!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/   drwxr-xr-x
Free 52.3 GB of 127.8 GB (40.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     reportDataRQCourseTep3_2.php (18.08 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
set_time_limit
(0); 
include_once 
"../../class/clsDB.php";
include_once 
"../../class/clsConnection.php";
include_once 
"../global.php";
include_once 
"../link/function.php";
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../class/clsReg_Program.php";
include_once 
"../class/clsReg_Generation.php";
include_once 
"../class/clsRegistration.php";
include_once 
"../class/clsCourseAssess.php";
include_once 
"../class/clsHoldCourse.php";
include_once 
"../class/clsClassAssess.php";
include_once 
"../class/clsClassOpenForAssess.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsDoAssessment.php";
include_once 
"../class/clsResultRQ.php";
include_once 
"../class/clsSectionAll.php";
include_once 
"../class/clsDetailScore.php";

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oGen = new Generation($oCR);
$oReg = new Registration($oCA);
$oCourse = new CourseAssess($oCA);
$oClass = new ClassAssess($oCA);
$oClsOpen = new ClassOpenForAssess($oCA);
$oOFA = new OfficerAssess($oCA);
$oHC = new HoldCourse($oCA);
$oAF = new AssessForm($oCA);
$oDo = new DoAssessment($oCA);        

$oProg = new Program($oCR);

$oAF->RSAssessFormByAssid($assid);
$oAF->GetRecord();

$oSse = new SysSemesterDes($oCR);
$oSse->SearchByKey($semester);
$oSse->GetRecord();

$oDA = new DefineAssessment($oCA);
$oDA->SearchByDefineid($defineid);
$oDA->GetRecord();

//ค้นหาคำถามปลายเปิดในแบบประเมินนี้ sectionTQid = 1
$oSA = new SectionAll($oCA);
$CntSRQid $oSA->RSCountSectionRQid($assid);

$oRRQ = new ResultRQ($oCA);

$oDS = new DetailScore($oCA);
$full $oDS->getMaxScoreByAssid($assid);

?>
<title>รายงานค่าเฉลี่ยและส่วนเบี่ยงเบนมาตรฐาน ระดับความพึงพอใจต่อคุณภาพการสอนของอาจารย์จำแนกตามรายวิชา</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
<div id="tabmargin">
       <form name="pc" method="post" action="<?php echo $PHP_SELF;?>" enctype="multipart/form-data">
          <div align="center">
          </div><br>
          <table width="94%" align="center" cellpadding="1" cellspacing="1"  bgcolor="#0080C0">
            <tr bgcolor="#FFFFFF">
              <td width="99%">
              <table width="100%" align="center" border="0" cellpadding="0" cellspacing="1">
                  <tr> 
                    <td> <table width="779" border="0" align="center">
                        <tr> 
                          <td width="278" height="10"></td>
                        </tr>
                      </table>
                      
                <table width="98%" align="center"  cellpadding="1" cellspacing="1" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>">
                  <tr> 
                    <td height="34" align="center"><font size="2"><span class = "fontMark5">รายงานค่าเฉลี่ยและส่วนเบี่ยงเบนมาตรฐาน 
                      ระดับความพึงพอใจต่อคุณภาพการสอนของอาจารย์จำแนกตามรายวิชา</span></font></td>
                  </tr>
                </table>
                      <table width="98%" border="0" align="center">
                        <tr>
                          
                    <td height="25"><hr></td>
                        </tr>
                      </table>
                      <table width="98%" border="0" align="center">
                        
                  <tr> 
                    <td height="27" align="right"><font size="2"><span class = "fontMark5">
                     <a href="reportDataRQCourseTep3_2_excel.php?defineid=<? echo $defineid ?>&assid=<? echo $assid ?>&classId=<? echo $classId ?>&courseId=<? echo $courseId ?>&officerId=<? echo $officerId?>&acadYear=<? echo  $acadYear ?>&semester=<? echo $semester ?>" target="_top"><img src="../picture/ico_excel.gif" border="0"><b> รูปแบบ  Excel</b></a></span></font></td>
                        </tr>
                      </table>
                      
                <table border="0">
                  <tr> 
                    <td><font size="2"><b><img src="../picture/bullet.gif"> ชื่อทางการแบบประเมิน</b></font></td>
                    <td width="732"><font size="2"><b>: </b></font><font size="2"> 
                      <? if($oAF->maintopic == ""){ echo "-"; }else{ echo $oAF->maintopic; } ?>
                      </font></td>
                  </tr>
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                    <td><font size="2"><b><img src="../picture/bullet.gif"> ชื่อทั่วไปแบบประเมิน 
                      </b></font></td>
                    <td><font size="2"><b>: </b><? echo $oAF->nameAss ?></font></td>
                  </tr>
                  <tr> 
                    <td width="171" height="22"><font size="2"><b><img src="../picture/bullet.gif"> 
                      ปีการศึกษา </b></font></td>
                    <td><font size="2"><b>: </b></font><? echo $acadYear ?> / 
                      <? echo $oSse->semesterName;?></td>
                  </tr>
    <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                    <td height="22"><font size="2"><b><img src="../picture/bullet.gif"> 
                      อาจารย์ผู้สอน</b></font></td>
                    <td><font size="2"><b>: </b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                      <?php if($officerId == ""){ ?>
                            <font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"><? echo "- ไม่พบรายชื่ออาจารย์ผู้สอน -"?></font> 
                      <? }else if($officerId 0){
                                
$oOFA->SearchByKey($officerId);
                                
$oOFA->GetRecord();
                                echo 
$oOFA->prefixName.$oOFA->officerName."&nbsp;&nbsp;".$oOFA->officerSurname
                            } 
?>
                      </font></td>
                  </tr>
                  <tr> 
                    <td height="22"><font size="2"><b><img src="../picture/bullet.gif"> 
                      ช่วงเวลาประเมิน</b></font></td>
                    <td><font size="2"><b>: </b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><? echo abbreDate(splitDateDb2($oDA->startDate,'/')); ?> 
                      - <? echo abbreDate(splitDateDb2($oDA->endDate,'/'));  ?></font></td>
                  </tr>
                </table>
                <br>
    <? if($CntSRQid 0){ ?>
                <table width="98%" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#666666">
                  <tr> 
                    <td width="50" rowspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>รหัสวิชา</b></font></td>
                    <td width="170" rowspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>รายวิชา</b></font></td>
                    <td width="150" rowspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>หลักสูตร</b></font></td>
                    <td width="32" rowspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>ชั้นปีที่</b></font></td>
                    <td width="27" rowspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>รุ่นที่</b></font></td>
                    <? 
                            $oSA1
= new SectionAll($oCA);
                            
$i 0;
                            
$indexSection_head 1;
                            
$oSA1->RSByKeyAss($assid);
                            while (
$oSA1->GetRecord()){
                                
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/
                                
if($oSA1->sectionRQid != '0'){    
                    
?>
                    <td height="23" colspan="2" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>ส่วนที่ 
                      <? echo $indexSection_head?> </b></font></td>
                    <?
                                    $i
++;
                                } 
// end if oSA
                                
$indexSection_head++;
                            } 
//end while oSA 
                    
?>
                    <td colspan="2" height="23" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><b>ภาพรวม</b></td>
                  </tr>
                  <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_7"];?>"> 
                    <? for($j=1;$j<=$i;$j++){ ?>
                    <td width="3%" height="23" align="center"><b>ค่าเฉลี่ย</b></td>
                    <td width="3%" height="23" align="center"><b>S.D.</b> </td>
                    <? ?>
                    <td width="3%" height="23" align="center"><b>ค่าเฉลี่ย</b></td>
                    <td width="3%" height="23" align="center"><b>S.D.</b> </td>
                  </tr>
                  <? 
            $x
=0;
            
$flag_classId=0;
            
// -----------------------------------------------เริ่มต้นหารายวิชาของอาจารย์ผู้สอน------------------------------------------------------//
            
$oClass->SearchJoinByAcadSemSectionGroupClassId($acadYear,$semester,1);
            while(
$oClass->GetRecord()){ 
                
$numSecAss 0;
                
$indexValue 0;
                for(
$sec=0$sec<=$oClass->sectionClass-1$sec++){
                    
$classIdSec $oClass->classId+$sec;
                    
$oHC->JoinClassIdByDefineIdOfficerIdClassId($defineid,$officerId,$classIdSec);
                    if(
$oHC->GetRecord()){
                            
//echo "<br> classSec - > ".$classIdSec;
                        
$indexValue=1;
                        
$oSA = new SectionAll($oCA);
                        
$oSA->RSByKeyAss($assid);
                        while (
$oSA->GetRecord()){
                                
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/
                            
if($oSA->sectionRQid != '0'){
/*   ต้องตั้ง classId = % เพื่อหาทุกกลุ่ม
$oRRQ->SearchResultIXbarSDByAcadSemDefineidOfficerIdClassIdSectionRQidCo($full,$acadYear,$semester,$defineid,$oOFA->officerId,$classId,$oSA->sectionRQid,$courseId);
$oRRQ->GetRecord();
        $xbar = $oRRQ->xbar;
        $sd = $oRRQ->sd;
        $xbarSum += $xbar;
        $sdSum += $sd;
*/
$oRRQ->SearchResultIXbarSDByAcadSemDefineidOfficerIdClassIdSectionRQidCo($full,$acadYear,$semester,$defineid,$officerId,$classIdSec,$oSA->sectionRQid,$oClass->courseId);
                                if(
$oRRQ->GetRecord()){
                                            
//echo "<br> xbar = ".$oRRQ->xbar."&nbsp;&nbsp; sd = ".$oRRQ->sd;    
                                            // บวกค่า x และ sd ตัวที่ i ในเกรณีที่รายวิชาที่สอนสอนมากกว่า 1 กลุ่ม
                                    //echo $oRRQ->xbar.'<br>';
                                    
if($oClass->sectionClass 1){   
                                        
$sumRealX[$indexValue] += $oRRQ->xbar;
                                        
$sumRealSD[$indexValue] += $oRRQ->sd;
                                        if((
$oRRQ->xbar 0) && ($indexValue == 1)){ // ถ้ากลุ่มใดมีการประเมินจะให้ค่าเป็น 1 
                                            
$numSecAss++;
                                        }
                                                
//echo " <br> ---------->    x sum[$indexValue]  = ";printf("%.2f",$sumRealX[$indexValue]); 
                                                //echo "                                     **    sd sum[$indexValue]   = ";  printf("%.2f",$sumRealSD[$indexValue]);
                                    
}else if($oClass->sectionClass == 1){  // บวกค่า x และ sd ตัวที่ i ในเกรณีที่รายวิชาที่สอนสอน 1 กลุ่ม
                                        
$sumRealX[$indexValue] = $oRRQ->xbar;
                                        
$sumRealSD[$indexValue] = $oRRQ->sd;
                                    }
                                } 
//end if oRRQ
                                
$indexValue++;
                            } 
// end if oSA
                            
$indexSection++;
                        } 
//end while oSA 
                    
// end if oHC
                
//end for sec
                //echo " <br> oClass_In->sectionClass = ".$oClass->sectionClass;

                //echo "<br> indexVal = ".$indexValue;
                
if($indexValue 0){
                    
$oCourse = new CourseAssess($oCA);
                    
$oCourse->SearchByKey($oClass->courseId);
                    
$oCourse->GetRecord();
                 
?>
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>"> 
                    <td align="center"><font size="2"><?php echo $oCourse->courseCode;?></font></td>
                    <td><? echo $oCourse->courseName ?></td>
                    <td> 
                      <? if(($oClass->programId == 0) || ($oClass->programId == "")){
                            
$z 0;
                            
$oClsOpen->SearchByClassId($oClass->classId);
                            while(
$oClsOpen->GetRecord()){
                                
$oProg->SearchByKey($oClsOpen->programId);  
                                
$oProg->GetRecord();
                                if(
$oProg->programAbbr != ""){
                                    
$arrCls[$z] = $oProg->programName;
                                }else{
                                    
$arrCls[$z] = "<img src = \"../picture/warn.png\" border = \"0\">";
                                }
                                
$z++;
                            } 
// end while oClsOpen
                            
for($a=0;$a<=$z;$a++){
                                echo 
$arrCls[$a];
                                if(
$a $z-1) echo ",<br>";
                            }
                        }else{
                            
$oProg->SearchByKey($oClass->programId);  
                            if(
$oProg->GetRecord()){
                                if(
$oProg->programAbbr != ""){
                                    echo 
$oProg->programName;
                                }else{
                                    echo 
"<img src = \"../picture/warn.png\" border = \"0\">";
                                }
                            }
                            
//echo $oClassA->programId;
                        
}
                    
?>
                        </td>
                        <td align="center"><? echo $oClass->studentYear ?></td>
                        <td align="center"> 
                     <?  if(($oClass->programId == 0) || ($oClass->programId == "")){
                                
$z 0
                                
$oClsOpen->SearchByClassId($oClass->classId);
                                while(
$oClsOpen->GetRecord()){
                                    
$oGen->SearchByProgramIdAcadSem($oClsOpen->programId,$acadYear,$semester);
                                    if(
$oGen->GetRecord()){
                                        
$arrGen[$z] = $oGen->genNo;
                                    }else{
                                        
$arrGen[$z] = "-";
                                    }
                                    
$z++;
                                }
    
                                for(
$a=0;$a<=$z;$a++){
                                    echo 
$arrGen[$a];
                                    if(
$a $z-1) echo ",<br>";
                                }
                            }else{
                                
$oGen->SearchByProgramIdAcadSem($oClass->programId,$acadYear,$semester);
                                if(
$oGen->GetRecord()){
                                    echo 
$oGen->genNo;
                                }else{
                                    echo 
"-";
                                }
                            }
                    
?>
                        </td> <?
                         
for($j=1;$j<=$i;$j++){ 

                            
// นำค่าผลลัพธ์ที่ได้จากการบวกด้านบน  มาหารจำนวนกลุ่มที่เรียน เพื่อได้ค่าเฉลี่ยของผลลัพธ์แต่ละส่วนของการประเมิน
                            
if($oClass->sectionClass == 1){
                                
$sumRealXForSection $sumRealX[$j];
                                
$sumRealSDForSection $sumRealSD[$j];
                            }else if(
$oClass->sectionClass 1){
                                
$sumRealXForSection $sumRealX[$j] / $numSecAss;
                                
$sumRealSDForSection $sumRealSD[$j] / $numSecAss;
                            }
                    
?>
                            <td align="center"><? echo substr($sumRealXForSection,0,4);//printf("%.2f",$sumRealXForSection); ?></td>
                            <td align="center"><? printf("%.2f",$sumRealSDForSection); ?></td>
                            <?    // หาผลรวมของผลลัพธ์แต่ละส่วน
                            
$SumSectionX += $sumRealXForSection;
                            
$SumSectionSD += $sumRealSDForSection;
                            
// set ค่าเป็น 0  เพื่อรับค่าใหม่ในรายวิชาถัดไป
                            
$sumRealX[$j] = 0;
                            
$sumRealSD[$j] = 0;
                         }  
// end for j
                        //echo "<br> SumSectionX = ".$SumSectionX;
                        //echo "<br> SumSectionSD = ".$SumSectionSD;
                        // นำผลลัพธ์ที่ได้จากการรวมค่าของแต่ละส่วนมาหารกับจำนวนรายวิชาที่ประเมิน (i) เพื่อได้เป็นค่าเฉลี่ยของผลรวมของส่วน
                        
$SumAvgSectionX =$SumSectionX $i;
                        
$SumAvgSectionSD $SumSectionSD $i;
                    
?>
                        <td align="center" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>"><? echo substr($SumAvgSectionX,0,4);//printf("%.2f",$SumAvgSectionX); ?></td>
                        <td align="center" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>"><? printf("%.2f",$SumAvgSectionSD); ?></td>
                      </tr>
         <?        // end if indexValue > 0
 
                // หาผลรวมของค่าเฉลี่ยของผลรวมของส่วน
                    
$totalSumX += $SumAvgSectionX;
                    
$totalSumSD += $SumAvgSectionSD;
        
                    if(
$SumAvgSectionX 0){
                        
$x++;  // เฉพาะกรณีที่มีการประเมินเกิดขึ้น คือผลรวมมีค่ามากกว่า 0
                    
}

                
// set ค่าเป็น 0  เพื่อรับค่าใหม่ในรายวิชาถัดไป
                
$SumSectionX 0;
                
$SumSectionSD 0;
                
$SumAvgSectionX 0;
                
$SumAvgSectionSD 0;
                
$flag_classId 1;
     } 
// end while class

        
if($flag_classId == 0){  ?>
                  <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_5"];?>">
                    <td colspan="<? echo ($i*2)+7 ?>" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** ไม่ปรากฎรายวิชาที่สอนในปีการศึกษา   <? echo $acadYear."/".$oSse->semesterName ?> **</font></td>
                  </tr>
    <? }else if($flag_classId 0){ 
                    
// หาค่าเฉลี่ยของผลรวม
                    
$totalXAvg$totalSumX $x ;
                    
$totalSDAvg $totalSumSD $x;
            
?>
                  <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_14"];?>"> 
                    <td colspan="<? echo ($i*2)+5 ?>" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">ค่าเเฉลี่ยความพึงพอใจของนักศึกษาต่อคุณภาพการสอนของอาจารย์เป็นรายบุคคล</font></td>
                    <td align="center"><? echo substr($totalXAvg,0,4);//printf("%.2f",$totalXAvg); ?></td>
                    <td align="center"><? printf("%.2f",$totalSDAvg); ?></td>
                  </tr>
    <? }  // end else if x > 0?>
                </table>
                <br>
                <table width="98%" border="0" align="center">
                  <tr> 
                    <td width="85"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"><b>หมายเหตุ 
                      :</b></font></td>
                    <td width="822"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"> 
                      ค่าเฉลี่ยความพึงพอใจของนักศึกษาต่อคุณภาพการสอนของอาจารย์เป็นรายบุคคล 
                      </font></td>
                  </tr>
                  <tr>
                    <td height="22">&nbsp;</td>
                    <td><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"> = ผลรวมของค่าเฉลี่ยความพึงพอใจของนักศึกษาต่อคุณภาพการสอนของอาจารย์เป็นรายบุคคลในทุกรายวิชา / จำนวนรายวิชา</font></td>
                  </tr>
                  <tr> 
                    <td height="22">&nbsp;</td>
                    <td><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"> (เป็นรายงานเฉพาะคำถามปลายปิด : ส่วนของคำถามชนิดให้เลือกตอบอย่างใดอย่างหนึ่ง)</font></td>
                  </tr>
                </table>
    <? }else{ ?>
    <table width="100%">
        <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>">     
          <td align="center"> <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** ไม่พบข้อมูลเนื่องจากแบบประเมินที่สร้างไม่มีส่วนของคำถามปลายปิด **</font></td>
         </tr>
    </table>
    <? }  // end if CntSRQid ?>
                <br>
                    </td>
                  </tr>
                </table></td>
            </tr>
          </table>
          </form><br>
</div>
        </body>
    <? set_time_limit(30); ?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0092 ]--