403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR/rq_chk1.php
<?php
session_start();
include("dbconfig.php");
include( "function.php" );
if (!isset($_SESSION['auth'])  || ( strpos($_SESSION['right'],"c")  < 0   )) 	{
?>
<TABLE cellSpacing=0 cellPadding=0 width="50%" align=center border=0>
  <TBODY>
    <TR> 
      <TD align=left>&nbsp;</TD>
      <TD class=footer align=right>&nbsp;</TD>
    </TR>
    <TR> 
      <TD colSpan=2> <TABLE cellSpacing=0 cellPadding=0 width="100%">
          <TBODY>
            <TR> 
              <TD align=left> <IMG src="../subtabLoginOn.gif" width="53" height="20" border=0 align=absBottom id=img_Login></TD>
              <TD class=bodybold align=right>&nbsp;</TD>
            </TR>
            <TR> 
              <TD colSpan=2> <FORM id="Form1" name="Form" action="login.php" method="post" >
                  <TABLE bordrColor=#009966 cellSpacing=0 cellPadding=0 width="100%" border=3>
                    <TBODY>
                      <TR> 
                        <TD> <TABLE id=tbGeneral  style="WIDTH: 100%; BORDER-COLLAPSE: collapse" cellSpacing=0  cellPadding=7 border=0>
                            <TBODY>
                              <TR> 
                                <TD style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; 
												FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; 
												BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif;
												BACKGROUND-COLOR: whitesmoke" colSpan=2><SPAN id=lblMsg></SPAN>
								</TD>
                              </TR>
                              <TR> 
                                 <TD style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid;
								 				 FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; 
												 BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">User Name
								 </TD>
                               	 <TD   style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; 
							   					BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
					  				<select name="id" id="select3">
                            		<option value=""> เลือกชื่อ- สกุล </option>
                            			<?php 
										mysql_select_db($__dbwp__);
										mysql_query(" SET NAMES 'tis620'; ");
										$plquery="select  id,name from  user  where auth like '%c%'  ";
										$plresult=mysql_query($plquery);
										while ($plobject = mysql_fetch_object($plresult)) 	{
											echo "<OPTION VALUE =".$plobject ->id.">" .$plobject ->name."</Option>" ;
										}
										?>
                          			</select>
								</TD>
                              </TR>
                              <TR> 
                                <TD style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; 
												FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; 
												BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">Password
								</TD>
                                <TD style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; 
												BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
									<input name="pwd" type="password" id="pws">
									<input name="index" type="hidden" id="auth" value="rq_chk1.php">
								</TD>
                              </TR>
                              <TR> 
                                <TD style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; 
												FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; 
												FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" colSpan=2>
									<INPUT id=Submit type=submit value=Login name=Submit>
								</TD>
                              </TR>
                            </TBODY>
                          </TABLE></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  </FORM></TD>
            </TR>
            <TR> 
              <TD class=body colSpan=2>&nbsp; </TD>
            </TR>
            <TR> 
              <TD colSpan=2>&nbsp; </TD>
            </TR>
          </TBODY>
        </TABLE></TD>
    </TR>
  </TBODY>
</TABLE>
<?
}
else {
?>
<html>
<head>
<title>จัดรถยนต์</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:red;text-decoration:none;font-family:ms sans serif;}
a:visited{color:pink;text-decoration:none;font-family:ms sans serif;}
a:hover{color:black;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>
<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>

<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>

<TABLE height=85 cellSpacing=0 cellPadding=0 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f7ff" colSpan=2></TD>
    </TR>
    <TR bgColor=#c7d2e7> 
      <TD class=thwbold width="90%" height=28><div align="center"><a 
      href=""><font color=#000000>&nbsp;แสดงใบขออนุญาตใช้รถ ที่หัวหน้าฝ่ายอนุญาตแล้ว 
          แต่ยังไม่ได้จัดรถยนต์</font></a> </div></TD>
      <TD width="10%" height=28 align=right vAlign=center bgColor=#c7d1e7 class=thsans><div align="right"> 
          <A 
      href=""></A> &nbsp; <A href=""></A> <A 
      href=""></A>&nbsp; </div></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black" colSpan=2></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f8ff" colSpan=2></TD>
    </TR>
    <TR vAlign=center bgColor=#216289> 
      <TD class=thwbold colSpan=2 height=21> <TABLE height="95%" cellSpacing=0 cellPadding=1 width="99%" align=center 
      border=0>
          <TBODY>
            <TR> 
              <TD width="8%" height="22"  
          
          align=middle><SPAN class=thsans2 
            id=n1><a href="index.php"><font color="#FFFFFF">หน้าแรก</font></a></SPAN></TD>
              <TD  
          
           align=middle width="12%">&nbsp;</TD>
              <TD 
          
           align=middle width="9%"><SPAN 
            class=thsans2 id=n5></SPAN></TD>
              <TD 
          
           align=middle width="9%">&nbsp;</TD>
              <TD 
          
           align=middle width="13%">&nbsp;</TD>
              <TD 
          
           align=middle width="15%"><SPAN 
            class=thsans2 id=n5></SPAN></TD>
              <TD 
          
         align=middle width="18%"><A 
            class=no_de href="        "></A></TD>
              <TD class=thtahomasmall  
           align=middle width="16%"><span 
            class=thsans2 id=n5><a href="list_print.php" target="_blank"><font size="4" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"></font></a></span></TD>
            </TR>
          </TBODY>
        </TABLE></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black; heigth: 1" 
colSpan=2></TD>
    </TR>
  </TBODY>
</TABLE>
<form name="form1" method="post" >
  <TABLE cellSpacing=0 cellPadding=3 width="98%" align=center border=0>
    <TBODY>
      <TR> 
        <TD height="126" vAlign=top> คลิ๊กเมาส์ที่ คำว่าคลิ๊ก เพื่อจัดรถยนต์  	<img src="car.gif" width="31" height="24">หากไม่ปรากฏรายชื่อในหน้านี้<font color="#FF0000"> 
              แสดงว่ายังไม่ผ่านผู้มีอำนาจลงนาม</font>	<BR> 
          <TABLE cellSpacing=0 cellPadding=3 width="100%" border=0>
            <TBODY>
              <TR> 
                <TD class=thtahomasmall bgColor=#c7d2e7
                  height=5>&nbsp;</TD>
              </TR>
              <TR> 
                <TD height="46" 
                bgColor=#f0f8ff class=thtahomasmall 
                style="BORDER-RIGHT: #c7d2e7 1px solid; BORDER-TOP: #c7d2e7 1px solid; BORDER-LEFT: #c7d2e7 1px solid; BORDER-BOTTOM: #c7d2e7 1px solid">
				<table width="100%" border="0" align="center" cellpadding="2" cellspacing="0">
                    <tr> 
                      <td class=thtahomasmall bgColor=#c7d2ff width="8%"><div align="left">เลขที่ใบขอ</div></td>
                      <td width="13%" class=thtahomasmall bgColor=#c7d2ff><div align="left">ผู้ขอ</div></td>
                      <td width="35%" class=thtahomasmall bgColor=#c7d2ff>สถานที่ไป</td>
                      <td width="11%" class=thtahomasmall bgColor=#c7d2ff>วันที่</td>
                      <td width="10%" class=thtahomasmall bgColor=#c7d2ff>เวลา</td>
                      <td width="16%" class=thtahomasmall bgColor=#c7d2ff><div align="center">ผู้มีอำนาจสั่งใช้รถ</div></td>
                      <td width="5%" class=thtahomasmall bgColor=#c7d2ff>จัดรถ</td>
                    </tr>
                    <?php	
						mysql_select_db($__db__);
						mysql_query(" SET NAMES 'tis620'; ");
						$sql="select  * from tran  where  (car_id IS NULL or car_id  = '' or car_id = '0' )  order by date1 DESC  limit 100";
						
						//$sql="select  * from tran  where  (car_id IS NULL or car_id  = '' or car_id = '0' ) and boss is not NULL and boss <> '' order by no DESC ";
						$result=mysql_query($sql);
						while ($object = mysql_fetch_object($result)) {
							$user_id = $object ->user_id;
							mysql_select_db($__dbwp__);
							mysql_query(" SET NAMES 'tis620'; ");
						  	$sqll="select  id,name  from user  where id = '$user_id'";
					   		$lresult=mysql_query($sqll);
					   		while ($objectl = mysql_fetch_object($lresult)) {
			  					$name = $objectl->name;
						 	}
							?>
							<tr> 
							  <td height="22"><div align="center"><a href="view_rq.php?no=<? echo $object ->no."&name=".$name ; ?>" > 
								  <? echo $object ->no; ?></a></div></td>
							  <td> <? echo  $name ;  ?> </td>
							  <td> <? echo $object ->target ;?> </td>
							  <td><? echo formatdateshow($object ->date1); ?></td>
							  <td><? echo  $object ->time1."-".$object ->time2; ?></td>
							  <td><div align="center"><a href="head_car.php?no=<? echo $object ->no."&name=".$name ; ?>" > </a> 
								  <? 
								  if ( strlen($object ->boss) < 4 ) {
									echo "<font color=#FF9900>ยังไม่ลงนามสั่งใช้รถ</font>" ;
									$chk = "b" ;
									
								  } else { 
									$chk = "ok" ;
									mysql_select_db($__dbwp__);
									mysql_query(" SET NAMES 'tis620'; ");
									$boss= $object ->boss;
									$nameboss=$boss;
									$bsql="select  id,name  from user  where id = '$boss' ";
									$bresult=mysql_query($bsql);
									while ($bobject = mysql_fetch_object($bresult)) {
										$nameboss = $bobject->name ;
									}
									echo $nameboss;
								  }
								  ?>
								</div>
							 </td>
							 <td><div align="center"><a href="head_car.php?no=<? echo $object ->no."&name=".$name."&chk=".$chk ; ?>" >
							 คลิ๊ก</a></div>
							 </td>
                    		</tr>
                    		<?php
		  				}	?>
                  </table>
				  </TD>
              </TR>
            </TBODY>
          </TABLE>
       </TD>
      </TR>
    </TBODY>
  </TABLE>
  </form>
 
</body>
</html>
<? } ?>

Youez - 2016 - github.com/yon3zu
LinuXploit