Fallagassrini Bypass Shell

<?
/////////////////////////////////////
include("config.php");
include("includes/fonctions.php");
$page		=	"urgence";
include("auth.php");
/////////////////////////////////////

$urgence_id							= $_REQUEST['urgence_id'];
$envoi_mail_last_date				= date("Y-m-d H:i");

// REQUETE SELECT
if ($urgence_id)
{
$myquery 		= "SELECT * from urgence where id=".$urgence_id;
$urgence 		= $db->get_row($myquery);

//SPECS urgence
$urgence_type				= $tableau_urgence_type[$urgence->urgence_type];
$urgence_type_precision		= $urgence->urgence_type_precision;
$urgence_type_delai			= $tableau_urgence_delai[$urgence->urgence_type_delai];
$urgence_description		= $urgence->urgence_description;

$acte_cp					= $urgence->acte_cp;
$acte_ville					= $urgence->acte_ville;


$urgence_adresse			= $urgence->client_cp." ".$urgence->client_ville;
$date_creation 				= date("d-m-Y", strtotime($urgence->date_creation));
//FIN SPECS urgence


if ($urgence->envoi_mail==2) {$envoi_mail=3;}
if ($urgence->envoi_mail==1) {$envoi_mail=2;}
if ($urgence->envoi_mail==0) {$envoi_mail=1;}
if (!$envoi_mail) {$envoi_mail=3;}
	
$mail_id	= $_POST['mail_id'];
if (!empty($mail_id))
	{
	$mail_id2="|";
	foreach ($mail_id as $mail_id1)
		{
		$mail_id2=$mail_id2.$mail_id1."|";
		}
	}
	$requete="UPDATE urgence set mail_id	= '".$mail_id2."', 	envoi_mail	= ".$envoi_mail.", envoi_mail_last_date	= '".$envoi_mail_last_date."'  where id	=".$urgence_id;
	$db->query($requete);
	

	
foreach ($mail_id as $mail_id1)
	{
	$myquery 		= "SELECT * from huissier where id=".$mail_id1;
	$huissier 		= $db->get_row($myquery);

	
	$email_huissier		=   $huissier->mail;
	$password_huissier	=	$huissier->password;
	$huissier_id		=	$mail_id1;
	
	$myquery 	= "SELECT * from urgence where id=".$urgence_id;
	$urgence 		= $db->get_row($myquery);
	$url_envoi	=	$lien_admin.'/urgence_accepte.php?urgence_id='.$urgence_id.'&huissier_id='.$huissier_id.'&email_huissier='.$email_huissier.'&p='.$password_huissier;
	$url_desabo	=	$lien_admin.'/desabo.php?urgence_id='.$urgence_id.'&huissier_id='.$huissier_id.'&email_huissier='.$email_huissier.'&p='.$password_huissier;
	include("matrice/corps_urgence_envoi1.php");
	
	$from						=	$maildefaut_from;
	$fromname					=	"HUISSIER-EXPRESS";
	$reply						=	$maildefaut_reply;
	$destinataire				=	$email_huissier;
	$destinataire_copie_cachee	= 	array ("philippe-jean@outlook.fr");
	$embed_src					= 	array ("img/mail/Image_2.png","img/mail/logo_urgence.png");
	$embed_label				= 	array ("bouton","logo");
	$matrice					=	"matrice/matrice.php";
	$sujet						=	"Nouvel acte en urgence";
	
	if(envoi_mail($from, $fromname, $reply, $destinataire,$destinataire_copie,$destinataire_copie_cachee,  $pj,$embed_src,$embed_label, $matrice, $corps, $sujet))
		{
		$nbmailenvoi++;
		}
	}
	
}
header("Refresh:0; url=urgence_liste.php?nbmailenvoi=".$nbmailenvoi);exit;

?>