403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR/edit_car_request.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>

<?php 
include("dbconfig.php");
include( "function.php" );
$date = (date("Y")+543).date("-m-").date("d"); 
if ( !empty($del) ) 
{

mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
		$dquery="delete from tran where no = '$del' ";
		$dresult=mysql_query($dquery);
		if($dresult)
		{
		echo "<center><font size='3' face='Microsoft Sans Serif, MS Sans Serif, sans-serif'>ź㺢ÍöàÅ¢·Õè $del àÃÕºÃéÍÂáÅéÇ</font></center>" ;
		}
}

?>
<a href="index.php" target="_parent"><font size="2">¡ÅѺ˹éÒáá</a>
<TABLE cellSpacing=0 cellPadding=0 width="50%" align=center border=0>
  <TBODY>
    <TR> 
      <TD align=left>&nbsp;</TD>
      <TD class=footer align=right>&nbsp;</TD>
    </TR>
    <TR> 
      <TD colSpan=2> <TABLE cellSpacing=0 cellPadding=0 width="100%">
          <TBODY>
            <TR> 
              <TD align=left>&nbsp;</TD>
              <TD class=bodybold align=right>&nbsp;</TD>
            </TR>
            <TR> 
              <TD colSpan=2> <FORM id="Form1" name="Form" action="edit_car_request.php" method="post" >
                  <TABLE borderColor=#009966 cellSpacing=0 cellPadding=0 width="100%" 
            border=3>
                    <TBODY>
                      <TR> 
                        <TD> <TABLE id=tbGeneral 
                  style="WIDTH: 100%; BORDER-COLLAPSE: collapse" cellSpacing=0 
                  cellPadding=7 border=0>
                            <TBODY>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" 
                      colSpan=2><SPAN id=lblMsg></SPAN></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">ª×èͼÙé¢Íö </TD>
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
					  
					  <select name=id id="select3">
                            <option value=""> àÅ×Í¡ª×èÍ- Ê¡ØÅ </option>
                            <? 
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
   					 $plquery="select  user_id,no from tran where approv = '0' and car_id = '0' group by user_id ";
	   //				 $plquery="select  user_id,date from tran where date >= '$date' and approv = '0' and car_id = '0'";
					
						$plresult=mysql_query($plquery);
						while ($plobject = mysql_fetch_object($plresult))
		  				{		
					
						$users_id = $plobject ->user_id ;
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; "); 
										$nquery="select  id,name  from  user where id = '$users_id' ";
										$nresult=mysql_query($nquery);
										while ($nobject = mysql_fetch_object($nresult))
										{
										echo "<OPTION VALUE =".$nobject ->id.">" .$nobject ->name."</Option>" ;
										}
						
						}
						?>
                          </select></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">&nbsp;</TD>
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">&nbsp; 
                                </TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" 
                      colSpan=2><INPUT id="Submit" type="submit" value="¤é¹ËÒ㺢Íö" name="Submit"></TD>
                              </TR>
                            </TBODY>
                          </TABLE></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  </FORM></TD>
            </TR>
            <TR> 
              <TD class=body colSpan=2>&nbsp; </TD>
            </TR>
            <TR> 
              <TD colSpan=2>&nbsp; </TD>
            </TR>
          </TBODY>
        </TABLE></TD>
    </TR>
  </TBODY>
</TABLE>
<?
//--------------------------------------------------------

$date_start = date("d").date("/m/").(date("Y")+543); 
$date_end = date("d").date("/m/").(date("Y")+543); 
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>áÊ´§ãº¢Íö·ÕèÊÒÁÒöá¡éä¢ä´é</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<SCRIPT language=Javascript>
var text  = "Sattahip   Car  Reserv  system :: : ÂÔ¹´Õµé͹ÃѺà¢éÒÊÙèÃкº  : ::"
var speed = 120
var x = 0
function U() {
	var a = text.substring(0,x)
	var b = text.substring(x,x+1).toUpperCase()
	var c = text.substring(x+1,text.length)
	window.status = a + b + c
	if (x == text.length) {
		x = 0
	}
	else {
		x++
	}
	setTimeout("U()",speed)
}
U();

</SCRIPT>
</head>

<body>
<font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">ÃÒª×èÍã¹µÒÃÒ§¹Õé¨Ð͹حҵãËéá¡éä¢ä´é੾ÒÐ㺷ÕèÂѧäÁèä´é¨Ñ´Ã¶Â¹µì</font> 
<form name="form1" method="post" action="edit_car_request.php">
  <div align="center"></div>
  <table width="100%" border="1" align="center" bordercolor="#CC99CC">
    <tr background="Background6.jpg"> 
      <td width="7%" height="30" background="Background2.jpg"><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">no</font></div></td>
      <td width="21%" background="Background2.jpg"><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">Çѹ·Õè</font></div></td>
      <td width="14%" background="Background2.jpg"><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">àÇÅÒ</font></div></td>
      <td width="32%" background="Background2.jpg"><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">ʶҹ·Õèä»</font></div></td>
      <td width="14%" background="Background2.jpg"><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">¼Ùé¢Í</font></div></td>
      <td width="12%" background="Background2.jpg"><? echo $no ; ?>&nbsp;</td>
    </tr>
    <?php	
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
//		$lquery="select  * from tran where date = '$date' and user_id = '$id' and approv ='0'  and car_id = '0'";
		$lquery="select  * from tran where  user_id = '$id' and approv ='0'  and car_id = '0' order by no desc";
		$lresult=mysql_query($lquery) ;
		while ($lobject = mysql_fetch_object($lresult))
		  		{				
		  $date1 = $lobject ->date1 ;
		  $date2 = $lobject ->date2 ;
		  $target = $lobject -> target ;
		  $time1 = $lobject -> time1 ;
		  $time2 = $lobject -> time2 ;
		  $user_id = $lobject ->user_id;
		  $driver = $lobject ->driver;
		  $boss = $lobject ->boss;
		  $no = $lobject ->no;
		  $comment = $lobject ->comment;
		  $approve = $lobject -> approve ;
		   
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
		  $sqll="select  id,name  from user  where id = '$id'";
		   $nr=mysql_query($sqll);
		   while ($n = mysql_fetch_object($nr))
	  			{
				 $name = $n->name;
				}
?>
		 
    <tr> 
      <td><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
        <img src="../images/freeshipping_small.gif" width="19" height="12"> <? echo $no; ?></font></td>
      <td><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><? echo formatDateshow($date1)." ¶Ö§ ".formatDateshow($date2) ;?></font></div></td>
      <td><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><? echo $time1."  -  ".$time2." ¹." ;?></font></td>
      <td><div align="left"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><? echo $target ;?></font></div></td>
      <td><div align="center"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><? echo $name ;?> 
          </font></div></td>
      <td><div align="center"><? echo"<a href='#' onClick=\"cf=confirm('¤Ø³¡ÓÅѧ¨Ðź㺢ÍöàÅ¢·Õè $no ?');if (cf)window.location='edit_car_request.php?del=$no'; return false;\" style=\"font-size: 12px;\">ź</a>"; ?>
</div></td>
    </tr>
<?
		  }


			?>
  </table>
</form>
<p align="center">&nbsp;</p>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit