Fallagassrini Bypass Shell

<?
/////////////////////////////////////
include("config.php");
include("includes/fonctions.php");
$page		=	"devis";
include("auth.php");
/////////////////////////////////////


$devis_id							= $_REQUEST['devis_id'];
$envoi_mail_last_date				= date("Y-m-d H:i");

// REQUETE SELECT
if ($devis_id)
{
$myquery 			= "SELECT * from devis where id=".$devis_id;
$devis 				= $db->get_row($myquery);
$devis->besoin		= str_replace("’"," ",$devis->besoin);

if ($devis->envoi_mail==2) {$envoi_mail=3;}
if ($devis->envoi_mail==1) {$envoi_mail=2;}
if ($devis->envoi_mail==0) {$envoi_mail=1;}
if (!$envoi_mail) {$envoi_mail=3;}
	
$mail_id	= $_POST['mail_id'];
if (!empty($mail_id))
	{
	$mail_id2="|";
	foreach ($mail_id as $mail_id1)
		{
		$mail_id2=$mail_id2.$mail_id1."|";
		}
	}
	$requete="UPDATE devis set mail_id	= '".$mail_id2."', 	envoi_mail	= ".$envoi_mail.", envoi_mail_last_date	= '".$envoi_mail_last_date."' where id	=".$devis_id;
	$db->query($requete);
	

	
foreach ($mail_id as $mail_id1)
	{
	$myquery 				= "SELECT * from huissier where id=".$mail_id1;
	$huissier 				= $db->get_row($myquery);

	
	$email_huissier			=   $huissier->mail;
	$password_huissier		=	$huissier->password;
	$huissier_id			=	$mail_id1;
	
	
	$myquery 	= "SELECT * from devis where id=".$devis_id;
	$devis 		= $db->get_row($myquery);
	$url_envoi	=	$lien_admin.'/devis_accepte.php?devis_id='.$devis_id.'&huissier_id='.$huissier_id.'&email_huissier='.$email_huissier.'&p='.$password_huissier;
	$url_desabo	=	$lien_admin.'/desabo.php?devis_id='.$devis_id.'&huissier_id='.$huissier_id.'&email_huissier='.$email_huissier.'&p='.$password_huissier;
	include("matrice/corps_devis_envoi1.php");
	
	$from						=	$maildefaut_from;
	$fromname					=	"DEVIS-HUISSIER";
	$reply						=	$maildefaut_reply;
	$destinataire				=	$email_huissier;
	$destinataire_copie_cachee	= 	array ("philippe-jean@outlook.fr");
	$embed_src					= 	array ("img/mail/Image_2.png","img/mail/logo_devis.png");
	$embed_label				= 	array ("bouton","logo");
	$matrice					=	"matrice/matrice.php";
	$sujet						=	"Nouvelle demande de devis";
	
	if (envoi_mail($from, $fromname, $reply, $destinataire,$destinataire_copie,$destinataire_copie_cachee,  $pj,$embed_src,$embed_label, $matrice, $corps, $sujet))
	{
		$nbmailenvoi++;
		
	}
	}
	
}
header("Refresh:0; url=devis_liste.php?nbmailenvoi=".$nbmailenvoi);exit;

?>