!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/person/   drwxr-xr-x
Free 51.01 GB of 127.8 GB (39.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     MonnyDetail.php (33.09 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
session_start();

 if (session_is_registered("valid_user")&&session_is_registered("Priority"))
 {
include("../configuration.php");    
include("../include/FunctionDB.php");
include("../include/Function.php");

ConnectDB();  

$sql2 = "Select * From salary_repot_tb  Where  Code='$Code'   ";
$result2= mysql_query($sql2) or die(" Error").mysql_error();
$rs = mysql_fetch_array($result2);

 $sql3 = "Select * From   salary_type_tb    ";
 $result3= mysql_query($sql3) or die(" Error").mysql_error();
  $rs11 = mysql_fetch_array($result3);
  $Teacher_code =$rs['Teacher_code'];
$sql = "Select * From  personal_tb   Where Teacher_code='$Teacher_code' ";
$result = mysql_query($sql) or die(" Error").mysql_error();
$rss = mysql_fetch_array($result);
/////////////////////////////////

 $sql4 = "Select * From   history_position_tb   Where  Teacher_code='$Teacher_code'   AND   Flag ='Y'   ";
$result4= mysql_query($sql4) or die(" Error").mysql_error();
$rs4 = mysql_fetch_array($result4);
?>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="../js/utilities.js"></script>
<table width="615" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="615">
        
        
        <label></label>
       
        <form id="form1" name="form1" method="post" action="EditSalarySave.php">
             </br>
             <table width="573" border="0" align="center" cellpadding="2" cellspacing="2" style="border:1px solid #EEEEEE">
          <tr bgcolor="#FFEFDF">
            <td width="159" height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF" class="PADDING-TOP-10"><font face="Tahoma">เงินเดือน</font></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10 PADDING-TOP-10"><font color="#003366" size="2" face="Tahoma"></font>
              <input name="Salary_1" type="text" id="Salary_1" value="<? echo $rs[Salary_1]?>" size="8" /></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินค่าตอบแทน ตำแหน่ง</font></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"></font>
              <input name="Salary_2" type="text" id="Salary_2" value="<? echo $rs[Salary_2]?>" size="8" /></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เงินประจำตำแหน่ง</font></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><input name="Salary_3" type="text" id="Salary_3" value="<? echo $rs[Salary_3]?>" size="8" /></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">รหัส </font></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"><?php echo $rss[Teacher_id] ;?></font></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">ชื่อ 
              - นามสกุล</font></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"> <strong>
              <?php
                            echo "$rss[First_name]";
                      ?>
              <?php
                            echo "$rss[Teacher_name]";
                      ?>
              <?php
                            echo "$rss[Teacher_lastname]";
                      ?>
            </strong></font></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เดือน</font></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#003366" size="2" face="Tahoma"><strong><font size="2" face="Tahoma"><strong><font color="#003366" size="2" face="Tahoma">
              <select name="Start_mont" id="select5" class="input1">
                <?php
             $monthCode =  $rs["Start_mont"];
           $sql3= "SELECT * FROM  month_tb   Where   monthCode ='$monthCode' ";
           $result3= mysql_query($sql3);
            $sql4 = "SELECT * FROM   month_tb Order By  monthCode  ";
            $result4= mysql_query($sql4);
                 while( $rss3 = mysql_fetch_array($result3))     
                     {
                 echo"<option value=\"$rss3[monthCode]\" ><b>$rss3[month]</b></option>\n";
                 while( $rss4 = mysql_fetch_array($result4))     
                 {
                 echo"<option value=\"$rss4[monthCode]\" ><b>$rss4[month]</b></option>\n";
                }
                    }        
          ?>
              </select>
            </font></strong></font></strong></font></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font face="Tahoma">เลือกปีงบประมาณ</font></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#0000FF" size="2" face="Geneva, Arial, Helvetica, sans-serif">
              <input name="Start_year" type="text" id="Start_year" value="<? echo $rs[Start_year]?>" size="4" maxlength="4" />
            </font></td>
          </tr>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='1' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_1" type="text" id="Costt_1" value="<? echo $rs[Costt_1]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='2' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_2" type="text" id="Costt_2" value="<? echo $rs[Costt_2]?>" size="8" />
            </font></font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='3' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_3" type="text" id="Costt_3" value="<? echo $rs[Costt_3]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='4' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_4" type="text" id="Costt_4" value="<? echo $rs[Costt_4]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='5' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td width="398" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_5" type="text" id="Costt_5" value="<? echo $rs[Costt_5]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='6' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_6" type="text" id="Costt_6" value="<? echo $rs[Costt_6]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='7' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_7" type="text" id="Costt_7" value="<? echo $rs[Costt_7]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='8' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_8" type="text" id="Costt_8" value="<? echo $rs[Costt_8]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='9' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_9" type="text" id="Costt_9" value="<? echo $rs[Costt_9]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='10' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_10" type="text" id="Costt_10" value="<? echo $rs[Costt_10]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='11' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_11" type="text" id="Costt_11" value="<? echo $rs[Costt_11]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='12' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_12" type="text" id="Costt_12" value="<? echo $rs[Costt_12]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='13' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_13" type="text" id="Costt_13" value="<? echo $rs[Costt_13]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='14' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_14" type="text" id="Costt_14" value="<? echo $rs[Costt_14]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='15' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_15" type="text" id="Costt_15" value="<? echo $rs[Costt_15]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='16' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"> <strong>รวมรายการรายรับ</strong></a></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_31" type="text" id="Costt_31" value="<? echo $rs[Costt_salary]?>" size="8" />
            </font></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_16" type="text" id="Costt_16" value="<? echo $rs[Costt_16]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='17' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_17" type="text" id="Costt_17" value="<? echo $rs[Costt_17]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='18' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_18" type="text" id="Costt_18" value="<? echo $rs[Costt_18]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='19' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_19" type="text" id="Costt_19" value="<? echo $rs[Costt_19]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='20' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_20" type="text" id="Costt_20" value="<? echo $rs[Costt_20]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_21" type="text" id="Costt_21" value="<? echo $rs[Costt_21]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='22' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_22" type="text" id="Costt_22" value="<? echo $rs[Costt_22]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='23' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_23" type="text" id="Costt_23" value="<? echo $rs[Costt_23]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='24' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_24" type="text" id="Costt_24" value="<? echo $rs[Costt_24]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='25' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_25" type="text" id="Costt_25" value="<? echo $rs[Costt_25]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='26' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_26" type="text" id="Costt_26" value="<? echo $rs[Costt_26]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='27' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_27" type="text" id="Costt_27" value="<? echo $rs[Costt_27]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='28' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_28" type="text" id="Costt_28" value="<? echo $rs[Costt_28]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='29' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_29" type="text" id="Costt_29" value="<? echo $rs[Costt_29]?>" size="8" />
            </font></td>
          </tr>
          <?php } #if ?>
          <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='30' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
          <tr bgcolor="#FFEFDF">
            <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <?php
                        echo"$rs11[Detail] ";
                 ?>
            </font></span></td>
            <td nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_30" type="text" id="Costt_30" value="<? echo $rs[Costt_30]?>" size="8" />
            </font></font></td>
          </tr>
          <?php } #if ?>
          <?php //} # if( $rs['Filetex'] != "" ) { ?>
          <tr bgcolor="#FFEFDF">
            <td height="10" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><strong>รวมรายการรายจ่าย</strong></a></td>
            <td height="10" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_32" type="text" id="Costt_32" value="<? echo $rs[Costt_to]?>" size="8" />
            </font></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="10" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><strong>ยอดคงเหลือเงินสุทธิ</strong></a></td>
            <td height="10" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"><font color="#000000" size="2" face="Tahoma">
              <input name="Costt_33" type="text" id="Costt_33" value="<? echo $rs[Costt_total]?>" size="8" />
            </font></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="10" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"></td>
            <td height="10" nowrap="nowrap" bgcolor="#FFFFFF" class="PADDING-LEFT-10"></td>
          </tr>
          <tr bgcolor="#FFEFDF">
            <td height="10" colspan="2" align="center" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><span style="padding:5px 0px 5px 0px">&nbsp;&nbsp;&nbsp;</span>
              <input type="button" name="close" value="ปิดหน้าต่าง" onclick="window.close()" id="close" /></td>
          </tr>
        </table>
      </form>
    
        
      
  </tr>
              <?php } #if ?>
               <?php
                    $sql11 = " Select  *  From  salary_type_tb   Where    SalaryId='21' ";
                    $result11 = mysql_query($sql11);
                    $rs11 = mysql_fetch_array($result11); 
                    $SalaryId =  $rs11['SalaryId'];
                    if( $SalaryId != 0 ) {
                ?>
              <tr bgcolor="#FFEFDF">
                <td height="20" align="right" nowrap="nowrap" bordercolor="#D8D2A9" bgcolor="#FFFFFF"><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><br />
    </font></td>
  </tr>
</table>
<?php 
    }
else 
{
   
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0209 ]--