!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/ealumni/class/   drwxr-xr-x
Free 46.43 GB of 127.8 GB (36.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     clsalumnibio.php (14.83 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
//--Class AlumniBio--------------------------
//--PK of AlumniBio ::
//    1. alumniId

class AlumniBio extends clsDB{

var 
$result;

var 
$alumniId;
var 
$studentId;
var 
$nationId;
var 
$religionId;
var 
$bloodGroup;
var 
$birthDate;
var 
$birthProvinceId;
var 
$homeAddress;
var 
$homeDistrictId;
var 
$homeAmphurId;
var 
$homeProvinceId;
var 
$homeZipcode;
var 
$homePhoneNo;
var 
$officeName;
var 
$officeAddress;
var 
$officeDistrictId;
var 
$officeAmphurId;
var 
$officeProvinceId;
var 
$officeZipcode;
var 
$officePhoneNo;
var 
$workingStatus;
var 
$workingPosition;
var 
$workingSalary;
var 
$fatherName;
var 
$fatherAddress;
var 
$fatherDistrictId;
var 
$fatherAmphurId;
var 
$fatherProvinceId;
var 
$fatherZipcode;
var 
$fatherPhoneNo;
var 
$fatherOccupation;
var 
$fatherStatus;
var 
$motherName;
var 
$motherAddress;
var 
$motherDistrictId;
var 
$motherAmphurId;
var 
$motherProvinceId;
var 
$motherZipcode;
var 
$motherPhoneNo;
var 
$motherOccupation;
var 
$motherStatus;
var 
$studentSex;
var 
$parentName;
var 
$parentRelation;
var 
$parentAddress;
var 
$parentDistrictId;
var 
$parentAmphurId;
var 
$parentProvinceId;
var 
$parentZipcode;
var 
$parentPhoneNo;
var 
$parentMobile;
var 
$parentOcc;
var 
$parentIncome;
var 
$parentEmail;
var 
$contactPerson;
var 
$contactAddress;
var 
$contactDistrictId;
var 
$contactAmphurId;
var 
$contactProvinceId;
var 
$contactZipcode;
var 
$contactPhoneNo;
var 
$cardExpiryDate;
var 
$currentAddress;
var 
$currentDistrictId;
var 
$currentAmphurId;
var 
$currentProvinceId;
var 
$currentZipcode;
var 
$currentPhoneNo;
var 
$graduateAddress;
var 
$graduateDistrictId;
var 
$graduateAmphurId;
var 
$graduateProvinceId;
var 
$graduateZipcode;
var 
$graduatePhoneNo;
var 
$maritalStatusId;
var 
$weight;
var 
$height;
var 
$picturePath;
var 
$recruitmentTypeId;
var 
$occExamResult;
var 
$canRefund;
var 
$oldStudentName;
var 
$entryDegree;
var 
$healthPrivId;
var 
$o1prefixId;
var 
$o1fName;
var 
$o1lName;
var 
$o2prefixId;
var 
$o2fName;
var 
$o2lName;

function 
AlumniBio(&$c){
    
$this->c=$c->c;
    
$this->DB=$c->db;
}

function 
Save(){
    if (
$this->status==1){
        
//uncomment a line below if your table use ID as running number
        //$this->alumniId=$this->GetNextCode();
        
$sql "insert into AlumniBio values(
            '$this->alumniId',
             '$this->studentId',
             '$this->nationId',
             '$this->religionId',
             '$this->bloodGroup',
             '$this->birthDate',
             '$this->birthProvinceId',
             '$this->homeAddress',
             '$this->homeDistrictId',
             '$this->homeAmphurId',
             '$this->homeProvinceId',
             '$this->homeZipcode',
             '$this->homePhoneNo',
             '$this->officeName',
             '$this->officeAddress',
             '$this->officeDistrictId',
             '$this->officeAmphurId',
             '$this->officeProvinceId',
             '$this->officeZipcode',
             '$this->officePhoneNo',
             '$this->workingStatus',
             '$this->workingPosition',
             '$this->workingSalary',
             '$this->fatherName',
             '$this->fatherAddress',
             '$this->fatherDistrictId',
             '$this->fatherAmphurId',
             '$this->fatherProvinceId',
             '$this->fatherZipcode',
             '$this->fatherPhoneNo',
             '$this->fatherOccupation',
             '$this->fatherStatus',
             '$this->motherName',
             '$this->motherAddress',
             '$this->motherDistrictId',
             '$this->motherAmphurId',
             '$this->motherProvinceId',
             '$this->motherZipcode',
             '$this->motherPhoneNo',
             '$this->motherOccupation',
             '$this->motherStatus',
             '$this->studentSex',
             '$this->parentName',
             '$this->parentRelation',
             '$this->parentAddress',
             '$this->parentDistrictId',
             '$this->parentAmphurId',
             '$this->parentProvinceId',
             '$this->parentZipcode',
             '$this->parentPhoneNo',
             '$this->parentMobile',
             '$this->parentOcc',
             '$this->parentIncome',
             '$this->parentEmail',
             '$this->contactPerson',
             '$this->contactAddress',
             '$this->contactDistrictId',
             '$this->contactAmphurId',
             '$this->contactProvinceId',
             '$this->contactZipcode',
             '$this->contactPhoneNo',
             '$this->cardExpiryDate',
             '$this->currentAddress',
             '$this->currentDistrictId',
             '$this->currentAmphurId',
             '$this->currentProvinceId',
             '$this->currentZipcode',
             '$this->currentPhoneNo',
             '$this->graduateAddress',
             '$this->graduateDistrictId',
             '$this->graduateAmphurId',
             '$this->graduateProvinceId',
             '$this->graduateZipcode',
             '$this->graduatePhoneNo',
             '$this->maritalStatusId',
             '$this->weight',
             '$this->height',
             '$this->picturePath',
             '$this->recruitmentTypeId',
             '$this->occExamResult',
             '$this->canRefund',
             '$this->oldStudentName',
             '$this->entryDegree',
             '$this->healthPrivId',
            '$this->o1prefixId',
            '$this->o1fName',
            '$this->o1lName',
            '$this->o2prefixId',
            '$this->o2fName',
            '$this->o2lName'
            )"
;
    }else {
        
$sql "update AlumniBio set 
            studentId='$this->studentId', 
            nationId='$this->nationId', 
            religionId='$this->religionId', 
            bloodGroup='$this->bloodGroup', 
            birthDate='$this->birthDate', 
            birthProvinceId='$this->birthProvinceId', 
            homeAddress='$this->homeAddress', 
            homeDistrictId='$this->homeDistrictId', 
            homeAmphurId='$this->homeAmphurId', 
            homeProvinceId='$this->homeProvinceId', 
            homeZipcode='$this->homeZipcode', 
            homePhoneNo='$this->homePhoneNo', 
            officeName='$this->officeName', 
            officeAddress='$this->officeAddress', 
            officeDistrictId='$this->officeDistrictId', 
            officeAmphurId='$this->officeAmphurId', 
            officeProvinceId='$this->officeProvinceId', 
            officeZipcode='$this->officeZipcode', 
            officePhoneNo='$this->officePhoneNo', 
            workingStatus='$this->workingStatus', 
            workingPosition='$this->workingPosition', 
            workingSalary='$this->workingSalary', 
            fatherName='$this->fatherName', 
            fatherAddress='$this->fatherAddress', 
            fatherDistrictId='$this->fatherDistrictId', 
            fatherAmphurId='$this->fatherAmphurId', 
            fatherProvinceId='$this->fatherProvinceId', 
            fatherZipcode='$this->fatherZipcode', 
            fatherPhoneNo='$this->fatherPhoneNo', 
            fatherOccupation='$this->fatherOccupation', 
            fatherStatus='$this->fatherStatus', 
            motherName='$this->motherName', 
            motherAddress='$this->motherAddress', 
            motherDistrictId='$this->motherDistrictId', 
            motherAmphurId='$this->motherAmphurId', 
            motherProvinceId='$this->motherProvinceId', 
            motherZipcode='$this->motherZipcode', 
            motherPhoneNo='$this->motherPhoneNo', 
            motherOccupation='$this->motherOccupation', 
            motherStatus='$this->motherStatus', 
            studentSex='$this->studentSex', 
            parentName='$this->parentName', 
            parentRelation='$this->parentRelation', 
            parentAddress='$this->parentAddress', 
            parentDistrictId='$this->parentDistrictId', 
            parentAmphurId='$this->parentAmphurId', 
            parentProvinceId='$this->parentProvinceId', 
            parentZipcode='$this->parentZipcode', 
            parentPhoneNo='$this->parentPhoneNo', 
            parentMobile='$this->parentMobile', 
            parentOcc='$this->parentOcc', 
            parentIncome='$this->parentIncome', 
            parentEmail='$this->parentEmail', 
            contactPerson='$this->contactPerson', 
            contactAddress='$this->contactAddress', 
            contactDistrictId='$this->contactDistrictId', 
            contactAmphurId='$this->contactAmphurId', 
            contactProvinceId='$this->contactProvinceId', 
            contactZipcode='$this->contactZipcode', 
            contactPhoneNo='$this->contactPhoneNo', 
            cardExpiryDate='$this->cardExpiryDate', 
            currentAddress='$this->currentAddress', 
            currentDistrictId='$this->currentDistrictId', 
            currentAmphurId='$this->currentAmphurId', 
            currentProvinceId='$this->currentProvinceId', 
            currentZipcode='$this->currentZipcode', 
            currentPhoneNo='$this->currentPhoneNo', 
            graduateAddress='$this->graduateAddress', 
            graduateDistrictId='$this->graduateDistrictId', 
            graduateAmphurId='$this->graduateAmphurId', 
            graduateProvinceId='$this->graduateProvinceId', 
            graduateZipcode='$this->graduateZipcode', 
            graduatePhoneNo='$this->graduatePhoneNo', 
            maritalStatusId='$this->maritalStatusId', 
            weight='$this->weight', 
            height='$this->height', 
            picturePath='$this->picturePath', 
            recruitmentTypeId='$this->recruitmentTypeId', 
            occExamResult='$this->occExamResult', 
            canRefund='$this->canRefund', 
            oldStudentName='$this->oldStudentName', 
            entryDegree='$this->entryDegree', 
            healthPrivId='$this->healthPrivId',
            o1prefixId='$this->o1prefixId',
            o1fName='$this->o1fName',
            o1lName='$this->o1lName',
            o2prefixId='$this->o2prefixId',
            o2fName='$this->o2fName',
            o2lName='$this->o2lName' 
            where alumniId='$this->alumniId'"
;
    }
    return 
$this->Dml($sql);
}

function 
Delete(){
    return 
$this->Dml("delete from AlumniBio where alumniId='$this->alumniId'");
}

function 
GetNextCode(){
    
$this->SetQuery("select max(alumniId) as num from AlumniBio");
    if (
$result=$this->GetResult()) {
        return 
$result['num']+1;
    }
}

function 
RSAlumniBio(){
    
$this->SetQuery("select * from AlumniBio order by alumniId");
}

function 
GetRecord(){
    if (
$this->result $this->GetResult()) {
        
$this->alumniId $this->result['alumniId'];
        
$this->studentId $this->result['studentId'];
        
$this->nationId $this->result['nationId'];
        
$this->religionId $this->result['religionId'];
        
$this->bloodGroup $this->result['bloodGroup'];
        
$this->birthDate $this->result['birthDate'];
        
$this->birthProvinceId $this->result['birthProvinceId'];
        
$this->homeAddress $this->result['homeAddress'];
        
$this->homeDistrictId $this->result['homeDistrictId'];
        
$this->homeAmphurId $this->result['homeAmphurId'];
        
$this->homeProvinceId $this->result['homeProvinceId'];
        
$this->homeZipcode $this->result['homeZipcode'];
        
$this->homePhoneNo $this->result['homePhoneNo'];
        
$this->officeName $this->result['officeName'];
        
$this->officeAddress $this->result['officeAddress'];
        
$this->officeDistrictId $this->result['officeDistrictId'];
        
$this->officeAmphurId $this->result['officeAmphurId'];
        
$this->officeProvinceId $this->result['officeProvinceId'];
        
$this->officeZipcode $this->result['officeZipcode'];
        
$this->officePhoneNo $this->result['officePhoneNo'];
        
$this->workingStatus $this->result['workingStatus'];
        
$this->workingPosition $this->result['workingPosition'];
        
$this->workingSalary $this->result['workingSalary'];
        
$this->fatherName $this->result['fatherName'];
        
$this->fatherAddress $this->result['fatherAddress'];
        
$this->fatherDistrictId $this->result['fatherDistrictId'];
        
$this->fatherAmphurId $this->result['fatherAmphurId'];
        
$this->fatherProvinceId $this->result['fatherProvinceId'];
        
$this->fatherZipcode $this->result['fatherZipcode'];
        
$this->fatherPhoneNo $this->result['fatherPhoneNo'];
        
$this->fatherOccupation $this->result['fatherOccupation'];
        
$this->fatherStatus $this->result['fatherStatus'];
        
$this->motherName $this->result['motherName'];
        
$this->motherAddress $this->result['motherAddress'];
        
$this->motherDistrictId $this->result['motherDistrictId'];
        
$this->motherAmphurId $this->result['motherAmphurId'];
        
$this->motherProvinceId $this->result['motherProvinceId'];
        
$this->motherZipcode $this->result['motherZipcode'];
        
$this->motherPhoneNo $this->result['motherPhoneNo'];
        
$this->motherOccupation $this->result['motherOccupation'];
        
$this->motherStatus $this->result['motherStatus'];
        
$this->studentSex $this->result['studentSex'];
        
$this->parentName $this->result['parentName'];
        
$this->parentRelation $this->result['parentRelation'];
        
$this->parentAddress $this->result['parentAddress'];
        
$this->parentDistrictId $this->result['parentDistrictId'];
        
$this->parentAmphurId $this->result['parentAmphurId'];
        
$this->parentProvinceId $this->result['parentProvinceId'];
        
$this->parentZipcode $this->result['parentZipcode'];
        
$this->parentPhoneNo $this->result['parentPhoneNo'];
        
$this->parentMobile $this->result['parentMobile'];
        
$this->parentOcc $this->result['parentOcc'];
        
$this->parentIncome $this->result['parentIncome'];
        
$this->parentEmail $this->result['parentEmail'];
        
$this->contactPerson $this->result['contactPerson'];
        
$this->contactAddress $this->result['contactAddress'];
        
$this->contactDistrictId $this->result['contactDistrictId'];
        
$this->contactAmphurId $this->result['contactAmphurId'];
        
$this->contactProvinceId $this->result['contactProvinceId'];
        
$this->contactZipcode $this->result['contactZipcode'];
        
$this->contactPhoneNo $this->result['contactPhoneNo'];
        
$this->cardExpiryDate $this->result['cardExpiryDate'];
        
$this->currentAddress $this->result['currentAddress'];
        
$this->currentDistrictId $this->result['currentDistrictId'];
        
$this->currentAmphurId $this->result['currentAmphurId'];
        
$this->currentProvinceId $this->result['currentProvinceId'];
        
$this->currentZipcode $this->result['currentZipcode'];
        
$this->currentPhoneNo $this->result['currentPhoneNo'];
        
$this->graduateAddress $this->result['graduateAddress'];
        
$this->graduateDistrictId $this->result['graduateDistrictId'];
        
$this->graduateAmphurId $this->result['graduateAmphurId'];
        
$this->graduateProvinceId $this->result['graduateProvinceId'];
        
$this->graduateZipcode $this->result['graduateZipcode'];
        
$this->graduatePhoneNo $this->result['graduatePhoneNo'];
        
$this->maritalStatusId $this->result['maritalStatusId'];
        
$this->weight $this->result['weight'];
        
$this->height $this->result['height'];
        
$this->picturePath $this->result['picturePath'];
        
$this->recruitmentTypeId $this->result['recruitmentTypeId'];
        
$this->occExamResult $this->result['occExamResult'];
        
$this->canRefund $this->result['canRefund'];
        
$this->oldStudentName $this->result['oldStudentName'];
        
$this->entryDegree $this->result['entryDegree'];
        
$this->healthPrivId $this->result['healthPrivId'];
        
$this->o1prefixId $this->result['o1prefixId'];
        
$this->o1fName $this->result['o1fName'];
        
$this->o1lName $this->result['o1lName'];
        
$this->o2prefixId $this->result['o2prefixId'];
        
$this->o2fName $this->result['o2fName'];
        
$this->o2lName $this->result['o2lName'];
        return 
1;
    }else {
        return 
0;
    }
}

function 
SearchByKey($xKey){
    if (
$this->SetQuery("select * from AlumniBio where alumniId= '$xKey'")){ 
        return 
1;
    }else {
        return 
0;
    }
}
//****************** You can add new functions below **********************//
function SearchByStudentId($xKey){
    if (
$this->SetQuery("select * from AlumniBio where studentId= '$xKey'")){ 
        return 
1;
    }else {
        return 
0;
    }
}

function 
NextPage($pg=1){
        if (
$this->lastSql<>""){
            
$this->frRowNum=($pg-1)*$GLOBALS["rowPerPage"];
            
$sql $this->lastSql." limit $this->frRowNum,".$GLOBALS["rowPerPage"];
            
$this->SetQueryPage($sql);
        }
}

function 
NumPage() {
        return 
ceil($this->numRows/$GLOBALS["rowPerPage"]);
}

//--End class AlumniBio--

?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0172 ]--