Fallagassrini Bypass Shell

<?php
session_start();
$page="login";
ini_set('display_errors', 1);
error_reporting(E_ALL ^ E_NOTICE);
date_default_timezone_set('Europe/Paris'); // pour forcer l'affichage heure française
include("../../config.php");
define('EURO',chr(128));
function nettoyerChaine($chaine)
	{
	$caracteres = array(
	'&eacute;' => 'é',
	'&rsquo;' => '`',
	'&agrave;' => 'à',
	'&egrave;' => 'è',
	'&acirc;' => 'â',
	'&ecirc;' => 'ê',
	'&#39;' => '',
	'&iuml;' => 'i',
	'&deg;' => ' degrés',
	'&nbsp;' => ' '
	);
	$chaine = strtr($chaine, $caracteres);
	$chaine = utf8_decode($chaine);
	return $chaine;
	}	

$facture_id = $_REQUEST['facture_id'];

$myquery = "SELECT * from facture where id=".$facture_id;
$facture = $db->get_row($myquery);

$myquery = "SELECT * from huissier where id=".$facture->huissier_id;
$huissier = $db->get_row($myquery);

$myquery = "SELECT * from constat where id=".$facture->constat_id;
$constat = $db->get_row($myquery);


$numero				=	$facture->facture_numero;
$description		=	utf8_decode($facture->description);

$montant_facture_ht	=	round($constat->tarif/1.2,2);

$montant_tva		=	round($constat->tarif-$montant_facture_ht,2);
$montant_ttc		=	$montant_facture_ht+$montant_tva;
$montant_total		= 	round(0.09*$montant_facture_ht,2);
$montant_total_tva	=	round(0.2*$montant_total,2);
$montant_total_ttc	= $montant_total+$montant_total_tva;


$montant_ht			=	$montant_ttc-$montant_tva;
									
$date_creation 		= date("d-m-Y", strtotime($facture->date_creation));$date_creation = utf8_decode($date_creation);

$huissier_nom		= utf8_decode($huissier->huissier);
$huissier_adresse	= utf8_decode($huissier->adresse);
$huissier_cp		= utf8_decode($huissier->cp);
$huissier_ville		= utf8_decode($huissier->ville);
$huissier_pays		= "FRANCE";

require_once('fpdf.php');
require_once('fpdi.php');

$pdf = new FPDI();
$pdf->AddPage();
$pdf->setSourceFile("facture_modele_old.pdf");
$tplIdx = $pdf->importPage(1);
$pdf->useTemplate($tplIdx, 0, 0, 210);


$pdf->SetFont('Arial');
$pdf->SetFontSize('9');
$pdf->SetTextColor(0, 0, 0);
$pdf->SetXY(148, 13.7);$pdf->Write(6, $date_creation);

$pdf->SetFontSize('16');
$pdf->SetXY(124, 63);$pdf->Write(5, $numero);

$pdf->SetFontSize('11');

$pdf->SetXY(122, 86);$pdf->Write(4, $huissier_nom);
$pdf->SetXY(122, 90);$pdf->Write(4, $huissier_adresse);
$pdf->SetXY(122, 95);$pdf->Write(4, $huissier_cp.' '.$huissier_ville);
$pdf->SetXY(122, 99);$pdf->Write(4, $huissier_pays);

$pdf->SetFontSize('9');

$pdf->SetXY(47, 139.5);$pdf->Write(3, $date_creation);
$pdf->SetXY(14, 158);$pdf->Write(5, $constat->nom." ".$constat->prenom);
$pdf->SetXY(44, 158);$pdf->Write(5, utf8_decode($tableau_constat_type[$constat->constat_type]));

$pdf->SetXY(125, 158);$pdf->Write(5, $montant_facture_ht.' '.EURO);
$pdf->SetXY(173, 158);$pdf->Write(5, $montant_tva.' '.EURO);
$pdf->SetXY(187, 158);$pdf->Write(5, $montant_total.' '.EURO);



$pdf->SetXY(187, 164.5);$pdf->Write(5, $montant_total.' '.EURO);
$pdf->SetXY(187, 170.8);$pdf->Write(5, $montant_total_tva.' '.EURO);
$pdf->SetXY(187, 177);$pdf->Write(5, $montant_total_ttc.' '.EURO);


$pdf->SetXY(50, 190.3);$pdf->Write(3, $date_creation);







//$pdf->Ln();
//if ($_GET['v']=="mail")
 //	{
	//$pdf->Output('cartes/'.$commande_id.'.pdf','F');
	//}
//else
//{
$pdf->Output();
//}