Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/ drwxr-xr-x |
Viewing file: Select action/file-type: <?php session_start(); /** Define Validate Access */ define( '_VALID_ACCESS', 1 ); /** Check Session User Login */ if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) { echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />"; echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>กรุณาทำการ Login ก่อน</strong></font></p></p>"; echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />"; exit(); } else { /** Configuration */ require_once( "../configuration.php" ); require_once( $_Config_absolute_path . "/includes/framework.php" ); require_once( "../include/Function.php" ); /** Create Database Object */ $dbObj = new DBConn; //=== SESSION $Username = $valid_user; /** Config Table for This Page */ $myTable1 = "personal_tb"; $myTable2 = "research_tb"; $myTable2PK = "Research_code"; /** Table --> personal_tb */ $query0 = " SELECT * FROM $myTable1 WHERE Username='$Username' "; $result0 = $dbObj->execQuery($query0); $rs = $dbObj->fetchArray($result0); $Teacher_code = $rs['Teacher_code']; /** Paging */ $page = $_GET['page']; if( $page == "" ) { $page = 1; } /** จำนวนข้อมูล ต่อ 1 หน้า */ $perpage = $_REQUEST['perpage']; if( $perpage == "" ) { $perpage = 10; } /** Botton Name Action */ $action = $_REQUEST['action']; $id = $_REQUEST['id']; if( isset($action) && !empty($action) ) { switch($action) { case "Delete" : $num = count($id); for( $i=0; $i<$num; $i++ ) { //--- research_tb $qryDel = " DELETE FROM $myTable2 WHERE $myTable2PK='$id[$i]' "; $resultDel = $dbObj->runQuery($qryDel); $dbObj->freeresult($resultDel); } break; } # switch } # if } # else ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-874" /> <title>ข้อมูลทั่วไปบุคลากร - ข้อมูลงานวิจัย - ผลงานการวิจัย</title></head> <link href="../css/default.css" rel="stylesheet" type="text/css" /> <script language="javascript" src="../js/utilities.js"></script> <script language="javascript"> function checkData() { var formObj = document.myForm; if( (formObj.Research_name.value == "" ) && (formObj.mYear1.value == "" ) ) { alert("กรุณากรอกข้อมูลให้ครบด้วยค่ะ" ); formObj.Research_name.style.backgroundColor='#F1F9FC'; formObj.Research_name.focus(); return false; } else if(formObj.Research_name.value == "" ) { alert("กรุณากรอก ชื่อผลงานวิจัย"); formObj.Research_name.style.backgroundColor='#F1F9FC'; formObj.Research_name.focus(); return false;} else if(formObj.mYear1.value == "" ) { alert("กรุณากรอก ปีที่เผยแพร่"); formObj.mYear1.style.backgroundColor='#F1F9FC'; formObj.mYear1.focus(); return false;} else return true ; } </script> <body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0"> <?php include("../templates/incHeader.php"); ?> <table width="1003" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td> <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px"><fieldset> <table width="780" border="0" cellspacing="0" cellpadding="0"> <form id="myForm" name="myForm" method="post" action="InsertProduction.php" onsubmit="return checkData();"> <tr> <td height="5" colspan="2"></td> </tr> <tr> <td width="570" height="30" background="../images/background/bg-head-topic.gif" class="PADDING-LEFT-10"><strong><a href="index.php">หน้าหลัก</a></strong> <strong>» <a href="Menu_Teach.php">ข้อมูลทั่วไปบุคลากร</a> » <a href="Edu_ProductMe.php?Teacher_code=<?=$Teacher_code;?>">ผลงานวิชาการ</a> » <span class="NOTE">เพิ่มข้อมูลผลงานวิชาการ</span></strong></td> <td width="210"> </td> </tr> <tr> <td colspan="2"> </td> </tr> <tr> <td colspan="2" align="center"><table width="760" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#E5E5E5" class="BORDER-GREY"> <tr bgcolor="#FFCC99"> <td height="25" colspan="3" align="center" bgcolor="#F8F8F8"><font color="#000000" face="Tahoma" class="PATRON11">เพิ่มข้อมูลผลงานวิชาการ</font></td> </tr> <tr> <td width="25%" height="26" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ชื่อ-นามสกุล</td> <td width="2%" bgcolor="#FFFFFF"> </td> <td width="73%" bgcolor="#FFFFFF" class="TEXT-HEADER11-BLUE"><? echo $rs['First_name'] . $rs['Teacher_name'] ." ". $rs['Teacher_lastname'];?></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> ชื่อผลงาน</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><input name="Prod_name" type="text" id="Prod_name" size="60"></td> </tr> <tr> <td align="right" valign="top" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10 PADDING-TOP-5">ประเภทผลงาน</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><table width="100%" border="0" align="center" cellpadding="0" cellspacing="1"> <tr> <td width="45%"><input type="radio" name="Prod_type" value="เอกสารประกอบการสอน" />เอกสารประกอบการสอน</td> <td width="55%"><input type="radio" name="Prod_type" value="เอกสารประกอบคำบรรยาย" />เอกสารประกอบคำบรรยาย</td> </tr> <tr> <td><input type="radio" name="Prod_type" value="สื่อการเรียนการสอน" />สื่อการเรียนการสอน</td> <td><input type="radio" name="Prod_type" value="การผลิตตำรา" />การผลิตตำรา</td> </tr> <tr> <td><input type="radio" name="Prod_type" value="สิ่งประดิษฐ์" />สิ่งประดิษฐ์</td> <td><input type="radio" name="Prod_type" value="เอกสารวิชาการ" />เอกสารวิชาการ</td> </tr> <tr> <td height="5"></td> <td height="5"></td> </tr> </table></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 1</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name1" id="name1"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 2</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name2"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 3</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name3"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 4</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name4"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 5</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name5"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 6</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name6"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">ชื่อผู้ร่วมวิจัยที่ 7</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><select name="name7"> <option value=""></option> <?php $sql1 = " SELECT * FROM personal_tb ORDER BY First_name ASC "; $result1 = mysql_query($sql1); while( $rs1 = mysql_fetch_array($result1) ) { echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name] $rs1[Teacher_name] $rs1[Teacher_lastname]</b></option>\n"; } $dbObj->freeresult($result1); ?> </select></td> </tr> <tr> <td height="24" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">วัน/เดือน/ปีที่เริ่ม</font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF">วันที่ <select name="mDate" id="mDate" class="select" /> <?php getDay1to31(); ?> </select> เดือน <select name="mMonth" id="mMonth" class="select" onkeypress="return handleEnter(this, event)"> <?php getThaiMonth(); ?> </select> ปี <input name="mYear" type="text" id="mYear" size="5" maxlength="4" style="text-align:center" /></td> </tr> <tr> <td height="24" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span><font face="Tahoma">วัน/เดือน/ <font face="Tahoma">ปีที่แล้วเสร็จ</font></font></span></td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF">วันที่ <select name="mDate2" id="mDate2" class="select" /> <?php getDay1to31(); ?> </select> เดือน <select name="mMonth2" id="mMonth2" class="select" onkeypress="return handleEnter(this, event)"><?php getThaiMonth(); ?></select> ปี <input name="mYear2" type="text" id="mYear2" size="5" maxlength="4" style="text-align:center" /></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> ปีการศึกษา</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><input name="Term" type="text" id="Term" size="5" maxlength="4" style="text-align:center" /></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">การเผยแพร่</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><input name="Propagate " type="text" id="Propagate " size="50" class="input" /></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> งบประมาณ</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"> <input name="Fund" type="text" size="10" maxlength="10" style="text-align:center" /> บาท <span class="TEXT-DARK-BLUE10">แหล่งงบประมาณ</span> <input name="Fund_resource" type="text" id="Fund_resource" size="45" maxlength="250"></td> </tr> <tr> <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">จำนวนที่ใช้จริง</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><input name="Benefit" type="text" id="Benefit" style="text-align:center" size="10" maxlength="10" /> บาท</td> </tr> <tr > <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">การนำไปใช้อ้างอิง</td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"><textarea name="Use_ref" cols="50" id="Use_ref"></textarea></td> </tr> <tr > <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"> </td> </tr> <tr > <td height="25" bgcolor="#FFFFFF"> </td> <td height="25" bgcolor="#FFFFFF"> </td> <td height="25" bgcolor="#FFFFFF"><input type="hidden" name="Teacher_code" value="<? echo $Teacher_code; ?>" /> <input type="submit" name="Submit" value="บันทึกข้อมูล" /> <input name="Reset" type="reset" class="button" id="Reset" value="เริ่มใหม่" /></td> </tr> <tr > <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"> </td> <td bgcolor="#FFFFFF"> </td> </tr> </table></td> </tr> <tr> <td colspan="2"> </td> </tr></form> </table> </fieldset></td> </tr> </table> <?php include("../templates/incFooter.php"); ?> </body> </html> <?php /** Free Resource */ $dbObj->freeresult($result0); /** Close the Database */ $dbObj->disconn(); /** Unset Class */ unset($dbObj); ?> |
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]-- |