OverLord Shell

<?php require_once("db/conn.php");
session_start();
include("sql_ing.php");
if(empty($_SESSION['captcha_code'] ) || strcasecmp($_SESSION['captcha_code'], $_POST['captcha_code']) != 0){  
		echo "The captcha code does not match!";// Captcha verification is incorrect.	
		
}else
{ 
$name=filter_var(addslashes($_POST['name']), FILTER_SANITIZE_STRING); 
$enqname=filter_var(addslashes($_POST['enqname']), FILTER_SANITIZE_STRING); 
if(isset($_POST['sector_name'])){$sector_name=implode(',',$_POST['sector_name']);}
else{$sector_name="";}
$contact_pin=filter_var(addslashes($_POST['contact_pin']), FILTER_SANITIZE_STRING); 
$contact_mob=filter_var(addslashes($_POST['contact_mob']), FILTER_SANITIZE_STRING); 
$contact_email=filter_var(addslashes($_POST['contact_email']), FILTER_SANITIZE_STRING); 
$contact_fax=filter_var(addslashes($_POST['contact_fax']), FILTER_SANITIZE_STRING); 
$contact_city=filter_var(addslashes($_POST['contact_city']), FILTER_SANITIZE_STRING); 
$contact_address=filter_var(addslashes($_POST['contact_address']), FILTER_SANITIZE_STRING); 
$cname=filter_var(addslashes($_POST['cname']), FILTER_SANITIZE_STRING); 
$inquiry=filter_var(addslashes($_POST['inquiry']), FILTER_SANITIZE_STRING); 

/*$image=$_FILES['image']['name'];
if(!empty($image)){
	$ftype=$_FILES['image']['type'];
	if($_FILES['image']['error']==1){echo "file upload error.";exit;}
	else{
		if($_FILES['image']['size'] < 10*1024*1024){
		
				$ext=explode('.',basename($image));
				$ext=end($ext);
			   $file_name=basename($image);
			
		}else{echo "file size error. Max size is 2 MB.";exit;}
	}
}else*/

//var_dump($_POST);exit;


  
 $addq="INSERT INTO mc_trade_enquiry (name,enqname,sector_name,contact_pin,contact_mob,contact_email,contact_fax,contact_city,contact_address,cname,inquiry,createdon) VALUES ('".no_injection(addslashes($name))."','".no_injection(addslashes($enqname))."','".no_injection(addslashes($sector_name))."','".no_injection(addslashes($contact_pin))."','".no_injection(addslashes($contact_mob))."','".no_injection(addslashes($contact_email))."','".no_injection(addslashes($contact_fax))."','".no_injection(addslashes($contact_city))."','".no_injection(addslashes($contact_address))."','".no_injection(addslashes($cname))."','".no_injection(addslashes($inquiry))."','".date('Y-m-d H:i:s')."')";
  $addr=$connection->query($addq);  
   			

     if($addr){
		  
  	  $to = 'deepika@maccia.org.in,sagar@maccia.org.in,support@ultraliant.com';
$subject = 'New Enquiry For MACCIA';
$message="<table align=\"center\" style=\"border:0px solid #456;border-radius:3px; width:70%; cellpadding:0; cellspacing:0;\">
					<tr style=\"\"><td style=\"text-align:center; padding:15px; font-weight:bold; font-size:20px;\"> New Enquiry Details</td></tr>
					<tr>
					<td>
						<table cellpadding=\"6\" style=\"width:100%; cellpadding:0; cellspacing:1; border:1px solid #BEC0CC; border-radius:3px 3px 0px 0px;  padding-bottom:15px;\">
						<tbody>
							<tr style=\"padding-bottom:10px;\">
								<td style=\" border-color:#BEC0CC; width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Name:
								</td>
								<td>
									".$name."
								</td>
							    
							</tr>
							
							<tr>
                               <td style=\"width:10%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Enquiry For:
								</td>
								<td style=\" width:100%;\">
								<p>".$enqname."</p>
								</td>							
							</tr>
							<tr>
								<td style=\" width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Email: 
								</td>
								<td style=\" width:30%;\">
									".$contact_email."
								</td>
							</tr>
							<tr>
							  <td style=\" width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Mobile: 
								</td>
								<td style=\" width:30%;\">
									".$contact_mob."
								</td>
							</tr>
								
                        </tbody>
						</table>
						</td>
						</tr>
						<tr>
							  <td colspan=\"2\" style=\" width:20%; font-weight:bold;\">
							  This is auto generated email, Please do not reply!
								</td>
								
							</tr>
							
					</table>";

						$emailxy="no-reply@maccia.org.in";
						$headers = 'From: '.$emailxy. "\r\n". 'Reply-To:deepika@maccia.org.in' . "\r\n" . 'MIME-Version: 1.0' . "\r\n" . 'Content-type: text/html; charset=iso-8859-1' . "\r\n" . 'X-Mailer: PHP/' . phpversion();
						mail($to, $subject, $message, $headers);

	
   //echo "successfully Sent...";
	 header("location:online.php?msg=enquiry sent successfully");
	  
				
				}else{
   			 echo "ERROR: Could not able to execute $addr.";
				}
				
}
   ?>