110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/Project&Acc/ drwxr-xr-x Free 52.4 GB of 127.8 GB (41%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

session_start();

 if (session_is_registered("valid_user"))

 {

 $Username = $valid_user;

include("../../include/FunctionDB.php");

include("../../include/Function.php");

//  include("header.php");

ConnectDB();

$sql = "SELECT * FROM  project_type_tb  ";

$result = mysql_query($sql) or die("Select Has Error").mysql_error();

$rs = mysql_fetch_array($result);

//$Teacher_code = $rs["Teacher_code"];

$sql2 =  " SELECT * FROM  project_tb Where  Project_code='$Project_code' ";



$result2= mysql_query($sql2) or die("Select Has Error").mysql_error();

$rs = mysql_fetch_array($result2);



?>

<html>

<head>

<title>Display Project</title>

<link rel="stylesheet" href="cart4.css" type="text/css">

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<style type="text/css">

<!--

.style17 {font-family: Tahoma; font-size: 16px; }

.style18 {font-family: Tahoma}

.style6 {font-size: 14px}

.style15 {color: #003366}

-->

</style>

</head>



<body bgcolor="#F7F5EC">

<table width="100%" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#E0E0E0">

  <tr bgcolor="#ECD9C6">

    <td height="31" colspan="3" bgcolor="#0066CC"><img src="../../Image/Paninglogo.jpg" width="550" height="71"></td>

  </tr>

  <tr bgcolor="#ECD9C6">

    <td height="31" colspan="3"><div align="center"><strong><font color="#000000" size="4" face="Tahoma">бКґ§ГТВЕРаНХВґўН§бј№ґУа№Ф№ЎТГ </font></strong></div></td>

  </tr>

  <form action="EditProject1.php" method="post">

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ГЛСКЛ№иЗВ§Т№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Orderlist_1]?></font> </td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ГЛСКўН§бј№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Orderlist]?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#000066" size="2" face="Tahoma">ЄЧиНЛСЗўйНбј№ґУа№Ф№ЎТГ</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Project_plan]?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ўйНбј№ґУа№Ф№ЎТГ</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Orderlist_2]?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td width="26%"><div align="center"><font color="#000066" size="2" face="Tahoma">ГТВЕРаНХВґўН§бј№ґУа№Ф№ЎТГ</font></div></td>

      <td width="1%" bordercolor="#006699"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>

      <td width="73%" bordercolor="#006699"><input name="Project_name" type="text" id="Project_name" value="<? echo $rs[Project_name]?>" size="70"> </td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ЛБЗґа§Ф№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Percent_ans]?> </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><span class="style15"><font size="2" face="Tahoma, MS Sans Serif">ЛЕСЎКЩµГ</font></span></div></td>

      <td bordercolor="#006699"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>

      <td align="center" bordercolor="#006699"><div align="left"><font color="#003366" size="2" face="Tahoma">

        <select name="Course_code">

          <?php

            $Course_code = $rs[Course_code];

             $strSQL3 = "SELECT * FROM course_tb Where Course_code='$Course_code' ";

            $result3 = mysql_query($strSQL3);

           $strSQL4 = "SELECT * FROM course_tb Order By Course_code ";

            $result4 = mysql_query($strSQL4);

                 while( $rs3 = mysql_fetch_array($result3))

                {

                echo"<option value=\"$rs3[Course_code]\" ><b>$rs3[Course_name]</b></option>\n";

                 while( $rs4 = mysql_fetch_array($result4))

                    {

               echo"<option value=\"$rs4[Course_code]\" ><b>$rs4[Course_name]</b></option>\n";

                 }

                }

          ?>

        </select>

      </font><font color="#0033CC" size="2" face="Tahoma">»Х

            <input name="Fee" type="text" id="Fee" value="<? echo $rs[Fee]?>" size="3">

      </font></div></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><font color="#003366" size="2" face="Tahoma">ЄЧиНјЩйаєФЎ</font></div></td>

      <td bordercolor="#006699"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></td>

      <td align="center" bordercolor="#006699"><div align="left">

        <select name="Teacher_code" id="Teacher_code" class="input1">

          <?php

              //////////Where Permision='2' AND Teacher_code='$Teacher_code'";/////

            $Teacher_code = $rs[Teacher_code];

            $strSQL1 = "Select * From personal_tb Where Teacher_code='$Teacher_code' ";

            $result1 = mysql_query($strSQL1) or die("Error".mysql_error());    

            $strSQL2 = "SELECT * FROM personal_tb Where Permision='2' Order by Teacher_name ";

            $result2 = mysql_query($strSQL2) or die("Error".mysql_error());

                while($rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[Teacher_code]\" ><b>$rs1[Teacher_name]&nbsp;$rs1[Teacher_lastname]</b></option>\n"; 

                   while( $rs2 = mysql_fetch_array($result2))

                     {

                     echo"<option value=\"$rs2[Teacher_code]\" ><b>$rs2[Teacher_name]&nbsp;$rs2[Teacher_lastname]</b></option>\n";

                     }

                 }

          ?>

        </select>

      </div></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><font color="#003366" size="2" face="Tahoma">ЗС№·ХиґУа№Ф№ЎТГ</font></div></td>

      <td bordercolor="#99CCFF"><div align="center"><font color="#FF0000" size="4" face="Tahoma"><strong>*</strong></font></div></td>

      <td bordercolor="#99CCFF"><font color="#000000" size="2" face="Tahoma">ЗС№·Хи

            <select name="mDate" id="select4" class="select" >

              <?php

           $Start_Date = $rs[Start_Date];

           $yearthai = explode("-",$Start_Date);

           $mDate =   intval($yearthai[2]);

           $mMonth =  intval($yearthai[1]);

           $mYear =   intval($yearthai[0]);

            for($i=0;$i<=31;$i++)

             {  

            if( $i == 0)

               echo"\n\t<option value=\"$mDate\" selected>$mDate</option>\n ";

             else

               echo"\n\t<option value=\"$i\">$i</option>\n ";

              }

                 //    getDay1to31();

           ?>

        </select>

  аґЧН№

  <select name="mMonth" id="select5" class="select" >

    <?php

          $Start_Date = $rs[Start_Date];

           $yearthai = explode("-",$Start_Date);

           $mDate=   intval($yearthai[2]);

           $Month =  intval($yearthai[1]);

           $mYear2=   intval($yearthai[0]);     

           $mMonth = $Month;

          $CMonth = TxtThaiMonth($Month);

           for($i=-1;$i<=11;$i++)

              {

             $a = $i+1;

                if( $a == 0)

                  echo"\n\t<option value=\"$mMonth\" selected>$CMonth</option>\n ";

             else

                  echo"\n\t<option value=\"$a\">$ThaiMonth[$i]</option>\n ";

              }

                 // getThaiMonth();

          ?>

  </select>

  »Х ѕ.И.

  <input name="mYear" type="text" id="mYear" size="5" class="input1" value="<? echo $mYear?>" >

      </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ЁУ№З№а§Ф№·ХигЄй.</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><strong><font color="#003366" size="2" face="Tahoma">

        <input name="Budget_use" type="text" id="Budget_use" value="<? echo $rs[Budget_use]?>" size="10">

      </font></strong><font color="#003366" size="2" face="Tahoma">&nbsp; </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">»Х§є»ГРБТі ѕ.И.</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Budget_Year]?></font><font color="#003366" size="2" face="Tahoma">&nbsp; </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">»ХЎТГИЦЎЙТ ѕ.И.</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Term]?></font><font color="#003366" size="2" face="Tahoma">&nbsp; </font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td><div align="center"><font color="#003366" size="2" face="Tahoma">ЎЕШиБа»йТЛБТВ ЁУ№З№</font></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><font color="#003366" size="2" face="Tahoma">&nbsp; </font><font color="#0033CC" size="2" face="Tahoma"><? echo $rs[Period]?></font></td>

    </tr>

    <tr bgcolor="#EEEEEE">

      <td height="22"><div align="center"><span class="style6"><font color="#003366" face="Tahoma">¤§аЛЕЧНа§Ф№</font></span></div></td>

      <td bordercolor="#006699">&nbsp;</td>

      <td bordercolor="#006699"><strong><font color="#003366" size="2" face="Tahoma">

        <input name="Dif_result" type="text" id="Dif_result" value="<? echo $rs[Dif_result]?>" size="10">

      </font></strong></td>

    </tr>

    <tr bgcolor="#ECD9C6">

      <td colspan="3"><div align="center">

          <input name="Project_plan" type="hidden" id="Project_plan" value="<? echo $rs[Project_plan]?>">

          <input name="Percent_ans" type="hidden" id="Percent_ans" value="<? echo $rs[Percent_ans]?>">

          <input name="Orderlist" type="hidden" id="Orderlist" value="<? echo $rs[Orderlist]?>">

          <input name="Orderlist_2" type="hidden" id="Orderlist_2" value="<? echo $rs[Orderlist_2]?>">

          <input name="Orderlist_1" type="hidden" id="Orderlist_1" value="<? echo $rs[Orderlist_1]?>">

          <input name="Project_code" type="hidden" id="Project_code" value="<? echo $rs[Project_code]?>">        

          <input name="Budget_Year" type="hidden" id="Budget_Year" value="<? echo $rs[Budget_Year]?>">

        <input type="submit" name="Submit3" value="єС№·ЦЎ">

        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </div></td>

    </tr>

  </form>

</table>

<table width="79%" border="0" align="center" cellpadding="0" cellspacing="0">

  <tr>

    <td>&nbsp;</td>

  </tr>

  <tr> 

    <td><div align="center">        &nbsp;</div></td>

  </tr>

</table>

<p>&nbsp;</p>

</body>

</html>

<?php 

    }

else

{

    echo"<body bgcolor=\"#CCCCCC\">";

     echo"<meta http-equiv=\"refresh\" content=\"3;URL=../logout.php\" target=\"mainFrame\">\n";

     echo"<center>";

      echo"<br><br><br><b><font face=\"Tahoma\" size=\"4\" color=\"#FF0000\">Please Login</font> </b><br>";

      echo"<br><br><font face=\"Tahoma\" size=\"10\" color=\"#000000\"> ERROR 404 PERMISION DENY</font><br>";

      echo"<br><font face=\"Tahoma\" size=\"4\" color=\"#000000\"> ¤ШідБиБКФ·ёмгЄй§Т№</font>";

      echo"</center>";

      echo"</body>";

} 

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: