110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/Car_depart/ drwxr-xr-x Free 51 GB of 127.8 GB (39.9%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php



    session_start();

    

    /**  Define Validate Access  */

    define( '_VALID_ACCESS', 1 );



    /**  Check Session User Login  */

    if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {

        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";

        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";

        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";

        exit();

    } 

    else {

        /**  Configuration  */

        require_once( "../configuration.php" );

        require_once( $_Config_absolute_path . "/includes/framework.php" );

        require_once( "../includes/Function.php" );

        require_once( "../includes/FunctionDB.php" );

    

        /**  Create Database Object  */

        $dbObj = new DBConn;

        

        /**  Config Table for This Page  */

        $myTable = "personal_tb";

         $myTable1 = "budget_year_tb";

          $myTable2 = "formcaroffice";

         ///////////////////

        $query = " SELECT *, prefixName as First_name FROM personal_tb LEFT JOIN prefix ON personal_tb.First_name = prefix.prefixId WHERE Teacher_code='$Teacher_code' ";

        $result = $dbObj->execQuery($query);

        $rss = $dbObj->fetchArray($result);

    /////-----------///

       $query1 = " SELECT *  FROM  $myTable1   ";

        $result1 = $dbObj->execQuery($query1);

        $rs = $dbObj->fetchObject($result1); 

        ///////--------//

         $query2 = " SELECT *  FROM  $myTable2   ";

        $result2 = $dbObj->execQuery($query2);

        $rs2 = $dbObj->fetchObject($result2); 

    } # else

 ?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />

<title>гєўНН№ШБСµФгЄйГ¶В№µмўН§·Т§ГТЄЎТГ</title>

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<script language="javascript" src="../js/utilities.js"></script>

<script type="text/javascript" src="../js/calendarDateInput2.js"></script>

<script language="javascript">

function checkData() {

var formObj = document.form1;

    if( (formObj.makeWord.value == "" ) && (formObj.Training_name.value == "" ) ) { alert("ЎГШіТЎГНЎўйНБЩЕгЛй¤ГєґйЗВ¤иР" ); formObj.makeWord.style.backgroundColor='#F1F9FC'; formObj.Training_name.focus(); return false; }

     if(formObj.makeWord.value == "" ) { alert("ЎГШіТЎГНЎ К¶Т№·Хи"); formObj.makeWord.style.backgroundColor='#F1F9FC'; formObj.makeWord.focus(); return false;} 

     if(formObj.Training_name.value == "" ) { alert("ЎГШіТЎГНЎ ЄЧиНаГЧиН§"); formObj.Training_name.style.backgroundColor='#F1F9FC'; formObj.Training_name.focus(); return false;} 

     if(formObj.Make.value == "" ) { alert("ЎГШіТЎГНЎ ЁУ№З¤№"); formObj.Make.style.backgroundColor='#F1F9FC'; formObj.Make.focus(); return false;} 

     if(formObj.Time_start.value == "" ) { alert("ЎГШіТЎГНЎ аЗЕТаГФиБµй№"); formObj.Time_start.style.backgroundColor='#F1F9FC'; formObj.Time_start.focus(); return false;}

     if(formObj.Time_finish.value == "" ) { alert("ЎГШіТЎГНЎ аЗЕТКФй№КШґ"); formObj.Time_finish.style.backgroundColor='#F1F9FC'; formObj.Time_finish.focus(); return false;}     

    else return true ;

}

</script>



</head>



<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">

<?php

    include("../templates/incHeaderCar.php");

?>

<table width="1003" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>

    <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px; color: #000;"><fieldset>

      <form id="form1" name="form1" method="post" action="InsertFormCar.php" onsubmit="return checkData();">

      <table width="765" border="0" cellspacing="0" cellpadding="0">        

           <tr>

        

      </tr>

      <tr>

            <td height="30" background="../images/background/bg-head-topic-w780.gif" class="PADDING-LEFT-10"><strong><a href="index.php">Л№йТЛЕСЎ</a> &raquo; <a href="FormCarList.php?Teacher_code=<?=$Teacher_code;?>">ўйНБЩЕўНгЄйГ¶В№µм</a> &raquo; <span class="NOTE">гєўНН№ТµгЄйГ¶В№µм·Т§ГТЄЎТГ</span></strong></td>

      </tr>

      <tr>

        <td><table width="760" align="center" cellpadding="0" cellspacing="0">

          <tr height="31">

            <td height="17" colspan="6" align="center" class="PATRON11"><hr /></td>

            </tr>

          <tr height="31">

            <td height="27" colspan="6" align="center" class="PATRON11">гєўНН№ШТµгЄйГ¶В№µмўН§·Т§ГТЄЎТГ</td>

            </tr>

          <tr>

            <td height="15" colspan="6" align="center" class="PATRON11">&nbsp;</td>

            </tr>

          <tr height="29">

            <td height="18" colspan="6">&nbsp;

              <?php

                $collegeCode =  $rss["collegeCode"];

                $sql = "Select * From  college Where collegeStatus ='1'";

                $result1 = mysql_query($sql) or die("Error".mysql_error());

                $rs2 = mysql_fetch_array($result1);

              ?>

              <input name="Teacher_code" type="hidden" id="Teacher_code" value="<? echo $rss["Teacher_code"]?>" />

              </td>            

            </tr>

          <tr height="29">

            <td height="24" colspan="3" align="left">КиЗ№ГТЄЎТГ <?=$rs2["collegeName"];?></td>

            <td height="24" colspan="3" align="center">

              <script>DateInput('mDate', true,'DD/MM/YYYY','<?=date("d/m/Y");?>');</script>

              </td>

            </tr>

          <tr height="29">

            <td height="29" colspan="3" align="left">аГЧиН§&nbsp;&nbsp;</a><input name="Da" type="text" id="Da" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="ўНгЄйГ¶В№µмГТЄЎТГ" size="20" />

              </font></td>

            <td width="35"></td>

            <td width="258"></td>

            <td width="71"></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="5" align="left">аГХВ№ &nbsp; јЩйНУ№ЗВЎТГ <font size="2" face="Tahoma">

              <?php

         $collegeCode =  $rss["collegeCode"];

         $sql = "Select * From  college Where collegeStatus ='1'";

          $result1 = mysql_query($sql) or die("Error".mysql_error());

          $rs2 = mysql_fetch_array($result1);

          echo "$rs2[collegeName] ";

         ?>

              </font></td>

            <td></td>

            </tr>

          <tr height="29">

            <td width="112" height="25"></td>

            <td colspan="5" align="left">ўйТѕаЁйТ</a>

              <input name="Name" type="text" id="Name" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="30"  value="<? echo $rss[First_name]?> <? echo $rss[Teacher_name]?>&nbsp;<? echo $rss[Teacher_lastname]?> " readonly/>

              µУбЛ№и§</a>

              <input name="Name2" type="text" id="Name2" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="25"  value="<? $PositionId =  $rss["PositionId"];

         $sql = "Select * From  position_tb   Where   PositionId ='$PositionId'  ";

          $result1 = mysql_query($sql) or die("Error".mysql_error());

          $rs2 = mysql_fetch_array($result1);

          echo "$rs2[Position_name] ";?>

         " readonly/>

              </font></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left"><label>ўНН№ШТµгЄйГ¶В№µмд»ГТЄЎТГ·Хи<a>

              <input name="makeWord" type="text" id="makeWord" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="60" />

              </a>

              <input name="code" type="hidden" id="code" />

              <a>ЁС§ЛЗСґ</a>

              <select name="provinceId" id="provinceId" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" >

                <?php

                       

                                $strSQL3 = " SELECT * FROM   province  Order  By  provinceName   ASC     ";

                                $result3 = mysql_query($strSQL3);

                                while( $rs3 = mysql_fetch_array($result3) ) {

                            ?>

                <option value="<?=$rs3['provinceId'];?>" <?php if( $rs3['provinceId']==$rs2['provinceId'] ) echo 'selected'; ?>>

                  <?=$rs3['provinceName'];?>

                  </option>

                <?php

                                } # while

                            ?>

                </select>

              </font></font></font></label></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left">аѕЧиН<a>

              <input name="Training_name" type="text" id="Training_name" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="80" />

              ЁУ№З№јЩйГиЗБаґФ№·Т§</a>

              <input name="Make" type="text" id="Make" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" onkeypress="return checkNumeric();" size="3" maxlength="4" />              </font><font face="Tahoma">¤№</font></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left">ЛБТВаЛµШ

              <input name="Detail" type="text" id="Detail" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="100" />

              </td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left">»ГРаА·ЎТГўНгЄйГ¶В№µм

              <input type="radio" name="Training_type" value="1" />

              ЎТГНєГБ

  <input type="radio" name="Training_type" value="2" />

              ЎТГИЦЎЙТґЩ§Т№

              <input type="radio" name="Training_type" value="3"  checked="checked" />

              »ГРЄШБ

              <input type="radio" name="Training_type" value="4" />

              КСББ№Т

              <input type="radio" name="Training_type" value="5" />

              ЗФ·ВТЎГ

              <input type="radio" name="Training_type" value="6" />

              №Фа·И§Т№

              <input type="radio" name="Training_type" value="7" />

              НЧи№ж</td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left"><label> К¶Т№РЎТГаґФ№·Т§

              <input name="object" type="radio" id="object" value="1" />

              ¤йТ§¤Ч№

              <input name="object" type="radio" id="object" value="2" checked/>

              д»ЎЕСє

              <input name="object" type="radio" id="object" value="3" />

              Ки§НВиТ§аґХВЗ 

              <input name="object" type="radio" id="object" value="4" />

              ГСєНВиТ§аґХВЗ 

              <input name="object" type="radio" id="object" value="5" />

              ГСєКи§ 

              »Х§є»ГРБТі*

              <input name="Budget_year" type="text" id="Budget_year" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<?=$rs->Budget_year;?>" size="3" />

              </font></label></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left">К¶Т№РўН§ѕ№СЎ§Т№ўСєГ¶В№µм&nbsp;

  <input type="radio" name="usecar" value="1" checked="checked" />

              гЄй ѕўГ&nbsp;&nbsp;&nbsp;&nbsp;

  <input type="radio" name="usecar" value="0" />

              дБигЄй ѕўГ&nbsp; &nbsp;&nbsp;</td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left">                

              <table width="762">

                <tr>

                  <td width="125">НйТ§ЎТГўНгЄйг№ЗС№·Хи</td>

                  <td width="245"><script>DateInput('mDate2', true,'DD/MM/YYYY','<?=date("d/m/Y");?>');</script>

                    </td>

                  <td width="376">

                    аЗЕТ

                    

                   

                      <select name="Time_start" id="Time_start" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" >

                      <?php

                       

                                $strSQL3 = " SELECT * FROM   cartime      ";

                                $result3 = mysql_query($strSQL3);

                                while( $rs3 = mysql_fetch_array($result3) ) {

                            ?>

                      <option value="<?=$rs3['TimeDay'];?>" <?php if( $rs3['TimeDay'] ) echo 'selected'; ?>>

                        <?=$rs3['TimeDay'];?>

                        </option>

                      <?php

                                } # while

                            ?>

                    </select>

                   </td>

                  </tr>

                </table> 

              </td>

            </tr>

          <tr height="29">

            <td height="29" colspan="6" align="left" nowrap>

              <table width="755">

                <tr>

                  <td width="126">КФй№КШґЎТГўНгЄйЗС№·Хи</td>

                  <td width="244"><script>DateInput('mDate3', true,'DD/MM/YYYY','<?=date("d/m/Y");?>');</script></td>

                  <td width="369">

                    аЗЕТ

                      <select name="Time_finish" id="Time_finish" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" >

                      <?php

                       

                                $strSQL3 = " SELECT * FROM   cartime      ";

                                $result3 = mysql_query($strSQL3);

                                while( $rs3 = mysql_fetch_array($result3) ) {

                            ?>

                      <option value="<?=$rs3['TimeDay'];?>" <?php if( $rs3['TimeDay'] ) echo 'selected'; ?>>

                        <?=$rs3['TimeDay'];?>

                        </option>

                      <?php

                                } # while

                            ?>

                    </select></td>

                  </tr>

                </table>

              </td>

            </tr>

          <tr height="29">

            <td height="16" colspan="6" align="left"><p>&nbsp;&nbsp;&nbsp;&nbsp;</p></td>

            </tr>

          <tr height="31">

            <td height="23" colspan="3" align="left"></td>

            <td>&nbsp;</td>

            <td align="center">Е§ЄЧиН.................................</td>

            <td></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="3">&nbsp;</td>

            <td></td>

            <td align="center">(&nbsp;<? echo $rss[First_name]?> <? echo $rss[Teacher_name]?>&nbsp;<? echo $rss[Teacher_lastname]?> )

              <input name="Teacher_code" type="hidden" id="Teacher_code" value="<? echo $rss[Teacher_code];?>" /></td>

            <td></td>

            </tr>

          <tr height="31">

            <td height="31">&nbsp;</td>

            <td>&nbsp;</td>

            <td>&nbsp;</td>

            <td colspan="3" align="center">µУбЛ№и§<font color="#0000FF" size="2" face="Tahoma">

              <input name="Name3" type="text" id="Name3" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="20"  value="<? //$PositionId =  $rss["PositionId"];

         $sql = "Select * From  position_tb   Where   PositionId ='$rss[PositionId]'  ";

          $result1 = mysql_query($sql) or die("Error".mysql_error());

          $rs2 = mysql_fetch_array($result1);

          echo "$rs2[Position_name] ";?>

         " />

              </font></td>

            </tr>

          <tr height="31">

            <td height="31">&nbsp;</td>

            <td width="105">&nbsp;</td>

            <td width="166">&nbsp;</td>

            <td colspan="3" align="left"><span class="style13">¤ЗТБаЛз№ЛСЗЛ№йТ§Т№</span></td>

            </tr>

          <tr height="29">

            <td height="28" colspan="3" align="left"><strong>&nbsp;</strong>¤ЗТБаЛз№ўН§јЩй¤Зє¤ШБЎТГгЄйГ¶В№µм</td>

            <td colspan="3">

              <input name="Info_name" type="text" id="Info_name" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="40" />

              </td>

            </tr>

          <tr height="29">

            <td height="23" colspan="3" align="left">&nbsp;</td>

            <td></td>

            <td align="center">Е§ЄЧиН................................</td>

            <td></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="3" align="left">Е§ЄЧиН....................................јЩйЁСґВТ№ѕТЛ№Р&nbsp;</td>

            <td></td>

            <td align="center">&nbsp;<font size="2" face="Tahoma">(

              <?php

                    //$Teacher_code =  $rss["TeacherId"];

                    $sql = "Select *, prefixName as First_name FROM personal_tb LEFT JOIN prefix ON personal_tb.First_name = prefix.prefixId Where  Faculty_code ='$Faculty_code'  and   TeacherId='1'  ";

                    $result1 = mysql_query($sql) or die("Error".mysql_error());

                    $rs2 = mysql_fetch_array($result1);

                    echo "$rs2[First_name]$rs2[Teacher_name] &nbsp;&nbsp;$rs2[Teacher_lastname]";

                 ?>

              ) </font>

              <input name="TeacherId2" type="hidden" id="TeacherId2" value="<? echo $rs2["Teacher_code"]?>" /></td>

            <td></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="2" align="center">(........................................)&nbsp;&nbsp;</td>

            <td align="left">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>

            <td colspan="3" align="center">µУбЛ№и§<font color="#0000FF" size="2" face="Tahoma">

              <input name="Name4" type="text" id="Name5" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="25"  value=" <? $PositionId =  $rs2["PositionId"];

         $sql = "Select * From  position_tb   Where   PositionId ='$PositionId'  ";

          $result1 = mysql_query($sql) or die("Error".mysql_error());

          $rs2 = mysql_fetch_array($result1);

          echo "$rs2[Position_name] ";?>

         " />

              </font></td>

            </tr>

          <tr height="29">

            <td height="29" colspan="3" align="left">&nbsp;</td>

            <td colspan="3" align="center">ЗС№·Хи.......аґЧН№..............ѕ.И..........&hellip;.</td>

            </tr>

          <tr height="29">

            <td height="16" colspan="2" align="center">&nbsp;</td>

            <td></td>

            <td colspan="3" align="left">&nbsp;</td>

            </tr>

          <tr height="31">

            <td height="16"></td>

            <td></td>

            <td></td>

            <td align="left">¤УКСи§</td>

            <td></td>

            <td></td>

            </tr>

          <tr height="29">

            <td height="29"></td>

            <td></td>

            <td></td>

            <td align="left"></td>

            <td colspan="2" align="left"><label>

              <input type="radio" name="radio" value="Y" />

              </label>

              Н№ШТµ&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

              <input type="radio" name="radio" value="N" />

              дБиН№ШТµ</td>

            </tr>

          <tr height="29">

            <td height="29"></td>

            <td></td>

            <td></td>

            <td colspan="3" align="center">&nbsp;Е§ЄЧиН........................................&hellip;&hellip;..</td>

            </tr>

          <tr height="29">

            <td height="29"></td>

            <td></td>

            <td></td>

            <td colspan="3" align="center">µУбЛ№и§..........................................&hellip;.</td>

            </tr>

          <tr height="29">

            <td height="29"></td>

            <td></td>

            <td></td>

            <td colspan="3" align="center">ЗС№·Хи.......аґЧН№...........ѕ.И.........&hellip;.</td>

            </tr>

          <tr height="31">

            <td height="10" colspan="6" align="center"><hr /></td>

            </tr>

          <tr height="31">

            <td height="24" colspan="6" align="center"><input type="submit" name="Submit" value="єС№·ЦЎ" class="WIDTH60 CURSOR-HAND" />

              &nbsp;

              <input type="reset" name="Reset" value="ГХа«зµ" class="WIDTH60 CURSOR-HAND" />

              &nbsp;&nbsp;

              <input type="button" name="Button" value="ВЎаЕФЎ" class="WIDTH60 CURSOR-HAND" onclick="location.href=FormCarList.php?Teacher_code=<?=$Teacher_code;?>'" /></td>

            </tr>

          </table></td>

      </tr>

      <tr>

        <td><span class="NOTE">ЛБТВаЛµШ : </span></td>

      </tr>        

      </table>

      </form>

    </fieldset></td>

  </tr>

</table>

<?php include("../templates/incFooter.php"); ?>

</body>

</html>

<?php

    /**  Free Resource */

    $dbObj->freeresult($result);

    

    /**  Close the Database  */

    $dbObj->disconn();

    

    /**  Unset Class  */

    unset($dbObj);

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: