Fallagassrini Bypass Shell

<?
session_start();
$page="urgence";
include("../../config.php");
require_once('includes/class.phpmailer.php');
require_once('includes/class.smtp.php');

$urgence_id				=		$_REQUEST['urgence_id'];
$dernier_huissier_id="";



$laliste		=		$_REQUEST['laliste'];
$lesmails		 = explode("\n", $laliste);
foreach ($lesmails as $lemail)
	{
	if ($lemail) {$matrice[]=$lemail;}
	}

echo "<pre>";
print_r($matrice);
echo "</pre>";



echo "urgence ID : ".$urgence_id."<br>";
if ($urgence_id)
	{
	//SPECS urgence
	$myquery = "SELECT * from urgence where id=".$urgence_id;
	$urgence = $db->get_row($myquery);
	
	
	if ($urgence->urgence_type=="1") {$urgence_type="Assignation";}
	if ($urgence->urgence_type=="2") {$urgence_type="Signification";}
	if ($urgence->urgence_type=="3") {$urgence_type="Dénonciation";}
	if ($urgence->urgence_type=="4") {$urgence_type="Commandement";}
	if ($urgence->urgence_type=="5") {$urgence_type="Sommation";}
	if ($urgence->urgence_type=="6") {$urgence_type="Saisie";}
	if ($urgence->urgence_type=="7") {$urgence_type="Procès verbal";}
	if ($urgence->urgence_type=="8") {$urgence_type="Autre";}
	
	$urgence_type_precision=$urgence->urgence_type_precision;
		
				
	if ($urgence->urgence_type_delai=="1") {$urgence_type_delai="24 heures";}
	if ($urgence->urgence_type_delai=="2") {$urgence_type_delai="2 jours";}
	if ($urgence->urgence_type_delai=="3") {$urgence_type_delai="3 jours";}
	if ($urgence->urgence_type_delai=="4") {$urgence_type_delai="7 jours";}
	
	$urgence_description=$urgence->urgence_description;
	
	$urgence_adresse=$urgence->client_cp." ".$urgence->client_ville;
	

	$date_creation 		=	date("d-m-Y", strtotime($urgence->date_creation));
	
				
				
	$myquery = "SELECT * from huissier where (departement = ".$urgence->client_departement." || zone1=".$urgence->client_departement." || zone2=".$urgence->client_departement." || zone3=".$urgence->client_departement." ||zone4=".$urgence->client_departement.") AND statut=1 order by id";
	//echo $myquery."<br>";
	$myquery_calls = $db->get_results($myquery);

	
	
	if (!empty($myquery_calls))
		{
		foreach ( $myquery_calls as $huissiers )
			{
			if ($huissiers->id!=$dernier_huissier_id)
			{
			
			$variable_envoi=0;
			
			if ($matrice)
			{
				foreach ($matrice as $value)
				{
				if (trim($value)==trim($huissiers->mail)) {$variable_envoi=1;}
				}
			}
			if ($variable_envoi==1)
			{
				$from				="resa@huissier-express.fr";
				$from_name			="huissier-express.fr";
				$reply				="resa@huissier-express.fr";
				$destinataire		= $huissiers->mail;
				$password_huissier	= $huissiers->password;
				$huissier_id		= $huissiers->id;
				$mail_huissier		= $huissiers->mail;
				
				$objet				= "Huissier Express : demande pour un acte en urgence";
				
				include("modele_urgence_envoi_mail_huissiers.php");
					
				$mail 			= 	new PHPmailer(True);
				try {

				$mail->CharSet = "UTF-8";
				$mail->SMTPDebug = 2;
				$mail->Debugoutput = 'html';
				$mail->setFrom($from,$from_name);
				
				
				$mail->AddAddress($destinataire);
				$mail->AddBCC("contact@huissier-express.fr");
				//$mail->AddBCC("lemondeavance@gmail.com");
				$mail->AddReplyTo($reply);	
				$mail->IsHTML(true);
				$mail->Subject=$objet;
				$mail->Body=$message;
				$mail->Send();
				// SUCCES
				echo "Notification envoyee a ".$destinataire."<br>";
				
				
				$requete="UPDATE urgence set envoi_mail		= 1 		where id						=".$urgence_id;
				echo $requete."<br>";
				$db->query($requete);
				}
				catch (phpmailerException $e)
				{
					echo "<br><b>".$e->errorMessage()."</b><br>"; //Pretty error messages from PHPMailer
				}
				catch (Exception $e)
				{
					echo "<br><b>".$e->getMessage()."</b><br>"; //Boring error messages from anything else!
				}
			}
			unset($mail);	


			}
			}
		}
	
	}
?>