403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR - Copy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR - Copy/rq_chk2.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>

<?php
//$ebits = ini_get('error_reporting');
//error_reporting($ebits ^ E_NOTICE);
?>

<?php
include("dbconfig.php");
include( "function.php" );
if(empty($yy1) ||  strlen(trim($yy1)) <4 ||  strlen(trim($yy2))<4    )
{
     $yy2= date("Y")+543;
     if(date("M") < 10)  $yy1= $yy2-1;
     else   $yy1= $yy2 ;
     $mm1= "10";
     $dd1= "01";
     $mm2 =date("m" );
     $dd2= date("d");
}
$begin =  $yy1."-".$mm1."-".$dd1 ;
$end = $yy2."-".$mm2."-".$dd2 ;
?>
<html>
<head>
<title> แสดงใบขออนุญาตใช้รถ ที่ยังไม่ได้ประเมิน</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:red;text-decoration:none;font-family:ms sans serif;}
a:visited{color:pink;text-decoration:none;font-family:ms sans serif;}
a:hover{color:black;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>
<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>

<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>

<TABLE height=85 cellSpacing=0 cellPadding=0 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f7ff" colSpan=2></TD>
    </TR>
    <TR bgColor=#c7d2e7> 
      <TD class=thwbold width="42%" height=28><div align="left">    <form name="forms" method="post" action="rq_chk2.php">
            ชื่อผู้ขอ 
            <select name="search" id="search">
			<? // 
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
					$fquery="select  distinct  user_id,audit_id  from  tran where  audit_id is null  or audit_id = ''  order by  audit_id " ;
					$fresult=mysql_query($fquery) or die(mysql_error());
					while (@$fobject = mysql_fetch_object($fresult))
					{
						
						echo "<OPTION VALUE =".$fobject ->user_id.">".decodeuser($fobject ->user_id)."</option>"  ;
					}
			      
			?>
			</select>
            <input type="submit" name="Submit" value="ค้นหา" >
          </form>
        </div></TD>
      <TD width="58%" height=28 align=right vAlign=center bgColor=#c7d1e7 class=thsans> 
        <div align="center"><A 
      href=""></A> <a 
      href=""><font color=#000000>&nbsp;แสดงใบขออนุญาตใช้รถ ที่ยังไม่ได้ประเมิน</font></a> 
          &nbsp; <A href=""></A> <A 
      href=""></A>&nbsp; </div></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black" colSpan=2></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f8ff" colSpan=2></TD>
    </TR>
    <TR vAlign=center bgColor=#216289> 
      <TD class=thwbold colSpan=2 height=21> <TABLE height="95%" cellSpacing=0 cellPadding=1 width="99%" align=center 
      border=0>
          <TBODY>
            <TR> 
              <TD width="10%" height="22"  
          
          align=middle><SPAN class=thsans2 
            id=n1><a href="index.php">หน้าแรก</a></SPAN></TD>
              <TD  
          
           align=middle><div align="center"><SPAN 
            class=thsans2 id=n5>
			 <form name="formd" method="post" action="rq_chk2.php">
			<font color="#FFFFFF" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">ระหว่างวันที่ 
                  <select name="dd1" id="select">
                    <option value="01">01</option>
                    <option value="02">02</option>
                    <option value="03">03</option>
                    <option value="04">04</option>
                    <option value="05">05</option>
                    <option value="06">06</option>
                    <option value="07">07</option>
                    <option value="08">08</option>
                    <option value="09">09</option>
                    <option value="10">10</option>
                    <option value="11">11</option>
                    <option value="12">12</option>
                    <option value="13">13</option>
                    <option value="14">14</option>
                    <option value="15">15</option>
                    <option value="16">16</option>
                    <option value="17">17</option>
                    <option value="18">18</option>
                    <option value="19">19</option>
                    <option value="20">20</option>
                    <option value="21">21</option>
                    <option value="22">22</option>
                    <option value="23">23</option>
                    <option value="24">24</option>
                    <option value="25">25</option>
                    <option value="26">26</option>
                    <option value="27">27</option>
                    <option value="28">28</option>
                    <option value="29">29</option>
                    <option value="30">30</option>
                    <option value="31">31</option>
                  </select>
                  เดือน 
                  <select name="mm1" id="select6">
                    <option value=<? echo  $mm1 ;?>><? echo	  th_month($mm1) ; ?></option>
                    <option value="01">มกราคม</option>
                    <option value="02">กุมภาพันธ์</option>
                    <option value="03">มีนาคม</option>
                    <option value="04">เมษายน</option>
                    <option value="05">พฤษภาคม</option>
                    <option value="06">มิถุนายน</option>
                    <option value="07">กรกฎาคม</option>
                    <option value="08">สิงหาคม</option>
                    <option value="09">กันยายน</option>
                    <option value="10">ตุลาคม</option>
                    <option value="11">พฤศจิกายน</option>
                    <option value="12">ธันวาคม</option>
                  </select>
                  พ.ศ. 
                  <input name="yy1" type="text" id="yy1" value="<? echo trim($yy1) ;?>" size="4" maxlength="4">
                    - </font> <font color="#FFFFFF" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                    <select name="dd2" id="select7">
                      <option value=<? echo $dd2  ;?>><? echo $dd2 ;?></option>
                      <option value="01">01</option>
                      <option value="02">02</option>
                      <option value="03">03</option>
                      <option value="04">04</option>
                      <option value="05">05</option>
                      <option value="06">06</option>
                      <option value="07">07</option>
                      <option value="08">08</option>
                      <option value="09">09</option>
                      <option value="10">10</option>
                      <option value="11">11</option>
                      <option value="12">12</option>
                      <option value="13">13</option>
                      <option value="14">14</option>
                      <option value="15">15</option>
                      <option value="16">16</option>
                      <option value="17">17</option>
                      <option value="18">18</option>
                      <option value="19">19</option>
                      <option value="20">20</option>
                      <option value="21">21</option>
                      <option value="22">22</option>
                      <option value="23">23</option>
                      <option value="24">24</option>
                      <option value="25">25</option>
                      <option value="26">26</option>
                      <option value="27">27</option>
                      <option value="28">28</option>
                      <option value="29">29</option>
                      <option value="30">30</option>
                      <option value="31">31</option>
                    </select>
                    เดือน 
                    <select name="mm2" id="select8">
                      <option value=<? echo  $mm2 ;?>><? echo	  th_month(date($mm2)) ; ?></option>
                      <option value="01">มกราคม</option>
                      <option value="02">กุมภาพันธ์</option>
                      <option value="03">มีนาคม</option>
                      <option value="04">เมษายน</option>
                      <option value="05">พฤษภาคม</option>
                      <option value="06">มิถุนายน</option>
                      <option value="07">กรกฎาคม</option>
                      <option value="08">สิงหาคม</option>
                      <option value="09">กันยายน</option>
                      <option value="10">ตุลาคม</option>
                      <option value="11">พฤศจิกายน</option>
                      <option value="12">ธันวาคม</option>
                    </select>
                    พ.ศ. 
                    <input name="yy2" type="text" id="yy3" value="<? echo $yy2 ; ?>" size="4" maxlength="4">
                    &nbsp;
                    <input type="submit" name="Submit2" value="ค้นหา">
                    </font>
</form></SPAN></div></TD>
              <TD class=thtahomasmall  
           align=middle width="7%">&nbsp;</TD>
            </TR>
          </TBODY>
        </TABLE></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black; heigth: 1" 
colSpan=2></TD>
    </TR>
  </TBODY>
</TABLE>

  
<TABLE cellSpacing=0 cellPadding=3 width="100%" align=left border=0>
  <TBODY>
    <TR> 
      <TD height="126" vAlign=top> คลิ๊กเมาส์ที่เลขที่ใบขอ <BR> <TABLE width="100%" border=0 align="left" cellPadding=3 cellSpacing=0>
          <TBODY>
            <TR> 
              <TD class=thtahomasmall bgColor=#c7d2e7
                  height=5>&nbsp;</TD>
            </TR>
            <TR> 
              <TD height="46" 
                bgColor=#f0f8ff class=thtahomasmall 
                style="BORDER-RIGHT: #c7d2e7 1px solid; BORDER-TOP: #c7d2e7 1px solid; BORDER-LEFT: #c7d2e7 1px solid; BORDER-BOTTOM: #c7d2e7 1px solid"><table width="88%" border="0" align="left" cellpadding="2" cellspacing="0">
                  <tr> 
                    <td width="8%" height="21" bgColor=#c7d2ff class=thtahomasmall><div align="left">เลขที่ใบขอ</div></td>
                    <td width="26%" class=thtahomasmall bgColor=#c7d2ff><div align="left">ผู้ขอ 
                        / ผู้นั่ง</div></td>
                    <td width="33%" class=thtahomasmall bgColor=#c7d2ff>สถานที่ไป</td>
                    <td width="15%" class=thtahomasmall bgColor=#c7d2ff>วันที่</td>
                    <td width="8%" class=thtahomasmall bgColor=#c7d2ff>เวลา</td>
                    <td width="10%" class=thtahomasmall bgColor=#c7d2ff><div align="center">ประเมิน</div></td>
                  </tr>
                  <?php	
					
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
						if ($Submit == "ค้นหา") 
						{
						$ssql = " select  *  from  tran  where   user_id = '$search'  order by  no desc" ;
						}
						else
						{
						$ssql="select  * from tran where audit_id is null  or audit_id = '' order by no desc ";
						}
						$rresult=mysql_query($ssql);
						$totalrecord = mysql_num_rows($rresult);
						$pagesize= 25 ;
						$totalpage = (int) ($totalrecord/$pagesize) ;
						  if(($totalrecord%$pagesize) != 0)
						  {
						  $totalpagesize +=1;
						  }
						  if(isset($pageid)) 
						  {
						  $start = $pagesize *($pageid -1) ;
						  }
						  else
						  {
						  $pageid = 1 ;
						  $start = 0 ;
						  }
			
			  
				if ($Submit == "ค้นหา")
						{
						$sql = " select  *  from  tran  where  user_id  = '$search'   order by no desc " ;
						}
						else
						{
						$sql="select  * from tran  where audit_id is null  or audit_id = '' order by no desc LIMIT $start ,$pagesize  ;";
						}
						
						
	//------------date
			if ($Submit2 == "ค้นหา")
						{
						$sql = " select  *  from  tran  where   date between '$begin' and '$end'  order by no desc  " ;
						}
		
	//-------------
						
    		$result=mysql_query($sql);			  
			$i=0 ;
			while (@$object = mysql_fetch_object($result))
			  {
			 
				  if (empty($object ->u1)) 
				  {
					$name = decodeuser(trim($object ->user_id));
					 
								  if ($i %2 == 0) 
								  {
								  $bg = "#f0f8ff";
								  }
								  else
								  {
								   $bg = "FFFFEE";
								  }
							 
				  }
				  else
					{
					$u1 = $object ->u1;
					$name = decodeuser(trim($object ->user_id));
						  if ($i %2 == 0) 
								  {
								  $bg = "#f0f8ff";
								  }
								  else
								  {
								   $bg = "FFFFEE";
								  }
					 }
			
				?>
                  <tr bgcolor="<? echo $bg ;?>"> 
                    <td height="22"><div align="center"> <? echo $object ->no; ?></a></div></td>
                    <td>
					<? if ($name == $u1)
					{
					echo  $name ;  
					}else
					{ 
						if ($name == "")
						{
						echo  "<font color='#330099'>". $u1."</font>";
						}	
						else
						{
						echo  $name ." / <font color='#330099'>". $u1."</font>"   ;  
						}
					}
					?> </td>
                    <td> <? echo $object ->target ;?> </td>
                    <td><? echo formatdateshow($object ->date1); ?></td>
                    <td><? echo  $object ->time1; ?></td>
                    <td><div align="center"><a href="audit.php?no=<? echo $object ->no."&name=".$name ; ?>" > 
                        คลิ๊ก</a></div></td>
                  </tr>
                  <?php $i =$i+1 ; 
				  $name = "" ;
				  $u1 = "" ;
		  }
//	mysql_free_result($result);
//	mysql_close($db); 
			?>
                </table></TD>
            </TR>
          </TBODY>
        </TABLE>
        <div align="center"> 
          <p><br>
            <font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
            </font></p>
          <p> <font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
            <br>
            </font> </p>
        </div></TD>
    </TR>
    <TR>
      <TD height="24" vAlign=top><div align="center"><font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
          <? if ((empty($Submit))  and (empty($Submit2)))
			{		  
			 for($x=1;$x<=$totalpage;$x++)
			  {
			   if ($x == $pageid)
				 {
					echo $x."&nbsp;" ;
				 }
				 else
				 {
					echo "[&nbsp;<a href =\"rq_chk2.php?pageid=$x\">$x</a>&nbsp;]&nbsp;&nbsp;     หน้า ";
				 }
			  }
  		}
?>
        ทั้งหมด <? echo 	$totalrecord ;?> ใบ </font></div></TD>
    </TR>
  </TBODY>
</TABLE>
   
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p align="left"><font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
  </font> </p>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit