!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/boletins/newsletter_bkp/   drwxr-xr-x
Free 9.42 GB of 93.48 GB (10.08%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     newsletter_grava.php (16.28 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    
#############################################################################
    # Nome: newsletter_grava.php                                                #
    # System: Irpen                                                             #
    # Criado por: Breno Henrique Vivarelli                                      #
    # Empresa: Netnigro                                                         #
    # E-mail: breno@netnigro.com.br                                             #
    # Descrição: Gravação das newsletter enviadas                               #
    # Histórico:                                                                #
    #    . 23/09/2008 - Breno Henrique Vivarelli                                #
    #            Criação da Página                                              # 
    #############################################################################
    
    // Includes
    
include("../../config/config.php");
    include(
INCLUDES "conexaoBD.php");    
    include(
INCLUDES "sentencas_sql.php");
    include(
INCLUDES "funcoes_uteis.php");
    
//include(INCLUDES . "valida_usuario.inc.php");
    
    
    
    //Funções
    
function EnviaEmailOficio($assunto,$texto,$email_destino)
    {
        
//Cabeçalho
        
$headers "From: IRPEN <contato@arpenpr.org.br>\n";
        
$headers .= "MIME-Version: 1.0\n";
        
$headers .= "Content-Type: text/html; charset=iso-8859-1\n";  
        
        if(
$email_destino == "contato@arpenpr.org.br")
        {
            
$headers .= "Bcc: Netnigro <ti@netnigro.com.br>\n"
            
//$email_destino = "ti@netnigro.com.br";
        
}   
        
        
$corpo_email "<html>
                                <head>
                                    <title>
$assunto</title>
                                    <style type=\"text/css\">
                                        body {
                                            font-family: Verdana, Geneva, Arial, Helvetica, sans-serif;
                                            font-size: 12px;
                                            text-align: justify;
                                            width: 640px;
                                            max-width: 640px;
                                            margin: auto; 
                                        }
                                    </style>
                                </head>
                                <body>
                                    <p><img src=\"http://www.arpenpr.org.br/imagens/newsletter/cabecalho.png\"></p>" 
                                     
stripslashes($texto) .
                                    
"<p><img src=\"http://www.arpenpr.org.br/imagens/newsletter/rodape.png\"></p>
                                </body>
                            </html>"
;          
                   
        if(
mail($email_destino,$assunto,$corpo_email,$headers))
        {
            return 
true;
        }
        else
        {
            return 
false;
        }            
    }
    
    
// Parâmetros provênientes da requisição
    
$tipo_destinatario $_POST["rdgTipoDestinatario"];
    
$assunto           $_POST["txtAssunto"];
    
$data_envio        FormataData($_POST["txtDataEnvio"],"BD");
    
$hora_envio        $_POST["txtHoraEnvio"];
    
$texto             $_POST["txtConteudo"]; 
    
    
$data_envio $data_envio " " $hora_envio;
    
    if(
$tipo_destinatario == "E")
    {
        
$destinatarios $_POST["cboDestinatarios"];
    }
    
/*
    echo "<pre>";
    print_r($_POST);
    echo "</pre>";
    die();
    */
    
    
if(strtotime($data_envio) < time())
    {
        
$enviadoSN "S";
    }
    else
    {
        
$enviadoSN "N";
    }
    
    
// Ação que o script deverá executar (Inclusão - I, Alteração - U, Ativação - A ou Inativação - IN)
    
$acao $_POST['hddAcao']; 
     
    
$erro false;       
    
    if(
$tipo_destinatario != "TS")
    {
        switch(
$acao)
        {
            
// Inclusão de conteúdo
            
case "I":       
                        
$sql        INCLUI_NEWSLETTER;
                        
$tipo_dados TIPO_DADOS_INCLUI_NEWSLETTER;
                        
$parametros = array($texto,$data_envio,$enviadoSN);
                        
$msg        "Newsletter enviada com sucesso!";
                        
                        if(
$stmt $conexao->prepare($sql)) 
                        {
                            
// Anexa os parâmetros na senteça sql
                            
$res db_stmt_bind_param($stmt,$tipo_dados,$parametros);
                             
                            if(
$res)
                            {
                                
// Executa a query
                                
$exec $stmt->execute();
                                
                                if(
$exec)
                                {  
                                    
//Código da newsletter inserida
                                    
$cod_newsletter $stmt->insert_id;
                                    
                                    
$stmt->close();                   
                                    
$conexao->commit();                                        
                                    
                                    if(
$enviadoSN == "S")
                                    {
                                        if(
$tipo_destinatario == "T")
                                        {  
                                            
$sql_email_oficios "SELECT CON_RowID, CON_Descricao, CON_Email, CON_Oficios_DR FROM contatos "
                                                               
"INNER JOIN oficios ON CON_Oficios_DR = OFI_RowID "
                                                               
"WHERE CON_Tabeliao = 'S' AND CON_Descricao <> 'DESATIVADO' "
                                                               
"AND CON_AtivoSN = 'S' AND CON_Email <> 'email@anoregpr.org.br' "
                                                               
"ORDER BY CON_Oficios_DR ";
                                            
                                            
/* 
                                            $sql_email_oficios = "SELECT CON_RowID, CON_Descricao, CON_Email, 1 FROM contatos "
                                                               . "WHERE CON_RowID = 12124 ";
                                            */
                                                  
                                            
$rs_email_oficios  $conexao->query($sql_email_oficios);
                                            
                                            if(
$rs_email_oficios->num_rows 0)  
                                            {
                                                while(
$email_oficio $rs_email_oficios->fetch_array())   
                                                {     
                                                    
//$cod_oficio    = 1;        
                                                    
$cod_oficio    $email_oficio["CON_Oficios_DR"]; 
                                                    
$cod_contato   $email_oficio["CON_RowID"];  
                                                    
$email_contato $email_oficio["CON_Email"];
                                                    
                                                    
$retorno EnviaEmailOficio($assunto,$texto,$email_contato);
                                                    if(
$retorno)
                                                    {
                                                        
$enviadoSN "S";
                                                    }
                                                    else
                                                    {
                                                        
$enviadoSN "N";
                                                    }
                                                    
                                                    
//Grava envio de newsletter ao ofício
                                                    
$sql        INCLUI_NEWSLETTER_OFICIO;
                                                    
$tipo_dados TIPO_DADOS_INCLUI_NEWSLETTER_OFICIO;
                                                    
$parametros = array($cod_newsletter,$cod_oficio,$cod_contato,$enviadoSN);
                                                    
                                                    if(
$stmt $conexao->prepare($sql)) 
                                                    {
                                                        
// Anexa os parâmetros na senteça sql
                                                        
$res db_stmt_bind_param($stmt,$tipo_dados,$parametros);
                                                         
                                                        if(
$res)
                                                        {
                                                            
// Executa a query
                                                            
$exec $stmt->execute();
                                                            
                                                            if(
$exec)
                                                            {                 
                                                                
$stmt->close();                   
                                                                
$conexao->commit();    
                                                            } 
                                                            else
                                                            {
                                                                
$erro true;  
                                                                
$msg $stmt->error;
                                                                
$stmt->close();
                                                            }           
                                                        }
                                                        else
                                                        {       
                                                            
$erro true;             
                                                            
$msg "Erro1"
                                                        }
                                                    }
                                                    else
                                                    {    
                                                        
$erro true;          
                                                        
$msg "Erro2";  
                                                    }
                                                } 
                                            }
                                        }
                                        else
                                        {       
                                            foreach(
$destinatarios as $destinatario)
                                            {
                                                list(
$cod_oficio,$cod_contato,$email_contato) = explode(";",$destinatario);
                                                
                                                
$retorno EnviaEmailOficio($assunto,$texto,$email_contato);
                                                if(
$retorno)
                                                {
                                                    
$enviadoSN "S";
                                                }
                                                else
                                                {
                                                    
$enviadoSN "N";
                                                }
                                                
                                                
//Grava envio de newsletter ao ofício
                                                
$sql        INCLUI_NEWSLETTER_OFICIO;
                                                
$tipo_dados TIPO_DADOS_INCLUI_NEWSLETTER_OFICIO;
                                                
$parametros = array($cod_newsletter,$cod_oficio,$cod_contato,$enviadoSN);
                                                
                                                if(
$stmt $conexao->prepare($sql)) 
                                                {
                                                    
// Anexa os parâmetros na senteça sql
                                                    
$res db_stmt_bind_param($stmt,$tipo_dados,$parametros);
                                                     
                                                    if(
$res)
                                                    {
                                                        
// Executa a query
                                                        
$exec $stmt->execute();
                                                        
                                                        if(
$exec)
                                                        {                 
                                                            
$stmt->close();                   
                                                            
$conexao->commit();    
                                                        } 
                                                        else
                                                        {
                                                            
$erro true;  
                                                            
$msg $stmt->error;
                                                            
$stmt->close();
                                                        }           
                                                    }
                                                    else
                                                    {       
                                                        
$erro true;             
                                                        
$msg "Erro3"
                                                    }
                                                }
                                                else
                                                {    
                                                    
$erro true;          
                                                    
$msg "Erro4";  
                                                    
$msg $stmt->error " " $conexao->error
                                                }
                                            }  
                                        }
                                    }
                                }   
                                else
                                {
                                    
$erro true;  
                                    
$msg $stmt->error;
                                    
$stmt->close();
                                }           
                            }
                            else
                            {       
                                
$erro true;             
                                
$msg "Erro5"
                            }
                        }
                        else
                        {    
                            
$erro true;          
                            
$msg "Erro6";  
                        } 
                        break;                             
        }   
    }
    else
    {      
        
$retorno EnviaEmailOficio($assunto,$texto,"contato@arpenpr.org.br");
                            
        if(!
$retorno)
        {
            
$erro true;             
            
$msg "Erro1";
        }
        else
        {
            
$msg "Sucesso";
        }                 
    } 
    
    
$parametros_url = array("msg" => "$msg");
    if(
$erro)
    {
        
$parametros_url["erro"] = "S";                                   
    }
      
    
Redireciona("newsletter_cad.php",$parametros_url);
    
    
?>


:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0046 ]--