!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/Plan_new/   drwxr-xr-x
Free 52.66 GB of 127.8 GB (41.2%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     repRis302.php (4.63 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Image($GLOBALS["COLLEGELOGO"],10,3,18,15); //AngsanaNew bold 15 $this->SetFont('AngsanaNew','B',15); //Move to the right $this->SetY(7); $this->SetX(30); //Title $this->Cell(0,0,$GLOBALS["COLLEGENAME"],0,0,'L'); $this->SetX(-10); $this->SetFontSize(12); $this->Cell(0,0,'RIS302',0,0,'R'); $this->Ln(7); $this->SetX(30); $this->SetFontSize(15); $this->Cell(0,0,$GLOBALS["SITENAME"],0,0,'L'); //Draw line $this->SetLineWidth(0.4); $this->Line(10,19,200,19); } //Page footer function Footer() { //Position at 3.0 cm from bottom $this->SetLineWidth(0.4); $this->Line(10,286,200,286); //Arial italic 8 $this->SetY(-7); $this->SetFont('AngsanaNew','',14); //Page number $this->Cell(0,0,'หน้า '.$this->PageNo().'/{nb}',0,0,'R'); $this->SetY(-7); //$this->Cell(10); $this->Cell(0,0,'วันที่พิมพ์ : '.date("d/m/y H:i"),0,0,'L'); } } //End class //Connect to your database include("../include/FunctionDB.php"); include("../include/Function.php"); include("../link/function.php"); ConnectDB(); $sql = "SELECT * FROM project_tb WHERE Orderlist='$Orderlist' and Project_code ='$Project_code' and Faculty_code='$Faculty_code' "; $result = mysql_query($sql) or die(" Error").mysql_error(); $rs = mysql_fetch_array($result); $row = mysql_num_rows($result); $strSQL = "Select * FROM project_tb WHERE ProjectId='$ProjectId' "; $result = mysql_query($strSQL); $num = mysql_num_rows($result ); //Create new pdf file $pdf=new PDF(); //Set thai font $pdf->SetThaiFont(); $pdf->AliasNbPages(); //Open file $pdf->Open(); //Disable automatic page break $pdf->SetAutoPageBreak(false); //Add first page $pdf->AddPage(); //set initial y axis position per page $y_axis_initial = 40; //Set Row Height $row_height = 6; $pdf->SetFontSize(18); $pdf->Cell(105); $pdf->SetY(27); $pdf->Cell(0,0,'รายได้จากค่าใช้จ่ายในการศึกษาที่รับจริง',0,0,'C'); $pdf->Ln(7); $pdf->SetFontSize(16); $pdf->Cell(0,0,'ประจำปีการศึกษา '.$acadYear.' ภาคการศึกษา '.$semester,0,0,'C'); //print column titles for the actual page $pdf->SetFillColor(232,232,232); $pdf->SetFontSize(14); $pdf->SetY($y_axis_initial); $pdf->Cell(10,6,'ที่',1,0,'C',1); $pdf->Cell(120,6,'หลักสูตร',1,0,'C',1); $pdf->Cell(10,6,'รุ่นที่',1,0,'C',1); $pdf->Cell(20,6,'จำนวน (คน)',1,0,'C',1); $pdf->Cell(30,6,'รายได้ (บาท)',1,0,'C',1); $y_axis = $y_axis_initial + $row_height; //initialize counter $i = 0; $r = 1; $sumSt = 0; //Set maximum rows per page $max = 20; $i = 1; while($row = mysql_fetch_array($result)) { if($count==0) //If the current row is the last one, create new page and print column title if ($i == $max) { //Set $i variable to 0 (first row) $i = 0; $pdf->AddPage(); $pdf->SetFont('AngsanaNew','B',18); $pdf->Cell(105); $pdf->SetY(27); $pdf->Cell(0,0,'รายได้จากค่าใช้จ่ายในการศึกษาที่รับจริง',0,0,'C'); $pdf->Ln(7); $pdf->SetFontSize(16); $pdf->Cell(0,0,'ประจำปีการศึกษา '.$acadYear.' ภาคการศึกษา '.$semester,0,0,'C'); //print column titles for the current page $pdf->SetFillColor(232,232,232); $pdf->SetFontSize(14); $pdf->SetY($y_axis_initial); $pdf->Cell(10,6,'ที่',1,0,'C',1); $pdf->Cell(120,6,'หลักสูตร',1,0,'C',1); $pdf->Cell(10,6,'รุ่นที่',1,0,'C',1); $pdf->Cell(20,6,'จำนวน (คน)',1,0,'C',1); $pdf->Cell(30,6,'รายได้ (บาท)',1,0,'C',1); //Go to next row $y_axis = $y_axis_initial + $row_height; } $pdf->SetFont('AngsanaNew','',14); $pdf->SetY($y_axis); $pdf->Cell(10,6,$r,1,0,'C'); $pdf->Cell(120,6,$row["Orderlist"],1,0,'L'); $pdf->Cell(10,6,$oGe->genNo,1,0,'C'); $pdf->Cell(20,6,$oSm->studentId,1,0,'R'); $pdf->Cell(30,6,number_format($row['Budget_use'],2,'.',','), 2),1,0,'R'); //Go to next row $y_axis = $y_axis + $row_height; $i = $i + 1; $r = $r + 1; $sumSt += $oSm->studentId; } //End while $pdf->SetFont('AngsanaNew','B',14); $pdf->SetY($y_axis); $pdf->Cell(140,6,'รวม',1,0,'C'); $pdf->Cell(20,6,$sumSt,1,0,'R'); $pdf->Cell(30,6,number_format($row['Budget_use'],2,'.',','), 2),1,0,'R'); //Create file $pdf->Output(); //} else echo "ไม่มีข้อมูล..."; ?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]--