110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/_manage_depart/ drwxr-xr-x Free 40.56 GB of 127.8 GB (31.74%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

    session_start();

    /**  Define Validate Access  */

    define( '_VALID_ACCESS', 1 );



    /**  Check Session User Login  */

    if (! session_is_registered("valid_user") &&session_is_registered("Priority") ) {

        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";

        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";

        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";

        exit();

    } 

    else {

        /**  Configuration  */

        require_once( "../configuration.php" );

        require_once( $_Config_absolute_path . "/includes/framework.php" );

        include("../include/Function.php");

    

        /**  Create Database Object  */

        $dbObj = new DBConn;

        

        /**  Config Table for This Page  */

    $myTable = "accessories_tb";

    $myTableFK = "AccId";

    $myTable1 = "faculty_tb";

    

    $query = " SELECT *  FROM $myTable1   Where   FacultyStatus ='Y'   ";

    $result = $dbObj->execQuery($query);

    $numrows = $dbObj->_numrows;



        /**  Paging */

        $page = $_GET['page'];

        if( $page == "" ) { $page = 1; }

            

        /**  ЁУ№З№ўйНБЩЕ µиН 1 Л№йТ  */

        $perpage = $_REQUEST['perpage'];

        if( $perpage == "" ) { $perpage = 20; }

        

        /**  Searching */

        $keyword = $_REQUEST['keyword'];

        

   $param = "Faculty_code=$Faculty_code&Dura=$Dura&Acc_type_code=$Acc_type_code" ;



        

    } # else

 ?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<title><?=$_Config_sitename;?></title>

</head>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">



<table width="1003" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td width="800" height="440" align="center" valign="top" ><?php

        /**  Config Paging  */

        if( $perpage == "" ) { $limit = $_Config_limit; }

        else { $limit = $perpage; }

        

        $scroll = $_Config_scroll; 

        

        

        /**  µСй§¤иТ Default КУЛГСєЎТГ·У Order By  */

        if( $OrderBy == "" ) { $OrderBy = $myTableFK; }

                        

        if( !isset($_GET['ASCDESC']) ) { $ASCDESC = "ASC"; }

                        

        if( $_GET['ASCDESC'] == "DESC" ) { $ASCDESC = "ASC"; }

        elseif( $_GET['ASCDESC'] == "ASC" ) { $ASCDESC = "DESC"; } 

        

        /**  Query аѕЧиНЛТ Numrows ЎиН№  */

        if( $keyword != "" ) { 

        

            $query = " SELECT *  FROM $myTable  Where    Dura ='$Dura'   and  Faculty_code='$Faculty_code'  and  Acc_type_code='$Acc_type_code'  ";

        } 

        else {

            $query = " SELECT *  FROM  $myTable  Where   Dura ='$Dura'    and  Faculty_code='$Faculty_code'  and  Acc_type_code='$Acc_type_code'    ";

        }

        

        $result = $dbObj->execQuery($query);

        $numrows = $dbObj->_numrows;

        

        /**  Paging  */

        $display = ( !isset ($_GET['page']) ) ? 1 : $_GET['page'];

        $start = ( ($display * $limit) - $limit );

        /**  Paging  */

        

        //###  Search

        if( $keyword != "" ) { 

            if( isset($_GET['OrderBy']) ) {

            

                $query = " SELECT *  FROM $myTable  Where   Dura ='$Dura'    and  Faculty_code='$Faculty_code'  and  Acc_type_code='$Acc_type_code'   ";

            } 

            elseif( !isset($_GET['OrderBy']) ) {

                

                $query = " SELECT *  FROM $myTable  Where    Dura ='$Dura'   and  Faculty_code='$Faculty_code'  and  Acc_type_code='$Acc_type_code'     ";

            }

        } 

        else {

            if( isset($_GET['OrderBy']) ) {

                $query = " SELECT *  FROM $myTable  Where   Dura ='$Dura'    and   Faculty_code='$Faculty_code'  and  Acc_type_code='$Acc_type_code'   ";

            } 

            elseif( !isset($_GET['OrderBy']) ) {

                $query = " SELECT *  FROM $myTable  Where   Dura ='$Dura'   and   Faculty_code='$Faculty_code'  and  Acc_type_code='$Acc_type_code'      ";

            }

        }

        

        $query .= " LIMIT $start, $limit ";

        $result = $dbObj->execQuery($query);



    ?>

      <fieldset>

    <table width="100%" border="0" cellspacing="0" cellpadding="0">

      <tr>

        <td height="2"></td>

      </tr>

    </table>

    <table width="100%" border="0" cellspacing="0" cellpadding="0">

    <form id="myForm" name="myForm" method="post" action="<?=$PHP_SELF;?>?page=<?=$page;?>&<?=$param;?>">

      <tr>

        <td height="258" colspan="2" align="center" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">

          <tr>

            <td width="1050" height="258" colspan="2" align="center" valign="top"><?php if( $numrows > 0 ) { ?>

              <table width="1300" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF" >

                <tr bgcolor="#FF9966">

                  <td width="22" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">NO</td>

                  <td width="100" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ГЛСК¤ГШАСі±мЗФ·ВТЕСВ</td>

                  <td width="140" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">аЕў·ХиЛГЧНГЛСК¤ГШАСі±</td>

                  <td width="136" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ГТВЎТГЛГЧНЄЧиН¤ГШАСі±м</a></td>

                  <td width="51" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ГШи№/бєє</td>

                  <td width="96" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">»ГРаА·¤ГШАСі±м</a></td>

                  <td width="56" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">бЛЕи§а§Ф№</a></td>

                  <td width="75" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ЗФёХЎТГ·ХидґйБТ</td>

                  <td width="76" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ЗС№·ХиЁСґ«ЧйН</td>

                  <td width="80" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ЗС№·ХиЛБґ<br />НТВШЎТГгЄй§Т№</td>

                  <td width="114" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ГТ¤Т·ХиЁСґ«ЧйН/Л№иЗВ</td>

                  <td width="113" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">ЁУб№Ўа»з№¤ГШАСі±</td>

                  <td width="92" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">Л№иЗВ§Т№ /ЅиТВ</td>

                  <td width="91" align="center" bgcolor="#FFCCFF" class="PADDING-RIGHT-5">гЄй»ГРЁУ·Хи/ <br>К¶Т№·ХиЁСґаЎзє</td>

                </tr>

                <?php

                $no = 1+($display-1)*$limit;

                while( $rs = $dbObj->fetchArray($result) ) { 

                    

                    $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF";

                    

                    

              ?>

                <tr bgcolor="<?=$bgColor;?>" onmouseover="this.style.backgroundColor='#F5F9F9'" onmouseout="this.style.backgroundColor=''">

                  <td align="center" class="PADDING-RIGHT-5"><?=$no ?></td>

                  <td align="center" class="PADDING-RIGHT-5"><?=$rs['Acc_no'];?></td>

                  <td align="left" class="PADDING-RIGHT-5"><?=$rs['Acc_code'];?></td>

                  <td align="left" class="PADDING-RIGHT-5"><?=$rs['Acc_name']; ?></td>

                  <td align="left" class="PADDING-RIGHT-5"><?=$rs['Acc_module'];?></td>

                  <td align="left" class="PADDING-RIGHT-5"><?php

                  $Acc_type_code = $rs['Acc_type_code'];

                  $strSQL1 = "SELECT * FROM accessories_type_tb  Where  Acc_type_code='$Acc_type_code' ";

                 $result1 = mysql_query($strSQL1);

              while( $rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[Acc_type_code]\" >$rs1[Acc_type]</option>\n";

                }

               

            ?></a></td>

                  <td align="left" class="PADDING-RIGHT-5"><?php

             $MoneyS_C  = $rs['MoneyS_C'];

            $strSQL1 = "SELECT * FROM money_source_tb  Where     MoneyS_C='$MoneyS_C' ";

            $result1= mysql_query($strSQL1);

                 while( $rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[MoneyS_C]\" >$rs1[MoneyS_M]</option>\n";

                } 

            ?>

                  </a></td>

                  <td align="left" class="PADDING-RIGHT-5"><?php echo"$rs[Fix_detail]"; ?></td>

                  <td align="center" class="PADDING-RIGHT-5"><?php  

                $sday = $rs['Date_buy'];

                $yearthai = explode( "-", $sday );

                $day = intval( $yearthai[2] );

                $month = intval( $yearthai[1] );

                $year = intval( $yearthai[0] );     

                $m = getThaiSubMonth( $month );

                echo $day ." ". $m ." ". $year;

            ?></td>

                  <td align="center" class="PADDING-RIGHT-5">                  <?php  

              

               

               $query = " SELECT *  FROM accessories_type_tb  WHERE  Acc_type_code='$rs[Acc_type_code]' ";

               $result1 = $dbObj->execQuery($query);

               $rss = $dbObj->fetchArray($result1);

                $sday = $rs['Date_buy'];

                $yearthai = explode( "-", $sday );

                $day = intval( $yearthai[2] );

                $month = intval( $yearthai[1] );

                $year = intval( $yearthai[0] )+ $rss ['Year'];     

                $m = getThaiSubMonth( $month );

                echo $day ." ". $m ." ". $year;

            ?>

                </td>

                  <td align="right" class="PADDING-RIGHT-5"><?php echo number_format($rs['Price'],2,'.',','); ?></td>

                  <td align="left" class="PADDING-RIGHT-5"><?php  echo"$rs[Fund]"; ?></td>

                  <td align="left" class="PADDING-RIGHT-5"><?php

            $Faculty_code = $rs['Faculty_code'];        

           $strSQL3 = "SELECT * FROM  faculty_tb  Where   Faculty_code='$Faculty_code'  ";

           $result3 = mysql_query($strSQL3);

                 while( $rs3 = mysql_fetch_array($result3))     

                     {

                 echo"<option value=\"$rs3[Faculty_code]\" >$rs3[Faculty_name]</option>\n";

                }

                             

          ?>

                 </td>

                  <td align="left" class="PADDING-RIGHT-5">

                    <?php

         $RoomId =  $rs['RoomId'];    

           $strSQL3 = "SELECT * FROM  room_tb   Where  code='$RoomId'    ";

           $result3 = mysql_query($strSQL3);

                 while( $rs3 = mysql_fetch_array($result3))     

                     {

                 echo"<option value=\"$rs3[code]\" >$rs3[Room_name]</option>\n";

                }

                             

          ?>

                  </td>

                    <?php 

               $no++;

            } # while 

            $dbObj->freeresult($result);

          ?>

                </tr>

              </table>

              <?php } #if ( $numrows > 0 ) ?>

              <table width="96%" border="0" align="center" cellpadding="0" cellspacing="0">

                <tr>

                  <td><?php if( $numrows > 0 ) { ?>

                    <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">

                      <tr>

                        <td height="10" colspan="2"></td>

                      </tr>

                      <tr>

                        <td width="80%" align="left"><span style="font-size:12px">Page :

                          <?php

                        /**  µГЗЁКНєЎТГ Order By ўН§ Query */

                        if( $ASCDESC=="ASC") { $ASCDESC = "DESC"; }  else { $ASCDESC="ASC"; } 

                        

                        $paging = ceil($numrows/$limit);

                                

                        //=== Display the navigation

                        if ($display > 1) {    

                            $previous = $display - 1;                    

                    ?>

                          <a href="<?=$PHP_SELF;?>?page=1&amp;perpage=<?=$perpage;?>&amp;OrderBy=<?=$OrderBy;?>&amp;ASCDESC=<?=$ASCDESC;?>&amp;keyword=<?=$keyword;?>&<?=$param;?>"><font color="#FE830B">|&laquo; Л№йТбГЎ</font></a>&nbsp; <a href="<?=$PHP_SELF;?>?page=<?=$previous;?>&amp;perpage=<?=$perpage;?>&amp;OrderBy=<?=$OrderBy;?>&amp;ASCDESC=<?=$ASCDESC;?>&amp;keyword=<?=$keyword;?>&<?=$param;?>"><font color="#FE830B">&laquo; ЎиН№Л№йТ</font></a>

                          <?php

                        } // end..if

                        if($numrows != $limit) {                 

                            if($paging > $scroll) { 

                                $first = $_GET['page']; 

                                $last = ($scroll - 1) + $_GET['page']; 

                            } else {                         

                                $first = 1;                        

                                $last = $paging;                        

                            } 

                            

                            if($last > $paging ) {                            

                                $first = $paging - ($scroll - 1);                            

                                $last = $paging;                            

                            }

                                            

                            for($i=$first; $i<=$last; $i++) {                        

                                if($display == $i) {        

                                    echo "<font color=red size=2> [<strong>$i</strong>] </font>";

                                } 

                                else {

                                    //echo " <a href=\"$PHP_SELF?page=$i&user_id=$user_id&user_login=$user_login\">$i</a> ";

                                    printf(" <a href=\"%s?page=%s&perpage=%s&OrderBy=%s&ASCDESC=%s&keyword=%s&$param%s\">%s</a> ", $_SERVER['PHP_SELF'], $i, $perpage, $OrderBy, $ASCDESC, $keyword, $param, $i);

                                }        

                            } // end..for

                        } // end..if

                            

                        if($display < $paging) {

                            $next = $display + 1;                        

                    ?>

                          &nbsp;<a href="<?=$PHP_SELF;?>?page=<?=$next;?>&amp;perpage=<?=$perpage;?>&amp;OrderBy=<?=$OrderBy;?>&amp;ASCDESC=<?=$ASCDESC;?>&amp;keyword=<?=$keyword;?>&<?=$param;?>"><font color="#FE830B">¶Сґд» &raquo;</font></a> &nbsp;<a href="<?=$PHP_SELF;?>?page=<?=$paging;?>&amp;perpage=<?=$perpage;?>&amp;OrderBy=<?=$OrderBy;?>&amp;ASCDESC=<?=$ASCDESC;?>&amp;keyword=<?=$keyword;?>&<?=$param;?>"><font color="#FE830B">Л№йТКШґ·йТВ &raquo;|</font></a>

                          <?php

                    } // end..if

                ?>

                        </span></td>

                        <td width="20%" align="right">Total: <strong>

                          <?=$numrows;?>

                          </strong>

                          <?php if( $numrows==1) echo 'Record'; else echo 'Records'; ?></td>

                      </tr>

                    </table>

                    <?php } #if ?></td>

                </tr>

              </table></td>

          </tr>

        </table></td></tr>

    </form>

    </table>

      </fieldset></td>

  </tr>

</table>

</body>

</html>

<?php

    /**  Close the Database  */

    $dbObj->disconn();

    

    /**  Unset Class  */

    unset($dbObj);

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: