!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/fileupdate/eassess/admin/   drwxr-xr-x
Free 50.75 GB of 127.8 GB (39.71%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     2552-11-09-1.0.01-reportDataRQHStd.php (18.24 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
include_once "../../class/clsDB.php";
include_once 
"../../class/clsConnection.php";
include_once 
"../global.php";
//showHeader();
include_once "../class/clsReg_Program.php";
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../link/function.php";
include_once 
"../class/clsStudentAssess.php";
include_once 
"../class/clsHoldStudent.php";
include_once 
"../class/clsHoldProgram.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsDoAssessmentHStd.php";
include_once 
"../class/clsResultRQHStd.php";
include_once 
"../class/clsSectionAll.php";
include_once 
"../class/clsSectionRQ.php";
include_once 
"../class/clsHeaderQuestion.php";
include_once 
"../class/clsHeaderScore.php";
include_once 
"../class/clsDetailScore.php";
include_once 
"../class/clsRadioQuestion.php";
include_once 
"../class/clsSectionAll.php";

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oProg = new Program($oCR);

$oSse = new SysSemesterDes($oCR);
$oSse->SearchByKey($semester);
$oSse->GetRecord();

$oDA = new DefineAssessment($oCA);
$oDA->SearchByDefineid($defineid);
$oDA->GetRecord();
        
$numStdDoAss 0;
$oDoHStd = new DoAssessmentHStd($oCA);
$oDoHStd->SearchByDefineid($defineid);
while(
$oDoHStd->GetRecord()){
    
$numStdDoAss++;
}

$oAF = new AssessForm($oCA);
$oAF->RSAssessFormByAssid($assid);
$oAF->GetRecord();

$oHStd = new HoldStudent($oCA);
$oHPg = new HoldProgram($oCA);
$oHP1 = new HoldProgram($oCA);
$oHP2 = new HoldProgram($oCA);

//ค้นหาคำถามปลายเปิดในแบบประเมินนี้ sectionTQid = 1
$oSA = new SectionAll($oCA);
$CntSRQid $oSA->RSCountSectionRQid($assid);

$oRRQ = new ResultRQHStd($oCA);
?>
<title>รายงานผลประเมินข้อมูลดิบ (เฉพาะคำถามปลายปิด)</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
       <form name="pc" method="post" action="<?php echo $PHP_SELF;?>" enctype="multipart/form-data">
          <br>
          <table width="94%" align="center" cellpadding="1" cellspacing="1"  bgcolor="#0080C0">
            <tr bgcolor="#FFFFFF">
              <td>
              <table width="83%" align="center" border="0" cellpadding="0" cellspacing="1">
                  <tr> 
                    <td> <table width="100%" border="0" align="center">
                        <tr>
                          <td height="10"></td>
                        </tr>
                      </table>
                      <table width="100%" align="center"  cellpadding="1" cellspacing="1" bgcolor="<?php if($oDA->flag == 2){ echo "#FFDFDF"; }else if($oDA->flag == 3){ echo "#DAE6FC"; } ?>">
                        <tr> 
                          
                  <td height="22" align="center"><font size="2"><span class = "fontMark5">รายงานผลการประเมินข้อมูลดิบ</span></font></td>
                        </tr>
                        <tr> 
                          
                  <td height="22" align="center"><font size="2"><span class = "fontMark6">เฉพาะคำถามปลายปิด 
                    : ส่วนของคำถามชนิดให้เลือกตอบอย่างใดอย่างหนึ่ง</span></font></td>
                        </tr>
                      </table>
                      <table width="100%" border="0" align="center">
                        <tr>
                          <td><hr></td>
                        </tr>
                      </table>
                       <table width="100%" border="0" align="center">   
                  <tr> 
                    <td height="25" align="right"><font size="2"><span class = "fontMark5"><b> 
</b><img src="../picture/ico_excel.gif" border="0"><b> รูปแบบ Excel<a href="reportDataRQHStd_excel1.php?defineid=<? echo $defineid ?>&assid=<? echo $assid ?>&acadYear=<? echo  $acadYear ?>&semester=<? echo $semester ?>" target="_top"> [1] </a><a href="reportDataRQHStd_excel2.php?defineid=<? echo $defineid ?>&assid=<? echo $assid ?>&acadYear=<? echo  $acadYear ?>&semester=<? echo $semester ?>" target="_top"> [2] </a></b></span></font></td>
                    </tr>
              </table>  
              <table width="100%" border="0" align="center">
                <tr>
                  <td><font size="2"><b><img src="../picture/bullet.gif"> ชื่อทางการแบบประเมิน 
                    </b></font></td>
                  <td colspan="2"><font size="2"><b>: </b>
                    <? if($oAF->maintopic == ""){ echo "-"; }else{ echo $oAF->maintopic; } ?>
                  </font></td>
                </tr>
                <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                  <td><font size="2"><b><img src="../picture/bullet.gif"> ชื่อทั่วไปแบบประเมิน 
                    </b></font></td>
                  <td colspan="2"><font size="2"><b>: </b><? echo $oAF->nameAss ?></font></td>
                </tr>
                <tr> 
                  <td height="21"><font size="2"><b><img src="../picture/bullet.gif"> 
                    ปีการศึกษา</b></font></td>
                  <td colspan="2"><font size="2"><b>: </b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><?php echo $oSse->semesterName;?> 
                    / <?php echo $acadYear ?></font><font size="2">&nbsp;</font></td>
                </tr>
                  <?    if($oDA->flag == 2){   ?>
                <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                  <td width="191" height="22"><font size="2"><b><img src="../picture/bullet.gif"> 
                    ประเมินนักศึกษาชั้นปีที่</b></font></td>
                  <td colspan="2"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                    <b>: </b></font> 
                  <?php
                                $x
=1;
                                
$oHStd->SearchByDefineid($defineid);
                                
$numStdAll =0;
                                while(
$oHStd->GetRecord()){ 
                                    
$oStd = new StudentAssess($oCA);
                                    
$numStdAll += $oStd->CountStdByAcYSePgIdStdY($acadYear$semester'%'$oHStd->stdYearAss);
                                
/*
                                    $oStd = new StudentAssess($oCA);
                                    $Tm1 = $oStd->CountStdBystdYearAss($oHStd->stdYearAss);
                                    $numStdAll = $Tm2+$Tm1;
                                    $Tm2 = $numStdAll;
                                */
                                    
$stdYearAssTmp[$x] = $oHStd->stdYearAss;
                                    
$x++;
                                }
                                
$round 0;                        
                                for(
$i=1;$i<=4;$i++){                            
                                    if(
$stdYearAssTmp[$i] != ""){
                                        
$round ++;
                                    }
                                }        
            
                                for(
$i=1;$i<=4;$i++){        
                                    echo 
$stdYearAssTmp[$i];
                                    if(
$i<=$round-1){
                                        echo 
",";
                                    }
                                }

                            
?></font>                  </td></tr>
                  <? }else if($oDA->flag == 3){  ?>
                <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                  <td width="191" height="22" valign="baseline"><font size="2"><b><img src="../picture/bullet.gif"> 
                    ประเภทหลักสูตรที่ประเมิน</b></font></td>
                  <td colspan="2"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                    <b>: </b></font> <font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                    <?php
                                
//หาจำนวนนักศึกษาที่มีสิทธิ์ประเมิน-หลักสุตร-ชั้นปี
                                
$oHPg->SearchByDefineid($defineid);
                                
$numStdAll 0;
                                while(
$oHPg->GetRecord()){ 
                                    
$oStd = new StudentAssess($oCA);
                                    
$numStdAll += $oStd->CountStdByAcYSePgIdStdY($acadYear$semester$oHPg->programId$oHPg->stdYearAss);
                                
/*
                                    $oProg->SearchByKey($oHPg->programId);
                                    $oProg->GetRecord();
                                    //echo "<br> programId = ".$oHPg->programId."   stdYear = ".$oHPg->stdYearAss;
                                    $oStd = new StudentAssess($oCA);
                                    $Tm1 = $oStd->CountStdByProgramNameStdYearAss($oProg->programName,$oHPg->stdYearAss);
                                    //echo "   --> ".$Tm1;
                                    $numStdAll = $Tm2+$Tm1;
                                    $Tm2 = $numStdAll;
                                */
                                
}
                                
                                
//แสดงหลักสูตร-ชั้นปี ที่มีการกำหนดให้มีการประเมิน
                                
$x=1;
                                
$oHP1->SearchByDefineidGroupByProgramId($defineid);
                                while(
$oHP1->GetRecord()){ 
                                    
$oProg->SearchByKey($oHP1->programId);
                                    
$oProg->GetRecord();
                                    
$stdProgTmp[$x] = $oProg->programName;

                                    
$m=1;
                                    
$oHP2->SearchByProgramIdDefineid($oHP1->programId,$defineid);
                                    while(
$oHP2->GetRecord()){
                                        
$stdYearAssTmp[$x][$m] =  $oHP2->stdYearAss;
                                        
$m++;
                                    }
                                    
$indexStdYear[$x] = $m-1;    
                                    
$x++;
                                }  
// end while oHP1

                                
$round 0;                        
                                for(
$i=1;$i<=$x-1;$i++){                            
                                    if(
$stdProgTmp[$i] != ""){
                                        
$round ++;
                                    }
                                }        

                                for(
$i=1;$i<=$x-1;$i++){
                                    
$round_in 0;        
                                    echo 
$stdProgTmp[$i]." - ปี";
                                    for(
$j=1;$j<=$indexStdYear[$i];$j++){
                                        echo 
$stdYearAssTmp[$i][$j];
                                        if(
$stdYearAssTmp[$i][$j] != ""$round_in++;
                                        if(
$round_in $indexStdYear[$i]) echo ",";
                                    }
                                    if(
$i<=$round-1) echo "<br> &nbsp;";
                                }
                            
?>
                    </font> </font></td></tr>
                  <? ?>
                <tr> 
                  <td height="22"><font size="2"><b><img src="../picture/bullet.gif"> 
                    ช่วงเวลาในการประเมิน</b></font></td>
                  <td width="208"><font size="2"><b> :</b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                    <? echo abbreDate(splitDateDb2($oDA->startDate,'/')); ?> - 
                    <? echo abbreDate(splitDateDb2($oDA->endDate,'/'));  ?></font></td>
                  <td width="351"><font size="2"><b><img src="../picture/bullet.gif"> 
                    จำนวนนักศึกษาที่มีสิทธิ์ประเมินผล : </b></font><font size="2"><? echo $numStdAll ?></font></td>
                </tr>
                <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                  <td height="22" colspan="2"><font size="2"><b><img src="../picture/bullet.gif"> 
                    ร้อยละของนักศึกษาที่เข้าประเมิน : </b> 
                    <? $percentStdDo = ($numStdDoAss $numStdAll )*100;  printf ("%.2f",$percentStdDo);?>
                    </font></td>
                  <td><font size="2"><b><img src="../picture/bullet.gif"> จำนวนนักศึกษาที่เข้ามาประเมินผล 
                    : </b></font><font size="2"><? echo $numStdDoAss ?></font></td>
                </tr>
              </table>
               
       <?  if($CntSRQid  0){ 
    
                    
/*------------------------หาจำนวนของส่วนว่ามีกี่ส่วน  และจำนวนของข้อคำถามที่มีตัวเลือก----------------------------*/
                    
$numSection 0;
                    
$ocSA = new SectionAll($oCA);
                    
//$numSection = $oSA->RSCountSectionRQid($assid);
                      
$ocSA->RSByKeyAss($assid);
                    while(
$ocSA->GetRecord()){
                        if(
$ocSA->sectionRQid != '0'){
                                
$ocRQ = new RadioQuestion($oCA);
                                
$ocRQ->RSRadioQByKey($assid,$ocSA->sectionRQid,1);
                                while(
$ocRQ->GetRecord()){
                                    
$ocCntRQ = new RadioQuestion($oCA);
                                    
$cCntSubQ $ocCntRQ->RSCountSubRQid($assid,$ocRQ->RQid,'2');

                                    if(
$cCntSubQ == 0){
                                        
$mergeRQ[$numSection]++;
                                    } 
//end if CntSubQ

                                    
$oscRQ = new RadioQuestion($oCA);
                                    
$oscRQ->RSCheckLevel($assid,$ocRQ->RQid);
                                    while(
$oscRQ->GetRecord()){
                                        
$mergeRQ[$numSection]++;
                                    } 
//end while oscRQ
                                
// end while ocRQ
                            
$numSection++;
                        } 
// end if ocSA
                    
// end while ocSA
            
?>
              <br>
              <table width="100%" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#666666">
                  <tr>   
                    <td width="13%" rowspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>ลำดับที่ประเมิน</b></font></td>
                      <? 
                            $oSA1
= new SectionAll($oCA);
                            
$i 0;
                            
$indexSection_head 1;
                            
$oSA1->RSByKeyAss($assid);
                            while (
$oSA1->GetRecord()){
                                
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/
                                
if($oSA1->sectionRQid != '0'){    
                            
?>
                            <td width="87%" height="25%" colspan="<? echo $mergeRQ[$i?>" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>คะแนนรายข้อคำถาม  ส่วนที่ <? echo $indexSection_head?> </b></font></td>
                            <?
                                    $mergeAll 
+= $mergeRQ[$i];
                                    
$i++;
                                } 
// end if oSA
                                    
$indexSection_head++;
                            } 
//end while oSA 
                            
?>
                      </tr> 
                    <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_7"];?>"> 
                <? /*--------------------------------------- สร้างส่วนหัวของตาราง  ข้อคำถามของแบบประเมินที่มีตัวเลือก-------------------------------*/ 
                        
$oSA = new SectionAll($oCA);
                       
$oSA->RSByKeyAss($assid);
                        while(
$oSA->GetRecord()){
                            if(
$oSA->sectionRQid != '0'){    
                                
//สร้าง oSRQ แสดงหัวข้อของส่วนการประเมิน
                                
$index1=1;
                                
$oRQ = new RadioQuestion($oCA);
                                
$oRQ->RSRadioQByKey($assid,$oSA->sectionRQid,1);
                                while(
$oRQ->GetRecord()){
                                        
$oCntRQ = new RadioQuestion($oCA);
                                        
$CntSubQ $oCntRQ->RSCountSubRQid($assid,$oRQ->RQid,'2');
                                        if(
$CntSubQ == 0){
                     
?>
                                           <td width="3%" height="22" align="center"><font size="2"><? echo $index1?></font></td>            
                    <?
                                        
//end if CntSubQ
                                        
$index2=1;
                                        
$osRQ = new RadioQuestion($oCA);
                                        
$osRQ->RSCheckLevel($assid,$oRQ->RQid);
                                        while(
$osRQ->GetRecord()){
                    
?>
                                             <td width="3%" height="22" align="center"><font size="2"><? echo $index1.".".$index2?></font></td>
                    <?
                                            $index2
++;
                                        } 
//end while osRQ
                                        
$index1++; 
                                } 
// end while oRQ        
                            
}  //end while oSA    
                        
//end if sectionRQ
                
?>
                   </tr>
                <? 
                    $indexDoAss 
1;    
                    
$oDoHStd = new DoAssessmentHStd($oCA);
                    
$oDoHStd->SearchByDefineid($defineid);
                    while(
$oDoHStd->GetRecord()){
                
?>
                        <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>"> 
                            <td align="center"><font size="2"><? echo $indexDoAss?></font></td>
                <?
                        $orSA 
= new SectionAll($oCA);
                        
$orSA->RSByKeyAss($assid);
                        while(
$orSA->GetRecord()){
                            if(
$orSA->sectionRQid != '0'){    
                                
$oRRQ->SearchPointByDoHSidSectionRQid($oDoHStd->doHSid,$orSA->sectionRQid);
                                while(
$oRRQ->GetRecord()){
                                
?>
                                  <td align="center"><font size="2"><? echo $oRRQ->point?></font></td>
                                <?
                                
// end while oRRQ
                            
// end if orSA
                        
// end while orSA 
                    
?> </tr>
                    <?        $indexDoAss++;
                        } 
// end while oDoHStd

                        
if(($indexDoAss-1) == 0){ ?>
                          <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>">
                                <td colspan="<? echo $mergeAll+1 ?>" align="center">
                                    <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** ไม่พบข้อมูล **</font>
                                </td>
                        </tr>
                    <?    }  ?>
                    </table><br>
                    
                  <table width="100%" border="0" align="center">
                    <tr> 
                      <td width="70"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"><b>หมายเหตุ :</b></font></td>
                      <td width="674"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"><? if($numSection 1) {?> ข้อคำถามในแต่ละส่วน <? }else {
                                            echo 
"<u>ข้อคำถาม</u>";
                                        } 
?></font></td>
                    </tr>
                    <tr> 
                      <td height="24">&nbsp;</td>
                      <td><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>">
                        <?
                            
/*----------------------------------- สร้างหมายเหตุของข้อคำถาม -----------------------------------*/
                             
$indexSection 1;
                            
$numSubtract 0
                            
$oSA = new SectionAll($oCA);
                            
$oSA->RSByKeyAss($assid);
                            while(
$oSA->GetRecord()){
                                
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/
                                
if($oSA->sectionRQid != '0'){    
                                    
//สร้าง oSRQ แสดงหัวข้อของส่วนการประเมิน
                                    
$index1=1;
                                    
$oSRQ = new SectionRQ($oCA);
                                    
$oSRQ->RSSectionRQAll($assid,$oSA->sectionRQid);
                                    while(
$oSRQ->GetRecord()){
                                         if(
$numSection 1) {
                                            echo 
"<u> ส่วนที่ ".$indexSection."<br></u>";
                                        } 
                                        
$oRQ = new RadioQuestion($oCA);
                                        
$oRQ->RSRadioQByKey($assid,$oSA->sectionRQid,1);
                                        
//---------->แสดงคำถามชนิดปลายปิดข้อหลัก
                                        
while($oRQ->GetRecord()){
                                            echo 
$index1.". ".$oRQ->nameRQ;
                                            if(
$oRQ->subtract == -1) { ?> <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_7"]; ?>"> * </font><? $numSubtract++;}
                                            echo 
"<br>";
                                            
$index2=1;
                                            
$osRQ = new RadioQuestion($oCA);
                                            
$osRQ->RSCheckLevel($assid,$oRQ->RQid);
                                            while(
$osRQ->GetRecord()){
                                                echo 
"<img src = \"../picture/blank1.gif\">".$index1.".".$index2.". ".$osRQ->nameRQ
                                                if(
$osRQ->subtract == -1) { ?><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_7"]; ?>"> * </font> <? $numSubtract++; }
                                                echo 
"<br>"
                                                
$index2++;
                                            } 
//end while osRQ
                                            
$index1++; 
                                        } 
// end while oRQ        
                                    
//end while oSRQ
                                
}  //end while oSA
                                
$indexSection++;    
                            } 
//end if sectionRQ
                    
?></font>
                      </td>
                    </tr>
                    <tr>
                  <td width="70"><font size="2">&nbsp;</font></td>
                  <td width="674"><? if($numSubtract 0) { ?><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>">สัญลักษณ์</font> 
                    <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_7"]; ?>">* 
                    </font><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"> 
                    หมายถึง คำถามเชิงลบ โดยกรณีที่เป็นคำถามเชิงลบในข้อนั้นๆ คะแนนรายข้อคำถามจะแสดงข้อมูลที่กลับค่าให้แล้ว</font><? ?></td>
                    </tr>
                  </table>
    <? } else { ?>
                    <table width="100%">
                          <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>">     
                              <td align="center"> <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** ไม่พบข้อมูลเนื่องจากแบบประเมินที่สร้างไม่มีส่วนของคำถามปลายปิด **</font> 
                            </td>
                          </tr>
                    </table>
    <? ?>
                  </td>
                 </tr>
               </table><br>
                </td>
               </tr>
             </table>
          </form>
        
      </div>
</body>
<?php
//showFooter();
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0166 ]--