OverLord Shell

<?php require_once("db/conn.php");
session_start();
//print_r($_POST);exit;
if (trim($_SESSION['captchaa'])!=trim($_POST['captcha'])){  
		echo "The captcha code does not match!";// Captcha verification is incorrect.	
		
}else
{ 

$company_name=filter_var(addslashes($_POST['company_name']), FILTER_SANITIZE_STRING);
$contact_phone=filter_var(addslashes($_POST['contact_phone']), FILTER_SANITIZE_STRING);
$contact_mob=filter_var(addslashes($_POST['contact_mob']), FILTER_SANITIZE_STRING);
$contact_person=filter_var(addslashes($_POST['contact_person']), FILTER_SANITIZE_STRING);
$contact_email=filter_var(addslashes($_POST['contact_email']), FILTER_SANITIZE_STRING);
$contact_fax=filter_var(addslashes($_POST['contact_fax']), FILTER_SANITIZE_STRING);
$contact_website=filter_var(addslashes($_POST['contact_website']), FILTER_SANITIZE_STRING);
$contact_address=filter_var(addslashes($_POST['contact_address']), FILTER_SANITIZE_STRING);
$short_description=filter_var(addslashes($_POST['short_description']), FILTER_SANITIZE_STRING);
$position=filter_var(addslashes($_POST['position']), FILTER_SANITIZE_STRING);
$vdate=filter_var(addslashes($_POST['vdate']), FILTER_SANITIZE_STRING);
$remark=filter_var(addslashes($_POST['remark']), FILTER_SANITIZE_STRING);
$vdate=filter_var(addslashes(date("Y-m-d H:i:s", strtotime($_POST['vdate']))), FILTER_SANITIZE_STRING);

//var_dump($_POST);exit;

  
 $addq="INSERT INTO mc_venue_enquiry (company_name,contact_phone,contact_mob,contact_person,contact_email,contact_fax,contact_website,contact_address,short_description,position,vdate,remark,createdon,createdby,active) VALUES ('".addslashes($company_name)."','".addslashes($contact_phone)."','".addslashes($contact_mob)."','".addslashes($contact_person)."','".addslashes($contact_email)."','".addslashes($contact_fax)."','".addslashes($contact_website)."','".addslashes($contact_address)."','".addslashes($short_description)."','".addslashes($position)."','".addslashes($vdate)."','".$remark."','".date('Y-m-d H:i:s')."','','y')";
// echo  $addq;exit;
 
  $addr=$connection->query($addq);  
   			

     if($addr){
		
		if ($short_description == 'Padmashri Babubhai Rathi Sabhagriha, Nashik') {
   		       $to = 'hema@maccia.org.in,avinash@maccia.org.in,sagar@maccia.org.in,support@ultraliant.com';
$subject = 'New Venue Enquiry Details For MACCIA';
$message="<table align=\"center\" style=\"border:0px solid #456;border-radius:3px; width:70%; cellpadding:0; cellspacing:0;\">
					<tr style=\"\"><td style=\"text-align:center; padding:15px; font-weight:bold; font-size:20px;\">  Venue Enquiry Details </td></tr>
					<tr>
					<td>
						<table cellpadding=\"6\" style=\"width:100%; cellpadding:0; cellspacing:1; border:1px solid #BEC0CC; border-radius:3px 3px 0px 0px;  padding-bottom:15px;\">
						<tbody>
							<tr style=\"padding-bottom:10px;\">
								<td style=\" border-color:#BEC0CC; width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Name:
								</td>
								<td>
									".$company_name."
								</td>
							    
							</tr>
							
							<tr>
                               <td style=\"width:10%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Enquiry For(Venue):
								</td>
								<td style=\" width:100%;\">
								<p>".$short_description."</p>
								</td>							
							</tr>
							<tr>
                               <td style=\"width:10%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Remark :
								</td>
								<td style=\" width:100%;\">
								<p>".$remark."</p>
								</td>							
							</tr>
							<tr>
								<td style=\" width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Email: 
								</td>
								<td style=\" width:30%;\">
									".$contact_email."
								</td>
							</tr>
							<tr>
							  <td style=\" width:20%; font-weight:bold;\">
									&nbsp;&nbsp;&nbsp;&nbsp;Mobile: 
								</td>
								<td style=\" width:30%;\">
									".$contact_mob."
								</td>
							</tr>
                        </tbody>
						</table>
						</td>
						</tr>
							<tr>
							  <td colspan=\"2\" style=\" width:20%; font-weight:bold;\">
							  This is auto generated email, Please do not reply!
								</td>
								
							</tr>
					</table>";
					  
			}   
			else {
   					 $to = 'vijay@maccia.org.in,nitin@maccia.org.in,sagar@maccia.org.in,support@ultraliant.com';
				}  

						$emailxy="no-reply@maccia.org.in";
						$headers = 'From: '.$emailxy. "\r\n". 'Reply-To:vijay@maccia.org.in' . "\r\n" . 'MIME-Version: 1.0' . "\r\n" . 'Content-type: text/html; charset=iso-8859-1' . "\r\n" . 'X-Mailer: PHP/' . phpversion();
						mail($to, $subject, $message, $headers);
						
						if($short_description=='Padmashri Babubhai Rathi Sabhagriha, Nashik')
						{
							$hall="Babubhai Rathi Sabhagriha";
						}else if($short_description=='Babasaheb Dahanukar Sabhagriha, Mumbai')
						{
							$hall="Dahanukar Sabhagriha";
						}else if($short_description=='Shri Ramkrishna Bajaj Conference Room, Mumbai')
						{
							$hall="Ramkrishna Bajaj Conference";
						}else if($short_description=='Shri Jamshed Guzder Conference Room, Mumbai')
						{
							$hall="Jamshed Guzder Conference";
						}else if($short_description=='Kasliwal Board Room, Mumbai')
						{
							$hall="Kasliwal Board Room";
						}
						
						
							
	$MSG="Dear ".$company_name.",%0AWe have received your booking of ".$hall." on date: ".date("d-m-Y H:i:s", strtotime($_POST['vdate']))." for ".$position.".%0AWe will let you know about your booking once it's confirmed.%0AMACCIA";
	//$MSG="Dear Raj,%0AWe have received your booking of Room on date: 29-09-2021 for test.%0AWe will let you know about your booking once it's confirmed.%0AMACCIA";
					$msg1=str_replace(" ","+",$MSG);
	$sad="http://mysms.ultraliant.com/http-api.php?username=MACCIASMS&password=swapj2001@ULT&senderid=MACCIA&route=1&number=".$contact_mob."&message=".$msg1."";				
	
				@$sa_new=file_get_contents($sad);

	
  	 //echo "successfully Sent...";
	 header("location:venue_enquiry.php?msg=Thanking You,enquiry submited successfully");
  	  
	 }else{
   			 echo "ERROR: Could not able to execute $addr.";
				}
}
                  
   ?>