!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis/js/   drwxr-xr-x
Free 52.32 GB of 127.8 GB (40.94%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pp_js.js (10.26 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
var jquery = jQuery.noConflict(true);
jquery.extend(jquery.expr[':'], {
    focus: function(element) { 
        return element == document.activeElement; 
    }
});
jquery(document).ready(function(){
    jquery(".preventDf").click(function(event){
        event.preventDefault();
    });
    jquery('#btnClear').click(function(){
        jquery('#btnClear').parents('form').find(':text:not(.calendarDateInput),:hidden').attr('value','').end().find('select:not(.calendarDateInput)').children().removeAttr('selected').end().attr('value','');
        jquery('div.error').remove();
//alert(jquery('#btnClear').parents('form').find(':text,:hidden').length);
    });
    jquery('.link').hover(function(){
        jquery(this).addClass('hover');
    },function(){
        jquery(this).removeClass('hover');
    });
    jquery('.preSubmit').click(function(){
        jquery('#s_id').attr('value',jquery(this).next(':hidden').attr('value'));
        jquery('#s_id').parents('form').trigger('submit');    
    });
    jquery('input[class^="required"],select.required').blur(function(event){
        jquery(this).next('span').children('.error').remove();
        if(jquery(this).attr('class') == 'required-thai'){
            if(!/^[ก-๙ 0-9 . ( ) / -]+$/.test(this.value)){
                jquery(this).next('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นภาษาไทยเท่านั้น</div>');
                return false;
            }else{
                jquery(this).next('span.error').children('.error').remove();
                return true;
            }    
        }else if(jquery(this).attr('class')=='required-eng'){
            if(!/^[a-z A-Z 0-9 . ( ) / -]+$/.test(this.value)){
                jquery(this).next('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นภาษาอังกฤษเท่านั้น</div>');
                return false;
            }else{
                jquery(this).next('span.error').children('.error').remove();
                return true;
            }            
        }else if(jquery(this).attr('class')=='required-float'){
            if(!/^[0-9 .]+$/.test(this.value)){
                jquery(this).next('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นตัวเลขเท่านั้น</div>');
                return false;
            }else{ 
                jquery(this).next('span.error').children('.error').remove();
                return true;
            }
        }else if(jquery(this).attr('class')=='required-int'){
            if(!/^[0-9]+$/.test(this.value)){
                jquery(this).next('span.error').append('<div class="error">กรุณาป้อนและควรป้อนเป็นตัวเลขเท่านั้น</div>');
                return false;
            }else{
                jquery(this).next('span.error').children('.error').remove();
                return true;
            }
        }else{
            if(this.value == ''){
                jquery(this).next('span.error').append('<div class="error">กรุณาป้อนข้อมูล</div>');
                return false;                
            }else{
                jquery(this).next('span.error').children('.error').remove();
                return true;
            }
        }
    });
/*    jquery('form.chkBeforeSubmit').submit(function(){
        jquery('input[class^="required"]').trigger('blur');
        var numError = jquery('div.error',this).length;
        if(numError)
            return false;
    });
*/
    jquery('table.table tbody tr').hover(function(){
        jquery(this).addClass('trHover');
    },function(){
        jquery(this).removeClass('trHover');
    });
    jquery('table.tablePrint').find('td.optCol').remove();
});
function clearAttr(attr){
    jquery.each(attr,function(index,value){
        jquery("#"+index).attr(value,null);
    });
}
function pre_submit(id){
    jquery('#s_id').attr('value',id);
    jquery('#s_id').parents('form').trigger('submit');
}
function preSubmitAdv(id,frm,action){
    var $s_id = jquery('#s_id');
    $s_id.attr('value',id);
    jquery(frm).children().find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value','');
//    jquery('#btnClear').parents('form').find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value','');
    jquery(frm).unbind();
    if(action == "" )
        jquery(frm).trigger("submit");
    else
        jquery(frm).attr('action',action).trigger('submit');
}
function preSubmitMHd(arr,frm,action){
//    jquery('#btnClear').parents('form').find(':text').attr('value','').end().find('select').children().removeAttr('selected').end().attr('value','');
//    jquery(frm).unbind();
    jquery("#"+frm).children().find(":text").val(null).end().find("select").children().attr("selected","");
    jquery.each(arr,function(key,value){
        if(jquery("#"+key).length == 0)
            jquery("#"+frm).append("<input type=\"hidden\" name=\""+key+"\" id=\""+key+"\" value=\""+value+"\"/>");
        else
            jquery("#"+key).attr("value",value);
        //alert(key+" have "+jquery("#"+key).length+" value = "+jquery("#"+key).val());
    });
    if(action == "")
        jquery("#"+frm).trigger("submit");
    else
        jquery("#"+frm).attr("action",action).trigger("submit");
}
function confirmDel(id,frm,action,fnc){
    if(confirm("คุณต้องการลบใช่หรือไม11่") == true)
        if(fnc == "")
            preSubmitAdv(id,frm,action);
        else 
            fnc(id,frm,action);
}
function vprint(){
    window.print();
}
function chkDisable(ele,obj){
    alert(jquery(obj).val());
    jquery(obj).attr("value",true);
    if(jquery(ele).attr("disabled")==true){
        jquery(ele).attr("disabled",false);
        jquery(obj).attr("value",false);
    }else{
        jquery(ele).attr("disabled",true);
        jquery(obj).attr("value",true);
    }
}
function popUp(url){
    strOption = "scrollbars=yes,left=0,top=0,width=500,height=500";
    window.open(url,"",strOption);
}
function clearFrm(frm,txtexcept,opt){
    var frmId = "#"+frm;
    jquery(frmId+" :input").each(function(index){
        if(txtexcept.indexOf(jquery(this).attr("id")) < 0){
            switch(this.type){
                case "password":
                case "text":
                case "select-one":
                case "textarea":
                case "hidden":
                    jquery(this).val("");
                    break;
                case "checkbox":
                case "radio":
                    this.checked = false;
            }
        }
    });
    if(opt != ""){
        jquery.each(opt,function(id,tag){
            jquery(tag+".#"+id).empty();
        });
    }
}
/*function sendPost(frmId,value,url){
    var html = "";
    jquery.each(value,function(index,value){
        if(jquery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0)
            html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
        else
            jquery("input:hidden[name='"+index+"']").val(value);
        temp = index;
    });
    if (url != '')
        jquery("#"+frmId).attr("action",url);
    jquery("#"+frmId).append(html).trigger("submit");
}*/
function sendPost(frmId, value, url, target) {
    var html = "";
    if(url != "")
    {
        if (jquery("#"+frmId).length > 0) {
            jquery("#"+frmId).attr("action",url);
        }
        else {
            jquery("body").append("<form action=\""+url+"\" id=\""+frmId+"\" method=\"post\" ></form>")
        }
    }
    if (target != "") {
        jquery("#"+frmId).attr("target",target);
    }
    if (value != "") {
        jquery.each(value,function(index,value){
            if(jquery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0)
            {
                html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
            }else{
                jquery("input:hidden[name='"+index+"']").val(value);
            }
            temp = index;
        });
    }
    jquery("#"+frmId).append(html).trigger("submit");
}


function setSuccessMsg(msg,flag){
//    var jflag = parseInt(flag);
    var html = "<div id='msgBox'";
    if(flag ==1)
        html += " class=\"success\">";
    else
        html += " class=\"fail\">";

    html += msg+"</div>";
    jquery(html).appendTo("body").delay(2000).fadeOut(1000);
}

function isDecimal(ele){//check valid กรอกได้เฉพาะจำนวนทศนิยมที่ไม่ติดลบ
    val=document.getElementById(ele).value;
    if(val!=""){
        if(!(parseFloat(val,10)==(val*1))){ 
            alert("กรอกได้เฉพาะตัวเลขและจุดทศนิยมเท่านั้น !");
            document.getElementById(ele).value="";
            return false;
        }else if((val.indexOf("-")!=-1)){ 
            alert("กรอกได้เฉพาะตัวเลขและจุดทศนิยมเท่านั้น !");
            document.getElementById(ele).value="";
            return false;
        }
    }    
}

function isNumberic(ele){//เฉพาะจำนวนนับ
    val=document.getElementById(ele).value;
    if(val!=""){
        if(!(parseFloat(val,10)==(val*1))){ 
            alert("กรอกได้เฉพาะตัวเลขเท่านั้น !");
            document.getElementById(ele).value="";
            return false;
        }else if((val.indexOf(".")!=-1) || (val.indexOf("-")!=-1)){ 
            alert("กรอกได้เฉพาะตัวเลขเท่านั้น !");
            document.getElementById(ele).value="";
            return false;
        }
    }    
}
    function calBirthDate(birthDate)
    {
        var nowDate = new Date();
        var bDate = birthDate.split("/");
        var resultDate = Array();
        var firstDateOnMonth = new Date( nowDate.getFullYear() , nowDate.getMonth() , 1 );
        var firstDateNextMonth = new Date( nowDate.getFullYear() , nowDate.getMonth()+1 , 1 );
        var timeVary = firstDateNextMonth.getTime() - firstDateOnMonth.getTime();
        var dayVary = timeVary / (1000*60*60*24) ;
        var nDate = Array();
            nDate[0] = nowDate.getDate();
            nDate[1] = nowDate.getMonth()+1;
            nDate[2] = nowDate.getFullYear();
        resultDate[2] = nDate[2] - bDate[2];
        resultDate[1] = nDate[1] - bDate[1];
        if(resultDate[1] < 0 && resultDate[2] > 0)
        {
            resultDate[1] += 12;
            resultDate[2] -= 1;
        }
        resultDate[0] = nDate[0] - bDate[0];
        if(resultDate[0] < 0 && resultDate[1] > 0 )
        {
            resultDate[0] += dayVary;
            resultDate[1] -= 1;
        }

 // var date = new Date();
/*        resultDate[0] = nDate[0] - parseInt(bDate[0]);
        if(resultDate[0] < 0 ){
            resultDate[0] += 30;
            nDate[1] -= 1;
        }
        resultDate[1] = nDate[1] - parseInt(bDate[1]);
        if(resultDate[1] < 1 && nDate[2] > 0){
//            resultDate[1] += 12;
//            nDate[2] -= 1;
        }else if(resultDate[1] < 1 && nDate[2] < 0)
            resultDate[1] += 12;
        resultDate[2] = nDate[2] - parseInt(bDate[2]);
*/
        return resultDate[2]+" ปี  "+resultDate[1]+" เดือน  "+resultDate[0]+" วัน";
    }
    function calNumDay(srcDate,destDate,target,optMsg)
    {
        var temp = (jquery(":hidden[name='"+srcDate+"']").val()).split("/");
        var sDate = new Date(temp[2]+"/"+temp[1]+"/"+temp[0]);
        var temp = (jquery(":hidden[name='"+destDate+"']").val()).split("/");
        var dDate = new Date(temp[2]+"/"+temp[1]+"/"+temp[0]);
        var time = dDate.getTime() - sDate.getTime();
        var numDay = time/(1000*60*60*24);
        jquery("#"+target).append(optMsg+" "+numDay);
    }

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0064 ]--