!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/releases/   drwxr-xr-x
Free 9.4 GB of 93.48 GB (10.06%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     releases_grava.php (12.5 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    
#############################################################################
    # Nome: releases_grava.php                                                  #
    # System: Irpen                                                             #
    # Criado por: João Paulo Marques dos Santos                                 #
    # Empresa: Netnigro                                                         #
    # E-mail: ti@netnigro.com.br                                                #
    # Descrição: Gravação das releases enviados                                 #
    # Histórico:                                                                #
    #    . 23/09/2008 - João Paulo Marques dos Santos                           #
    #            Criação da Página                                              #
    #############################################################################
    
    // Includes
    
include("../../config/config.php");
    include(
INCLUDES "conexaoBD.php");    
    include(
INCLUDES "sentencas_sql.php");
    include(
INCLUDES "funcoes_uteis.php");
    
//include(INCLUDES . "valida_usuario.inc.php");
    
    //Funções
    
function EnviaEmailOficio($assunto,$texto,$email_destino)
    {
        
//Cabeçalho
        
$headers "From: IRPEN <comunicacao@arpenpr.org.br>\n";
        
$headers .= "MIME-Version: 1.0\n";
        
$headers .= "Content-Type: text/html; charset=iso-8859-1\n";  

        
//$email_destino = "ti@netnigro.com.br";

        //$headers .= "Bcc: Netnigro <ti@netnigro.com.br>\n";
        
$headers .= "Bcc : cron.irpen@netnigro.com.br\n";
        if(
$email_destino == "comunicacao@arpenpr.org.br")
        {
            
//$headers .= "Bcc: Netnigro <ti@netnigro.com.br>\n"; 
            
$headers .= "Bcc : cron.irpen@netnigro.com.br\n";
            
//$email_destino = "ti@netnigro.com.br";
        
}
        
        
$corpo_email "<html>
                                <head>
                                    <title>
$assunto</title>
                                    <style type=\"text/css\">
                                        body {
                                            font-family: Verdana, Geneva, Arial, Helvetica, sans-serif;
                                            font-size: 12px;
                                            text-align: justify;
                                            width: 640px;
                                            max-width: 640px;
                                            margin: auto; 
                                        }
                                    </style>
                                </head>
                                <body>
                                    <p><img src=\"http://www.arpenpr.org.br/imagens/newsletter/cabecalho.png\"></p>"
                                     
stripslashes($texto) .
                                    
"<p><img src=\"http://www.arpenpr.org.br/imagens/newsletter/rodape.png\"></p>
                                </body>
                            </html>"
;          
                   
        
//Enviando cópia para marcio@netnigro.com.br
        //mail('marcio@netnigro.com.br',$assunto ." (Dest: $email_destino)",$corpo_email,$headers);
        
        
if(mail($email_destino,$assunto,$corpo_email,$headers))
        {
            
//die("1 email enviado($email_destino)!");
            
return true;
        }
        else
        {
            return 
false;
        }
    }

    
// Parâmetros provênientes da requisição
    
$tipo_destinatario $_POST["rdgTipoDestinatario"];
    
$assunto           $_POST["txtAssunto"];
    
$data_envio        FormataData($_POST["txtDataEnvio"],"BD");
    
$hora_envio        $_POST["txtHoraEnvio"];
    
$texto             $_POST["txtConteudo"]; 
    
    
$data_envio $data_envio " " $hora_envio;
    
    if(
$tipo_destinatario == "E")
    {
        
$destinatarios $_POST["cboDestinatarios"];
    }
    
/*
    echo "<pre>";
    print_r($_POST);
    echo "</pre>";
    die();
    */
    
    
if(strtotime($data_envio) < time())
    {
        
$enviadoSN "S";
    }
    else
    {
        
$enviadoSN "N";
    }
    
    
// Ação que o script deverá executar (Inclusão - I, Alteração - U, Ativação - A ou Inativação - IN)
    
$acao $_POST['hddAcao']; 
     
    
$erro false;       
    
    if(
$tipo_destinatario != "TS")
    {
        switch(
$acao)
        {
            
// Inclusão de conteúdo
            
case "I":       
                        
$sql        INCLUI_RELEASES;
                        
$tipo_dados TIPO_DADOS_INCLUI_RELEASES;
                        
$parametros = array($texto,$data_envio,$enviadoSN);
                        
$msg        "Release enviado com sucesso!";
                        
                        if(
$stmt $conexao->prepare($sql)) 
                        {
                            
// Anexa os parâmetros na senteça sql
                            
$res db_stmt_bind_param($stmt,$tipo_dados,$parametros);
                             
                            if(
$res)
                            {
                                
// Executa a query
                                
$exec $stmt->execute();
                                
                                if(
$exec)
                                {  
                                    
//Código do release inserida
                                    
$cod_release $stmt->insert_id;

                                    
$stmt->close();                   
                                    
$conexao->commit();                                        
                                    
                                    if(
$enviadoSN == "S")
                                    {
                                        if(
$tipo_destinatario == "T")
                                        {  
                                            
$sql_email_usuarios "SELECT URE_RowID, URE_Nome, URE_Email
                                                                   FROM usuario_recebem_email
                                                                   WHERE URE_AtivoSN = 'S' AND URE_RecebeRelease ='S'
                                                                   ORDER BY URE_RowID "
;
                                            
                                            
/* 
                                            $sql_email_oficios = "SELECT CON_RowID, CON_Descricao, CON_Email, 1 FROM contatos "
                                                               . "WHERE CON_RowID = 12124 ";
                                            */

                                            
$rs_email_usuarios  $conexao->query($sql_email_usuarios);

                                            if(
$rs_email_usuarios->num_rows 0)
                                            {
                                                while(
$email_usuarios $rs_email_usuarios->fetch_array())
                                                {     
                                                    
//$cod_oficio    = 1;        
                                                    
$cod_usuario      $email_usuarios["URE_RowID"];
                                                    
$URE_Nome       $email_usuarios["URE_Nome"];
                                                    
$email_contato  $email_usuarios["URE_Email"];
                                                    
                                                    
$retorno EnviaEmailOficio($assunto,$texto,$email_contato);
                                                    if(
$retorno)
                                                    {
                                                        
$enviadoSN "S";
                                                    }
                                                    else
                                                    {
                                                        
$enviadoSN "N";
                                                    }
                                                    
                                                    
//Grava envio de releases para este usuario
                                                    
$sql        INCLUI_RELEASES_USUARIOS;
                                                    
$tipo_dados TIPO_DADOS_INCLUI_RELEASES_USUARIOS;
                                                    
$parametros = array($cod_release,$cod_usuario,$enviadoSN);
                                                    
                                                    if(
$stmt $conexao->prepare($sql)) 
                                                    {
                                                        
// Anexa os parâmetros na senteça sql
                                                        
$res db_stmt_bind_param($stmt,$tipo_dados,$parametros);
                                                         
                                                        if(
$res)
                                                        {
                                                            
// Executa a query
                                                            
$exec $stmt->execute();
                                                            
                                                            if(
$exec)
                                                            {                 
                                                                
$stmt->close();                   
                                                                
$conexao->commit();    
                                                            } 
                                                            else
                                                            {
                                                                
$erro true;  
                                                                
$msg $stmt->error;
                                                                
$stmt->close();
                                                            }           
                                                        }
                                                        else
                                                        {       
                                                            
$erro true;             
                                                            
$msg "Erro1"
                                                        }
                                                    }
                                                    else
                                                    {    
                                                        
$erro true;          
                                                        
$msg "Erro2";  
                                                    }
                                                } 
                                            }
                                        }
                                    }
                                }   
                                else
                                {
                                    
$erro true;  
                                    
$msg $stmt->error;
                                    
$stmt->close();
                                }           
                            }
                            else
                            {       
                                
$erro true;             
                                
$msg "Erro5"
                            }
                        }
                        else
                        {    
                            
$erro true;          
                            
$msg "Erro6 - ".mysql_error();  
                        } 
                        break;                             
        }   
    }
    else
    {      
        
$retorno EnviaEmailOficio($assunto,$texto,"comunicacao@arpenpr.org.br,ti@netnigro.com.br");
                            
        if(!
$retorno)
        {
            
$erro true;             
            
$msg "Erro1";
        }
        else
        {
            
$msg "Sucesso";
        }                 
    } 
    
    
$parametros_url = array("msg" => "$msg");
    if(
$erro)
    {
        
$parametros_url["erro"] = "S";                                   
    }
      
    
Redireciona("releases_cad.php",$parametros_url);
    
    
?>


:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0045 ]--