!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis2222/eassess/   drwxr-xr-x
Free 52.34 GB of 127.8 GB (40.95%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     clsForceAssess.php (8.93 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
RSAcad();
//$oAc->GetRecord();

$oStd->SearchByStCodeAndStudying($studentCode);
//return $oStd->lastSql;
$oStd->GetRecord();

//$oPg->RSProgramByName($oStd->programName);
//$oPg->GetRecord();

$showFlag = 0;
$noAssFlag = 1; //ไม่มีแบบประเมินค้าง

	$oReg->RSClassIdByStdId($oStd->studentId);
	while($oReg->GetRecord()) {
				$doAssFlag = 1;
						
				$oClass->SearchByKey($oReg->classId);
				$oClass->GetRecord();
						// case 0	& case 1
					$flag0_mustDo = 0;
					$flag1_mustDo = 0;						
					$oCIS->SearchByClassIdGroupClassIdOfficerId($oReg->classId);
						while($oCIS->GetRecord()) {
							$oDA->RSByFlagAndBetweenSCDate(0, $nowDate);
							while($oDA->GetRecord()) {
								if($oDA->acadYear==$oClass->acadYear && $oDA->semester==$oClass->semester ){
								$chAssHold = $oDo->CountCheckAssessment($oDA->defineid, $oStd->studentId,$oCIS->officerId,$oReg->classId,$oClass->section);
								if($chAssHold == 0) {
									$doAssFlag = 0;
									$noAssFlag = 0;
									$flag0_mustDo =$flag0_mustDo+1;
									}
								}
							}	// end while $oDA
							
							$oDA->RSDefineidByFlagBetweenSCDateClId(1,$nowDate,$oReg->classId);
							while($oDA->GetRecord()) {
								$oDA2->SearchByDefineid($oDA->defineid);
								$oDA2->GetRecord();
								if($oDA2->acadYear==$oClass->acadYear && $oDA2->semester==$oClass->semester ){
									$chAssHold = $oDo->CountCheckAssessment($oDA2->defineid, $oStd->studentId,$oCIS->officerId,$oReg->classId,$oClass->section);
									if($chAssHold == 0) {
										$doAssFlag = 0;
										$noAssFlag = 0;
										$flag1_mustDo =$flag1_mustDo+1;
									}
								}
							}	// end while $oDA
						}	// end while $oCIS

						// case 5
						$flag5_mustDo = 0;
						$oDA->RSByFlagAndBetweenSCDate(5, $nowDate);
						while($oDA->GetRecord()) {
							if($oDA->acadYear==$oClass->acadYear && $oDA->semester==$oClass->semester ){
							$chAssHold = $oDo->CountCheckAssessment3($oDA->defineid, $oStd->studentId,$oReg->classId,$oClass->section);
							if($chAssHold == 0) {
								$doAssFlag = 0;
								$noAssFlag = 0;
								$flag5_mustDo =$flag5_mustDo+1;
							}
							}
						}	// end while $oDA
						
				// case  6
				$flag6_all = 0;
				$flag6_mustDo =0;
				$oDA->RSDefineidByFlagBetweenSCDateClId(6,$nowDate,$oReg->classId);
				while($oDA->GetRecord()){
						$flag6_all =$flag6_all+1;
						$oDA2->SearchByDefineid($oDA->defineid);
						$oDA2->GetRecord();
						$oAF->SearchByKey($oDA2->assid);
						$oAF->GetRecord();
						if($oDA2->acadYear==$oClass->acadYear && $oDA2->semester==$oClass->semester ){
						$chAssHold = $oDo->CountCheckAssessment3($oDA2->defineid, $oStd->studentId,$oReg->classId,$oClass->section);
						 if($chAssHold ==0){
								$doAssFlag = 0;
								$noAssFlag = 0;
								$flag6_mustDo =$flag6_mustDo+1;
							}
							}
					}
	
				//case 7							
				$flag7_Do = 0;
				$flag7_mustDo = 0;
				$oDA->RSAssidByFlagBetweenSCDateClId(7,$nowDate,$oReg->classId);
				while($oDA->GetRecord()){
					$oAF->SearchByKey($oDA->assid);
					$oAF->GetRecord();
		 			$oHC->RSAssessFlag7ByAssid($oDA->assid,$nowDate,$oReg->classId);
					$i =1;
					while($oHC->GetRecord()){
						$oDA2->SearchByDefineid($oHC->defineid);
						$oDA2->GetRecord();
						$oTTA->SearchTimeTableByttId($oHC->ttId);
						$oTTA->GetRecord();
						$oOFA->SearchByKey($oTTA->ttOfId);
						$oOFA->GetRecord();
						if($oDA2->acadYear==$oClass->acadYear && $oDA2->semester==$oClass->semester ){
						$chAssHold = $oDo->CountCheckAssessment2($oDA2->defineid,$oStd->studentId,$oTTA->ttOfId,$oTTA->ttId,$oClass->section);
						$show=1;
						$today=getWeekDay($now2);
						$oWDA->searchWeekByScDate($now);
						$oWDA->GetRecord();	
								
						if($chAssHold != 0){
							 $show=0;
					//		 $flag7_Do = $flag7_Do+1;
						}elseif($oDA2->isPreAssess==0 && $acadYear <= $oDA2->acadYear){
							$curTime = date("H:i:s");
							$orPr->SearchBetweenTime($curTime);
							$orPr->GetRecord();
							if(($oWDA->wdAcYWeekNo < $oTTA->ttWdAcYWeekNo ) 
bool(false)

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0056 ]--