!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/eoffice/admin/   drwxr-xr-x
Free 50.91 GB of 127.8 GB (39.84%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     getinfo.js (32.23 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
	var xmlHttp

	function ShowInfo(DrsIDshow){ 
		xmlHttp=GetXmlHttpObject()
		if (xmlHttp==null){
			alert ("Browser does not support HTTP Request")
			return false ;
		} 
		st_val=document.getElementById("st_val").value;
		var url="getinfo.php";
		url=url+"?DrsIDshow="+DrsIDshow+"&st_val="+st_val+"&fn=add";
		xmlHttp.onreadystatechange=stateChanged
		xmlHttp.open("GET",url,true)
		xmlHttp.send(null)
	
	}
	
	function ShowInfo2(DtPsID,DrsIDshow){ 
		var agree=confirm("คุณต้องการลบรายชื่อที่จะส่งด่วนแน่นอนใช่หรือไม่ ?");
		if (agree){
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			var url="getinfo.php";
			url=url+"?DrsIDshow="+DrsIDshow+"&DtPsID="+DtPsID+"&del=1&fn=delete";
			xmlHttp.onreadystatechange=stateChanged1
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
		}else{
			return false ;
		}
	}
	
	function ShowInfoReceive(DLCID,MaxDocGroup,DlcPS2,InputThai){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			selectdocdatevalue=document.getElementById("selectdocdatevalue").value;
			searchdocdate=document.ff.searchdocdate.value;			
			s=document.getElementById("s").value;
			folderstaff=document.getElementById("folderstaff").value;
			forfolderstaff=document.getElementById("forfolderstaff").value;
			searchName=document.getElementById("searchName").value;
			searchNo=document.getElementById("searchNo").value;
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			searchTypeNoF=document.getElementById("searchTypeNoF").value;
			searchTypeNoT=document.getElementById("searchTypeNoT").value;
			pgajax=document.getElementById("pgajax").value;
			
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectDoc.php";
			url=url+"?s="+s+"&folderstaff="+folderstaff+"&forfolderstaff="+forfolderstaff+"&DLCID="+DLCID+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchName="+searchName+"&searchNo="+searchNo+"&monthe="+monthe+"&searchYear="+searchYear+"&searchTypeNoF="+searchTypeNoF+"&searchTypeNoT="+searchTypeNoT+"&pgajax="+pgajax+"&InputThai="+InputThai+"&selectdocdatevalue="+selectdocdatevalue+"&searchdocdate="+searchdocdate;
		
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function ShowInfoPreReceive(DLCID,MaxDocGroup,DlcPS2){ 
	
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			selectpredocdatevalue=document.getElementById("selectpredocdatevalue").value;
			searchpredocdate=document.gg.searchpredocdate.value;
			searchNamePre=document.getElementById("searchNamePre").value;
			searchNoPre=document.getElementById("searchNoPre").value;
			pgajax=document.getElementById("pgajax").value;
			searchDeptPre=document.getElementById("searchDeptPre").value;
			
			var url="showSelectDocPreReceive.php";
			url=url+"?DLCID="+DLCID+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchNamePre="+searchNamePre+"&searchNoPre="+searchNoPre+"&pgajax="+pgajax+"&searchpredocdate="+searchpredocdate+"&selectpredocdatevalue="+selectpredocdatevalue+"&searchDeptPre="+searchDeptPre;

			xmlHttp.onreadystatechange=stateChanged3
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function ShowInfoPreSend(DLCID,MaxDocGroup,DlcPS2,InputThai){ 
	
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			folderstaff2=document.getElementById("folderstaff2").value;
			forfolderstaff2=document.getElementById("forfolderstaff2").value;
			selectpreDtID=document.getElementById("selectpreDtID").value;
			selectpredocdatevalue=document.getElementById("selectpredocdatevalue").value;
			searchpredocdate=document.ff.searchpredocdate.value;			
			searchNamePre=document.getElementById("searchNamePre").value;
			searchNoPre=document.getElementById("searchNoPre").value;
			pgajax=document.getElementById("pgajax").value;
			DtID=document.getElementById("DtID").value;
			GroupID=document.getElementById("GroupID").value;
			searchNamePre=document.getElementById("searchNamePre").value;
			searchPreTypeNoT=document.getElementById("searchPreTypeNoT").value;
			searchPreTypeNoF=document.getElementById("searchPreTypeNoF").value;
			searchDeptPre=document.getElementById("searchDeptPre").value;
			var url="showSelectDocPreSend.php";
			url=url+"?DLCID="+DLCID+"&folderstaff2="+folderstaff2+"&forfolderstaff2="+forfolderstaff2+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchNamePre="+searchNamePre+"&searchNoPre="+searchNoPre+"&pgajax="+pgajax+"&DtID="+DtID+"&GroupID="+GroupID+"&InputThai="+InputThai+"&searchpredocdate="+searchpredocdate+"&selectpredocdatevalue="+selectpredocdatevalue+"&selectpreDtID="+selectpreDtID+"&searchPreTypeNoT="+searchPreTypeNoT+"&searchPreTypeNoF="+searchPreTypeNoF+"&searchDeptPre="+searchDeptPre;
			xmlHttp.onreadystatechange=stateChanged4
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function ShowInfoSendDoc(DLCID,MaxDocGroup,DlcPS2,InputThai){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			folderstaff=document.getElementById("folderstaff").value;
			forfolderstaff=document.getElementById("forfolderstaff").value;
			selectDtID=document.getElementById("selectDtID").value;
			selectdocdatevalue=document.getElementById("selectdocdatevalue").value;
			searchdocdate=document.ff.searchdocdate.value;			
			searchName=document.getElementById("searchName").value;
			searchNo=document.getElementById("searchNo").value;
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			pgajax=document.getElementById("pgajax").value;
			
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectSendDoc.php";
			url=url+"?DLCID="+DLCID+"&folderstaff="+folderstaff+"&forfolderstaff="+forfolderstaff+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchName="+searchName+"&searchNo="+searchNo+"&monthe="+monthe+"&searchYear="+searchYear+"&pgajax="+pgajax+"&InputThai="+InputThai+"&searchdocdate="+searchdocdate+"&selectdocdatevalue="+selectdocdatevalue+"&selectDtID="+selectDtID;
			
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function ShowInfoSign(DLCID,MaxDocGroup,DlcPS2,InputThai){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			folderstaff=document.getElementById("folderstaff").value;
			forfolderstaff=document.getElementById("forfolderstaff").value;
			selectdocdatevalue=document.getElementById("selectdocdatevalue").value;
			searchdocdate=document.ff.searchdocdate.value;			
			s=document.getElementById("s").value;
			searchName=document.getElementById("searchName").value;
			searchNo=document.getElementById("searchNo").value;
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			pgajax=document.getElementById("pgajax").value;
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			var url="showSelectSignDoc.php";
			url=url+"?s="+s+"&DLCID="+DLCID+"&folderstaff="+folderstaff+"&forfolderstaff="+forfolderstaff+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchName="+searchName+"&searchNo="+searchNo+"&monthe="+monthe+"&searchYear="+searchYear+"&pgajax="+pgajax+"&InputThai="+InputThai+"&searchdocdate="+searchdocdate+"&selectdocdatevalue="+selectdocdatevalue;

			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function ShowInfoRegis(DLCID,MaxDocGroup,DlcPS2,RsID,DtID){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			searchName=document.getElementById("searchName").value;
			searchNo=document.getElementById("searchNo").value;
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			//alert(searchYear);
			/*
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectRegisDoc.php";
			url=url+"?DLCID="+DLCID+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&RsID="+RsID+"&DtID="+DtID+"&searchName="+searchName+"&searchNo="+searchNo+"&monthe="+monthe+"&searchYear="+searchYear;
			alert(url);
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
			*/
	}
	function ShowInfoSendDocforSign(DLCID,MaxDocGroup,DlcPS2,InputThai){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			searchName=document.getElementById("searchName").value;
			searchNo=document.getElementById("searchNo").value;
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			pgajax=document.getElementById("pgajax").value;
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectSendDocforSign.php";
			url=url+"?DLCID="+DLCID+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchName="+searchName+"&searchNo="+searchNo+"&monthe="+monthe+"&searchYear="+searchYear+"&pgajax="+pgajax+"&InputThai="+InputThai;
			//alert(url);
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function ShowInfostatusSendDocforSign(DLCID,MaxDocGroup,DlcPS2,InputThai){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			searchName=document.getElementById("searchName").value;
			searchNo=document.getElementById("searchNo").value;
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			pgajax=document.getElementById("pgajax").value;
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectstatusSendDocforSign.php";
			url=url+"?DLCID="+DLCID+"&MaxDocGroup="+MaxDocGroup+"&DlcPS2="+DlcPS2+"&searchName="+searchName+"&searchNo="+searchNo+"&monthe="+monthe+"&searchYear="+searchYear+"&pgajax="+pgajax+"&InputThai="+InputThai;
			//alert(url);
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}  

	function ShowInfoDocNews(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectDocNews.php";
			url=url+"?monthe="+monthe+"&searchYear="+searchYear+"&showajax=1";
	
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}

	function ShowInfoAddDocNews(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			monthe=document.getElementById("monthe").value;
			searchYear=document.getElementById("searchYear").value;
			if (searchYear=="") {
			  alert('กรุณากรอกปี');
			  document.getElementById("searchYear").focus();
			  return false ;
		   	}
			
			var url="showSelectaddDocNews.php";
			url=url+"?monthe="+monthe+"&searchYear="+searchYear+"&showajax=1";
	
			xmlHttp.onreadystatechange=stateChanged2
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
    
	function showSelectDIb_AcceptDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_AcceptDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}    

	function showSelectDIb_RegisDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_RegisDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	} 

	function showSelectDIb_RegisEndDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_RegisEndDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	} 

	function showSelectDIb_RegisSignDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_RegisSignDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	} 
	function showSelectDIb_preSendDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_preSendDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	} 
	function showSelectDIb_SignDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_SignDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}

	function showSelectDIb_SignedDoc(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			dlcid=document.getElementById("dlcid").value;
			dlpid=document.getElementById("dlpid").value;
			deptId=document.getElementById("deptId").value;
			docGroup=document.getElementById("docGroup").value;
			DlpSign=document.getElementById("DlpSign").value;
			DIbHeader=document.getElementById("DIbHeader").value;
			DIbStaff=document.getElementById("DIbStaff").value;
			DocID=document.getElementById("DocID").value;
			selectfolderstaff=document.getElementById("selectfolderstaff").value;
			selectforfolderstaff=document.getElementById("selectforfolderstaff").value;


			var url="showSelectDIb_SignedDoc.php";
			url=url+"?dlcid="+dlcid+"&dlpid="+dlpid+"&deptId="+deptId+"&docGroup="+docGroup+"&DlpSign="+DlpSign+"&DIbHeader="+DIbHeader+"&DIbStaff="+DIbStaff+"&DocID="+DocID+"&showajax=1&caseadd=1&selectfolderstaff="+selectfolderstaff+"&selectforfolderstaff="+selectforfolderstaff;
			xmlHttp.onreadystatechange=stateChanged5
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function showSelectDocNoRegister(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			RsID=document.getElementById("RsID").value;
			DtID=document.getElementById("DtID").value;


			if(typeof document.ff.DocfCir=='undefined'){
				DocfCir="";
			}else{
				if(document.getElementById("DocfCir").checked){
					DocfCir=document.getElementById("DocfCir").value;
				}else{
					DocfCir="";
				}				
			}

			if(document.getElementById("useMainDocNo").checked){
				useMainDocNo=document.getElementById("useMainDocNo").value;
			}else{
				useMainDocNo="";
			}
			deptId=document.getElementById("deptId").value;
			DocNo=document.getElementById("DocNo").value;
			var url="showSelectDocNoRegister.php";
			url=url+"?RsID="+RsID+"&DtID="+DtID+"&DocfCir="+DocfCir+"&useMainDocNo="+useMainDocNo+"&deptId="+deptId+"&showajax=1&DocNo="+DocNo;
	
			xmlHttp.onreadystatechange=stateChanged6
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}
	function showSelectDocToRegister(InputThai){ 
		
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			DtID=document.getElementById("DtID").value;
			DocTo=document.getElementById("DocTo").value;
			RsID=document.getElementById("RsID").value;

			if(typeof document.ff.DocfCir=='undefined'){
				DocfCir="";
			}else{
				if(document.getElementById("DocfCir").checked){
					DocfCir=document.getElementById("DocfCir").value;
				}else{
					DocfCir="";
				}				
			}

			//document.ff.useMainDocNo.click();
			
			var url="showSelectDocToRegister.php";
			url=url+"?InputThai="+InputThai+"&DtID="+DtID+"&DocTo="+DocTo+"&RsID="+RsID+"&DocfCir="+DocfCir+"&showajax=1";

			xmlHttp.onreadystatechange=stateChanged7
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
				
	}
	function showSelectDocNoRegisterEdit(myDocNo,mydeptId,myDocTypeNo){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			DocNo=document.getElementById("DocNo").value;
			RsID=document.getElementById("RsID").value;
			DtID=document.getElementById("DtID").value;


			if(typeof document.ff.DocfCir=='undefined'){
				DocfCir="";
			}else{
				if(document.getElementById("DocfCir").checked){
					DocfCir=document.getElementById("DocfCir").value;
				}else{
					DocfCir="";
				}				
			}

			if(document.getElementById("useMainDocNo").checked){
				useMainDocNo=document.getElementById("useMainDocNo").value;
			}else{
				useMainDocNo="";
			}

			var url="showSelectDocNoRegisterEdit.php";
			url=url+"?DocNo="+DocNo+"&myDocNo="+myDocNo+"&RsID="+RsID+"&DtID="+DtID+"&mydeptId="+mydeptId+"&myDocTypeNo="+myDocTypeNo+"&DocfCir="+DocfCir+"&useMainDocNo="+useMainDocNo+"&showajax=1";

			xmlHttp.onreadystatechange=stateChanged6
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
	}

	function showSelectDocToRegisterEdit(InputThai){ 
		
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 

			myDocNo=document.getElementById("myDocNo").value;
			mydeptId=document.getElementById("mydeptId").value;
			myDocTypeNo=document.getElementById("myDocTypeNo").value;


			DtID=document.getElementById("DtID").value;
			DocTo=document.getElementById("DocTo").value;
			RsID=document.getElementById("RsID").value;

			if(typeof document.ff.DocfCir=='undefined'){
				DocfCir="";
			}else{
				if(document.getElementById("DocfCir").checked){
					DocfCir=document.getElementById("DocfCir").value;
				}else{
					DocfCir="";
				}				
			}

			
			var url="showSelectDocToRegisterEdit.php";
			url=url+"?InputThai="+InputThai+"&myDocNo="+myDocNo+"&mydeptId="+mydeptId+"&myDocTypeNo="+myDocTypeNo+"&DtID="+DtID+"&DocTo="+DocTo+"&RsID="+RsID+"&DocfCir="+DocfCir+"&showajax=1";
			
			xmlHttp.onreadystatechange=stateChanged8
			xmlHttp.open("GET",url,true)
			xmlHttp.send(null)
			
			
	}

	function ShowSelectDocClearDoc(selectpersonId,showpersonId){ 
		
		xmlHttp=GetXmlHttpObject()
		if (xmlHttp==null){
			alert ("Browser does not support HTTP Request")
			return false ;
		} 
		var url="showUploadDocClearDoc.php";
		url=url+"?selectpersonId="+selectpersonId+"&showajax=1&showpersonId="+showpersonId;
		xmlHttp.onreadystatechange=stateChanged10
		xmlHttp.open("GET",url,true)
		xmlHttp.send(null)
	
	}

	function GetInfoString(){
		var iCount =0;
	    var sData="";
		iCount=document.ff.elements.namedItem("sendToPs[]","").length;
	    if(iCount>0){
	        for(i=0;i<iCount;i++){    
	            if (document.ff.elements.namedItem("sendToPs[]")(i).checked){
					sData += "&sendToPs[]=" +  document.ff.elements.namedItem("sendToPs[]")(i).value;
				}
			}
	    }     
		return sData;
	}

	function showSelectDocNoRegisterfromCenter(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			DocNo2=document.getElementById("DocNo2").value;
			DocTypeNo2=document.getElementById("DocTypeNo2").value;
			RsID=document.getElementById("RsID").value;
			DtID=document.getElementById("DtID").value;


			if(typeof document.ff.DocfCir=='undefined'){
				DocfCir="";
			}else{
				if(document.getElementById("DocfCir").checked){
					DocfCir=document.getElementById("DocfCir").value;
				}else{
					DocfCir="";
				}				
			}

			if(document.getElementById("useMainDocNo").checked){
				useMainDocNo=document.getElementById("useMainDocNo").value;
			}else{
				useMainDocNo="";
			}
			deptId=document.getElementById("deptId").value;
			DocNo=document.getElementById("DocNo").value;

	
			if(document.getElementById("useDocRegisfromCenter").checked==true){  
				var url="showSelectDocTypeNoRegisterfromCenter.php";
				url=url+"?showajax=1&DocTypeNo2="+DocTypeNo2;
			
				xmlHttp.onreadystatechange=stateChanged11
				xmlHttp.open("GET",url,true)
				xmlHttp.send(null)

			}else if(document.getElementById("useDocRegisfromCenter").checked==false){
				var url="showSelectDocTypeNoRegisterfromCenter.php";
				url=url+"?showajax=1&DocTypeNo2="+DocTypeNo2+'&caseback=1';

				xmlHttp.onreadystatechange=stateChanged12
				xmlHttp.open("GET",url,true);
				xmlHttp.send(null);

			}		
	}

	function showSelectDocNoRegisterfromCenter2(){ 
			xmlHttp=GetXmlHttpObject()
			if (xmlHttp==null){
				alert ("Browser does not support HTTP Request")
				return false ;
			} 
			
			DocNo2=document.getElementById("DocNo2").value;
			DocTypeNo2=document.getElementById("DocTypeNo2").value;
			RsID=document.getElementById("RsID").value;
			DtID=document.getElementById("DtID").value;


			if(typeof document.ff.DocfCir=='undefined'){
				DocfCir="";
			}else{
				if(document.getElementById("DocfCir").checked){
					DocfCir=document.getElementById("DocfCir").value;
				}else{
					DocfCir="";
				}				
			}

			if(document.getElementById("useMainDocNo").checked){
				useMainDocNo=document.getElementById("useMainDocNo").value;
			}else{
				useMainDocNo="";
			}
			deptId=document.getElementById("deptId").value;
			DocNo=document.getElementById("DocNo").value;

			if(document.getElementById("useDocRegisfromCenter").checked==true){  


				var url2="showSelectDocNoRegisterfromCenter.php";
				url2=url2+"?showajax=1&DocNo2="+DocNo2+"&RsID="+RsID+"&DtID="+DtID+"&DocfCir="+DocfCir+"&useMainDocNo="+useMainDocNo+"&deptId="+deptId+"&showajax=1&DocNo="+DocNo;


				xmlHttp.onreadystatechange=stateChanged6
				xmlHttp.open("GET",url2,true)
				xmlHttp.send(null)

			}else if(document.getElementById("useDocRegisfromCenter").checked==false){

				var url2="showSelectDocNoRegister.php";
				url2=url2+"?RsID="+RsID+"&DtID="+DtID+"&DocfCir="+DocfCir+"&useMainDocNo="+useMainDocNo+"&deptId="+deptId+"&showajax=1&DocNo="+DocNo;


				xmlHttp.onreadystatechange=stateChanged6
				xmlHttp.open("GET",url2,true)
				xmlHttp.send(null)
	
			}		

	}

	function requestDocRegisfromCenter(DocID){ 
			FileName = "testcdg2.php?DocID="+DocID;
				var w=600;  
				var h=300;
				strOption = "menubar=yes,scrollbars=yes,left=400,top=100,width=" + w + ",height=" + h;
				window.open(FileName,"",strOption); 
			
	}

	function stateChanged(){ //
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("show_info").innerHTML=xmlHttp.responseText
		} 
	}	
	function stateChanged1(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("show_info").innerHTML=xmlHttp.responseText 
		} 
	}
	function stateChanged2(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showselect").innerHTML=xmlHttp.responseText 
		} 
	}
	function stateChanged3(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showselectPre").innerHTML=xmlHttp.responseText 
		} 
	}
	function stateChanged4(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showselectPreSend").innerHTML=xmlHttp.responseText 
		} 
	}
	function stateChanged5(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showDIb").innerHTML=xmlHttp.responseText 
		} 
	}
	function stateChanged6(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showRegister1").innerHTML=xmlHttp.responseText 
		} 
	}	
	function stateChanged7(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showRegister2").innerHTML=xmlHttp.responseText 
			showSelectDocNoRegister();
		} 
	}
	function stateChanged8(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showRegister2").innerHTML=xmlHttp.responseText 
			showSelectDocNoRegisterEdit(myDocNo,mydeptId,myDocTypeNo);
		} 
	}
	function stateChanged9(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("upmsg").innerHTML=xmlHttp.responseText 		} 
	}

	function stateChanged10(){ //
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("show_info").innerHTML=xmlHttp.responseText
			window.scrollTo(0,0); 
		} 
	}

	function stateChanged11(){ 
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showRegister3").innerHTML=xmlHttp.responseText 
			showSelectDocNoRegisterfromCenter2();
		} 
	}

	function stateChanged12(){ //
		if (xmlHttp.readyState==4 || xmlHttp.readyState=="complete"){ 
			document.getElementById("showRegister3").innerHTML=xmlHttp.responseText 
			showSelectDocNoRegisterfromCenter2();
		} 
	}	

	function GetXmlHttpObject(){
		var xmlHttp=null;
		try
			{
			// Firefox, Opera 8.0+, Safari
			xmlHttp=new XMLHttpRequest();
			}
		catch (e)
			{
				// Internet Explorer
			try
				{
				xmlHttp=new ActiveXObject("Msxml2.XMLHTTP");
				}
			catch (e)
				{
				xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");
				}
			}

		return xmlHttp;
	}

	function ShowPendingImage(){
		document.getElementById("show_info").innerHTML="<image src=bigrotation2.gif>Please Wait!</image>";
	}

	function HidePendingImage(){
		document.getElementById("show_info").innerHTML="";
	}
	function sendPost(frmId, value, url, opt) {
	/**************************/
//		test function with : IE6,IE7,IE8,FF 3.6,FF 4.0,Chrome 11.0.696.77,Opera11.11 
	/*************************/
	var html = "";
	if(url != "")
	{
		if (jQuery("#"+frmId).length > 0) {
			jQuery("#"+frmId).attr("action",url);
		}
		else {
			jQuery("body").append("<form action=\""+url+"\" id=\""+frmId+"\" method=\"post\" ></form>")
		}
	}
	if (value != "") {
		jQuery.each(value,function(index,value){
			if(jQuery("#"+frmId).find("input:hidden[name='"+index+"']").length == 0)
			{
				html += "<input type='hidden' name='"+index+"' value='"+value+"' id='"+index+"' />";
			}else{
				jQuery("input:hidden[name='"+index+"']").val(value);
			}
			temp = index;
		});
	}
	if (typeof(opt) == "object") {
		var def_attrs = {'width':window.screen.width,'height':window.screen.height,'resizeable':1,'scrollbars':1};
		var attrs = "";
		jQuery.each(def_attrs,function(key,val){
			var tmp_val = (opt[key])?opt[key]:val;
			attrs += key+"="+tmp_val+",";
			delete opt[key];
		});
		jQuery.each(opt,function(key,val){
			attrs +=  key+"="+val+",";
		});
		attrs = attrs.substring(0,(attrs.length -1));
		jQuery("#"+frmId).submit(function(){
			window.open('', frmId+"_popup", attrs);
			this.target = frmId+"_popup";
		});
	}
	else
	{
			jQuery("#"+frmId).unbind('submit').attr("target","_self");
	}
	jQuery("#"+frmId).append(html).trigger("submit");
}

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0065 ]--