!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/class/   drwxr-xr-x
Free 52.6 GB of 127.8 GB (41.16%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     clsStudentMaster.php (18.35 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
SetQuery("select admitAcadYear, max(studentYear) as studentYear from StudentMaster 
						where programId='$xKey' and genStatus='Y' group by admitAcadYear");
}

function RSStudentMasterByPgIdAndAdY($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear='$yKey' order by studentCode");
}

function RSStudentMasterByPgIdAndAdYAndStudying($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear='$yKey' and genStatus='Y' 
						and studentStatus='1' and finishDate=0000-00-00 and graduateYear=0 
						order by studentCode");
}

function RSStudentMasterByPgIdAndBetweenAdYOrderStCode($xKey, $yKey, $zKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear between '$yKey' and '$zKey' order by studentCode");
}

function RSStudentMasterByBetweenAdYOrderStCode($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster 
						where admitAcadYear between '$xKey' and '$yKey' order by studentCode");
}

function RSStudentMasterByPgIdAndStYAndAdY($xKey, $yKey, $zKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and studentYear='$yKey' and admitAcadYear='$zKey' order by studentCode");
}

function RSStudentMasterByPgIdAndAdYLimit($xKey, $yKey, $start, $pageSize){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and admitAcadYear='$yKey' 
						order by studentCode, studentName, studentSurname limit $start, $pageSize");
}

function GetNextCodeByPgIdAndAdY($xKey, $yKey){
	$this->SetQuery("select max(studentCode) as num from StudentMaster where programId='$xKey' and admitAcadYear='$yKey'");
	if ($result=$this->GetResult()) {
		return $result['num']+1;
	}
}

function RSStudentMasterByPgIdAndAdYGS($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and admitAcadYear='$yKey' and genStatus='Y'");
}

function RSStudentMasterByGSGroupPgIdAndAdY($xKey){
	$this->SetQuery("select StudentMaster.programId, admitAcadYear from StudentMaster, Program 
						where genStatus='$xKey' and StudentMaster.programId=Program.programId and programStatus='Y' 
						group by StudentMaster.programId, admitAcadYear");
}

function RSStudentMasterByGSGroupPgIdAndAdYLimit($xKey, $start, $pageSize){
	$this->SetQuery("select StudentMaster.programId, admitAcadYear from StudentMaster, Program 
						where genStatus='$xKey' and StudentMaster.programId=Program.programId and programStatus='Y' 
						group by StudentMaster.programId, admitAcadYear limit $start, $pageSize");
}

function RSStudentMasterByPgIdAndAdYOrderStNm($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and admitAcadYear='$yKey' order by studentName, studentSurname");
}

function RSStudentMasterByPgIdAndGeId($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster where programId= '$xKey' and generationId= '$yKey' order by studentId");
}

function RSStudentMasterByPgIdAndAdYAndExpectGD($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear='$yKey' 
						and studentStatus='3' and finishDate=0000-00-00 and graduateYear=0 
						order by studentCode");
}

function RSStudentMasterByPgIdAndAdYAndExpectGDAndGD($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear='$yKey' 
						and ((studentStatus='3'and finishDate=0000-00-00 and graduateYear=0) or studentStatus='4')");
}

function RSStudentMasterByPgIdAndAdYAndGD($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear='$yKey' 
						and studentStatus='4' and finishDate<>0000-00-00 and graduateYear<>0");
}

function RSStudentMasterByPgIdAndAdYAndStYAndStudying($xKey, $yKey, $zKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$xKey' and admitAcadYear='$yKey' and studentYear='$zKey' 
						and studentStatus='1' and finishDate=0000-00-00 and graduateYear=0 
						order by studentCode");
}

function RSStudentMasterByPgIdAndAdYOrderGPATtPt($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and admitAcadYear='$yKey' order by GPA desc, totalPoint desc");
}

function RSStudentMasterGroupGdY(){
	$this->SetQuery("select graduateYear from StudentMaster group by graduateYear");
}

function RSStudentMasterByPgIdAndFinishDateAndGdY($wKey, $xKey, $yKey, $zKey){
	$this->SetQuery("select * from StudentMaster 
						where programId='$wKey' and finishDate>='$xKey' and finishDate<='$yKey' 
						and graduateYear='$zKey'");
}

function GetCountStIdByPgIdAndFinishDateAndGdYAndStSex($wKey, $xKey, $yKey, $zKey, $sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$wKey' and finishDate>='$xKey' and finishDate<='$yKey' 
						and graduateYear='$zKey' and studentSex='$sex'");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function RSStudentMasterByGSAndAcYGroupPgIdAndAdYAndGenNo($xKey){
	$this->SetQuery("select s.programId, admitAcadYear, s.genNo, count(studentId) as studentId 
						from StudentMaster s, Generation g, Program p 
						where genStatus='Y' and s.genNo=genId and acadYear<='$xKey' and s.programId=p.programId 
						and ('$xKey'-admitAcadYear+1) between 1 and studyYear 
						group by s.programId, admitAcadYear, s.genNo");
}

function RSStudentMasterByGSAndAcYAndLvIdGroupPgIdAndAdYAndGenNo($acY, $sLvId, $eLvId){
	$this->SetQuery("select s.programId, admitAcadYear, s.genNo, count(studentId) as studentId 
						from StudentMaster s, Generation g, Program p 
						where genStatus='Y' and s.genNo=genId and acadYear<='$acY' and s.programId=p.programId 
						and p.levelId between '$sLvId' and '$eLvId' and ('$acY'-admitAcadYear+1) between 1 and studyYear 
						group by s.programId, admitAcadYear, s.genNo");
}

function RSStudentMasterByPgId($xKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' order by studentCode");
}

function RSStudentMasterByPgIdOrderByStdNameAndStdStatus($xKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and studentStatus!=6 order by studentName");
}

function RSStudentMasterByPgIdOrderByStdName($xKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' order by studentName");
}

function RSStudentMasterByStCdAndNmAndSm($xKey, $yKey, $zKey){
	$this->SetQuery("select * from StudentMaster 
						where studentCode like '%$xKey%' and studentName like '%$yKey%' and studentSurname like '%$zKey%' 
						order by studentCode");
}

function RSStudentMasterByOfId1AndStudying($xKey){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where officerId1='$xKey' and studentStatus='1' order by studentId");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function RSStudentMasterByOfId1AndStudyingLimit($xKey, $start, $pageSize){
	$this->SetQuery("select * from StudentMaster 
						where officerId1='$xKey' and studentStatus='1' order by studentId limit $start, $pageSize");
}

function RSStudentMasterCountStudByPgIdStudYearNowDate($aKey, $bKey){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where studentCode!='' and programId='$aKey' and studentYear='$bKey' and studentStatus='1' 
						order by studentId");
	$result=$this->GetResult();
	return $result['num'];
}

function RSStudentMasterByPgIdAndGdY($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and graduateYear='$yKey' and studentStatus='4'");
}

function SearchByKeyAndStudying($xKey){
	if ($this->SetQuery("select * from StudentMaster where studentId='$xKey' and studentStatus='1' and genStatus='Y'")){
		return 1;
	}else {
		return 0;
	}
}

function SearchByStCodeAndStudying($xKey){
	if ($this->SetQuery("select * from StudentMaster where studentCode='$xKey' and studentStatus='1' and genStatus='Y'")){
		return 1;
	}else {
		return 0;
	}
}

function SearchByStCodeAndStudyingAndTransferSt($xKey){
	if ($this->SetQuery("select * from StudentMaster where studentCode='$xKey' and studentStatus='1' and entryTypeId2='2'")){
		return 1;
	}else {
		return 0;
	}
}

function SearchByStCode($xKey){
	if ($this->SetQuery("select * from StudentMaster where studentCode='$xKey' and genStatus='Y'")){
		return 1;
	}else {
		return 0;
	}
}

function RSStudentMasterGroupAdY(){
	$this->SetQuery("select admitAcadYear from StudentMaster group by admitAcadYear");
}

function RSStudentMasterByPgIdAndAdYGroupGenNo($xKey, $yKey){
	$this->SetQuery("select genNo from StudentMaster where programId='$xKey' and admitAcadYear='$yKey' group by genNo");
}

function CheckCredit($stId, &$msg){
	include_once "clsStudentMaster.php";
	include_once "clsProgramStructure.php";
	include_once "clsEnrollItem.php";
	
	$obj1 = new StudentMaster();
	$obj2 = new ProgramStructure();
	$obj3 = new ProgramStructure();
	$obj4 = new EnrollItem();
	
	$obj1->SearchByKey($stId);
	$obj1->GetRecord();
	
	$flag = 1;
	// Find conditionId1
	$obj2->RSProgramStructureByPgIdAndCdId2IsH($obj1->programId);
	while($obj2->GetRecord()) {
		// Find conditionId2
		$obj3->RSProgramStructureByPgIdAndCd1($obj1->programId, $obj2->conditionId1);
		while($obj3->GetRecord()) {
			// Check credit of conditionId2
			$sumCrAtCdId2 = $obj4->GetSumCrAtByStIdAndCdIdAndCdId2($stId, $obj2->conditionId1, $obj3->conditionId2);
			if($sumCrAtCdId2 >= $obj3->creditTotal)
				$msg[$obj3->conditionId2] = intval($sumCrAtCdId2).':PASS';
			else {
				$msg[$obj3->conditionId2] = intval($sumCrAtCdId2).':FAIL';
				$flag = 0;
			}
		}
		
		// Check credit of conditionId1
		$sumCrAtCdId = $obj4->GetSumCrAtByStIdAndCdId($stId, $obj2->conditionId1);
		if($sumCrAtCdId >= $obj2->creditTotal)
			$msg[$obj2->conditionId1] = intval($sumCrAtCdId).':PASS';
		else {
			$msg[$obj2->conditionId1] = intval($sumCrAtCdId).':FAIL';
			$flag = 0;
		}
	}
	
	return $flag;
}

function SearchByStCodeAndStudyingReStatus($StCode){
	$this->SetQuery("select * from StudentMaster 
						where studentCode='$StCode' and (studentStatus='2' or studentStatus='7' or studentStatus='8' or studentStatus='9')");	
}

function SearchByStCodeStNStSn($StC,$StN,$StSn){
	$this->SetQuery("select * from StudentMaster where studentCode='$StC' or studentName='$StN' or studentSurname='$StSn' ");
}

function RSStudentMasterByPgIdAndStY2($xKey, $yKey){
	$this->SetQuery("select * from StudentMaster where programId='$xKey' and studentYear='$yKey' order by studentCode");
}

// ris201
function GetCountStIdByPgIdAndStYAndEtIdAndStSexAndStudying($pgId, $stY, $etId, $sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$pgId' and studentYear='$stY' and entryTypeId='$etId' and studentSex='$sex' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByPgIdAndEtIdAndStSexAndStudying($pgId, $etId, $sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$pgId' and entryTypeId='$etId' and studentSex='$sex' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByPgIdAndEtIdAndStudying($pgId, $etId){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$pgId' and entryTypeId='$etId' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByStYAndEtIdAndStSexAndStudying($stY, $etId, $sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where studentYear='$stY' and entryTypeId='$etId' and studentSex='$sex' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByEtIdAndStSexAndStudying($etId, $sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where entryTypeId='$etId' and studentSex='$sex' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}
//-----------------------------------------------

// ris204
function RSStudentMasterByStudyingGroupPgIdAndGenNoAndStY(){
	$this->SetQuery("select s.programId, s.genNo, s.studentYear, count(s.studentId) as studentId 
						from StudentMaster s, Generation g 
						where s.genStatus='Y' and s.finishDate=0000-00-00 and s.graduateYear=0 and s.genNo=g.genId 
						group by s.programId, s.genNo, s.studentYear order by s.programId, g.genNo, s.studentYear");
}

function GetCountStIdByStudying(){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByPgIdAndStYAndGenNoAndStSexAndStudying($pgId, $stY, $genNo, $sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$pgId' and studentYear='$stY' and genNo='$genNo' and studentSex='$sex' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByStSexAndStudying($sex){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where studentSex='$sex' and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByPgIdAndStYAndGenNoAndEtIdAndStudying($pgId, $stY, $genNo, $etId){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$pgId' and studentYear='$stY' and genNo='$genNo' and entryTypeId='$etId' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByEtIdAndStudying($etId){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where entryTypeId='$etId' and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByPgIdAndStYAndGenNoAndPpIdAndStudying($pgId, $stY, $genNo, $ppId){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where programId='$pgId' and studentYear='$stY' and genNo='$genNo' and preAdmitPositionId='$ppId' 
						and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByPpIdAndStudying($ppId){
	$this->SetQuery("select count(studentId) as num from StudentMaster 
						where preAdmitPositionId='$ppId' and genStatus='Y' and finishDate=0000-00-00 and graduateYear=0");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function GetCountStIdByAcYAndStudying($acY){
	$this->SetQuery("select count(studentId) as num from (
						select studentId from StudentMaster 
							where admitAcadYear<='$acY' and genStatus='Y' and studentStatus=1 
						union 
						select studentId from StudentStatus 
							where acadYear='$acY' and studentStatus=1 
							group by studentId
					) aa");
	if ($result=$this->GetResult()) {
		return $result['num'];
	}
}

function RSStudentMasterByAcYAndStudying($acY){
	$this->SetQuery("select studentId from (
						select m.studentId, m.studentCode from StudentMaster m 
							where m.admitAcadYear<='$acY' and m.genStatus='Y' and m.studentStatus=1 
						union 
						select m.studentId, m.studentCode from StudentStatus s, StudentMaster m 
							where s.acadYear='$acY' and s.studentStatus=1 and s.studentId=m.studentId 
							group by s.studentId
					) aa 
					order by studentCode");
}
//-----------------------------------------------

// ***** Start MIS *****
function RSStudentMasterByStStatusAndAcYGroupPgIdAndAdYAndStYAndEtIdAndSex($stStatus, $acY){
	$this->SetQuery("select m.programId, m.admitAcadYear, m.studentYear, m.entryTypeId, m.studentSex, count(m.studentId) as studentId 
						from StudentMaster m, StudentStatus s 
						where m.studentStatus in ($stStatus) and m.genStatus='Y' 
						and m.studentId=s.studentId and s.studentStatus in ($stStatus) and s.acadYear='$acY' 
						group by m.programId, m.admitAcadYear, m.studentYear, m.entryTypeId, m.studentSex");
}

function RSStudentMasterByNotInStStatusAndAcYAndRepeatClassGroupPgIdAndAdYAndStYAndEtIdAndSex($stStatus, $acY){
	$this->SetQuery("select m.programId, m.admitAcadYear, m.studentYear, m.entryTypeId, m.studentSex, count(m.studentId) as studentId 
						from StudentMaster m, StudentStatus s 
						where m.studentStatus not in ($stStatus) and m.genStatus='Y' 
						and m.studentId=s.studentId and s.acadYear='$acY' and s.passStatus=4 
						group by m.programId, m.admitAcadYear, m.studentYear, m.entryTypeId, m.studentSex");
}

function RSStudentMasterByNotInStStatusGroupPgIdAndAdYAndStYAndEtIdAndSex($stStatus){
	$this->SetQuery("select programId, admitAcadYear, studentYear, entryTypeId, studentSex, count(studentId) as studentId 
						from StudentMaster 
						where studentStatus not in ($stStatus) and genStatus='Y' 
						group by programId, admitAcadYear, studentYear, entryTypeId, studentSex");
}

function RSStudentMasterByNotInStStatusGroupPgIdAndAdYAndEtIdAndSex($stStatus){
	$this->SetQuery("select programId, admitAcadYear, entryTypeId, studentSex, count(studentId) as studentId 
						from StudentMaster 
						where studentStatus not in ($stStatus) and genStatus='Y' 
						group by programId, admitAcadYear, entryTypeId, studentSex");
}

function RSStudentMasterByAdYAndNotInStStatusGroupPgIdAndAdYAndEtIdAndSex($adY, $stStatus){
	$this->SetQuery("select programId, admitAcadYear, entryTypeId, studentSex, count(studentId) as studentId 
						from StudentMaster 
						where admitAcadYear='$adY' and studentStatus not in ($stStatus) and genStatus='Y' 
						group by programId, admitAcadYear, entryTypeId, studentSex");
}

function RSStudentMasterByGdYAndGDGroupPgIdAndAdYAndEtIdAndSex($gdY){
	$this->SetQuery("select programId, admitAcadYear, entryTypeId, studentSex, count(studentId) as studentId 
						from StudentMaster 
						where graduateYear='$gdY' and studentStatus='4' and finishDate<>0000-00-00 
						group by programId, admitAcadYear, entryTypeId, studentSex");
}
// ***** End MIS *****

} //--End class StudentMaster--
?>
bool(false)

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0061 ]--