Fallagassrini Bypass Shell

<?
session_start();
$page="login";
include("../../config.php");

$myquery = "SELECT * from facture order by id DESC LIMIT 1";
$requete = $db->get_row($myquery);
$dernier_numero = $requete->facture_numero;
		
//PREMIERE FACTURE
if ($dernier_numero=="")
	{
	$numero_a	=	"HE";
	//$numero_b	=	date("m");
	$numero_b	=	"00";
	
	$numero_c	=	date("y");
	$numero_d	=	"1";
	$facture_numero		=	$numero_a."-".$numero_b."-".$numero_c."-".$numero_d;
	
	}
//SUIVI FACTURE
else
	{
	$facture_array 		= explode("-", $dernier_numero);
	$numero_a	=	"HE";
	$numero_b	=	date("m");
	$numero_b	=	"00";
	$numero_c	=	date("y");
	$numero_d	=	$facture_array[3]+1;
	$facture_numero		=	$numero_a."-".$numero_b."-".$numero_c."-".$numero_d;
	
	}

				


$urgence_id				=		$_REQUEST['urgence_id'];
$huissier_id			=		$_REQUEST['huissier_id'];
$prix_base				=		20;

$facture_montant=round($prix_base,2);
$description 		= 	"Acte en urgence";
$statut_paiement 	= 	1;
$date_creation		= 	date("Y-m-d");
$date_creation 		= 	date("Y-m-d", strtotime($date_creation));
				
				
					
$requete="INSERT INTO facture
(
urgence_id,
huissier_id,
facture_numero,
facture_montant,
description,
statut_paiement,
date_creation
)
VALUES(				
'$urgence_id',
'$huissier_id',
'$facture_numero',
'$facture_montant',
'$description',
'$statut_paiement',	
'$date_creation'
)";
echo "<div class='note note-success note-bordered'> Creation de la facture liee : succes</div>";
echo $requete;
$db->query($requete);
?>