110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/teacher/ drwxr-xr-x Free 51 GB of 127.8 GB (39.9%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

session_start();

 if (session_is_registered("valid_user")&&session_is_registered("Priority")&&session_is_registered("password") )

 {

include("../include/FunctionDB.php");

include("admin_menu.php");

include("../include/Function.php");

 ConnectDB();

  $sql ="SELECT * FROM personal_tb WHERE Username='$Username'";

  $result = mysql_query($sql) or die("Cannot Select").mysql_error();

  $rs = mysql_fetch_array($result);

  $rs[Research_code] = mysql_insert_id();

?>

<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">

<link rel="stylesheet" href="../css/cart4.css" type="text/css">

<script language="JavaScript" type="text/JavaScript">

<!--

  function browse()

{

form1.Imag1.src = form1.Img1.value;

}

<!--

 function MM_openBrWindow(theURL,winName,features) { //v2.0

  window.open(theURL,winName,features);

}

//-->

function chk(c){

if (c.checked){

document.all.Prob1.disabled=false;

document.all.Prob2.disabled=false;

document.all.Prob3.disabled=false;

document.all.Prob4.disabled=false;

}

else{

document.all.Problem.disabled=false;

}

}

</script>

<style type="text/css">

<!--

.style1 {font-size: 14px}

.style3 {font-size: 14px; font-family: Tahoma; }

.style4 {font-family: Tahoma}

-->

</style>



<table width="791" border="0" cellpadding="0" cellspacing="0">

    <tr>

        <td ><br /><fieldset>

          <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="menu_teacher.php?Teacher_code=<? echo $rs[Teacher_code] ?>">Л№йТЛЕСЎ</a> <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle"><a href="AccByname.php?Faculty_code=<?php echo $Faculty_code ?>">ўйНБЩЕ¤ГШАСі±мЛ№иЗВ§Т№</a> <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle"> <a href="EditAccList.php?Faculty_code=<?php echo $Faculty_code;?>">бЎйдўГТВЎТГ¤ГШАСі±м</a> <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle"> аѕФиБГТВЎТГ¤ГШАСі±мЛ№иЗВ§Т№</font></legend>

            <label>

        <div align="left"><br>

              

              

          <form action="InsertAcc.php" method="post" enctype="multipart/form-data" name="form1" id="form1">

            <font size="2" face="Tahoma"><img src="../picture/previous.gif" onclick="window.history.back()"  width="85" height="22" border="0" /></font>

            <table width="600" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#D2F49F" bgcolor="#CCCCCC">

              <tr>

                <th height="25" colspan="3" bgcolor="#FFFFFF" scope="col"><div align="left"></div></th>

              </tr>

              

              <tr>

                <td width="193" height="22" bgcolor="#FFFFFF" scope="col"><div align="left" class="style3">

                  <div align="center">ГЛСК</div>

                </div></td>

                <td width="8" bgcolor="#FFFFFF" scope="col"><span class="style4"></span></td>

                <td width="395" bgcolor="#FFFFFF" scope="col"><div align="left" class="style3"><font color="#006633">

                  <input name="Acc_code" type="text" id="Acc_code" size="30" />

                </font></div></td>

              </tr>

              <tr>

                <td bgcolor="#FFFFFF" class="style1"><div align="center" class="style3">ЄЧиННШ»ЎГім/ВХиЛйН</div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><input name="Acc_name" type="text" id="Acc_name" size="50" /></td>

              </tr>

              <tr>

                <td height="22" bgcolor="#FFFFFF"><div align="center" class="style3">Є№Фґ</div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><select name="Acc_type_code" class="input1 style1 style4" id="Acc_type_code">

                  <option></option>

                  <?php

               $strSQL1 = "SELECT * FROM accessories_type_tb ";

            $result1 = mysql_query($strSQL1);

                 while( $rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[Acc_type_code]\" ><b>$rs1[Acc_type]- $rs1[Acc_Etype]</b></option>\n";

                }

               

            ?>

                </select></td>

              </tr>

              <tr>

                <td bgcolor="#FFFFFF" class="style1"><div align="center" class="style3">Л№иЗВ§Т№ /ЅиТВ·ХиГСєјФґЄНє</div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><span class="style3"><strong><font color="#003366">

                  <select name="Faculty_code" id="Faculty_code" class="d">

                    <?php

           $strSQL3 = "SELECT * FROM  faculty_tb Where  Faculty_code='$Faculty_code'  ";

           $result3 = mysql_query($strSQL3);

                 while( $rs3 = mysql_fetch_array($result3))     

                     {

                 echo"<option value=\"$rs3[Faculty_code]\" ><b>$rs3[Faculty_name]</b></option>\n";

                }

                CloseDB();  

                

          ?>

                  </select>

                </font></strong></span></td>

              </tr>

              <tr>

                <td height="22" bgcolor="#FFFFFF" class="style1"><div align="center" class="style3">·ХиЁСґаЎзє</div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><input name="Store" type="text" class="input " id="Store" size="30" /></td>

              </tr>

              <tr>

                <td height="83" bgcolor="#FFFFFF"><div align="center" class="style3">єГФЙС· Contact</div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><span class="style3">

                  <textarea name="Contact" cols="40" rows="5" id="Contact"></textarea>

                </span></td>

              </tr>

              <tr>

                <td height="25" bgcolor="#FFFFFF"><div align="center" class="style3">ЗС№·Хи/аґЧН№/»Х</div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><span class="style3"><font color="#000000">ЗС№·Хи

                      <select name="mDate" id="mDate" class="select" onkeypress="return handleEnter(this, event)" >

                        <? getDay1to31();?>

                      </select>

аґЧН№

<select name="mMonth" id="mMonth" class="select" onkeypress="return handleEnter(this, event)">

  <? getThaiMonth();?>

</select>

»Х ѕ.И.

<input name="mYear" type="text" class="input" id="mYear" size="4" maxlength="4">

                </font></span></td>

              </tr>

              <tr>

                <td height="22" bgcolor="#FFFFFF"><div align="left" class="style3">

                  <div align="center">ГТ¤Т</div>

                </div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><span class="style3">

                <input name="Price" type="text" class="input" id="Price" size="7" maxlength="8" />

                  єТ·</span></td>

              </tr>

              <tr>

                <td bgcolor="#FFFFFF"><div align="left" class="style3"> 

                  <div align="center">К¶Т№РЎТГгЄй§Т№</div>

                </div></td>

                <td bgcolor="#FFFFFF" class="style1"><span class="style3"><font color="#FF0000">*</font></span></td>

                <td bgcolor="#FFFFFF"><span class="style3">

                  <input type="radio" name="Status" value="гЄй§Т№" />

                  гЄй§Т№

                <input type="radio" name="Status" value="ЗиТ§" />

                  ЗиТ§

                <input type="radio" name="Status" value="ЄУГШґ" />

                  ЄУГШґ

                <input type="radio" name="Status" value="ЁУЛ№иТВННЎ" />

                  ЁУЛ№иТВННЎ </span></td>

              </tr>

              <tr>

                <td height="35" bgcolor="#FFFFFF"><div align="left" class="style3">

                  <div align="center">К¶ФµФЎТГгЄй§Т№ </div>

                </div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><span class="style3">

                  <textarea name="Statistic" cols="40" id="Statistic"></textarea>

                </span></td>

              </tr>

              <tr>

                <td height="67" bgcolor="#FFFFFF"><div align="left" class="style3">

                  <div align="center">»ГРЗСµФЎТГ«иНБ</div>

                </div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><span class="style3">

                  <textarea name="Fix_History" cols="40" rows="4" id="Fix_History"></textarea>

                </span></td>

              </tr>

              <tr>

                <td height="76" bgcolor="#FFFFFF"><div align="center" class="style3"><font color="#003366">ГЩ»АТѕ</font></div></td>

                <td bgcolor="#FFFFFF"><span class="style4"></span></td>

                <td bgcolor="#FFFFFF"><table width="41%" height="76" border="0" align="center" cellpadding="0" cellspacing="0">

                  <tr>

                    <td width="1%" class="style3"><td width="30%" height="49" class="style3"></td>

                    <td width="10%" class="style3"><div align="center"></td>

                    <td width="21%" class="style3">

                    <td width="1%" class="style3"><td width="6%" class="style3"><td width="1%" class="style3"><td class="style3"><td width="1%"><td class="style3"><label><td class="style3"><td width="6%"><td width="3%" class="style3"><input name="Img1" type="file" id="Img1" onchange="browse()" />

                    <td width="1%" class="style3"><td width="9%" class="style3"></td>

                    <div align="center" class="style3"><img src=" " name="Imag1" width="109" height="94" id="Imag1" /></div>

                    <td width="14%" class="style3">&nbsp;</td>

                  </tr>

                </table>

                <div align="left" class="style3"></div></td>

              </tr>

            </table>

            <p align="center">

              <input type="submit" name="add" value="єС№·ЦЎ"  onclick="return(checkFormat())" />

              &nbsp;&nbsp;&nbsp;

              <input type="reset" name="clear" value="а¤ЕХВГмўйНБЩЕ" />&nbsp;&nbsp;&nbsp;

               <input type="button" name="cancel" value="ВЎаЕФЎ" onclick="location.href = 'showStudent.php?programId=<?php //echo $programId;?>&amp;admitAcadYear=<?php //echo $admitAcadYear;?>'" />

            </p>

          </form>

        </div>

            </label>

        </fieldset><br>

        <font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><b>ЛБТВаЛµШ :</b> гЄйаБТКм¤ЕФЎ·ХиЄЧиН<br>

      </font></td>

    </tr>

</table>

<?php 

    }

else

{

       echo"<meta http-equiv=\"refresh\" content=\"3;URL=../login.php\">\n";

       echo"Please Login ";

}

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: