Fallagassrini Bypass Shell

<?php
session_start();
$page="login";
ini_set('display_errors', 1);
error_reporting(E_ALL ^ E_NOTICE);
date_default_timezone_set('Europe/Paris'); // pour forcer l'affichage heure française
include("../../config.php");
define('EURO',chr(128));
function nettoyerChaine($chaine)
	{
	$caracteres = array(
	'&eacute;' => 'é',
	'&rsquo;' => '`',
	'&agrave;' => 'à',
	'&egrave;' => 'è',
	'&acirc;' => 'â',
	'&ecirc;' => 'ê',
	'&#39;' => '',
	'&iuml;' => 'i',
	'&deg;' => ' degrés',
	'&nbsp;' => ' '
	);
	$chaine = strtr($chaine, $caracteres);
	$chaine = utf8_decode($chaine);
	return $chaine;
	}	

$facture_id = $_REQUEST['facture_id'];

$myquery = "SELECT * from facture where id=".$facture_id;
$facture = $db->get_row($myquery);

$myquery = "SELECT * from huissier where id=".$facture->huissier_id;
$huissier = $db->get_row($myquery);

if ($facture->urgence_id!=0) 
{
$myquery = "SELECT * from urgence where id=".$facture->urgence_id;
$urgence = $db->get_row($myquery);

$montant_facture_ht	=	round(24/1.2,2);
$montant_tva		=	round(24-$montant_facture_ht,2);
$montant_ttc		=	$montant_facture_ht+$montant_tva;
$montant_total		= 	round($montant_facture_ht,2);
$montant_total_tva	=	round(0.2*$montant_total,2);
$montant_total_ttc	= $montant_total+$montant_total_tva;
$montant_ht			=	$montant_ttc-$montant_tva;
$date_creation 		= date("d-m-Y", strtotime($facture->date_creation));$date_creation = utf8_decode($date_creation);

$client_information = $urgence->client_nom;

$client_prestation="Acte en urgence";



}
$source_pdf="facture_urgence.pdf";



$numero				=	$facture->facture_numero;
$description		=	utf8_decode($facture->description);


$client_nom		= utf8_decode($urgence->client_prenom." ".$urgence->client_nom);
$client_adresse	= utf8_decode($urgence->client_adresse);
$client_cp		= utf8_decode($urgence->client_cp);
$client_ville		= utf8_decode($urgence->client_ville);


require_once('fpdf.php');
require_once('fpdi.php');

$pdf = new FPDI();
$pdf->AddPage();
$pdf->setSourceFile($source_pdf);
$tplIdx = $pdf->importPage(1);
$pdf->useTemplate($tplIdx, 0, 0, 210);


$pdf->SetFont('Arial');
$pdf->SetFontSize('9');
$pdf->SetTextColor(0, 0, 0);
$pdf->SetXY(165, 13.7);$pdf->Write(6, $date_creation);

$pdf->SetFontSize('16');
$pdf->SetXY(124, 63);$pdf->Write(5, $numero);

$pdf->SetFontSize('11');
$pdf->SetXY(122, 76);
$pdf->MultiCell (80,6,$client_nom."\n".$client_adresse."\n".$client_cp.' '.$client_ville,0,"R");


$pdf->SetFontSize('9');

$pdf->SetXY(47, 117.0);$pdf->Write(3, $date_creation);
$pdf->SetXY(8, 140);
$pdf->Write(5, utf8_decode($client_information));
$pdf->SetXY(8, 158);
$pdf->Write(5, utf8_decode($client_prestation));

$pdf->SetXY(135, 140);$pdf->Write(5, '20,00'.' '.EURO);
$pdf->SetXY(159, 140);$pdf->Write(5, '4,00'.' '.EURO);
$pdf->SetXY(186.5, 140);$pdf->Write(5, '24,00'.' '.EURO);



$pdf->SetXY(186.5, 151.2);$pdf->Write(5, '20,00'.' '.EURO);
$pdf->SetXY(186.5, 158);$pdf->Write(5, '4,00'.' '.EURO);
$pdf->SetXY(186.5, 164.5);$pdf->Write(5, '24,00'.' '.EURO);


$pdf->SetXY(50, 176.7);$pdf->Write(3, $date_creation);







//$pdf->Ln();
//if ($_GET['v']=="mail")
 //	{
	//$pdf->Output('cartes/'.$commande_id.'.pdf','F');
	//}
//else
//{
$pdf->Output();
//}