shell bypass 403
<?php
session_start();
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<link rel="shortcut icon" href="favicon.ico"/>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Email Sending..</title>
<link href="style.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="box">
<?php
$pass = false;
require_once('class.phpmailer.php');
$submit = $_POST['submit'];
$captcha = $_POST['captcha'];
//
// echo $_SESSION['sCaptcha'] . '++' . $base['session']['sCaptcha'] . '--' . $captcha;
// exit();
if ($_SESSION['sCaptcha'] != $captcha) {
echo 'ขออภัย คุณกรอกภาพตัวอักษร(Captcha)ไม่ถูกต้อง!!';
echo '<br/><INPUT TYPE="BUTTON" VALUE="กลับไปแก้ไข" ONCLICK="history.go(-1)"/>';
exit();
}
$title = $_POST['subject'];
$name = $_POST['name'];
$lastname = $_POST['lastname'];
$mobile = $_POST['mobile'];
$email = $_POST['email'];
$msg = $_POST['message'];
//
if ($submit != "") {
if ($title != "" && $msg != "") {
//check gmail account
$gmailUsername = "map2iv@gmail.com";
$gmailPassword = "mapinterior";
$auther = "contact - web:interiorvisions.co.th";
$contactMail = "contact@interiorvisions.co.th";
// $contactMail = "homelyboyz@gmail.com";
$contactName = "contact - web:interiorvisions.co.th";
//////////////////////////////////////////////////////////
$msg = nl2br($msg);
/////////////////////start send message///////////////////
$mail = new PHPMailer();
$msg = eregi_replace("<>[\]", '', $msg);
$mail->IsSMTP(); // telling the class to use SMTP
$mail->SMTPAuth = true; // enable SMTP authentication
$mail->SMTPSecure = "ssl"; // sets the prefix to the servier
$mail->Host = "smtp.gmail.com"; // sets GMAIL as the SMTP server
$mail->Port = 465; // set the SMTP port for the GMAIL server
$mail->Username = $gmailUsername; // GMAIL username
$mail->Password = $gmailPassword; // GMAIL password
$mail->SetFrom($gmailUsername, $auther); //Sender
$mail->Subject = $title;
//$mail->AltBody = "To view the message, please use an HTML compatible email viewer!"; // optional, comment out and test
$mail->MsgHTML($title . '<br/>' . $msg . '<br/>From:' . $name . $lastname . '<br/>E-mail:' . $email . '<br/>Mobile:' . $mobile);
$mail->AddAddress($contactMail, $contactName);
if (!$mail->Send()) {
echo $mail->ErrorInfo;
} else {
echo 'ส่ง E-mail สำเร็จแล้ว ทางเราจะทำการติดต่อกลับไปภายหลัง';
$pass = true;
}
} else {
echo 'กรุณากรอกข้อมูลให้ครบทุกช่อง!!';
}
}
if ($pass) {
echo '<br/><a href="http://interiorvisions.co.th">- กลับสู่หน้าเว็บไซต์</a>';
} else {
echo '<br/><INPUT TYPE="BUTTON" VALUE="กลับไปแก้ไข" ONCLICK="history.go(-1)"/>';
}
?>
</div>
</body>
</html>