OverLord Shell

<?php require_once("db/conn.php");
session_start();
include("sql_ing.php");
if(empty($_SESSION['captcha_code'] ) || strcasecmp($_SESSION['captcha_code'], $_POST['captcha_code']) != 0){  
		echo "The captcha code does not match!";// Captcha verification is incorrect.	
		
}else
{ 
$details=filter_var(addslashes($_POST['details']), FILTER_SANITIZE_STRING);
$address=filter_var(addslashes($_POST['address']), FILTER_SANITIZE_STRING);
$position=filter_var(addslashes($_POST['position']), FILTER_SANITIZE_STRING);
$contact_mob=filter_var(addslashes($_POST['contact_mob']), FILTER_SANITIZE_STRING);
$contact_email=filter_var(addslashes($_POST['contact_email']), FILTER_SANITIZE_STRING);
$contact_fax=filter_var(addslashes($_POST['contact_fax']), FILTER_SANITIZE_STRING);
$chequedraw=filter_var(addslashes($_POST['chequedraw']), FILTER_SANITIZE_STRING);
$cname=filter_var(addslashes($_POST['cname']), FILTER_SANITIZE_STRING);
$number=filter_var(addslashes($_POST['number']), FILTER_SANITIZE_STRING);
$contact_person=filter_var(addslashes($_POST['contact_person']), FILTER_SANITIZE_STRING);
$pic = $_POST['pic'];

$target = "upload/"; 
$target = $target . basename( $_FILES['photo']['name']); 
//print_r($_FILES);
$pic = ($_FILES['photo']['name']); 
//var_dump(move_uploaded_file($_FILES['photo']['tmp_name'], $target));
if (move_uploaded_file($_FILES['photo']['tmp_name'], $target)) { 
    echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded, and your information has been added to the directory"; 
} else { 
    echo "Sorry, there was a problem uploading your file.";
} 


//var_dump($_POST);exit;


  
 $addq="INSERT INTO mc_send_enquiry (details,address,position,contact_mob,contact_email,contact_fax,contact_person,chequedraw,cname,number,photo,createdon) VALUES ('".no_injection(addslashes($details))."','".no_injection(addslashes($address))."','".no_injection(addslashes($position))."','".no_injection(addslashes($contact_mob))."','".no_injection(addslashes($contact_email))."','".no_injection(addslashes($contact_fax))."','".no_injection(addslashes($contact_person))."','".no_injection(addslashes($chequedraw))."','".no_injection(addslashes($cname))."','".no_injection(addslashes($number))."','$pic','".date('Y-m-d H:i:s')."')";
  $addr=$connection->query($addq);  
   			

     if($addr){
  	  $to = 'avinash@maccia.org.in,chandrakant@maccia.org.in,sagar@maccia.org.in,support@ultraliant.com';
$subject = 'New Advertisement Enquiry Details For Maccia';
$message="<table align=\"center\" style=\"border:0px solid #456;border-radius:3px; width:70%; cellpadding:0; cellspacing:0;\">
					<tr style=\"\"><td style=\"text-align:center; padding:15px; font-weight:bold; font-size:20px;\"> New Advertisement Enquiry </td></tr>
					<tr>
					<td>
						<table cellpadding=\"6\" style=\"width:100%; cellpadding:0; cellspacing:1; border:1px solid #BEC0CC; border-radius:3px 3px 0px 0px;  padding-bottom:15px;\">
						<tbody>
							<tr style=\"padding-bottom:10px;\">
								<td style=\" border-color:#BEC0CC; width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Position:
								</td>
								<td>
									".$position."
								</td>
							    
							</tr>
							
							<tr>
                               <td style=\"width:10%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Details:
								</td>
								<td style=\" width:100%;\">
								<p>".$details."</p>
								</td>							
							</tr>
							<tr>
								<td style=\" width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Email: 
								</td>
								<td style=\" width:30%;\">
									".$contact_email."
								</td>
							</tr>
							<tr>
							  <td style=\" width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Mobile: 
								</td>
								<td style=\" width:30%;\">
									".$contact_mob."
								</td>
							</tr>
						
							
                        </tbody>
						</table>
						</td>
						</tr>
							<tr>
							  <td colspan=\"2\" style=\" width:20%; font-weight:bold;\">
							  This is auto generated email, Please do not reply!
								</td>
								
							</tr>
					</table>";

						$emailxy="no-reply@maccia.org.in";
						$headers = 'From: '.$emailxy. "\r\n". 'Reply-To:avinash@maccia.org.in'. "\r\n" . 'MIME-Version: 1.0' . "\r\n" . 'Content-type: text/html; charset=iso-8859-1' . "\r\n" . 'X-Mailer: PHP/' . phpversion();
						mail($to, $subject, $message, $headers);

	
   //echo "successfully Sent...";
	 header("location:sendenquiry.php?msg=enquiry sent successfully");
	  
		 }else{
   			 echo "ERROR: Could not able to execute $addr.";
				}
}
                  
   ?>