!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/teacher/   drwxr-xr-x
Free 52.64 GB of 127.8 GB (41.19%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     funct.php (82.14 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
SearchMaxDocGroup();

	if($RsID=="1"){ //receiveOut
			$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
			$oRd->GetRecord();
			
			if($oRd->confirm=="Y"){
				if($oRd->receiveNo=="0" && ($oRd->receiveNoStart!="0" && $oRd->receiveNoStart!="")){
					$runningDoc=$oRd->receiveNoStart;
				}else if($oRd->receiveNo!="0" && ($oRd->receiveNoStart!="0" && $oRd->receiveNoStart!="")){
					$rN=$oRd->receiveNo;
					$rN=$rN+1;
					$runningDoc=$rN;
				}else{
					$runningDoc="N";
				}
			}else{
				$runningDoc="NoConfirm";
			}
			return $runningDoc;
	}else if($RsID=="2"){ //sendOut
			$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
			$oRd->GetRecord();
			
			if($oRd->confirm=="Y"){
				if($oRd->sendNo=="0" && ($oRd->sendNoStart!="0" && $oRd->sendNoStart!="")){
					$runningDoc=$oRd->sendNoStart;
				}else if($oRd->sendNo!="0" && ($oRd->sendNoStart!="0" && $oRd->sendNoStart!="")){
					$sN=$oRd->sendNo;
					$sN=$sN+1;
					$runningDoc=$sN;
				}else{
					$runningDoc="N";
				}
			}else{
				$runningDoc="NoConfirm";
			}
			return $runningDoc;	
	}else if($RsID=="3"){ //receiveIn
			$oDt->SearchByKey($DtID);
			$oDt->GetRecord();
			if($oDt->DtRunAll=="N"){
					$oRd->SearchRunningBydocGroupDtIDfunctDept($maxgroup,$DtID,$deptId);
					$oRd->GetRecord();
			}else{
					$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
					$oRd->GetRecord();
			}
				if($oRd->confirm=="Y"){
					if($oRd->receiveNo=="0" && ($oRd->receiveNoStart!="0" && $oRd->receiveNoStart!="")){
						$runningDoc=$oRd->receiveNoStart;
					}else if($oRd->receiveNo!="0" && ($oRd->receiveNoStart!="0" && $oRd->receiveNoStart!="")){
						$rN=$oRd->receiveNo;
						$rN=$rN+1;
						$runningDoc=$rN;
					}else{
						$runningDoc="N";
					}
				}else{
					$runningDoc="NoConfirm";
				}
			return $runningDoc;	
	}else if($RsID=="4"){ //sendIn
			$oDt->SearchByKey($DtID);
			$oDt->GetRecord();
			if($oDt->DtRunAll=="N"){
					$oRd->SearchRunningBydocGroupDtIDfunctDept($maxgroup,$DtID,$deptId);
					$oRd->GetRecord();
			}else{
					$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
					$oRd->GetRecord();
			}
				if($oRd->confirm=="Y"){
					if($oRd->sendNo=="0" && ($oRd->sendNoStart!="0" && $oRd->sendNoStart!="")){
						$runningDoc=$oRd->sendNoStart;
					}else if($oRd->sendNo!="0" && ($oRd->sendNoStart!="0" && $oRd->sendNoStart!="")){
						$sN=$oRd->sendNo;
						$sN=$sN+1;
						$runningDoc=$sN;
					}else{
						$runningDoc="N";
					}
				}else{
					$runningDoc="NoConfirm";
				}
			return $runningDoc;	
	}else if($RsID=="5"){ //for regidDoc
			$oDt->SearchByKey($DtID);
			$oDt->GetRecord();
			if($oDt->DtRunAll=="N"){
					$oRd->SearchRunningBydocGroupDtIDfunctDept($maxgroup,$DtID,$deptId);
					$oRd->GetRecord();
			}else{
					$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
					$oRd->GetRecord();
			}
				if($oRd->confirm=="Y"){
					if($oRd->regisNo=="0" && ($oRd->regisNoStart!="0" && $oRd->regisNoStart!="")){
						$runningDoc=$oRd->regisNoStart;
					}else if($oRd->regisNo!="0" && ($oRd->regisNoStart!="0" && $oRd->regisNoStart!="")){
						$rN=$oRd->regisNo;
						$rN=$rN+1;
						$runningDoc=$rN;
					}else{
						$runningDoc="N";
					}
				}else{
					$runningDoc="NoConfirm";
				}
			return $runningDoc;
	}
}
function ShowDocNo($RsID,$DtID,$deptId,$DocfCir,$useMainDocNo){
include_once("../clas/clsConnection.php");
include_once("../clas/clsDB.php");
include_once "global.php";
include_once "./class/clsDepartment.php";
include_once "./class/clsDocType.php";
include_once "./class/clsRunningDoc.php";
include_once "./class/clsSysConfig.php";
include_once "getPrefix.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDt = new doctype($oC);
$oRd = new runningdoc($oC);
$oSys = new sysConfig($oC);

$maxgroup=$oDP->SearchMaxDocGroup();

	if($RsID=="2"){ //sendOut
			$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
			$oRd->GetRecord();
	
			if($oRd->sendNo=="0"){
				$runningDoc_=$oRd->sendNoStart;
			}else{
				$runningDoc_=($oRd->sendNo+1);
			}
			$oSysDocNo=$oSys->SearchByKeyName('sysDocNo');
			
			$oDt->SearchByKey($DtID);
			$oDt->GetRecord();			
			
			$oDP2->SearchByShowDocNo($deptId);
			$oDP2->GetRecord();
			
			if($oDP2->deptLevel!=0){
				$deptId=SearchdeptIdlevel0($oDP2->deptParentId);
			}
			$oDP->SearchByKey($deptId);
			$oDP->GetRecord();
			
			if($oDt->sendNoPrefix!=""){
				$DocNo=$oDt->sendNoPrefix;
			}
			if($oDt->sendNoSuffix!=""){
				$DocNo=$DocNo.$oDt->sendNoSuffix;
			}
			
			if($useMainDocNo=="Y"){
				$DocNo = preg_replace("/%o.%d/", "%o", $DocNo);
			}
				$DocNo = preg_replace("/%o/", "$oSysDocNo", $DocNo);
				$DocNo = preg_replace("/%d/", "$oDP->deptNo", $DocNo);
				$DocNo = preg_replace("/%r/", "$runningDoc_", $DocNo);
			$Y = date('Y')+543;
			$DocNo = preg_replace("/%y/", "$Y", $DocNo);
			if($DocfCir=="Y"){ $DocfCir_="Ç."; }
			$DocNo = preg_replace("/%p/", "$DocfCir_", $DocNo);
			return $DocNo;	
	}else if($RsID=="3"){ //receiveIn
			if($DtID=="3"){
					$oRd->SearchRunningBydocGroupDtIDfunctDept($maxgroup,$DtID,$deptId);
					$oRd->GetRecord();
			}else{
					$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
					$oRd->GetRecord();
			}
					if($oRd->receiveNo=="0"){
						$runningDoc_=$oRd->receiveNoStart;
					}else{
						$runningDoc_=($oRd->receiveNo+1);
					}
					$oSysDocNo=$oSys->SearchByKeyName('sysDocNo');
			
					$oDt->SearchByKey($DtID);
					$oDt->GetRecord();
					
					
					$oDP->SearchByKey($deptId);
					$oDP->GetRecord();
					
					
					
					if($oDt->sendNoPrefix!=""){
						$DocNo=$oDt->sendNoPrefix;
					}
					if($oDt->sendNoSuffix!=""){
						$DocNo=$DocNo.$oDt->sendNoSuffix;
					}
					$DocNo = preg_replace("/%o/", "$oSysDocNo", $DocNo);
					$DocNo = preg_replace("/%d/", "$oDP->deptNo", $DocNo);
					$DocNo = preg_replace("/%r/", "$runningDoc_", $DocNo);
					$Y = date('Y')+543;
					$DocNo = preg_replace("/%y/", "$Y", $DocNo);
					if($DocfCir=="Y"){ $DocfCir_="Ç."; }
					$DocNo = preg_replace("/%p/", "$DocfCir_", $DocNo);
					return $DocNo;	
	}else if($RsID=="4"){ //sendIn
			if($DtID=="3"){
					$oRd->SearchRunningBydocGroupDtIDfunctDept($maxgroup,$DtID,$deptId);
					$oRd->GetRecord();
			}else{
					$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
					$oRd->GetRecord();
			}

				if($oRd->sendNo=="0"){
					$runningDoc_=$oRd->sendNoStart;
				}else{
					$runningDoc_=($oRd->sendNo+1);
				}
				$oSysDocNo=$oSys->SearchByKeyName('sysDocNo');
		
				$oDt->SearchByKey($DtID);
				$oDt->GetRecord();
				
				$oDP->SearchByKey($deptId);
				$oDP->GetRecord();
				
				if($oDt->sendNoPrefix!=""){
					$DocNo=$oDt->sendNoPrefix;
				}
				if($oDt->sendNoSuffix!=""){
					$DocNo=$DocNo.$oDt->sendNoSuffix;
				}
				$DocNo = preg_replace("/%o/", "$oSysDocNo", $DocNo);
				$DocNo = preg_replace("/%d/", "$oDP->deptNo", $DocNo);
				$DocNo = preg_replace("/%r/", "$runningDoc_", $DocNo);
				$Y = date('Y')+543;
				$DocNo = preg_replace("/%y/", "$Y", $DocNo);
				if($DocfCir=="Y"){ $DocfCir_="Ç."; }
				$DocNo = preg_replace("/%p/", "$DocfCir_", $DocNo);
				return $DocNo;	
	}else if($RsID=="5"){ //for regisDoc
			if($DtID=="3"){
					$oRd->SearchRunningBydocGroupDtIDfunctDept($maxgroup,$DtID,$deptId);
					$oRd->GetRecord();
			}else{
					$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
					$oRd->GetRecord();
			}
				if($oRd->regisNo=="0"){
					$runningDoc_=$oRd->regisNoStart;
				}else{
					$runningDoc_=($oRd->regisNo+1);
				}
				$oSysDocNo=$oSys->SearchByKeyName('sysDocNo');
		
				$oDt->SearchByKey($DtID);
				$oDt->GetRecord();

				$oDP2->SearchByShowDocNo($deptId);
				$oDP2->GetRecord();
				
				if($oDP2->deptLevel!=0){
					$deptId=SearchdeptIdlevel0($oDP2->deptParentId);
				}
				$oDP->SearchByKey($deptId);
				$oDP->GetRecord();

				
				if($oDt->sendNoPrefix!=""){
					$DocNo=$oDt->sendNoPrefix;
				}
				if($oDt->sendNoSuffix!=""){
					$DocNo=$DocNo.$oDt->sendNoSuffix;
				}
				$DocNo = preg_replace("/%o/", "$oSysDocNo", $DocNo);
				$DocNo = preg_replace("/%d/", "$oDP->deptNo", $DocNo);
				$DocNo = preg_replace("/%r/", "$runningDoc_", $DocNo);
				$Y = date('Y')+543;
				$DocNo = preg_replace("/%y/", "$Y", $DocNo);
				if($DocfCir=="Y"){ $DocfCir_="Ç."; }
				$DocNo = preg_replace("/%p/", "$DocfCir_", $DocNo);
				return $DocNo;	
	}
}
function ShowEditDocNo($RsID,$DtID,$deptId,$P,$runningDoc,$useMainDocNo){
include_once("../clas/clsConnection.php");
include_once("../clas/clsDB.php");
include_once "global.php";
include_once "./class/clsDepartment.php";
include_once "./class/clsDocType.php";
include_once "./class/clsRunningDoc.php";
include_once "./class/clsSysConfig.php";
include_once "getPrefix.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDt = new doctype($oC);
$oRd = new runningdoc($oC);
$oSys = new sysConfig($oC);

$maxgroup=$oDP->SearchMaxDocGroup();

	if($RsID=="2" 
bool(false)

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0057 ]--