!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/contas/   drwxr-xr-x
Free 9.4 GB of 93.48 GB (10.06%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     conta_adiciona_comentario.php (5.13 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    
// Includes
    
include("../../config/config.php");
    include(
INCLUDES "inc_Funcoes.php");
    include(
INCLUDES "inc_Conexao.php");
    include(
INCLUDES "valida_usuario.inc.php");

/*echo "<pre>";
print_r($_SESSION);
echo "</pre>";*/

    
if ($_POST) {
        
/*
        echo '<pre>';
        print_r($_POST);
        echo '</pre>';
        */
        
extract($_POST);
        
        
$ddsComentario->ACO_RowID $ACO_RowID;
        
$ddsComentario->ACO_Comentario $comentario;
        
        if (
salva('FUN_ArquivoAssinadoContas',$ddsComentario)) {
            
?>
            <script type="text/javascript">
                alert('Comentário adicionado com SUCESSO!');
                window.close();
            </script>
            <?php
        
} else {
            
?>
            <script type="text/javascript">
                alert('Problema para adicionar o comentário!');
            </script>
            <?php
        
}
        
        die();
    
    }
    
    
extract($_GET);
    
    
$sqlBuscaDados "
        SELECT RSA_ValorTotal,
               (
                SELECT CON_DataCriacao
                FROM FUN_ContasInternas
                WHERE CON_AtivoSN = 'S'
                      AND CON_ArquivoAssinado_DR = 
$id
                ORDER BY CON_DataCriacao
                LIMIT 1
               ) AS DataInicio,
               (
                SELECT CON_DataCriacao
                FROM FUN_ContasInternas
                WHERE CON_AtivoSN = 'S'
                      AND CON_ArquivoAssinado_DR = 
$id
                ORDER BY CON_DataCriacao DESC
                LIMIT 1
               ) AS DataFim,
               (
                SELECT COUNT(DISTINCT CON_Fornecedor_DR) 
                FROM FUN_ContasInternas
                WHERE CON_ArquivoAssinado_DR = 
$id
               ) AS Fornecedores,
               ACO_NomeArquivo, ACO_Comentario
        FROM FUN_PagamentoSinteticoAssinado
            INNER JOIN FUN_ArquivoAssinadoContas ON ACO_RowID = RSA_ArquivoAssinado_DR
        WHERE RSA_ArquivoAssinado_DR = 
$id
              AND RSA_AtivoSN = 'S'
        LIMIT 1
    "
;
    
$rsBuscaDados executa($sqlBuscaDados);
    if (!empty(
$rsBuscaDados)) {
        foreach(
$rsBuscaDados as $rsBuscaDados)
            
extract($rsBuscaDados);
    }

?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
<link href="<?= HOST?>css/estilo2.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="<?=  HOST;?>includes/jquery.js"></script>
<script type="text/javascript">
function gravaComentario() {
    if ($('#comentario').val() == '') {
        alert('É necessário digitar o comentário para salvar!');
        return false;
    } else {
        var data = $('#frmComentario').serialize();
        $.post('conta_adiciona_comentario.php', data, function(data){
            $('#result').html(data);
        });
        return false;
    }
}
</script>
</head>

<body>
<div id="result"></div>
<form name="frmComentario" id="frmComentario" method="post" action="" onSubmit="return gravaComentario();">
<table width="450" border="0" align="center" cellpadding="5" cellspacing="0" class="tabela2" style="font-size: 12px;">
    <tr>
        <td height="20" colspan="2">&nbsp;<input type="hidden" name="ACO_RowID" value="<?= $id?>" /></td>
    </tr>
    <tr>
      <td width="240" height="20"><strong>Per&iacute;odo de Cadastramento das Contas: </strong></td>
    <td><?= arrumaData($DataInicio,'mostra')?> a <?= arrumaData($DataFim,'mostra')?></td></tr>
    <tr>
      <td height="20"><strong>Quantidade
de Fornecedores: </strong></td>
    <td><?= $Fornecedores;?></td></tr>
    <tr>
    <td height="20"><strong>Valor Total do Pagamento: </strong></td><td height="20">R$ <?= number_format($RSA_ValorTotal,2,',','.')?></td></tr>
    <tr><td height="20"><strong>Arquivo: </strong></td><td height="20"><a href="activex/repasses/<?= $ACO_NomeArquivo?>"><?= $ACO_NomeArquivo?></a></td></tr>
    <tr><td height="20" colspan="2" valign="top"><strong>Considera&ccedil;&atilde;o: </strong></td>
      <?php
          
if ($_SESSION['nome_usuario'] != 'SICREDI' || $_SESSION['nome_usuario'] != 'NETNIGRO') {
            
?>
<tr>
                 <td colspan="2" height="130" valign="top">
              <textarea name="comentario" id="comentario" cols="60" rows="10" style="width:100%;"><?= $ACO_Comentario?></textarea>
              <input name="acao" type="hidden" id="acao" value="altera" />
              </td>
            </tr>
            <tr>
                <td height="20" colspan="2" align="center">
                  <div style="text-align:center"><p>
                <input type="submit" name="salvar" id="salvar" value="Salvar" />
                <input type="button" name="fechar" id="fechar" value="Fechar" onClick="window.close();" /></p>
                  </div>
                 </td>
            </tr>
            <?php
      
} else {
            
?>
            <tr>
                <td height="130" colspan="2" valign="top"><div style="width:100%; height:130px; overflow-y:scroll;"><?= $ACO_Comentario?></div></td>
            </tr>
            <tr>
                <td height="20" colspan="2">&nbsp;</td>
            </tr>
            <tr>
                <td height="20" colspan="2" align="center"><input type="button" name="fechar" id="fechar" value="Fechar" onClick="window.close();" /></td>
            </tr>
            <?php
     
}
      
?>
</table>
        </form>
<div id="resultado"></div>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0037 ]--