Mini Shell Moded By TiGER HeX

//var/www/ridazz/registerordie/registerx9849822.php.old

<?php
include_once('includes/static/configure.php');
include_once('includes/static/util.php');
include_once('includes/static/dbcon.php');
include_once('includes/static/gdimg.php');
include_once('includes/static/sessions.php');
include_once('includes/appTop.php');

if(isset($_REQUEST['refurl'])){
   $refurl = $_REQUEST['refurl'];
}else{
   $refurl = "/";
}

if(isset($_REQUEST['register'])){
	$email = $_REQUEST['email'];
	$url = $_REQUEST['website'];
	$uname = strip_tags(trim($_REQUEST['username']));
	$password = $_REQUEST['password'];
	$profile = get_html_text($_REQUEST['profile']);
    $ip = get_client_ip();
    $cur_file = $_FILES['file']['name'];
	$cur_temp = $_FILES['file']['tmp_name'];
	$cur_mime = $_FILES['file']['type'];
	$cur_size = $_FILES['file']['size'];
	$cur_error = $_FILES['file']['error'];

$unique = true;
	//first check for unique name
	$sql = "SELECT user_id FROM 50mm_users WHERE username ='$uname'";
	if( !($result = $db->sql_query($sql)) ){
	   $sql_error = $db->sql_error();
	   die($sql_error['message']);
	}
    if($db->sql_numrows($result) > 0){
       $unique = false;
	}
	$sql = "SELECT user_id FROM 50mm_users WHERE email ='$email'";
	if( !($result = $db->sql_query($sql)) ){
	   $sql_error = $db->sql_error();
	   die($sql_error['message']);
	}
    if($db->sql_numrows($result) > 0){
       $unique = false;
	}

if($unique){
	  //username is unique so add this user
	  //store profile image on the server
	  $unique_name = "";
	  $valid = validate_content($cur_error,$cur_mime,$cur_size,$cur_file,PROFILE_MAX_KB);
	  if($valid['result']){
	     $type = split("/",$cur_mime);
		 $cur_type = trim($type[0]);
		 $unique_name = get_unique_filename($cur_file);
		 $image_info = getimagesize($cur_temp);

//check to see if image needs resizing
		 if(($image_info[0] > PROFILE_IMG_WIDTH) || ($image_info[1] > PROFILE_IMG_HEIGHT)){
			//create image res
			$gd = new gd_img($cur_mime,$cur_temp);
			if(!$gd->img_id){ die($gd->gd_error);}

//scale image
			$id = $gd->gd_scale_img(PROFILE_IMG_WIDTH,PROFILE_IMG_WIDTH,IMG_QUALITY);
			if(!$id){ die($gd->gd_error);}

//create image
			$res = $gd->gd_create_img($id,ROOT_DIR.PROFILE_IMG_DIR.$unique_name);
			if(!$res){ die($gd->gd_error);}
		 }else{
			if (!copy($cur_temp, ROOT_DIR.PROFILE_IMG_DIR.$unique_name)) {
			   die("Failed Image Upload");
			}
		 }
	  }
	  
	  $sql = "INSERT INTO 50mm_users (user_type,email,username,password,image,profile,url,ip,verified,entry_time) VALUES ('WEB','$email','$uname','$password','$unique_name','$profile','$url','$ip',0,NOW())";

if( !($result = $db->sql_query($sql)) ){
		 $sql_error = $db->sql_error();
		 die($sql_error['message']);
	  }
	  $sql = "SELECT LAST_INSERT_ID() AS user_id";
	  if( !($result = $db->sql_query($sql)) ){
	    $sql_error = $db->sql_error();
	    die($sql_error['message']);
	  }
	  $row = $db->sql_fetchrow($result);
      $uid = $row['user_id'];
	  //send email
	  $query = "uid=$uid&uname=$uname&refurl=$refurl";
	  $link = ROOT_URL."/login.php?id=".base64_encode($query);
	  $link = "<a href=\"$link\">$link</a>";
	  $body = "Please click the link below to complete registration for ".SITE_TITLE."<br><BR>Depending on your email program, you may need to COPY and paste the ENTIRE link into a new browser window.<br><br>";
	  $body.= "Username: ".$uname."<br>"; 
	  $body.= "Password: ".$password."<br>";
	  $body.= $link;
	  $headers  = "MIME-Version: 1.0\r\n";
	  $headers .= "Content-type: text/html; charset=iso-8859-1\r\n";
	  $headers .= "To: ".$email." <".$email.">\n";  
	  $headers .= "From: ".SITE_TITLE." <".ADMIN_EMAIL.">\r\n";
	  $mresult = mail($email,SITE_TITLE,$body,$headers);
	  if(!$mresult){
         //die("Unable to send email notification!");
         header("Location: regSuccess.php");
	  }
	  $vendor_headers = "From: ".SITE_TITLE." <".ADMIN_EMAIL.">\r\n";
	  $vendor_register = "general_registration@50mmlosangeles.com";
	  mail($vendor_register,'General Registration',$body,$vendor_headers);
	  header("Location: regSuccess.php");
	  exit();
	}else{
	  session_destroy();
	  session_write_close();
	  $url = append_query($_SERVER['PHP_SELF'],"errorCode",1);
	  $url = append_query($url,"refurl",$refurl);
	  header("Location: $url");
	  exit();
	}
}
$pg_name = basename($_SERVER['PHP_SELF']);
include_once('includes/header.php');

$err = "";
if(isset($_REQUEST['errorCode'])){
   $errorCode = $_REQUEST['errorCode'];
   if($errorCode == 1){
      $err ="<div class=\"error\">That username or email is already in our records. Please try another one.</div>";
   }
}
?><div class="title">Hello. The registration process is being abused by shit for brain spammers. Therefore, the only way to register at this time is to send an email to signup.ridazz AT gmail DOT com with your desired username and you will receive a reply with your registration ASAP. <br><br> Please note: Your registration will likely take a day or two since the registrations are executed manually at this time.<br><br>PS: WE HATE SPAM! Your email will never be sold, shared, or marketed to in any way ever.<br><br> Thanks.</div>
<?
include_once('includes/footer.php');
include_once('includes/appBottom.php');
?>