Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/admin/ drwxr-xr-x | |
| Viewing file: Select action/file-type: <?php
include_once "template.php";
include_once "../link/function.php";
include_once "funct.php";
include_once "../link/keyThai.php";
include_once "../class/clsSendReceive.php";
include_once "../link/functionshow.php";
include_once "../class/clsDocLinePosition.php";
include_once "../class/clsDocLineConfig.php";
include_once "../class/clsDepartment.php";
include_once "../class/clsDocSpeedLevel.php";
include_once "../class/clsDocSecreLevel.php";
include_once "../class/clsCollegeDetail.php";
$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);
$InputThai=$oSys->SearchByInputThai();
$oDP = new Department($oC);
$oTsr = new sendreceive($oC);
$oTsr2 = new sendreceive($oC);
$oTsr3 = new sendreceive($oC);
$oDlc = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlc3 = new DocLineConfig($oC);
$oDlc4 = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);
$oDlp1 = new docLinePosition($oC);
$oDlp2 = new docLinePosition($oC);
$oDsl = new DocSpeedLevel($oC);
$oDcl = new DocSecretLevel($oC);
$oDsl2 = new DocSpeedLevel($oC);
$oDcl2 = new DocSecretLevel($oC);
$oCd = new collegedetail($oC);
$oCd2 = new collegedetail($oC);
$MaxDocGroup=$oDP->SearchMaxDocGroup();
if($DLCID && $one_position!="1"){ include_once "selectposition.php";
$oDlc->SearchByKey($DLCID); $oDlc->GetRecord();
$checkcan=SearchSendAll_receive($oDlc->DlpID);
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<table width="100%" align="center">
<tr><td >
<fieldset>
<legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="sendReceiveDoc_c.php">การติดตามหนังสือรับอิเล็กทรอนิกส์</a>
</font></legend>
<form name="gg" METHOD="POST" action="processReSendDocSR.php">
<table align="center" width="98%" >
<tr>
<td width="68%" height="25"><img src="../picture/search_ico.gif" alt="" border="0" >
<font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="3"><strong>
การติดตามหนังสือรับอิเล็กทรอนิกส์</strong></font> </td>
<td width="5%" align="right"> </td>
<td width="27%" align="right" ><? if($checkcan=='All' && $oSys->sendAllNode=='Y'){ ?><a onClick = "showprogramX()" style="cursor:pointer;"><font color="#000066">[<img src="../picture/download.gif">
เริ่มดาวน์โหลดเอกสาร]<? }?></font></a></td>
</tr>
<tr>
<td colspan="3"><hr color="#000099"></hr>
</td>
</tr>
</table>
<br>
<table width="99%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse" background="<? if($DtID=="6" || $DtID=="7" || $DtID=="9"){ echo "../picture/table_header_bg2.gif"; }else{ echo "../picture/table_header_bg.gif"; }?>">
<tr height=22>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>ที่</strong></font></td>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>ลงวันที่</strong></font></td>
<td width="29%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เรื่อง (จาก)</strong></font></td>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>วันที่รับหนังสือ</strong></font></td>
<td width="3%" align="center"><img src="../picture/rapid0.jpg" alt="" border="0" ></td>
<td width="3%" align="center"><img src="../picture/secret0.jpg" alt="" border="0" ></td>
<td width="19%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>สถานะ</strong></font></td>
</tr>
<?
$oTsr->SearchDocStatusNoReceive($GLOBALS["COLLEGEID"],'r4');
$i=0;
while($oTsr->GetRecord() && $checkcan=='All'){
if(($i%2) == 0)
echo "<tr bgcolor=\"#FFFFFF\" height=22 >";
else
echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_16"]."\" height=22 align=\"left\">";
?>
<td align="left"><? echo a2th($oTsr->tsr_DocNo); ?></td>
<td align="center"><?php if($oTsr->tsr_DocDate =="0000-00-00"){ echo ""; }else{ echo abbreDate(splitDateDb2($oTsr->tsr_DocDate ,'/')); }?></td>
<td align="left"> <a href="showDetailReceiveDocSRshow.php?tsr_id=<?php echo $oTsr->tsr_id;?>"><? echo a2th($oTsr->tsr_DocSubject); ?></a>
<? $oCd->SearchByKey($oTsr->tsr_fr_node); $oCd->GetRecord(); echo " (จาก".$oCd->collegeAbbr.')'; ?>
</td>
<td align="center">
<?
if($oTsr->tsr_to_node_date !="0000-00-00 00:00:00"){
list($DocD,$DocT) = split(' ',$oTsr->tsr_to_node_date );
echo abbreDate2($DocD,'/')."<br>".a2th($DocT);
}
?></td>
<? if($oTsr->tsr_DslID=="0"){ $rapid="../picture/rapid0.jpg"; $rapidname=$oDsl2->SearchName(0); }else if($oTsr->tsr_DslID=="1"){ $rapid="../picture/rapid1.jpg"; $rapidname=$oDsl2->SearchName(1); }else if($oTsr->tsr_DslID=="2"){ $rapid="../picture/rapid2.jpg"; $rapidname=$oDsl2->SearchName(2); }else if($oTsr->tsr_DslID=="3"){ $rapid="../picture/rapid3.jpg"; $rapidname=$oDsl2->SearchName(3); }else{ $rapid="../picture/blank.gif"; $rapidname=""; }?>
<td align="center"><img src="<? echo $rapid; ?>" border="0" ></td>
<? if($oTsr->tsr_DclID=="0"){ $secret="../picture/secret0.jpg"; $secretname=$oDcl2->SearchName(0); }else if($oTsr->tsr_DclID=="1"){ $secret="../picture/secret1.jpg"; $secretname=$oDcl2->SearchName(1); }else if($oTsr->tsr_DclID=="2"){ $secret="../picture/secret2.jpg"; $secretname=$oDcl2->SearchName(2); }else if($oTsr->tsr_DclID=="3"){ $secret="../picture/secret3.jpg"; $secretname=$oDcl2->SearchName(3); }else if($oTsr->tsr_DclID=="4"){ $secret="../picture/secret4.jpg"; $secretname=$oDcl2->SearchName(4); }else{ $secret="../picture/blank.gif"; $secretname=""; }?>
<td align="center"><img src="<? echo $secret; ?>" border="0" ></td>
<td align="left"> <? echo Showtsr_status($oTsr->tsr_status); ?>
</td>
</tr>
<? $i++; } ?>
</table>
<table width="99%" align="center" border=0 cellpadding="0" cellspacing="0" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_13'];?>" height="22">
<? if($i=="0"){?>
<tr height=22><td align="center" bgcolor="#FFFFFF"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">** ไม่มีรายการหนังสือรับภายนอก **</font></td></tr>
<? } ?>
<tr height=22><td align="right"> </td></tr>
<tr height=22 bgcolor="#FFFFFF">
<td colspan="4" valign="bottom"><br>
<hr color="#000099"></hr></td>
</tr>
</table>
</form>
<form name="ff" METHOD="POST">
<? if($monthe==""){ $monthe=Date('m'); } if($searchYear==""){ $searchYear=Date('Y')+543; } //echo "month=".$monthe." "."Year=".$searchYear;?>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
<tr height=27 bgcolor="#FFFFFF" ><td align="left" >
<font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>
<a id="openshow" <? if($flagshow=="1"){ ?>style="display:none; cursor:pointer" <? }else{ ?> style="display:''; cursor:pointer" <? }?> onclick="up_downList('<? if($flagshow=="1"){ echo "up"; }else{ echo "up"; }?>')"><img src="../picture/downshow.gif" alt="แสดง" border="0" > <U>แสดงรายการหนังสือที่ดาวน์โหลดสำเร็จแล้วทั้งหมด</U></a>
<a id="closeshow" <? if($flagshow=="1"){ ?>style="display:''; cursor:pointer" <? }else{ ?>style="display:none; cursor:pointer" <? }?> alt="ซ่อน" onclick="up_downList('<? if($flagshow=="1"){ echo "down"; }else{ echo "down"; }?>')"><img src="../picture/downshow.gif" alt="ซ่อน" border="0" > <U>ซ่อนรายการหนังสือที่ดาวน์โหลดสำเร็จแล้วทั้งหมด</U></a>
</strong></font>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" id="showtable" <? if($flagshow=="1"){ ?>style="display:''; border-collapse:collapse" <? }else{ ?>style="display:none; border-collapse:collapse" <? }?>>
<tr><td>
<div id="showselect">
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" style="border-collapse:collapse">
<tr>
<td align="right"><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2">
<? if($oDlp1->DlpPID!="0"){ ?>
<? }else{ ?>
<input type="hidden" name="s" value="<? echo $s; ?>">
<? } ?>
ค้นหาหนังสือ (เรื่อง/ว่าด้วย)</font>
<input name="searchName" type="text" size="25" value="<? echo a2th($searchName); ?>">
<font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"> (ที่/ฉบับที่/ครั้งที่/เลขที่)</font>
<input name="searchNo" type="text" size="20" value="<? echo a2th($searchNo); ?>">
<br>
ประจำเดือน <select name="monthe" onChange="On_Month()">
<option value="01" <? if($monthe=="01"){ echo "selected"; }?>>ม.ค.</option>
<option value="02" <? if($monthe=="02"){ echo "selected"; }?>>ก.พ.</option>
<option value="03" <? if($monthe=="03"){ echo "selected"; }?>>มี.ค.</option>
<option value="04" <? if($monthe=="04"){ echo "selected"; }?>>เม.ย.</option>
<option value="05" <? if($monthe=="05"){ echo "selected"; }?>>พ.ค.</option>
<option value="06" <? if($monthe=="06"){ echo "selected"; }?>>มิ.ย.</option>
<option value="07" <? if($monthe=="07"){ echo "selected"; }?>>ก.ค.</option>
<option value="08" <? if($monthe=="08"){ echo "selected"; }?>>ส.ค.</option>
<option value="09" <? if($monthe=="09"){ echo "selected"; }?>>ก.ย.</option>
<option value="10" <? if($monthe=="10"){ echo "selected"; }?>>ต.ค.</option>
<option value="11" <? if($monthe=="11"){ echo "selected"; }?>>พ.ย.</option>
<option value="12" <? if($monthe=="12"){ echo "selected"; }?>>ธ.ค.</option>
</select>
<input name="searchYear" type="text" size="5" maxlength="5" value=<? if($searchYear!=""){ echo a2th($searchYear); }else{ echo a2th(Date('Y')+543); } ?> onKeyUp="On_Year('<?php echo $DLCID; ?>','<?php echo $MaxDocGroup; ?>','<?php echo $DlcPS2; ?>')" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;">
<input name="searchNamesub" type="button" value="ค้นหา" onClick="showDoc()">
</td>
</tr>
</table>
<table width="100%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse" background="<? if($DtID=="5" || $DtID=="6" || $DtID=="7" || $DtID=="9" || $DtID=="10" || $DtID=="11" || $DtID=="12" || $DtID=="13"){ echo "../picture/table_header_bg6.gif"; }else{ echo "../picture/table_header_bg5.gif"; }?>">
<? $flagshow=1;?>
<tr height=22>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>ที่</strong></font></td>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>ลงวันที่</strong></font></td>
<td width="39%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เรื่อง (จาก)</strong></font></td>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>วันที่รับหนังสือ</strong></font></td>
<td width="15%" align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>ดำเนินการ</strong></font></td>
</tr>
<?
//--------------------------------find count
$numrow=0;
if($checkcan=='All'){ $numRow =$oTsr2->SearchCountDocStatusReceiveNumrow($GLOBALS["COLLEGEID"],'r4',$monthe,th2a($searchYear),th2a($searchName),th2a($searchNo)); }
$page_size = 10;
$total_page = (int)($numRow/$page_size);
if(($numRow%$page_size) != 0)
$total_page++;
if(isset($page_id))
$start = $page_size*($page_id-1);
else {
$page_id = 1;
$start = 0;
}
//-------------------------------
$z=0;
$oTsr3->SearchDocStatuslimitReceive($GLOBALS["COLLEGEID"],'r4', $start, $page_size,$monthe,th2a($searchYear),th2a($searchName),th2a($searchNo));
while($oTsr3->GetRecord() && $checkcan=='All'){
if(($z%2) == 0)
echo "<tr bgcolor=\"#FFFFFF\" height=22 >";
else
echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_16"]."\" height=22>";
?>
<td align="left"><? echo a2th($oTsr3->tsr_DocNo); ?></td>
<td align="center"><?php if($oTsr3->tsr_DocDate =="0000-00-00"){ echo ""; }else{ echo abbreDate(splitDateDb2($oTsr3->tsr_DocDate ,'/')); }?></td>
<td align="left">
<a href="showDetailReceiveDocSRshow.php?p=1&tsr_id=<?php echo $oTsr3->tsr_id;?>&flagshow=<? echo $flagshow; ?>&monthe=<? echo $monthe;?>&searchYear=<? echo $searchYear; ?>&searchName=<? echo $searchName; ?>&searchNo=<? echo $searchNo; ?>"><? echo a2th($oTsr3->tsr_DocSubject); ?></a>
<? $oCd2->SearchByKey($oTsr3->tsr_fr_node); $oCd2->GetRecord(); echo " (จาก".$oCd2->collegeAbbr.')'; ?></td>
<td align="center">
<?
if($oTsr3->tsr_fr_node_date!="0000-00-00 00:00:00"){
list($DocD,$DocT) = split(' ',$oTsr3->tsr_to_node_date);
echo abbreDate2($DocD,'/')."<br>".a2th($DocT);
}
?></td><td align="center"><? if($oTsr3->tsr_receive=='Y'){ echo "ลงทะเบียนแล้ว"; list($DocD,$DocT) = split(' ',$oTsr3->tsr_receivedate); echo '<br>'.abbreDate2($DocD,'/')."<br>".a2th($DocT); }else if($oTsr3->tsr_receive=='N'){ echo "ไม่ลงทะเบียน"; list($DocD,$DocT) = split(' ',$oTsr3->tsr_receivedate); echo '<br>'.abbreDate2($DocD,'/')."<br>".a2th($DocT);
}else{ ?><input name="accept" type="button" value="ลงทะเบียน" onClick="return goAccept('<? echo $oTsr3->tsr_id; ?>','<? echo 'yes'; ?>','<? echo $DLCID; ?>')" ><input name="noaccept" type="button" value="ไม่ลงทะเบียน" onClick="return goAccept('<? echo $oTsr3->tsr_id; ?>','<? echo 'no'; ?>','<? echo $DLCID; ?>')" ><? } ?></td>
<?
$z++; }
?>
<? if($z=="0"){?>
<tr height=22><td align="center" bgcolor="#FFFFFF" colspan="5"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">** ไม่มีรายการหนังสือ **</font></td></tr>
<? } ?>
<tr height=22 bgcolor="#DADADA"><td align="right" colspan="7"><strong>หน้า-></strong>
<?php
for ($num=1; $num<=$total_page; $num++) {
if($num == $page_id)
echo a2th($num)." ";
else {
?>
<a href="sendReceiveDoc_c.php?page_id=<?php echo $num;?>&flagshow=<? echo $flagshow; ?>&monthe=<? echo $monthe;?>&searchYear=<? echo $searchYear; ?>&searchName=<? echo $searchName; ?>&searchNo=<? echo $searchNo; ?>"><?php echo '[ '.a2th($num).' ]'; if($num==14){echo "<br>";}?></a>
<?php
}
}
?> </td></tr>
</table>
</div></td></tr></table>
</td></tr>
</table><input type="hidden" name="flagshow" value="<? echo $flagshow; ?>">
</form>
<br>
</fieldset>
<table width="99%" border="0" align="center">
<tr>
<td width="134" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2"> <strong>หมายเหตุ
: </strong> </font></td>
<td width="1070" align="left"> <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">คลิกที่เรื่องหนังสือเพื่อดูรายละเอียดหนังสือ</font></td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>
<? }else{ include_once "unselectposition.php"; } ?>
<script language="javascript">
function showDoc(){
document.ff.submit();
}
function up_downList(status){
if(status=='up'){
closeshow.style.display='';
openshow.style.display='none';
showtable.style.display='';
}else{
openshow.style.display='';
closeshow.style.display='none';
showtable.style.display='none';
}
}
function On_Month(){
searchYear=document.ff.searchYear.value;
if (searchYear=="") {
alert('กรุณากรอกปี');
document.ff.searchYear.focus();
return false ;
}
document.ff.flagshow.value=1;
document.ff.submit();
}
function On_Year(DLCID,MaxDocGroup,DlcPS2){
searchYear=document.ff.searchYear.value;
if (searchYear.length == 4) {
document.ff.flagshow.value=1;
document.ff.submit();
}
}
function changeS2(){
if(document.ff.searchName.value==""){
document.ff.searchName.value="";
}
if(document.ff.searchNo.value==""){
document.ff.searchNo.value="";
}
document.ff.submit();
}
function goAccept(a,type,dlcid){
if(type=='yes'){
var agree=confirm("คุณต้องการลงทะเบียนหนังสือฉบับนี้แน่นอนใช่หรือไม่ ?");
}else if(type=='no'){
var agree=confirm("คุณต้องการไม่ลงทะเบียนหนังสือฉบับนี้แน่นอนใช่หรือไม่ ?");
}
if (agree){
if(type=='yes'){
window.location.href="processReceiveDocSR.php?tsr_id="+a+"&p=1&DlcID="+dlcid;
}else if(type=='no'){
window.location.href="processReceiveDocSR.php?tsr_id="+a+"&p=0&DlcID="+dlcid;
}
return true;
}else{
return false ;
}
}
function showprogramX(){
FileName = "programX.php";
var w=500;
var h=200;
strOption = "scrollbars=yes,left=370,top=100,menubar=1,status=1, width=" + w + ",height=" + h;
window.open(FileName,"",strOption);
}
</script> |
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]-- |