Devil Killer Is Here MiNi Shell

MiNi SheLL

Current Path : /hermes/sb_web/sb_web/web/b1536/thelordoffloors.com/gstreepreservation/

Linux boscustweb5003.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64

Current File : /hermes/sb_web/sb_web/web/b1536/thelordoffloors.com/gstreepreservation/guardar.php

<?php 
@session_start();
include('conexion.php');
// Invisible reCaptcha



//verificamos que el token de la variable session sea igual al que se envio por el fomulario
if (!isset($_POST['token'])) {
    //inmediatamente redireccionamos a la URL donde se encuentra el contact form

    echo '<script language="javascript"> alert("Message sent successfully!!T"); </script>';
    echo '<script language="javascript"> window.setTimeout( window.location.href="testimonials.php",2000); </script>';
}else{  
  //destruimos la sesion
  //session_destroy();
  $honeypot = $_POST['firstname'];
  if (!empty($honeypot)) {
      echo '<script language="javascript"> alert("Message sent successfully!!"); </script>';
      echo '<script language="javascript"> window.setTimeout( window.location.href="testimonials.php",1000); </script>';
  }else{
    if(isset($_POST["captcha"])){    
      if ($link->connect_error) {
            die("Connection failed: " . $link->connect_error);
        } 
        $nombre   = mysqli_real_escape_string($link, isset($_POST['name'])     ? $_POST['name']    : ''); 
        $city     = mysqli_real_escape_string($link, isset($_POST['city'])     ? $_POST['city']    : '');
        $star     = mysqli_real_escape_string($link, isset($_POST['rating'])   ? $_POST['rating']  : ''); 
        $date     = mysqli_real_escape_string($link, isset($_POST['date'])     ? $_POST['date']    : ''); 
        $project  = mysqli_real_escape_string($link, isset($_POST['project'])  ? $_POST['project'] : '');
        $review   = mysqli_real_escape_string($link, isset($_POST['review'])   ? $_POST['review']  : ''); 

        $nombre   = trim(strip_tags($nombre ));
        $city     = trim(strip_tags($city   ));
        $star     = trim(strip_tags($star   ));
        $date     = trim(strip_tags($date   ));
        $project  = trim(strip_tags($project));
        $review   = trim(strip_tags($review ));  

        if ($star==0) {
          die('<script language="javascript"> window.parent.alert("Please select a Star"); </script> <script language="javascript"> window.setTimeout( window.location.href="testimonials.php",2000); </script>');
        }else{
          $sql= $link->prepare("INSERT INTO  `reviews` (name, city, project, rdate, review, start)VALUES (?, ?, ?, ?, ?, ?)");
          $sql->bind_param("sssssi",$nombre, $city, $project, $date, $review, $star);
        }
        
        if ($sql->execute() === TRUE) {
          header("Location: testimonials.php"); /* Redirect browser */
          /* Make sure that code below does not get executed when we redirect. */
          exit;
        } else {
          header("Location: testimonials.php");
        }

        $link->close();
    }
    else{
      die('<script language="javascript"> window.parent.alert("Captcha code not valid"); </script> <script language="javascript"> window.setTimeout( window.location.href="testimonials.php",2000); </script>');
    }
  }
}
?>

Creat By MiNi SheLL
Email: devilkiller@gmail.com