Fallagassrini Bypass Shell

<?
session_start();
error_reporting(E_ALL);
$dev=1;
ini_set('display_errors','On');
include("config.php");
$page="pre_paiement1.php";
require_once 'administration/panel/mangopay/vendor/autoload.php';
$MangopayApi = new \MangoPay\MangoPayApi();
$constat_id				=	$_SESSION['constat_id'];



if ($dev==1)
{
$MangopayApi->Config->ClientId = 'ofyc2017';
$MangopayApi->Config->ClientPassword = 'iqkhQK591cWzu3Ept5Z4niNiaCaw8Ctpa9ixa68ZvXrP9BEpbJ';
$MangopayApi->Config->TemporaryFolder = 'temp_sandbox';
$MangopayApi->Config->BaseUrl = 'https://api.sandbox.mangopay.com';
}
else
{
$MangopayApi->Config->ClientId = 'philippe2015';
$MangopayApi->Config->ClientPassword = 'hK15oQKQig9N2UFEXQpCoirptU4VTeU28p0CTyiprt0fQuwFPP';
$MangopayApi->Config->TemporaryFolder = 'temp';
$MangopayApi->Config->BaseUrl = 'https://api.mangopay.com';
}

$stepId=1;
$stepId					=		$_REQUEST['stepId'];

if ($stepId==2)
	{
	$preAuthorizationId		=		$_REQUEST['preAuthorizationId'];
	$pre = $MangopayApi->CardPreAuthorizations->Get($preAuthorizationId);
	
	if ($pre->Status=="SUCCEEDED" && $pre->PaymentStatus=="WAITING") {echo "ok";mail('philippe-jean@outlook.fr;', 'pre', '<pre>'.print_r($pre, true).'</pre>');$passage=1;}
	else {echo "Operation annulee ou erreur de saisie.<br><a href='https://www.huissier-express.fr/'>Renouveler cette operation</a>";mail('philippe-jean@outlook.fr;', 'pre_erreur', '<pre>'.print_r($pre, true).'</pre>');exit;}
	}
else
	{
	
	$stepId=1;
	$user_id = $_SESSION['user_id'];

	$Result = $MangopayApi->CardRegistrations->Get($_SESSION['cart_id']);
	
	$Result->RegistrationData = isset($_GET['data']) ? 'data=' . $_GET['data'] : 'errorCode=' . $_GET['errorCode'];
	mail('philippe-jean@outlook.fr;', 'Array_pre_cart', '<pre>'.print_r($Result, true).'</pre>');
	$updatedCardRegister = $MangopayApi->CardRegistrations->Update($Result);
	//echo "49*";echo $cart_id;
	$cart_id = $updatedCardRegister->CardId;
	
	if ($updatedCardRegister->Status=="VALIDATED")
		{
		$CardPreAuthorization = new \MangoPay\CardPreAuthorization();
		$CardPreAuthorization->AuthorId = $user_id;
		$CardPreAuthorization->DebitedFunds = new \MangoPay\Money();
		$CardPreAuthorization->DebitedFunds->Currency = "EUR";
		$CardPreAuthorization->DebitedFunds->Amount = $_SESSION['amount'];
		$CardPreAuthorization->SecureMode = "DEFAULT";
		$CardPreAuthorization->CardId = $cart_id;
		$CardPreAuthorization->SecureModeReturnURL = "http".(isset($_SERVER['HTTPS']) ? "s" : null)."://".$_SERVER["HTTP_HOST"].$_SERVER["SCRIPT_NAME"]."?stepId=".($stepId+1);
		$result = $MangopayApi->CardPreAuthorizations->Create($CardPreAuthorization);
		//$_SESSION['secure'] = $result->SecureModeRedirectURL;
		//header("Location: ".$_SESSION['secure']);exit;
		echo "Paiement ok";
		}
	else
		{
		echo "Erreur";exit;
		}
	}


if ($passage==1)
{
if ($dev==1) {exit;}
// MISE A JOUR BASE DE DONNEE >ET ENVOI MAIL SI TOUT EST OK
$requete="UPDATE constat set 
					mangopay_cardregister_id			= '".$updatedCardRegister->CardId."',
					mangopay_ResultCode					= '".$updatedCardRegister->ResultCode."',
					mangopay_ResultMessage				= '".$updatedCardRegister->ResultMessage."',
					mangopay_Status						= '".$updatedCardRegister->Status."' 
					mangopay_preAuthorizationId			= '".$preAuthorizationId."' 
					
					where id					=".$constat_id;
					//echo $requete;
					$db->query($requete);
					

$myquery 	= "SELECT * from constat where id				=".$constat_id;
$constat 	= $db->get_row($myquery);


/// MAIL TO THE ADMIN					
require_once('includes/class.phpmailer.php');
require_once('includes/class.smtp.php');

$objet="Huissier-Express : Demande de constat postée";
$from			=	"resa@huissier-express.fr";
$from_name			="huissier-express.fr";
$destinataire	=	"philippe-jean@outlook.fr";
$reply			=	$from;
$mail = new PHPmailer();
$mail->SMTPDebug  = 0;
$mail->CharSet = "UTF-8";
$mail->IsHTML(true);
$mail->setFrom($from,$from_name);
$mail->AddAddress($destinataire);
$mail->AddReplyTo($reply);	
$mail->Subject=$objet;
$mail->Body="Huissier-Express : ".$constat->prenom." ".$constat->nom." ".$constat->ville." ".$constat->tarif;
if(!$mail->Send())
{echo $mail->ErrorInfo;}
else{echo '';}
unset($mail);


//MAIL TO CLIENT
		

$constat_mail			=	$constat->mail;
$constat_type			=	"Type : ".$tableau_constat_type[$constat->constat_type]."<br>";
if ($constat->choix==1)
{
$constat_plage_jour		=	"Jour : ".$tableau_plage_jour[$constat->plage_jour]."<br>";
$constat_plage_heure	=	"Heure : ".$tableau_plage_heure[$constat->plage_heure]."<br>";
if ($constat->plage_urgence) {$constat_urgence		=	"Urgence : ".$tableau_plage_urgence[$constat->plage_urgence]."<br>";}
}
if ($constat->choix==2)
{
if ($constat->date_choix!="0000-00-00")	{$constat_date			=	"Date : ".$constat->date_choix."<br>";}
if ($constat->heure_choix!="0000-00-00")	{$constat_heure			=	"Heure : ".$constat->heure_choix."<br>";}
}
$constat_adresse		=	"Adresse : ".$constat->constat_adresse." ";
$constat_cp				=	$constat->constat_cp." ";
$constat_ville			=	$constat->constat_ville."<br>";
if ($constat->is_present==1) {$constat_is_present="Client présent sur les lieux<br>";}
if ($constat->is_present==2) {$constat_is_present="Client non présent sur les lieux<br>";}
$constat_tarif			=	"Tarif : ".$constat->tarif."<br>";

include("includes/mail_vers_client.php");

$objet="Huissier-Express : votre demande de constat";
$from			=	"info@huissier-express.fr";
$from_name			="huissier-express.fr";
$destinataire	=	$constat_mail;
$reply			=	$from;
$mail = new PHPmailer();
$mail->SMTPDebug  = 0;
$mail->CharSet = "UTF-8";
$mail->IsHTML(true);
$mail->setFrom($from,$from_name);
$mail->AddAddress($destinataire);
$mail->AddBCC("philippe-jean@outlook.fr");
$mail->AddReplyTo($reply);	
$mail->Subject=$objet;
$mail->Body=$message;
if(!$mail->Send())
{echo $mail->ErrorInfo;}
else{echo '';}
unset($mail);


}


?>

<!DOCTYPE html>
<!--[if lt IE 7 ]><html class="ie ie6" lang="en"> <![endif]-->
<!--[if IE 7 ]><html class="ie ie7" lang="en"> <![endif]-->
<!--[if IE 8 ]><html class="ie ie8" lang="en"> <![endif]-->
<!--[if (gte IE 9)|!(IE)]><!--><html lang="en"> <!--<![endif]-->
<head>
<meta charset="utf-8">
<title>HUISSIER EXPRESS</title>
<meta name="description" content="">
<meta name="author" content="">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
<link rel="stylesheet" href="stylesheets/menu.css">
<link rel="stylesheet" href="stylesheets/flat-ui-slider.css">
<link rel="stylesheet" href="stylesheets/base.css">
<link rel="stylesheet" href="stylesheets/skeleton.css">
<link rel="stylesheet" href="stylesheets/landings.css">
<link rel="stylesheet" href="stylesheets/main.css">
<link rel="stylesheet" href="stylesheets/landings_layouts.css">
<link rel="stylesheet" href="stylesheets/box.css">
<link rel="stylesheet" href="stylesheets/pixicon.css">
<link rel="stylesheet" href="stylesheets/custom.css">
<!--[if lt IE 9]>
	<script src="https://html5shim.googlecode.com/svn/trunk/html5.js"></script>
<![endif]-->

<link rel="shortcut icon" href="images/icone.png">
<link rel="icon" href="images/icone.png">
</style>	
</head>
<body>
<!-- Google Code for PAIEMENT D&Eacute;FINITIF Conversion Page -->
<script type="text/javascript">
/* <![CDATA[ */
var google_conversion_id = 863819651;
var google_conversion_language = "en";
var google_conversion_format = "3";
var google_conversion_color = "ffffff";
var google_conversion_label = "-FuiCLvM-W4Qg6_zmwM";
var google_remarketing_only = false;
/* ]]> */
</script>
<script type="text/javascript" src="//www.googleadservices.com/pagead/conversion.js">
</script>
<noscript>
<div style="display:inline;">
<img height="1" width="1" style="border-style:none;" alt="" src="//www.googleadservices.com/pagead/conversion/863819651/?label=-FuiCLvM-W4Qg6_zmwM&amp;guid=ON&amp;script=0"/>
</div>
</noscript>
<div id="bloc-assistance" class="assistance">
	<button onclick="ouvrir(this, 'assistance');"><img src="images/assistance.png" alt="Assistance"/></button><!--
 --><p class="font11">
		Vous rencontrez un problème ? Contactez notre service d’assistance :<br/>
		<a href="demande-assistance.php" title="Vous avez besoin d'aide ? Contactez notre assistance !">
			ASSISTANCE
		</a>
	</p>
</div>
<div class="pixfort_corporate_2">
	<div class="header_style">		
		<div class="header-blanc">
			<div class="container">
				<div class="three columns header_area">
					<a href="https://www.huissier-express.fr/"><span class="L1_style"><img src="images/logo.png" alt="Logo Huissier Express" id="logo"/></span></a>
				</div>
				<div class="ten columns menu header_area">
					<a href="index.php#comment">Comment ça marche ?</a>
					<a href="index.php#avantages">Avantages</a>
					<a href="index.php#constat">Mon constat</a>
					<a href="index.php#faq">FAQ</a>
					<a href="contacter-huissier-express.php">Contact</a>
					<button id="bt-menu-2">
                         <img src="images/close.png" alt="Close" class="img-close"/>
                     </button>
				</div>
				<div class="three columns header_area">
					 <a href="https://plus.google.com/u/0/103269676748781497623" target="_blank" class="yt_button"></a>
					 <a href="https://twitter.com/huissierexpress" target="_blank" class="twitter_button"></a>
					 <a href="https://www.facebook.com/Huissier-Express-1654921901477993/" target="_blank" class="facebook_button"></a>
					 <button id="bt-menu">
					     <img src="images/menu.png" alt="menu" class="img-menu"/>
					 </button>
				</div>
			</div>		
		</div>
	</div>
</div>

<div class="pixfort_corporate_2">
	<div class="page_style paiement">
		<div class="container">
			<div class="sixteen columns context_style">
				<div class="title_style contact">
					HUISSIER-EXPRESS.FR<br>
					Merci pour votre commande.<br>
				</div>
				<div class="subtitle_style">
					<br/>
					Votre paiement sera encaissé seulement lorsqu'un huissier s'engagera à réaliser votre constat.
					
				</div><br><br>
				<div class="contact_styl4e">
				
				
					
					
					
					<div class="subtitle_style">
                        <br><center><img src="images/Mango-Frise1.png" width=360><br><img src="images/3DS.jpeg"></center>
					</div>
				</div><br/><br/>
				<div class="note_st alt blanc">* Paiement sécurisé via MangoPay Inc.</div>
			</div>
		</div>
	</div>
</div>
<footer>
	<div class="container">
		<div class="ten columns">
			<p>
				© Copyright 2017 - Huissier Express - Tous droits réservés<br/>
				<a href="docs/cgu-huissier-express.pdf" target="_blank">Conditions générales d'utilisation</a> - <a href="docs/Mangopay-Terms-FR.pdf" target="_blank">Conditions générales Mangopay</a><br/>
				Une création Web <a href="http://www.melting-k.fr" target="_blank">Melting K</a> - Mentions légales 
				<br/><br/>
				<img src="images/mangopay.png" alt="Mangopay" class="mangopay"/>
			</p>
		</div>
		<p class="six columns">
			<img src="images/logo.png" alt="Logo Huissier Express" class="logo"/>
		</p>
	</div>
</footer>

<script src="js-files/jquery-1.7.2.min.js" type="text/javascript"></script> <!-- jQuery -->
<script src="js-files/jquery.easing.1.3.js" type="text/javascript"></script> <!-- jQuery easing -->
<script type='text/javascript' src='js-files/jquery.common.min.js'></script>
<!--<script src="js-files/custom.js" type="text/javascript"></script>-->
<script src="assets_fo/js/smoothscroll.min.js" type="text/javascript"></script>
<script src="assets_fo/js/appear.min.js" type="text/javascript"></script>
</body>
</html>