OverLord Shell

<?php session_start();
if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("db/conn.php");
$sid=$_SESSION['company_id'];
$uid=$_POST['uid'];
$cid=$_POST['cid'];
$pid=$_POST['pid'];
$subject="Review from businessdirectory.com";
$email=$_POST['email'];
$mobno=$_POST['mobno'];
$message=nl2br($_POST['message']);
$message.="<br><p>Phone No: ".$mobno."</p>";
$enquiry=$_POST['message'];
$listr=$connection->query("SELECT company_enquiry_email FROM busdir_mst_company WHERE company_id=".$uid);
$listrow=$listr->fetch_assoc();
$listr->free();
/*
$listrd=$connection->query("INSERT INTO `busdir_mst_product_enquiry`(  `my_company_id`, `product_id`, `phone`, `email`, `enquiry`, `enquiry_date`, `createdby`) 
VALUES ($uid,$pid,$mobno,$email,$email,date('Y-m-d H:i:s'),$sid");*/




$data = array(
        'company_id' => $cid,
		'my_company_id' => $uid,
		'product_id' => $pid,
		'phone' => $mobno,
		'email' => $email,
		'enquiry' => $enquiry,	
		'enquiry_date' =>date('Y-m-d H:i:s'),
		'createdby' => $sid,
		'createdon' => date('Y-m-d H:i:s')
	);
	//print_r($data);exit;

	$insertresult = dbRowInsert('busdir_mst_product_review', $data);
	$insertresultarr = explode("-",$insertresult);
	
	echo $insertresultarr[0];
	
$to=$listrow['company_enquiry_email'];

$headers="MIME-Version: 1.0\r\n"."Content-type: text/html; charset=iso-8859-1\r\n"."From: \"".$email."\" <".$email.">\r\n";

if(@mail($to,$subject,$message,$headers))echo "success";

else echo "An unknown error occured. Please try again.";
$connection->close();
?>