Fallagassrini Bypass Shell

<?
/////////////////////////////////////
include("config.php");
include("includes/fonctions.php");
$page		=	"constat";
include("auth.php");
/////////////////////////////////////

$constat_id							= $_REQUEST['constat_id'];
$envoi_mail_last_date				= date("Y-m-d H:i");


// REQUETE SELECT
if ($constat_id)
{
$myquery 		= "SELECT * from constat where id=".$constat_id;
$constat 		= $db->get_row($myquery);

//SPECS CONSTAT
$type_constat		= $tableau_constat_type[$constat->constat_type];

if ($constat->constat_type==20)
	{
	$type_constat	= "Autre constat";
	$laprecision	= "<br><small>".$constat->laprecision."</small>";
	}
$date_creation 		= date("d-m-Y", strtotime($constat->date_creation));
if ($constat->choix==1)
	{
	$texte			= "<b>Plage jour : </b>".$tableau_plage_jour[$constat->plage_jour]."<br>";
	$texte			= $texte."<b>Plage heure : </b>".$tableau_plage_heure[$constat->plage_heure]."<br>";
	if ($constat->plage_urgence) {$texte.="<b>Plage urgence : </b>".$tableau_plage_urgence[$constat->plage_urgence]."<br>";}
	}
if ($constat->choix==2)
	{
	$texte			= "";
	if ($constat->date_choix!="0000-00-00")	{$texte.="Date souhaitée : ".$constat->date_choix;}
	if ($constat->heure_choix!="0000-00-00")	{$texte.="Heure souhaitée : ".$constat->heure_choix;}
	}
$constat_lieu 		= $constat->constat_cp." ".$constat->constat_ville;
$constat_tarif 		= $constat->tarif;
//FIN SPECS CONSTAT

if ($constat->envoi_mail==2) {$envoi_mail=3;}
if ($constat->envoi_mail==1) {$envoi_mail=2;}
if ($constat->envoi_mail==0) {$envoi_mail=1;}
if (!$envoi_mail) {$envoi_mail=3;}
	
$mail_id	= $_POST['mail_id'];
if (!empty($mail_id))
	{
	$mail_id2="|";
	foreach ($mail_id as $mail_id1)
		{
		$mail_id2=$mail_id2.$mail_id1."|";
		}
	}
	$requete="UPDATE constat set mail_id	= '".$mail_id2."', 	envoi_mail	= ".$envoi_mail.", envoi_mail_last_date	= '".$envoi_mail_last_date."'  where id	=".$constat_id;
	$db->query($requete);
	

	
foreach ($mail_id as $mail_id1)
	{
	$myquery 		= "SELECT * from huissier where id=".$mail_id1;
	$huissier 		= $db->get_row($myquery);

	
	$email_huissier		=   $huissier->mail;
	$password_huissier	=	$huissier->password;
	$huissier_id		=	$mail_id1;
	
	
	
	$myquery 	= "SELECT * from constat where id=".$constat_id;
	$constat 		= $db->get_row($myquery);
	$url_envoi	=	$lien_admin.'/constat_accepte.php?constat_id='.$constat_id.'&huissier_id='.$huissier_id.'&email_huissier='.$email_huissier.'&p='.$password_huissier;
	$url_desabo	=	$lien_admin.'/desabo.php?constat_id='.$constat_id.'&huissier_id='.$huissier_id.'&email_huissier='.$email_huissier.'&p='.$password_huissier;
	include("matrice/corps_constat_envoi1.php");
	
	$from						=	$maildefaut_from;
	$fromname					=	"HUISSIER EXPRESS";
	$reply						=	$maildefaut_reply;
	$destinataire				=	$email_huissier;
	$destinataire_copie_cachee	= 	array ("philippe-jean@outlook.fr");
	$embed_src					= 	array ("img/mail/Image_2.png","img/mail/logo_constat.png");
	$embed_label				= 	array ("bouton","logo");
	$matrice					=	"matrice/matrice.php";
	$sujet						=	"Nouvelle demande de constat";
	
	if (envoi_mail($from, $fromname, $reply, $destinataire,$destinataire_copie,$destinataire_copie_cachee,  $pj,$embed_src,$embed_label, $matrice, $corps, $sujet))
	{
		$nbmailenvoi++;
	}
	}
	
}
header("Refresh:0; url=constat_liste.php?nbmailenvoi=".$nbmailenvoi);exit;
?>