110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/teacher_aj_viratt/training/ drwxr-xr-x Free 40.66 GB of 127.8 GB (31.81%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

 session_start();

 if (session_is_registered("valid_user"))

 {

$Username = $valid_user;

include("../../include/FunctionDB.php");

ConnectDB();

$sql = "SELECT * FROM personal_tb WHERE Username='$Username'";

$res = mysql_query($sql);

$rs = mysql_fetch_array($res);

$Teacher_code = $rs["Teacher_code"];

$strSQL = "SELECT * FROM training_tb";

//$strSQL = "SELECT * FROM trainingtb as r,teachertb as t Where r.Teacher_code= $Teacher_code and t.Teacher_code=$Teacher_code";

$result = mysql_query($strSQL); 

$num = mysql_num_rows($result );

 $code = $rs["Teacher_code"];

?> 

<html>

<head>

<title>Development and Training</title>

<link rel="stylesheet" href="../css/cart3.css" type="text/css">

<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<link href="../../css/style1.css" rel="stylesheet" type="text/css">

</head>

<body bgcolor="#F2FCED">

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr> 

    <td height="29" bgcolor="#0066CC"><div align="left"><img src="../../Image/Ponallogo.jpg" width="550" height="71"></div></td>

  </tr>

</table>

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td>&nbsp;</td>

  </tr>

  <tr> 

    <td><table width="100%" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#999999">

        <tr> 

          <td width="20%" background="../../Image/bard1.jpg" class="table"> <div align="center"><strong><font size="2" face="Tahoma"><a href="../menu_teacher.php" class="d">ЎЕСєЛ№йТЛЕСЎ</a></font></strong></div></td>

          <td width="20%" background="../../Image/bard1.jpg" height="21" class="table"> 

            <div align="center"><strong><font size="2" face="Tahoma"><a href="AddTraining.php" class="d">аѕФиБ</a></font></strong></div></td>

          <td width="20%" background="../../Image/bard1.jpg" class="table"><div align="center"><font size="2" face="Tahoma"><strong><a href="TrainingList.php" class="d">бКґ§·Сй§ЛБґ</a></strong></font></div></td>

          <td width="20%" background="../../Image/bard1.jpg" class="table"> <div align="center"><strong><font size="2" face="Tahoma"><a href="EditTrainingList.php?Teacher_code=<? echo  $rs[Teacher_code] ?>" class="d"> 

              бЎйдў</a></font></strong></div></td>

          <td width="20%" background="../../Image/bard1.jpg" class="table"> <div align="center"><strong><font size="2" face="Tahoma"><a href="../../logout.php" class="d">Logout</a></font></strong></div></td>

        </tr>

      </table> </td>

  </tr>

</table>

<table width="100%" border="0" cellspacing="0" cellpadding="0">

  <tr> 

    <td><div align="center"><font color="#003366" size="2" face="Tahoma">ўіР№Хй 

        ¤Ші</font> <font color="#993333" size="2" face="Tahoma"><strong><?php echo $rs["Teacher_name"]?>&nbsp; 

        <?php echo $rs["Teacher_lastname"]?> </strong></font><font color="#003366" size="2" face="Tahoma">ЎУЕС§гЄй§Т№ГРєє</font></div></td>

  </tr>

  <tr> 

    <td>&nbsp;</td>

  </tr>

</table>

<table width="51%" border="0" align="center" cellpadding="0" cellspacing="2" bgcolor="#EEEEEE" style="border:1px solid gray">

  <tr bgcolor="#D2F49F"> 

    <td height="25" colspan="2"  background="../../Image/bdevel.jpg"> 

      <div align="center"><font color="#1E570F" size="4" face="Tahoma"><strong>»ГРЗСµФбј№ЎТГѕСІ№Тµ№аН§</strong></font></div></td>

  </tr>

  <tr bgcolor="#CCCCCC"> 

    <td width="77%" bgcolor="#EEEEEE" style="border:1px solid gray"> <div align="center"><font size="2" face="Tahoma"><strong>»ГРаА·</strong></font></div></td>

    <td width="23%" bgcolor="#eeeeee" style="border:1px solid gray"> <div align="center"><font color="#000000" size="2" face="Tahoma"><strong>ЁУ№З№¤ГСй§</strong></font></div></td>

  </tr>

  <tr bgcolor="#FFFFFF" onMouseOver="this.style.backgroundColor='#FFFFCC'" onMouseOut="this.style.backgroundColor='#FFFFFF'" > 

    <td width="77%" bgcolor="#FFFFFF"> <strong><font color="#003366" size="2" face="Tahoma"><img src="../../Image/Turtle_bullet.gif" width="10" height="10"><a href="ShowTrainingMe.php?Training_type=00001" class="d">&nbsp;ЎТГНєГБ</a></font></strong></td>

    <td width="23%" bgcolor="#FFFFFF"> <div align="center"> <font size="2" face="Tahoma"><strong> 

        <?php

     $sql1 = "Select  Count(Training_code) as c1 From training_tb Where Training_type='00001' AND Teacher_code='$code'";

      $result1 = mysql_query($sql1) or die(" Error ".mysql_error());;

      $rs1 = mysql_fetch_array($result1);

      echo"$rs1[c1]";

    ?>

        </strong></font></div></td>

  </tr>

  <tr onMouseOver="this.style.backgroundColor='#FFFFCC'" onMouseOut="this.style.backgroundColor='#FFFFFF'" > 

    <td bgcolor="#FFFFFF"> <strong><font color="#003366" size="2" face="Tahoma"><img src="../../Image/Turtle_bullet.gif" width="10" height="10"><a href="ShowTrainingMe.php?Training_type=00002" class="d">&nbsp;ЎТГИЦЎЙТґЩ§Т№</a></font></strong></td>

    <td bgcolor="#FFFFFF"> <div align="center"> <font size="2" face="Tahoma"><strong> 

        <?php

     $sql2 = "Select  Count(Training_code) as c2 From training_tb Where Training_type='00002' AND Teacher_code='$code' ";

      $result2 = mysql_query($sql2) or die(" Error ".mysql_error());;

      $rs2 = mysql_fetch_array($result2);

      echo"$rs2[c2]";

    ?>

        </strong></font></div></td>

  </tr>

  <tr onMouseOver="this.style.backgroundColor='#FFFFCC'" onMouseOut="this.style.backgroundColor='#FFFFFF'" > 

    <td bgcolor="#FFFFFF"> <strong><font color="#003366" size="2" face="Tahoma"><img src="../../Image/Turtle_bullet.gif" width="10" height="10">&nbsp;<a href="ShowTrainingMe.php?Training_type=00003" class="d">»ГРЄШБ</a></font></strong></td>

    <td bgcolor="#FFFFFF"><div align="center"> <font size="2" face="Tahoma"><strong> 

        <?php

     $sql3 = "Select  Count(Training_code) as c3 From training_tb Where Training_type='00003' AND Teacher_code='$code' ";

      $result3 = mysql_query($sql3) or die(" Error ".mysql_error());;

      $rs3 = mysql_fetch_array($result3);

      echo"$rs3[c3]";

    ?>

        </strong></font></div></td>

  </tr>

  <tr onMouseOver="this.style.backgroundColor='#FFFFCC'" onMouseOut="this.style.backgroundColor='#FFFFFF'" > 

    <td bgcolor="#FFFFFF"> <strong><font color="#003366" size="2" face="Tahoma"><img src="../../Image/Turtle_bullet.gif" width="10" height="10">&nbsp;<a href="ShowTrainingMe.php?Training_type=00004" class="d">КСББ№Т</a></font></strong></td>

    <td bgcolor="#FFFFFF"><div align="center"> <font size="2" face="Tahoma"><strong> 

        <?php

     $sql4 = "Select  Count(Training_code) as c4 From training_tb Where Training_type='00004' AND Teacher_code='$code' ";

      $result4 = mysql_query($sql4) or die(" Error ".mysql_error());;

      $rs4 = mysql_fetch_array($result4);

      echo"$rs4[c4]";

    ?>

        </strong></font></div></td>

  </tr>

  <tr onMouseOver="this.style.backgroundColor='#FFFFCC'" onMouseOut="this.style.backgroundColor='#FFFFFF'" > 

    <td bgcolor="#FFFFFF"> <strong><font color="#003366" size="2" face="Tahoma"><img src="../../Image/Turtle_bullet.gif" width="10" height="10">&nbsp;<a href="ShowTrainingMe.php?Training_type=00005" class="d">ЎТГИЦЎЙТµиНўН§НТЁТГВм</a></font></strong></td>

    <td bgcolor="#FFFFFF"><div align="center"> <font size="2" face="Tahoma"><strong> 

        <?php

     $sql5 = "Select  Count(Training_code) as c5 From training_tb Where Training_type='00005' AND Teacher_code='$code' ";

      $result5 = mysql_query($sql5) or die(" Error ".mysql_error());;

      $rs5 = mysql_fetch_array($result5);

      echo"$rs5[c5]";

    ?>

        </strong></font></div></td>

  </tr>

  <tr bgcolor="#D2F49F" background="../../Image/bdevel.jpg"> 

    <td height="25" colspan="2"  background="../../Image/bdevel.jpg">&nbsp;</td>

  </tr>

</table>

<table width="32%" border="0" align="center" cellpadding="0" cellspacing="0">

  <tr>

    <td><div align="center"><font size="2" face="Tahoma"><strong><a href="../../graph/report.php?c1=<? echo $rs1[c1]?>&c2=<? echo $rs2[c2]?>&c3=<? echo $rs3[c3]?>&c4=<? echo $rs4[c4]?>&c5=<? echo $rs5[c5]?>" class="d">бКґ§ЎГТї</a></strong></font></div></td>

  </tr>

</table>

<p>&nbsp;</p>

</html>

<?php 

    }

else

{

       echo"<meta http-equiv=\"refresh\" content=\"3;URL=FrmLogin.php\">\n";

       echo"Please Login ";

}

?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: