110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/plan/ drwxr-xr-x Free 52.39 GB of 127.8 GB (40.99%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/manage_22222/plan/ drwxr-xr-x
Free 52.39 GB of 127.8 GB (40.99%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: InsertPlaningIn.php (5.41 KB) -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?php

	session_start();
	
	/**  Define Validate Access  */
	define( '_VALID_ACCESS' , 1 );

	/**  Check Session User Login  */
	if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
		echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
		echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>ЎГШіТ·УЎТГ Login ЎиН№</strong></font></p></p>";
		echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
		exit();
	} 
	else {
		/**  Configuration  */
		require_once( "../configuration.php" );
		require_once( $_Config_absolute_path . "/includes/framework.php" );
		require_once( "../include/Function.php" );
		require_once( "../include/FunctionDB.php" );
	
		/**  Create Database Object  */
		$dbObj = new DBConn;
		
		$flag = true;
		$msg = "";
		
		/**  Input Hidden Form  */
		$ProjectId = trim( $_POST['ProjectId'] );
		$Project_code = trim( $_POST['Project_code'] );
		$Faculty_code = trim( $_POST['Faculty_code'] );
		$Orderlist = trim( $_POST['Orderlist'] );
		$Project_plan = trim( $_POST['Project_plan'] );
		$Budget_Year = trim( $_POST['Budget_Year'] );
		
		/**  Input Form  */
		$Training_name = htmlspecialchars( trim( $_POST['Training_name'] ) );
		$programId = trim( $_POST['programId'] );
		$Year = trim( $_POST['Year'] );
		$MoneyS_C = trim( $_POST['MoneyS_C'] );
		$MoneyId = trim( $_POST['MoneyId'] );
		
		/**  Input Form  */
		$Teacher_code = trim( $_POST['Teacher_code'] );
		$Ind = trim( $_POST['Ind'] );
		$Date = trim( $_POST['Date_start'] );
		$Budget_use = trim( $_POST['Budget_use'] );

		$Training_code = "";
		
		/**  Check Input Data  */
		if( $Training_name == "" ) {
			$msg .= "<li>ЎГШіТЎГНЎГТВЕРаНХВґ бј№ґУа№Ф№ЎТГ\r\n<br />";
			$button = "<input type=\"button\" value=\"ЎЕСєд»бЎйдў\" onclick=\"history.back();\">";
			$flag = false;
		}
		if( $Ind == "" ) {
			$msg .= "<li>ЎГШіТЎГНЎ µСЗє§ЄХйµТБ QA\r\n<br />";
			$button = "<input type=\"button\" value=\"ЎЕСєд»бЎйдў\" onclick=\"history.back();\">";
			$flag = false;
		}
		if( $Date == "" ) {
			$msg .= "<li>ЎГШіТЎГНЎ ЗС№/аґЧН№/»Х (·ХиґУа№Ф№ЎТГ)\r\n<br />";
			$button = "<input type=\"button\" value=\"ЎЕСєд»бЎйдў\" onclick=\"history.back();\">";
			$flag = false;
		}
		if( $Budget_use == "" ) {
			$msg .= "<li>ЎГШіТЎГНЎ ЁУ№З№а§Ф№·ХигЄй\r\n<br />";
			$button = "<input type=\"button\" value=\"ЎЕСєд»бЎйдў\" onclick=\"history.back();\">";
			$flag = false;
		}
		
		
		if( $flag ) {
			/**  Call Function  */
			//###  table --> 'project_tb'
			InsertProject( $Training_code , $Project_code , $ProjectId , $MoneyId , $MoneyS_C , $Faculty_code , $Teacher_code , $Ind , $Orderlist , $Project_plan , $Training_name , $Date , $Budget_use , $programId , $Budget_Year , $Year );
		} 
		
		
	} # else
 ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<script language="javascript" src="../js/utilities.js"></script>
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<title>ўйНБЩЕбј№ґУа№Ф№§Т№бЕРГТВ§Т№ : ўйНБЩЕбј№ґУа№Ф№ЎТГ ГТВ»Х§є»ГРБТі - аѕФиБўйНБЩЕбј№/в¤Г§ЎТГГґУа№Ф№§Т№ (ўйНВиНВ)</title>
</head>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">
<?php
	include("../templates/incHeader.php");
?>
<table width="1003" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>
    <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px"><fieldset>
     <table width="780" border="0" cellspacing="0" cellpadding="0">
      <form id="myForm" name="myForm" method="post" action="">
      <tr>
        <td>&nbsp;</td>
      </tr>
      <tr>
        <td height="30" background="../images/background/bg-head-topic-w780.gif" style="padding-left:15px;"><strong><a href="index.php">Л№йТЛЕСЎ</a></strong> <strong>&raquo; <a href="PlaningByYear.php">ўйНБЩЕбј№ґУа№Ф№§Т№</a> &raquo; <a href="DetailRepPlaning.php?ProjectId=<?php echo $ProjectId; ?>&amp;Orderlist=<?php echo $Orderlist; ?>&amp;Project_code=<?php echo $Project_code; ?>&amp;Faculty_code=<?php echo $Faculty_code;?>">ГТВ§Т№ЎТГгЄйа§Ф№µТБўйНВиНВбј№</a> &raquo; <span class="NOTE">аѕФиБўйНБЩЕбј№/в¤Г§ЎТГГґУа№Ф№§Т№ (ўйНВиНВ)</span></strong></td>
      </tr>
      <tr>
        <td>&nbsp;</td>
      </tr>
      <tr>
        <td height="150" align="center">
          <?php if( $msg != "" ) { ?>
          <span class="TEXT-GREEN10"><strong>ГРєєЁСґаЎзєўйНБЩЕўН§·иТ№аГХВєГйНВбЕйЗ</strong></span><br />
          ЎГШіТГНКйЎ¤ГЩи ЎУЕС§а»ЕХиВ№Л№йТНСµв№БСµФ<br />
          <?php echo "<meta http-equiv=\"refresh\" content=\"1; URL=PlaningList.php?Budget_Year=$Budget_Year&Faculty_code=$Faculty_code&Project_code=$Project_code\">"; ?><br />
          <?php 
		  		} else { 
		  			echo $msg;
					echo $button;
		  		} # else
		  ?></td>
      </tr>
      <tr>
        <td height="245">&nbsp;</td>
      </tr></form>
    </table>
   </fieldset></td>
  </tr>
</table>
<?php include("../templates/incFooter.php"); ?>
</body>
</html>
<?php
	/**  Free Resource */
	//$dbObj->freeresult($result);
	
	/**  Close the Database  */
	$dbObj->disconn();
	
	/**  Unset Class  */
	unset($dbObj);
?>

:: Command execute ::
Enter:	Select:

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0055 ]--