Fallagassrini Bypass Shell

<?php
header('Content-Type: application/json; charset=utf-8');
session_start();

include("../configuration.php");
include("../includes/fonctions.php");


$ville_pays = trim($_POST['ville_pays'] ?? '');
$rayon_km   = (int)($_POST['rayon_km'] ?? 10);
if ($rayon_km <= 0) $rayon_km = 10;

if ($ville_pays === '') {
	echo json_encode(['ok' => false, 'error' => "Ville manquante."]);
	exit;
}

$parts = explode(',', $ville_pays);
$ville_clean = trim($parts[0] ?? '');
$pays_clean  = strtoupper(trim($parts[1] ?? ''));

if ($ville_clean === '' || $pays_clean === '') {
	echo json_encode(['ok' => false, 'error' => "Format invalide."]);
	exit;
}

$db->query("
	DELETE FROM ville_recherche_cache
	WHERE ville = '" . $db->escape($ville_clean) . "'
	  AND pays  = '" . $db->escape($pays_clean) . "'
	  AND rayon_km = " . (int)$rayon_km . "
	LIMIT 1
");

echo json_encode(['ok' => true]);