110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/State/ drwxr-xr-x Free 52.82 GB of 127.8 GB (41.33%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

session_start();



 if (session_is_registered("valid_user")&&session_is_registered("Priority") )

 {

 $Username = $valid_user;

 $Password = $password;

include("../include/FunctionDB.php");

include("../include/Function.php");

include("admin_menu.php");

ConnectDB();

$Username = $valid_user;



$strSQL1 = "SELECT * FROM personal_tb  WHERE Teacher_code='$Teacher_code'  ";

$result = mysql_query($strSQL1) or die("Error ".mysql_error()); 

$rss = mysql_fetch_array($result);



$sql = "select * from state_tb where State = '1'  AND stateId = (select MAX(stateId) from state_tb)";

$result2 = mysql_query($sql) or die("Error ".mysql_error()); 

$rsState1 = mysql_fetch_array($result2);



$sql2 = "select * from state_tb where State = '2'  AND stateId = (select MAX(stateId) from state_tb)";

$result3 = mysql_query($sql2) or die("Error ".mysql_error()); 

$rsState2 = mysql_fetch_array($result3);



$sql3 = "select * from state_tb where State = '3'  AND stateId = (select MAX(stateId) from state_tb)";

$result4 = mysql_query($sql3) or die("Error ".mysql_error()); 

$rsState3 = mysql_fetch_array($result4);



?>

<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">

<script language="javascript" src="js/calendarDateInput2.js"></script>

<script language="javascript">

    function checkState(){

        if(document.form1.State[0].checked){

            if(!document.form1.state1.value){

                document.form1.CostSum.value = "0.00";

            }

            else{

                document.form1.CostSum.value = document.form1.state1.value;

            }

        }

        if(document.form1.State[1].checked){

            if(!document.form1.state2.value){

                document.form1.CostSum.value = "0.00";

            }

            else{

                document.form1.CostSum.value = document.form1.state2.value;

            }

        }

        if(document.form1.State[2].checked){

            if(!document.form1.state3.value){

                document.form1.CostSum.value = "0.00";

            }

            else{

                document.form1.CostSum.value = document.form1.state3.value;

            }

        }

    }

</script>

<body onLoad="checkState()">

<table width="822" border="0" cellpadding="0" cellspacing="0">

    <tr>

        <td width="822"><br>

          <fieldset>

            <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="index.php" >Л№йТЛЕСЎ</a> <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle"><a href="Adddecoration.php?Teacher_code=<? echo $rss[Teacher_code] ?>">аѕФиБўйНБЩЕ</a> <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle" /><a href="EditStateList.php?State=<? echo $rss[State] ?>">бЎйдўўйНБЩЕ</a><img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle" /><a href="StateList.php?State=1">бКґ§ГТВ§Т№§є»ГРБТі</a><img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle" /></font><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>">бКґ§ГТВЎТГ§єєШ¤ЕТЎГ</font></legend>

            <label><div align="center">

              <form id="form1" name="form1" method="get" action="InsertState.php">

              <input type="hidden" name="state1" value="<?php echo $rsState1['CostSum'];?>" />

              <input type="hidden" name="state2" value="<?php echo $rsState2['CostSum'];?>" />

              <input type="hidden" name="state3" value="<?php echo $rsState3['CostSum'];?>" />

                <table width="70%" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#006699" style="border:1px solid gray">

                  <tr bgcolor="#D6ECF3" >

                    <td colspan="3"><div align="center"><strong><font color="#000000" size="3" face="Tahoma">аѕФиБўйНБЩЕГТВЎТГ</font></strong></div></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="28" colspan="3" bgcolor="#eeeeee"><label>

                      <div align="center">

                        <input name="State" type="radio" value="1" onClick="checkState()" checked />

                        §єґУа№Ф№ЎТГ

  <input name="State" type="radio" onClick="checkState()"  value="2" />

                        §є¤ГШАСі±м

                        <input name="State" type="radio"  onClick="checkState()" value="3" />

                      §є ѕµК. </div>

                    </label></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td width="21%" bgcolor="#eeeeee"><div align="center"><font size="2">»Х§є»ГРБТі</font></div></td>

                    <td width="3%" bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

                    <td width="76%" bordercolor="#CCCCCC" bgcolor="#eeeeee"><label>

                      <select name="Year_State" id="Year_State">

                        <option>аЕЧНЎ»Х§є»ГРБТі</option>

                        <option value="2549">2549</option>

                        <option value="2550">2550</option>

                        <option value="2551">2551</option>

                        <option value="2552">2552</option>

                        <option value="2553">2553</option>

                      </select>

                    </label></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td bgcolor="#eeeeee"><div align="center"><font color="#000000" size="2" face="Tahoma">ЗС№/аґЧН№/»Х</font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma"><font color="#FF0000">*</font></font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><!--<select name="mDate" id="mDate">

                        <?getDay1to31();?>

                      </select>

                      -

                      <select name="mMonth" id="mMonth">

                        <?getThaiMonth();?>

                      </select>

                      -

                      <input name="mYear" type="text" id="mYear" size="5" maxlength="4" />--><script>DateInput('date', true, 'DD/MM/YYYY','<?php echo date('d')."/".date('m')."/".date('Y');?>');</script></td>

                  </tr>

                  

                  

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">аЕў·ХиаНЎКТГ<br />

                    </font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma"><font color="#FF0000">*</font></font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="No" type="text" id="No" size="20" /></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">ГТВЎТГ<br />

                    </font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma"><font color="#FF0000">*</font></font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="Disciption" type="text" id="Disciption" size="50" /></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">ГТВГСє §»Б<br />

                    </font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><strong><font size="2" face="Tahoma"><font color="#FF0000">+</font></font></strong></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="Cost1" type="text" id="Cost1" size="10" />

                        <font size="2" face="Tahoma">єТ· <font color="#FF0000">*дБиµйН§ѕФБѕма¤ГЧиН§ЛБТВ 

                        comma (,)</font></font></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">ГТВГСєа§Ф№ВЧБ</font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><strong><font size="2" face="Tahoma"><font color="#FF0000">+</font></font></strong></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="Cost5" type="text" id="Cost5" size="10" /> <font size="2" face="Tahoma">єТ· </font></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">а§Ф№ВЧБ<br />

                    </font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><strong><font size="2" face="Tahoma"><font color="#FF0000">-</font></font></strong></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="Cost2" type="text" id="Cost2" size="10" />

                        <font size="2" face="Tahoma">єТ· </font></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">а§Ф№ЎС№аєФЎ<br />

                    </font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><strong><font size="2" face="Tahoma"><font color="#FF0000">-</font></font></strong></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="Cost3" type="text" id="Cost3" size="10" />

                        <font size="2" face="Tahoma">єТ· </font></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">аєФЎ</font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><strong><font size="2" face="Tahoma"><font color="#FF0000">-</font></font></strong></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="Cost4" type="text" id="Cost4" size="10" /> <font size="2" face="Tahoma">єТ· </font></td>

                  </tr>

                  <tr bgcolor="#99CCFF">

                    <td height="22" bgcolor="#eeeeee"><div align="center"><font size="2" face="Tahoma">¤§аЛЕЧН<br />

                    </font></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><div align="center"><strong><font size="2" face="Tahoma"><font color="#FF0000">=</font></font></strong></div></td>

                    <td bordercolor="#CCCCCC" bgcolor="#eeeeee"><input name="CostSum" type="text" id="CostSum" size="10"/>

                        <font size="2" face="Tahoma">єТ· </font></td>

                  </tr>

                  <tr bgcolor="#D6ECF3" >

                    <td colspan="3"><div align="center">

                        <input type="submit" name="Submit3" value="    аѕФиБ    " />

                      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

                      <input type="reset" name="Submit22" value="   аГФиБгЛБи   " />

                    </div></td>

                  </tr>

                </table>

              </form>

              </div>

            </label>

        </fieldset><br>

        <font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><b>ЛБТВаЛµШ :</b> гЄйаБТКм¤ЕФЎ·ХиЄЧиН<br>

      </font></td>

    </tr>

</table>

<?php 

    }

else

{

       echo"<meta http-equiv=\"refresh\" content=\"3;URL=../login.php\">\n";

       echo"Please Login ";

}

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: