110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/ drwxr-xr-x Free 52.82 GB of 127.8 GB (41.33%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout


<?php

 

include("../include/FunctionDB.php");

include("../include/Function.php");



ConnectDB();



$sql = " SELECT * FROM  projectstdplan_tb   WHERE  Budget_Year='$Budget_Year'  AND  Faculty_code='$Faculty_code'  AND  Project_code='$Project_code' ";

$result = mysql_query($sql);

$rs = mysql_fetch_array($result);

?>



<html>

<head>

<title>бКґ§ГТВЕРаНХВґўН§бј№ґУа№Ф№ЎТГ</title>

<link href="../css/default.css" rel="stylesheet" type="text/css">

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">



<style type="text/css">

<!--

.style6 {font-size: 14px}

.style36 {

    font-size: 16px;

    font-weight: bold;

}

-->

</style>

</head>



<table width="560" border="0" align="center">

  <tr>

    <td width="554" align="center"><fieldset>

        <table width="99%" border="0" cellspacing="1" cellpadding="1">

          <tr>

            <td height="5" colspan="2"></td>

          </tr>

          <tr>

            <td height="25" colspan="2" align="center" bgcolor="#F0F0F0"><span class="NOTE">бКґ§ГТВЕРаНХВґўН§бј№ґУа№Ф№ЎТГ</span></td>

          </tr>

          <tr>

            <td height="10" colspan="2"></td>

          </tr>

          <tr>

            <td width="23%" align="right">ГЛСКЛ№иЗВ§Т№</td>

            <td width="77%" class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><?php

                $Faculty_code = $rs["Faculty_code"];

                $sql = " SELECT *  FROM faculty_tb  WHERE Faculty_code='$Faculty_code' ";

                $result1 = mysql_query($sql) or die("Error".mysql_error());

                $rss = mysql_fetch_array($result1);

                    echo "$rss[Faculty_code]    $rss[Faculty_name]";

             ?></font></td>

          </tr>

          <tr>

            <td align="right">ГЛСКўН§бј№</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Orderlist']; ?></font></td>

          </tr>

          <tr>

            <td align="right">бј№§Т№в¤Г§ЎТГ</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Project_plan']; ?></font></td>

          </tr>

          <tr>

            <td align="right">ЗСµ¶Ш»ГРК§¤м</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Orderlist_2']; ?></font></td>

          </tr>

          <tr>

            <td align="right">µСЗЄХйЗСґ¤ЗТБКУаГзЁ</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Project_name]?></font></td>

          </tr>

          <tr>

            <td align="right">ЗФёХЎТГґУа№Ф№§Т№</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Project_rep']; ?></font></td>

          </tr>

          <tr>

            <td align="right">ЎЕШиБа»йТЛБТВ</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Period']; ?></font></td>

          </tr>

          <tr>

            <td align="right">јЕ·Хи¤ТґЗиТЁРдґйГСє</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Period_1']; ?></font></td>

          </tr>

          <tr>

            <td align="right">ЛБЗґа§Ф№</td>

            <td class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"><?php

                $MoneyS_C = $rs['MoneyS_C'];

                $sql3 = " SELECT *  FROM  money_source_tb  WHERE MoneyS_C='$MoneyS_C' ";

                $result3 = mysql_query($sql3) or die("Error".mysql_error());

                $rss = mysql_fetch_array($result3);

                    echo " $rss[MoneyS_M]";

             ?></font></td>

          </tr>

          <tr>

            <td align="right">»Х§є»ГРБТі ѕ.И.</td>

            <td class="PADDING-LEFT-10"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs['Budget_Year']; ?></font></td>

          </tr>

        </table>

      </fieldset>

      <table width="100%" border="0" cellspacing="0" cellpadding="0">

        <tr>

          <td height="10"></td>

        </tr>

      </table>

      <input type="button" name="Close" value="»ФґЛ№йТµиТ§" onClick="window.close()" onMouseOver="this.style.cursor='hand'" />

    </td>

  </tr>

</table>

</body>

</html>

<?php

    CloseDB();

?>

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Command execute ::
Enter:	Select: