110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/director/ drwxr-xr-x Free 51.01 GB of 127.8 GB (39.91%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php



    session_start();

    

    /**  Define Validate Access  */

    define( '_VALID_ACCESS', 1 );



    /**  Check Session User Login  */

    if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {

        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";

        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";

        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";

        exit();

    } 

    else {

        /**  Configuration  */

        require_once( "../configuration.php" );

        require_once( $_Config_absolute_path . "/includes/framework.php" );

        require_once( "../include/Function.php" );

    

        /**  Create Database Object  */

        $dbObj = new DBConn;



        //=== SESSION

        $Username = $valid_user; 

        

        

        /**  Config Table for This Page  */

        $myTable1 = "personal_tb";

        $myTable2 = "project_tb";

        

        $myTable2PK = "codeId";

        

        /**  Table  -->  personal_tb  */

        $query = " SELECT *  FROM $myTable1  WHERE   Teacher_code='$Teacher_code' ";

        $result = $dbObj->execQuery($query);

        $rs = $dbObj->fetchArray($result);

        

        $Teacher_code = $rs['Teacher_code'];

       //

        $sql4 = "Select * From   history_position_tb   Where  Teacher_code='$Teacher_code' AND  Flag ='Y'   ";

         $result4= mysql_query($sql4) or die(" Error").mysql_error();

          $rs4 = mysql_fetch_array($result4);

        

    } # else

 ?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<script language="javascript" src="../js/utilities.js"></script>

<title>ўйНБЩЕ»ГРЗСµФКиЗ№µСЗ - бЎйдўўйНБЩЕ»ГРЗСµФЎТГ·У§Т№</title>

</head>



<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">

<?php

    include("../templates/incHeader.php");

?>

<table width="1003" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>

    <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px">

    <?php

        /**  Query аѕЧиНЛТ Numrows ЎиН№  */

    ?>

    <fieldset>

     <table width="780" border="0" cellspacing="0" cellpadding="0">

      <form id="myForm" name="myForm" method="post" action="Edit_Update_Work.php">

      <tr>

        <td height="5"></td>

      </tr>

      <tr>

        <td height="30" background="../images/background/bg-head-topic-w780.gif" class="PADDING-LEFT-10"><strong><a href="index.php">Л№йТЛЕСЎ</a></strong> <strong>&raquo; <a href="PersonalList.php">ўйНБЩЕєШ¤ЕТЎГ</a> &raquo; <span class="NOTE">бЎйдўўйНБЩЕ»ГРЗСµФЎТГ·У§Т№</span></strong></td>

        </tr>

      <tr>

        <td>&nbsp;</td>

      </tr>

      <tr>

        <td height="150" align="center"><table width="93%" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#EAEAEA" style="border:0px solid gray">

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">»ГРаА·єШ¤ЕТЎГ</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF"><input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","1"))){echo "checked";} ?> value="1" onkeypress="return handleEnter(this, event)" /> ўйТГТЄЎТГ

                          <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","2"))){echo "checked";} ?> value="2" onkeypress="return handleEnter(this, event)" /> ѕ№СЎ§Т№ўН§ГС°

                          <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","3"))){echo "checked";} ?> value="3" onkeypress="return handleEnter(this, event)" /> ЕЩЎЁйТ§»ГРЁУ

                          <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","4"))){echo "checked";} ?> value="4" onkeypress="return handleEnter(this, event)" /> ЕЩЎЁйТ§ЄСиЗ¤ГТЗ

                          <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","5"))){echo "checked";} ?> value="5" onkeypress="return handleEnter(this, event)" />

ЕЩЎЁйТ§ЄСиЗ¤ГТЗ(аЛБТЁиТВ)</td>

                      </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" valign="top" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-3">»ГРаА·НТЁТГВм</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5"><table width="100%" border="0" cellspacing="0" cellpadding="0">

                          <tr>

                            <td><input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","1"))){echo "checked";} ?> value="1" onkeypress="return handleEnter(this, event)" /> НТЁТГВм·С№µбѕ·Вм

                          <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","2"))){echo "checked";} ?> value="2" onkeypress="return handleEnter(this, event)" /> ЗФ·ВТЁТГВм

                          <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","3"))){echo "checked";} ?> value="3" onkeypress="return handleEnter(this, event)" /> НТЁТГВмѕФаИЙ</td>

                          </tr>

                          <tr>

                            <td><input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","4"))){echo "checked";} ?> value="4" onkeypress="return handleEnter(this, event)" /> НТЁТГВмаАКСЄ

                            <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","5"))){echo "checked";} ?> value="5" onkeypress="return handleEnter(this, event)" /> НТЁТГВмѕВТєТЕ

                            <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","6"))){echo "checked";} ?> value="6" onkeypress="return handleEnter(this, event)" /> 

                            КТВК№СєК№Ш№</td>

                          </tr>

                        </table></td>

                      </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-5">К¶Т№РµУбЛ№и§</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5"><input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","01"))){echo "checked";} ?> value="01" onkeypress="return handleEnter(this, event)">·С№µбѕ·Вм 

                          <input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","02"))){echo "checked";} ?> value="02" onkeypress="return handleEnter(this, event)"> аАКСЄЎГ

                          <input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","03"))){echo "checked";} ?> value="03" onkeypress="return handleEnter(this, event)" /> НТВШГаЗ·</td>

                      </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td width="170" align="right" valign="top" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-3">¤ЗТБаЄХиВЗЄТ</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-TOP-5"><textarea name="Skill" cols="60" rows="5" id="Skill"><? echo htmlspecialchars_decode( $rs['Skill'] ); ?></textarea></td>

                      </tr>

                      <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">аЕў·Хигє»ГРЎНєЗФЄТЄХѕ</td>

                        <td width="10" nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                      <td width="541" nowrap="nowrap" bgcolor="#FFFFFF"><input name="Gover_id" type="text" id="Gover_id" value="<? echo $rs['Gover_id'] ;?>" maxlength="100" /></td>

                      </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">аЕў·ХиКБТЄФЎКАТЎТГѕВТєТЕ</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Forum_nid" type="text" id="Forum_nid" value="<? echo $rs['Forum_nid'] ;?>" maxlength="100" /></td>

                      </tr>

                      <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">аЕў·ХиКБТЄФЎКБТ¤БѕВТєТЕ</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Club_nid" type="text" id="Club_nid" value="<?  echo $rs['Club_nid'];?>" maxlength="100" /></td>

                      </tr>

                      <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">»Х·ХиаГФиБГСєГТЄЎТГ</td>

                        <td width="10" nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td width="541" nowrap="nowrap" bgcolor="#FFFFFF">ѕ.И. <input name="Year_gov" type="text" id="Year_gov" value="<? echo $rs['Year_gov'];?>" size="5" maxlength="4" style="text-align:center" />

а§Ф№аґЧН№

  <input type="text"  value="<?  echo $rs['Salary_1'];?> " size="10" maxlength="7" style="text-align:center"  disabled="disabled" />

  <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">

  <input name="Salary_1" type="hidden" id="Salary_1" value="<? echo $rs4['Salary']; ?>" />

  </span></font></strong> єТ·</td>

                </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">»Х·ХиаГФиБ·У§Т№г№ЗФ·ВТЕСВ</td>

                        <td width="10" nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td width="541" nowrap="nowrap" bgcolor="#FFFFFF">ѕ.И. <input name="Year_coll" type="text" id="Year_coll" value="<? echo $rs['Year_coll'];?>" size="5" maxlength="4" style="text-align:center" />

а§Ф№¤иТµНєб·№ЗФЄТЄХѕ

  <input type="text"   value ="<?  echo $rs['Salary_2'];?>" size="10" maxlength="7" style="text-align:center" disabled="disabled"  />

  <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">

  <input name="Salary_2" type="hidden" id="Salary_2" value="<? echo $rs4['Salary_2']; ?>" />

  </span></font></strong> єТ·</td>

                </tr>

                      <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">»Х·ХиаГФиБ·У§Т№г№Л№иЗВ§Т№</td>

                        <td width="10" nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td width="541" nowrap="nowrap" bgcolor="#FFFFFF">ѕ.И. <input name="Year_fac" type="text" id="Year_fac" value="<? echo $rs['Year_fac'];?>" size="5" maxlength="4" style="text-align:center" />

а§Ф№»ГРЁУµУбЛ№и§

  <input type="text" value="<?  echo $rs['Salary_3'];?>" size="10" maxlength="7" style="text-align:center" disabled="disabled"  />

  <strong><font color="#000000" size="2" face="Tahoma"><span style="padding:5px 0px 5px 0px">

  <input name="Salary_3" type="hidden" id="Salary_3" value="<? echo $rs4['Salary_3']; ?>" />

  </span></font></strong>єТ·</td>

                </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">µУбЛ№и§·Т§ГТЄЎТГ</td>

                        <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF">&nbsp;</td>

                        <td nowrap="nowrap" bordercolor="#E7FAFE" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><strong><font color="#003366" size="2" face="Tahoma">

                      <select name="PositionId" id="PositionId">

                            <option value=""></option>

                            <?php

                  $sql4 = " SELECT *  FROM  position_tb    ORDER  BY  PositionId   ASC  ";

                  $result4 = mysql_query($sql4);

                  while( $rs4 = mysql_fetch_array($result4) ) {

                ?>

                            <option value="<?=$rs4['PositionId'];?>" <?php if( $rs4['PositionId']==$rs['PositionId'] ) echo 'selected';?>>

                              <?=$rs4['Position_name'];?>

                            </option>

                            <?php

                } # while

                  mysql_free_result($result1);

              ?>

                          </select>

                        </font></strong></font></td>

                      </tr>

                      <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">µУбЛ№и§ЎТГєГФЛТГ</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF"><input name="Manage_pos" type="text" id="Manage_pos" value="<? echo $rs['Manage_pos'];?>" size="30" maxlength="250" /></td>

                      </tr>

                      <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

                        <td height="20" align="right" nowrap="nowrap" bordercolor="#FFFFFF" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">КС§ЎСґЛ№иЗВ§Т№/АТ¤ЗФЄТ</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF">&nbsp;</td>

                        <td nowrap="nowrap" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><strong><font color="#003366" size="2" face="Tahoma">

                      <select name="Faculty_code" id="Faculty_code">

                            <?php

                       

                                $strSQL3 = " SELECT * FROM   faculty_tb     ";

                                $result3 = mysql_query($strSQL3);

                                while( $rs3 = mysql_fetch_array($result3) ) {

                            ?>

                            <option value="<?=$rs3['Faculty_code'];?>" <?php if( $rs3['Faculty_code']==$rs['Faculty_code'] ) echo 'selected'; ?>>

                              <?=$rs3['Faculty_name'];?>

                            </option>

                            <?php

                                } # while

                            ?>

                          </select>

                          </font></strong></font></td>

                      </tr>

                      <tr bgcolor="#ECF5FF">

                        <td height="20" align="right" bgcolor="#FFFFFF"><span class="TEXT-DARK-BLUE10">ЎЕШиБ/§Т№</span></td>

                        <td height="20" bgcolor="#FFFFFF">&nbsp;</td>

                        <td height="20" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><strong><font color="#003366" size="2" face="Tahoma">

                          <select name="conId" id="conId">

                            <?php

                                //$Faculty_code = $rs['Faculty_code'] ;

                                $strSQL4 = " SELECT * FROM   facultycon_tb  Where   Faculty_code='$rs[Faculty_code]'  ";

                                $result4 = mysql_query($strSQL4);

                                while( $rs4 = mysql_fetch_array($result4) ) {

                            ?>

                            <option value="<?=$rs4['conId'];?>" <?php if( $rs4['conId']==$rs['conId'] ) echo 'selected'; ?>>

                              <?=$rs4['Group_name'];?>

                            </option>

                            <?php

                                } # while

                            ?>

                          </select>

                        </font></strong></font></td>

                      </tr>

                      <tr bgcolor="#ECF5FF">

                        <td height="20" bgcolor="#FFFFFF">&nbsp;</td>

                        <td height="20" bgcolor="#FFFFFF">&nbsp;</td>

                        <td height="20" bgcolor="#FFFFFF">&nbsp;</td>

                      </tr>

            </table></td>

      </tr>

      <tr>

        <td>&nbsp;</td>

      </tr></form>

    </table>

   </fieldset></td>

  </tr>

</table>

<?php include("../templates/incFooter.php"); ?>

</body>

</html>

<?php

    /**  Free Resource */

    $dbObj->freeresult($result1);

    

    /**  Close the Database  */

    $dbObj->disconn();

    

    /**  Unset Class  */

    unset($dbObj);

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: