text-center' style='cursor:pointer;' id='{$vis->id}'>
		  <i class='fas fa-trash-alt fa-sm text-danger' title='Supprimer'></i>
		</td>";
        
        $output .= "</tr>";
    }
}

// Retourner le contenu HTML + la requête pour debug si besoin
echo json_encode([
    'output' => $output,
    'query' => $myquery,
	    'total_affiche' => $total_affiche

]);
?>