Fallagassrini Bypass Shell

<?



session_start();

include("../../config.php");



//$search  = array('À', 'Á', 'Â', 'Ã', 'Ä', 'Å', 'Ç', 'È', 'É', 'Ê', 'Ë', 'Ì', 'Í', 'Î', 'Ï', 'Ò', 'Ó', 'Ô', 'Õ', 'Ö', 'Ù', 'Ú', 'Û', 'Ü', 'Ý', 'à', 'á', 'â', 'ã', 'ä', 'å', 'ç', 'è', 'é', 'ê', 'ë', 'ì', 'í', 'î', 'ï', 'ð', 'ò', 'ó', 'ô', 'õ', 'ö', 'ù', 'ú', 'û', 'ü', 'ý', 'ÿ');

//$replace = array('A', 'A', 'A', 'A', 'A', 'A', 'C', 'E', 'E', 'E', 'E', 'I', 'I', 'I', 'I', 'O', 'O', 'O', 'O', 'O', 'U', 'U', 'U', 'U', 'Y', 'a', 'a', 'a', 'a', 'a', 'a', 'c', 'e', 'e', 'e', 'e', 'i', 'i', 'i', 'i', 'o', 'o', 'o', 'o', 'o', 'o', 'u', 'u', 'u', 'u', 'y', 'y');

//$MaChaine = str_replace($search, $replace, $MaChaine);



$date_creation 		= $_GET['date_creation'];

$date_creation		=	date("Y-m-d", strtotime($date_creation));



$force 		= $_GET['force'];



$myquery = "SELECT * from impaye where 1 AND date_creation LIKE '".$date_creation."%' AND attribution_id!=0 order by id";

//echo $myquery;

$myquery_calls = $db->get_results($myquery);

$num = $db->num_rows;



if (!empty($myquery_calls))

	{

	foreach ( $myquery_calls as $impayes )

	{

	$virement_nombre=$virement_nombre+1;

	$virement_montant=$virement_montant+6;

	}

	}

				

$date1 = new DateTime(date("Y-m-d"));

$date2 = new DateTime(date("Y")."-01-01");

$diff = $date2->diff($date1)->format("%a");

$reference_globale="HR/".date("Y")."/".$diff;



//$virement_date = date('Y-m-d', strtotime('+3 days')); 

$virement_date = date('Y-m-d', strtotime('+0 days')); 



$message="";

$message.= "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?> \n";

$message.= "<Document xmlns=\"urn:iso:std:iso:20022:tech:xsd:pain.001.001.03\">\n";

$message.= "<CstmrCdtTrfInitn>\n";

$message.= "	<GrpHdr>\n";

$message.= "		<MsgId>".$reference_globale."</MsgId>\n";

$message.= "		<CreDtTm>".date("Y-m-d")."T".date("H:i:s")."</CreDtTm>\n";

$message.= "		<NbOfTxs>".$virement_nombre."</NbOfTxs>\n";

$message.= "		<CtrlSum>".$virement_montant."</CtrlSum>\n";

$message.= "		<InitgPty>\n";

$message.= "			<Nm>Huissier Express</Nm>\n";

$message.= "		</InitgPty>\n";

$message.= "	</GrpHdr>\n";



$message.= "			<PmtInf>\n";

$message.= "				<PmtInfId>HE/".$diff."</PmtInfId>\n";

$message.= "				<PmtMtd>TRF</PmtMtd>\n";

$message.= "				<BtchBookg>false</BtchBookg>\n";

$message.= "				<NbOfTxs>".$virement_nombre."</NbOfTxs>\n";

$message.= "				<CtrlSum>".$virement_montant."</CtrlSum>\n";

$message.= "				<PmtTpInf>\n";

$message.= "					<SvcLvl>\n";

$message.= "						<Cd>SEPA</Cd>\n";

$message.= "					</SvcLvl>\n";

$message.= "				</PmtTpInf>\n";

$message.= "				<ReqdExctnDt>".$virement_date."</ReqdExctnDt>\n";

$message.= "				<Dbtr>\n";

$message.= "					<Nm>Huissier-Express</Nm>\n";

$message.= "				</Dbtr>\n";

$message.= "				<DbtrAcct>\n";

$message.= "					<Id>\n";

$message.= "						<IBAN>FR7610057192950002003160258</IBAN>\n";

$message.= "					</Id>\n";

$message.= "				</DbtrAcct>\n";

$message.= "				<DbtrAgt>\n";

$message.= "					<FinInstnId>\n";

$message.= "						<BIC>CMCIFRPP</BIC>\n";

$message.= "					</FinInstnId>\n";

$message.= "				</DbtrAgt>\n";

$message.= "				<ChrgBr>SLEV</ChrgBr>\n";







if (!empty($myquery_calls))

{

foreach ( $myquery_calls as $impayes )

{

$montant	=	6;

$myquery = "SELECT * from huissier where id=".$impayes->attribution_id;

$huissier = $db->get_row($myquery);

	

	

$message.= "			<CdtTrfTxInf>\n";

$message.= "				<PmtId>\n";

$message.= "					<InstrId>".$huissier->id."/".$impayes->id."</InstrId>\n";

$message.= "					<EndToEndId>HEImpaye/".str_replace(" ","",$impayes->client_nom)."</EndToEndId>\n";

$message.= "				</PmtId>\n";

$message.= "				<Amt>\n";

$message.= "					<InstdAmt Ccy=\"EUR\">".$montant."</InstdAmt>\n";

$message.= "				</Amt>\n";

$message.= "				<CdtrAgt>\n";

$message.= "					<FinInstnId>\n";

$message.= "						<BIC>".$huissier->bic."</BIC>\n";

$message.= "					</FinInstnId>\n";

$message.= "				</CdtrAgt>\n";

$message.= "				<Cdtr>\n";

$message.= "					<Nm>".html_entity_decode($huissier->huissier)."</Nm>\n";

$message.= "				</Cdtr>\n";

$message.= "				<CdtrAcct>\n";

$message.= "					<Id>\n";

$message.= "						<IBAN>".strtoupper($huissier->iban)."</IBAN>\n";

$message.= "					</Id>\n";

$message.= "				</CdtrAcct>\n";

$message.= "				<RgltryRptg>\n";

$message.= "					<Dtls>\n";

$message.= "						<Cd>150</Cd>\n";

$message.= "					</Dtls>\n";

$message.= "				</RgltryRptg>\n";

$message.= "				<RmtInf>\n";

$message.= "					<Ustrd>".$impayes->id."</Ustrd>\n";

$message.= "				</RmtInf>\n";

$message.= "			</CdtTrfTxInf>\n";

}

}

$message.= "						</PmtInf>\n";

$message.= "					</CstmrCdtTrfInitn>\n";

$message.= "				</Document>\n";



if (!$force)

{

print_r ($message);

}

else

{

$nom_fichier="impaye".utf8_encode(date("Y-m-d-H-i"));

$fp = fopen('xml/'.$nom_fichier.'.xml', 'w+');

fputs($fp, $message);



?>

<h4 class="modal-title">Telecharger le fichier XML : Click droit et "Enregisrer sous"</h4>

<a target="_blank" href="xml/<?echo $nom_fichier;?>.xml"><?echo $nom_fichier;?>.xml</a>

<?

}

?>