Fallagassrini Bypass Shell

<?php
error_reporting(E_ALL ^ E_WARNING ^ E_NOTICE ^ E_DEPRECATED);
//session_start();
if ($zip!=1)
{
include("../config.php");
$facture_id = $_REQUEST['facture_id'];
$page="login";
ini_set('display_errors', 1);
date_default_timezone_set('Europe/Paris'); // pour forcer l'affichage heure française
define('EURO',chr(128));
$source_pdf			= "facture_urgence.pdf";
}
else
{
$facture_id=$factures->id;
$source_pdf			= "fpdfi/facture_urgence.pdf";
}





$myquery = "SELECT * from facture where id=".$facture_id;
$facture = $db->get_row($myquery);

$myquery = "SELECT * from huissier where id=".$facture->huissier_id;
$huissier = $db->get_row($myquery);

if ($facture->urgence_id!=0) 
{
$myquery = "SELECT * from urgence where id=".$facture->urgence_id;
$urgence = $db->get_row($myquery);

$montant_facture_ht	= round(24/1.2,2);
$montant_tva		= round(24-$montant_facture_ht,2);
$montant_ttc		= $montant_facture_ht+$montant_tva;
$montant_total		= round($montant_facture_ht,2);
$montant_total_tva	= round(0.2*$montant_total,2);
$montant_total_ttc	= $montant_total+$montant_total_tva;
$montant_ht			= $montant_ttc-$montant_tva;
$date_creation 		= date("d-m-Y", strtotime($facture->date_creation));$date_creation = utf8_decode($date_creation);

$client_information = $urgence->client_nom;
$client_prestation	= "Acte en urgence";
}


$numero				= $facture->facture_numero;
$description		= utf8_decode($facture->description);


$client_nom		= utf8_decode($urgence->client_prenom." ".$urgence->client_nom);
$client_adresse	= utf8_decode($urgence->client_adresse);
$client_cp		= utf8_decode($urgence->client_cp);
$client_ville	= utf8_decode($urgence->client_ville);


require_once('fpdf.php');
require_once('fpdi.php');

$pdf = new FPDI();
$pdf->AddPage();
$pdf->setSourceFile($source_pdf);
$tplIdx = $pdf->importPage(1);
$pdf->useTemplate($tplIdx, 0, 0, 210);


$pdf->SetFont('Arial');
$pdf->SetFontSize('9');
$pdf->SetTextColor(0, 0, 0);
$pdf->SetXY(165, 13.7);$pdf->Write(6, $date_creation);

$pdf->SetFontSize('16');
$pdf->SetXY(124, 63);$pdf->Write(5, $numero);

$pdf->SetFontSize('11');
$pdf->SetXY(122, 76);
$pdf->MultiCell (80,6,$client_nom."\n".$client_adresse."\n".$client_cp.' '.$client_ville,0,"R");


$pdf->SetFontSize('9');

$pdf->SetXY(47, 117.0);$pdf->Write(3, $date_creation);
$pdf->SetXY(8, 140);
$pdf->Write(5, utf8_decode($client_information));
$pdf->SetXY(8, 158);
$pdf->Write(5, utf8_decode($client_prestation));

$pdf->SetXY(135, 140);$pdf->Write(5, '20,00'.' '.EURO);
$pdf->SetXY(159, 140);$pdf->Write(5, '4,00'.' '.EURO);
$pdf->SetXY(186.5, 140);$pdf->Write(5, '24,00'.' '.EURO);



$pdf->SetXY(186.5, 151.2);$pdf->Write(5, '20,00'.' '.EURO);
$pdf->SetXY(186.5, 158);$pdf->Write(5, '4,00'.' '.EURO);
$pdf->SetXY(186.5, 164.5);$pdf->Write(5, '24,00'.' '.EURO);


$pdf->SetXY(50, 176.7);$pdf->Write(3, $date_creation);








if ($zip!=1)
{
$pdf->Output();
}
else
{
$pdf->Output('pdf/'.$facture_id.'.pdf','F');	
}
?>