Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/ drwxr-xr-x |
Viewing file: Select action/file-type: <?php /** Define Validate Access */ define( '_VALID_ACCESS', 1 ); /** Check Session User Login */ /** Configuration */ require_once( "configuration.php" ); require_once( $_Config_absolute_path . "/includes/framework.php" ); require_once( "include/Function.php" ); /** Chart */ include ("includes/charts.php"); /** Create Database Object */ $dbObj = new DBConn; /** Config Table for This Page */ $myTable = "finance3_tb"; $myTable1 = "user_tb"; $myTableFK = "Month "; $Username = $valid_user; //=== personal_tb $query1 = " SELECT * FROM $myTable1 "; $result1 = $dbObj->runQuery($query1); $rs1 = $dbObj->fetchArray($result1); //=== salary_repot_tb $query = " SELECT * FROM $myTable GROUP BY Year_budget "; $result = $dbObj->execQuery($query); $num = $dbObj->_numrows; ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-874" /> <link href="css/default.css" rel="stylesheet" type="text/css" /> <script language="Javascript" src="charts/charts.js"></script> <title>ข้อมูลทั่วไปบุคลากร - ข้อมูลการแผนดำเนินการ</title> </head> <body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0"> <?php include("templates/incHeader.php"); ?> <table width="994" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="216" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include( "templates/incMainMenuLeft.php" );?></td> <td width="1"></td> <td width="777" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px"><fieldset> <table width="758" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="758" height="5"></td> </tr> <tr> <td height="30" background="images/background/bg-head-topic-w780.gif" class="PADDING-LEFT-10"><strong><a href="index.php">หน้าหลัก</a></strong> <strong>» <span class="NOTE">ข้อมูลงบสาธารณูปโภคแนกรายปีงบประมาณ</span></strong></td> </tr> <tr> <td> </td> </tr> <tr> <td align="center"> <table width="64%" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#FFFFFF" style="background-color:#eeeeee; border:0px solid gray" size="12"> <tr> <td height="25" colspan="3" align="center" bgcolor="#FFFFFF" class="PATRON11">แสดงข้อมูลจำแนกรายปีงบประมาณ</span></td> </tr> <tr bgcolor="#F8F8F8"> <td height="22" colspan="2" align="left" bordercolor="#999966" class="PADDING-LEFT-10"><strong>ปีงบประมาณ</strong></td> <td width="51%" bordercolor="#999966" align="center"><strong>จำนวนข้อมูล</strong></td> </tr> <?php while( $rs = $dbObj->fetchArray($result) ) { $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; ?> <tr bgcolor="<?=$bgColor;?>" onmouseover="this.style.backgroundColor='#FFFFE0'" onmouseout="this.style.backgroundColor=''"> <td width="7%" height="20" align="right"><img src="picture/linesub.gif" width="16" height="16" border="0" align="absmiddle" /></td> <td width="42%" align="left" class="PADDING-LEFT-5"><a href="FinaceFinList.php?Year_budget=<?=$rs['Year_budget'];?>" title=" Click to more detail "><?=$rs["Year_budget"];?></a></td> <td align="center"><font size="4" face="Tahoma"> <?php $sql10 = "Select * From $myTable WHERE Year_budget='$rs[Year_budget]' "; $result10 = mysql_query($sql10) or die(" Error".mysql_error()); $r10 = mysql_num_rows($result10); if ( $r10 == 0) { echo"<font face=\"Tahoma\" Size=\"2\" color=\"#FF0000\">"; echo"ยังไม่ข้อมูล"; echo"</font>"; } else if ($r10 > 0) { echo"<font face=\"Tahoma\" Size=\"2\" color=\"#006633\">"; echo"$r10 <font face=\"Tahoma\" Size=\"2\" color=\"#000000\">ระเบียน</font>"; echo"</font>"; } ?> </font></td> </tr> <?php } # while ?> <tr> <td height="25" colspan="3" align="center" bgcolor="#F8F8F8"><strong>ทั้งหมด <span class="NOTE"><?php echo $num; ?></span> ปี</strong></td> </tr> </table> <p><table width="750" border="0" cellspacing="0" cellpadding="0"> <tr> <td align="center"><?php $animateChart = "1"; //$strXML will be used to store the entire XML document generated //Generate the chart element $strXML = "<chart caption='กราฟแสดงข้อมูลการแผนดำเนินการรายปี' subCaption='' pieSliceDepth='30' showBorder='0' formatNumberScale='0' numberSuffix=' บาท' animation=' " . $animateChart . "'>"; // Fetch all factory records $strQuery = " SELECT * FROM $myTable3 WHERE Faculty_code='$Faculty_code' GROUP BY Budget_Year "; $result1 = mysql_query($strQuery); //Iterate through each factory if ($result1) { while( $rs1 = mysql_fetch_array($result1) ) { $sql4 = " SELECT SUM(Budget_use) AS SumB1 FROM project_type_tb WHERE Budget_Year='$rs1[Budget_Year]' AND Faculty_code='$rs1[Faculty_code]' "; $result4 = $dbObj->execQuery($sql4); $rs4 = $dbObj->fetchArray($result4); $strXML .= "<set label='จำนวนเงินต่อปี ของปี " . $rs1['Budget_Year'] . "' value='" . $rs4['SumB1'] . "' />"; } # while } # if //Finally, close <chart> element $strXML .= "</chart>"; //Create the chart - Pie 3D Chart with data from strXML echo renderChart("charts/Column3D.swf", "", $strXML, "", 750, 375, false, false); ?></td> </tr> </table></p> </td> </tr> <tr> <td> </td> </tr> </table> </fieldset></td> </tr> </table> <?php include("templates/incFooter.php"); ?> </body> </html> <?php /** Free Resource */ $dbObj->freeresult($result); /** Close the Database */ $dbObj->disconn(); /** Unset Class */ unset($dbObj); ?> |
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0061 ]-- |