shell bypass 403
UnknownSec Shell
:
/
home
/
delvin
/
public_html
/
dev2.delv-in.com
/
models
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
m_consult_booked.php
<?php class Consult_Bookings { private $Database; private $db_table = 'consult_booked'; function __construct(){ global $Database; $this->Database = $Database; } public function get($conBookID, $conSchedID){ $data = array(); $Template = new Template; if ($conBookID > 0){ // get 1 if ($stmt = $this->Database->prepare("SELECT * FROM " . $this->db_table . " WHERE conBookID = ?")){ $stmt->bind_param('i', $conBookID); $stmt->execute(); $stmt->store_result(); $stmt->bind_result($conBookID, $conSchedID, $clName, $clEmail, $clOrg, $note, $clLocation); if ($stmt->num_rows() > 0){ $stmt->fetch(); $data = array('conBookID'=>$conBookID, 'conSchedID'=>$conSchedID, 'clName'=>$clName, 'clEmail'=>$clEmail, 'clOrg'=>$clOrg, 'note'=>$note, 'clLocation'=>$clLocation); return $data; $stmt->close(); } } else { $Template->set_alert("Query error: ".__line__." m_consult_booked"); } } else if ($conSchedID > 0){ if ($stmt = $this->Database->prepare("SELECT * FROM " . $this->db_table . " WHERE conSchedID = ?")){ $stmt->bind_param('i', $conSchedID); $stmt->execute(); $stmt->store_result(); $stmt->bind_result($conBookID, $conSchedID, $clName, $clEmail, $clOrg, $note, $clLocation); if ($stmt->num_rows() > 0){ $stmt->fetch(); $data = array('conBookID'=>$conBookID, 'conSchedID'=>$conSchedID, 'clName'=>$clName, 'clEmail'=>$clEmail, 'clOrg'=>$clOrg, 'note'=>$note, 'clLocation'=>$clLocation); return $data; $stmt->close(); } } else { $Template->set_alert("Query error: ".__line__." m_consult_booked"); } } else { // get all if ($stmt = $this->Database->prepare("SELECT * FROM " . $this->db_table )){ $stmt->execute(); $stmt->store_result(); $stmt->bind_result($conBookID, $conSchedID, $clName, $clEmail, $clOrg, $note, $clLocation); while ($stmt->fetch()){ $data[] = array('conBookID'=>$conBookID, 'conSchedID'=>$conSchedID, 'clName'=>$clName, 'clEmail'=>$clEmail, 'clOrg'=>$clOrg, 'note'=>$note, 'clLocation'=>$clLocation); } return $data; $stmt->close(); } else { $Template->set_alert("Query error: ".__line__." m_consult_booked"); } } } // end get method public function add_mod($conBookID, $conSchedID, $clName, $clEmail, $clOrg, $note, $clLocation){ $Template = new Template; date_default_timezone_set('Canada/Pacific'); $timeZoneConvertArr = array("Canada/Pacific"=>"0", "Canada/Mountain"=>"1", "Canada/Central"=>"2", "Canada/Eastern"=>"3", "Canada/Atlantic"=>"4", "Canada/Newfoundland"=>"4.5"); $timezonesArr = array("Canada/Pacific"=>"Pacific", "Canada/Mountain"=>"Mountain", "Canada/Central"=>"Central", "Canada/Eastern"=>"Eastern", "Canada/Atlantic"=>"Atlantic", "Canada/Newfoundland"=>"Newfoundland"); if ($conBookID > 0){ // update record if ($stmt = $this->Database->prepare("UPDATE ". $this->db_table . " SET conSchedID=?, clName=?, clEmail=?, clOrg=?, note = ?, clLocation=? WHERE conBookID = ?")){ $stmt->bind_param('isssssi', $conSchedID, $clName, $clEmail, $clOrg, $note, $clLocation, $conBookID); if ($stmt->execute()){ $Template->set_alert("Changes saved", 'success'); } else { $Template->set_alert('Sorry, it seems there was an error. Please try again or contact us <a href="mailto:carole@delv-in.com">by email</a>,', 'error'); } } } else { // insert record if ($stmt = $this->Database->prepare("INSERT INTO ". $this->db_table . " (conSchedID, clName, clEmail, clOrg, note, clLocation) VALUES (?,?,?,?,?,?)")){ $stmt->bind_param('isssss', $conSchedID, $clName, $clEmail, $clOrg, $note, $clLocation); if ($stmt->execute()){ $message = "<p>Hi ". $clName . ",</p> <p><b>Your Free ". $_POST['duration'] . " minute consultation is scheduled for ". date("g:i a", $_POST['startTS']); if ($timeZoneConvertArr[$clLocation] > 0){ $message .= " (" . date('g:i a', $_POST['startTS'] + $timeZoneConvertArr[$clLocation]*60*60)." " . $timezonesArr[$clLocation]. " time)"; } $message .= " on " . date("l F j, Y", $_POST['startTS']) .".</b> If you would like to change this booking please reply to this email or contact me directly at <a href='mailto:carole@delv-in.com'>carole@delv-in.com</a>.</p> <p>During our call we can talk about any HR issues that may be causing frustration and pin point how DELVIN can help.</p> <p>You can join this meeting from your computer, tablet or smartphone by clicking on this link: <a href='https://us02web.zoom.us/j/2308850473'>https://us02web.zoom.us/j/2308850473</a></p> <p>I'm looking forward to speaking with you soon.</p> <p>Carole McLeod<br>Partner, Market Development<br>C2 Analytics Inc.</p> <p><img src='https://www.delv-in.com/views/images/delvin_logo.png' width=100 height=42></p>"; $Send_Email = new Send_Email($clEmail, "Your Free " . $_POST['duration'] . " Minute DELVIN Consulation", $message, 'info@delv-in.com', 'carole@delv-in.com'); $Template->set_alert('Your free ' . $_POST['duration'] . " minute consultation has been booked!<br>You will receive an email confirmation shortly at ". $clEmail . ".", 'success'); } else { $Template->set_alert('Sorry, it seems there was an error. Please try again or contact us <a href="mailto:carole@delv-in.com">by email</a>,', 'error'); } } } } // end add_mod method public function delete($conBookID){ $Template = new Template; $query = "DELETE FROM " . $this->db_table . " WHERE conBookID='". $conBookID."'"; if ($stmt = $this->Database->prepare("DELETE FROM " . $this->db_table . " WHERE conBookID=?")){ $stmt->bind_param('i', $conBookID); if ($stmt->execute()){ $Template->set_alert('Your consultation booking has been deleted', 'success'); } else { $Template->set_alert('Sorry, it seems there was an error. Please try again or contact us <a href="mailto:carole@delv-in.com">by email</a>,', 'error'); } } } // end delete method } ?>
© 2026 UnknownSec