403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR - Copy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR - Copy/rr00.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>
<?php
ob_start() ;
include("dbconfig.php");
if  (!isset($auth)  || ( strpos($right,"c") < -1 )   ) 	{
?>
<TABLE cellSpacing=0 cellPadding=0 width="50%" align=center border=0>
  <TBODY>
    <TR> 
      <TD align=left>&nbsp;</TD>
      <TD class=footer align=right>&nbsp;</TD>
    </TR>
    <TR> 
      <TD colSpan=2> <TABLE cellSpacing=0 cellPadding=0 width="100%">
          <TBODY>
            <TR> 
              <TD align=left><IMG 
            src="../subtabLoginOn.gif" width="53" height="20" 
border=0 align=absBottom id=img_Login></TD>
              <TD class=bodybold align=right>&nbsp;</TD>
            </TR>
            <TR> 
              <TD colSpan=2> <FORM id=Form name=Form action="login.php" method="post" >
                  <TABLE borderColor=#009966 cellSpacing=0 cellPadding=0 width="100%" 
            border=3>
                    <TBODY>
                      <TR> 
                        <TD> <TABLE id=tbGeneral 
                  style="WIDTH: 100%; BORDER-COLLAPSE: collapse" cellSpacing=0 
                  cellPadding=7 border=0>
                            <TBODY>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" 
                      colSpan=2><SPAN id=lblMsg></SPAN></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">User 
                                  Name </TD>
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
					  <select name=id id="select3">
                            <option value=""> เลือกชื่อ- สกุล </option>
                            <? 
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
						$plquery="select  id,name from  user  where  auth like '%c%' ";
						$plresult=mysql_query($plquery);
				
						while ($plobject = mysql_fetch_object($plresult))
						{
							echo "<OPTION VALUE =".$plobject ->id.">" .$plobject ->name."</Option>" ;
						}
					
						?>
                          </select></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">Password</TD>
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
					 <input name="pwd" type="password" id="pws"><input name="index" type="hidden" id="auth" value="pm_car_record.php"></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" 
                      colSpan=2><INPUT id=Submit type=submit value=Login name=Submit></TD>
                              </TR>
                            </TBODY>
                          </TABLE></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
<?
}
else {


include( "function.php" );  
?>
<?php
if ( $cmdSubmit == "บันทึกการบำรุง" )
{
	if ( empty( $car_id ) )		{ 
		echo "<script language='JavaScript'>";
		echo "alert('ไม่ได้เลือกทะเบียนรถยนต์');";
		echo "history.back(1);";
		echo "</script>";
		echo "exit();";
		}
	if ( empty( $item_id ) )	{ 
		echo "<script language='JavaScript'>";
		echo "alert('ไม่ได้เลือกรายการ');";
		echo "history.back(1);";
		echo "</script>";
		echo "exit();";
		}

					
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");	   
	//---------------
	$csql ="select  max(car_end) as maxcar_end where car_id = '$car_end' " ;
	$cresult=mysql_query($cquery) ;
	if (empty($cresult))
	{
		$car_end  = 0 ;
	}
			while ($cobject = mysql_fetch_object($cresult))
			{
				$car_end = $cobject ->maxcar_end ;
			}
	//--------------
	echo "ท่านไม่ต้องวิตก  ถ้าพบข้อความ error  โปรแกรมจะยังทำงานต่อได้โดยไม่ผิดพลาด<br>" ;
	//--------------	
	$user_id = $auth;
	$datedb = formatDateDB2($date);
	$i = 0 ;
for($x=0;$x <= sizeof($price);$x++)
	{

	$dbprice = $price[$x]	;
	if ($price[$x] == "" ) continue ;
		$item  = $item_id[$i] ;
		echo "<br>i=".$i ;
		echo "<br>max mile=".$car_end ;
		echo "<br>item=".$item ;
		echo "<br>sizeitem=".sizeof($item_id) ;
		echo "<br>car_id=".$car_id ;
		echo "<br>sizeofprice=".sizeof($price) ;
		echo "<br>price=".$dbprice ;
		echo "<br>datedb=".$datedb ;
		echo "<br>-----------------------" ;
			$sql = "insert into pm (car_id,pm_id,date,price,user_id,mile_pm) values  ('$car_id','$item','$datedb','$dbprice','$user_id','$car_end')";
			//$sql = "delete from pm" ;
			$result = mysql_query($sql )or die(mysql_error());
		$i=$i+1 ;	
}
	echo "<script language='JavaScript'>";
	echo "alert('บันทึกข้อมูลเรียบร้อยแล้ว');";
	echo "location='pm_car_record.php';";
	echo "</script>" ;	
 
}
?>
<html>
<head>
<title>บันทึกการซ่อมบำรุงและเติมน้ำมันรถยนต์</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:white;text-decoration:none;font-family:ms sans serif;}
a:visited{color:white;text-decoration:none;font-family:ms sans serif;}
a:hover{color:yellow;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>

<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>
<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>
<TABLE height=54 cellSpacing=0 cellPadding=0 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f7ff" colSpan=2></TD>
    </TR>
    <TR bgColor=#c7d2e7> 
      <TD class=thwbold width="8%" height=28><div align="center"><img src="../images/wait.gif" width="15" height="15"> 
        </div></TD>
      <TD width="92%" height=28 align=right vAlign=center bgColor=#c7d1e7 class=thsans> 
        <A 
      href=""></A> &nbsp;<img src="../images/q.gif" width="18" height="18"><img src="../images/youraccount.gif" width="18" height="18"><img src="../images/cart.gif" width="18" height="18"> 
        <A href=""></A> <A 
      href=""></A>&nbsp; </TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black" colSpan=2></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f8ff" colSpan=2></TD>
    </TR>
    <TR vAlign=center bgColor=#216289> 
      <TD class=thwbold colSpan=2 height=20><a href="add_pm_item.php"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>&nbsp;&nbsp;&nbsp;&nbsp;<img src="../images/icon_community.gif" width="20" height="20">&nbsp;&nbsp;&nbsp;</strong></font>เพิ่มรายการ</a> 
        <a href="pm_car_list.php"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>&nbsp;&nbsp;&nbsp;&nbsp;<img src="../images/icon_community.gif" width="20" height="20">&nbsp;&nbsp;&nbsp;</strong></font>รายงานการซ่อมบำรุง</a></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black; heigth: 1" 
colSpan=2></TD>
    </TR>
  </TBODY>
</TABLE>
<div align="left"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
  <?
//@$db = mysql_connect("localhost","root","") or die("can't connect");
@$db = mysql_connect("localhost","root","090407") or die("can't connect");
	if (!$db)
	{
		echo "ติดต่อฐานข้อมูลไม่ได้";
		exit;
	}
?>
  การบันทึกการซ่อมบำรุง<br>
  1. เลือกทะเบียนรถยนต์ <br>
  2. คลิ๊กในช่อง 
  <input type="checkbox" name="checkbox" value="checkbox">
  หน้ารายการที่ต้องการเลือก<br>
  3. กรอกจำนวนเงิน ในบรรทัดนั้น *** หากในการซ่อมไม่มีค่าใช้จ่าย ให้ กรอก 0.00 
  </font> </div>
<form name="form1" method="post" action="pm_car_record.php">
  <TABLE cellSpacing=0 cellPadding=3 width="100%" align=center border=0>
    <TBODY>
      <TR> 
        <TD height="126" vAlign=top> 
          <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
            <TBODY>
              <TR> 
                <TD width="100%" height="128" colSpan=2> 
                  <TABLE width="100%" border=0>
                    <TBODY>
                      <TR> 
                        <TD 
                      style="BACKGROUND-IMAGE: url(pointsmall.gif); BACKGROUND-REPEAT: repeat-x"></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  <DIV class=thtahomasmall 
                  style="PADDING-RIGHT: 2px; PADDING-LEFT: 2px; PADDING-BOTTOM: 2px; PADDING-TOP: 2px" 
                  align=right> </DIV>
                  <DIV id=news_newyear 
                  style="BORDER-RIGHT: #c7d2e7 1px solid; PADDING-RIGHT: 3px; BORDER-TOP: #c7d2e7 1px solid; PADDING-LEFT: 3px; MARGIN-BOTTOM: 3px; PADDING-BOTTOM: 3px; BORDER-LEFT: #c7d2e7 1px solid; PADDING-TOP: 3px; BORDER-BOTTOM: #c7d2e7 1px solid; BACKGROUND-COLOR: #f0f8ff"> 
                    <table width="95%" border="0" cellpadding="0" cellspacing="2">
                      <tr> 
                        <td width="11%" height="25">&nbsp;</td>
                        <td width="89%"> <div align="right">วันที่ซ่อมบำรุง 
                            <input name="date" type="text" id="date" value="<? echo date("d/m/").(date("Y")+543); ?>" size="12" maxlength="12">
                          </div></td>
                      </tr>
                      <tr> 
                        <td height="23" colspan="2"><div align="left"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</strong>ทะเบียนรถยนต์ 
                            <strong> &nbsp;&nbsp;&nbsp;<img src="../images/freeshipping_small.gif" width="19" height="12">&nbsp;&nbsp; 
                            <select name="car_id" id="car_id">
                              <option value = "<? echo $car_id ;?>"> <? echo $car_id ;?> 
                              </option>
                              <?
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
						$cplquery="select  * from car  where status ='1' ";
						$cplresult=mysql_query($cplquery);

						while ($cplobject = mysql_fetch_object($cplresult))
						{
							echo "<OPTION VALUE =".$cplobject ->regist.">" .$cplobject ->regist."</Option>" ;
						}
					 ?>
                            </select>
                            </strong></font> <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp; 
                            </font></div></td>
                      </tr>
                      <tr> 
                        <td height="20" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp;</font> 
                        </td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="2"><table width="94%" border="0" align="center" cellpadding="0" cellspacing="0">
                            <tr> 
                              <td width="10%" height="27" bgcolor="#c7d1e7"><div align="center"><font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">ลำดับที่</font></div></td>
                              <td width="11%" bgcolor="#c7d1e7"><div align="center"><font color="#000000">เลือก</font></div></td>
                              <td width="61%" bgcolor="#c7d1e7"><div align="left"><font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">รายการ</font></div></td>
                              <td width="18%" bgcolor="#c7d1e7"><font color="#000000" size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">เป็นเงิน</font></td>
                            </tr>
                            <?
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
						$sql="select  * from pmlist  order by  item_id";
						$result=mysql_query($sql);
				  $i=0 ;		
			while ($object = mysql_fetch_object($result))
			  {
			  if ($i %2 == 0) 
			  {
			  $bg = "FFFFFF";
			  }
			  else
			  {
			   $bg = "FFFFCC";
			  }
			  $item_name = $object ->item_name;
			  $item_id = $object ->item_id;	
			?>
                            <tr bgcolor="<? echo $bg ;?>"> 
                              <td> <div align="center"><? echo $i ;?></div></td>
                              <td><div align="center"> 
                                  <input name="item_id[]" type="checkbox" id="checkbox[]" value="<? echo $item_id ?>">
                                </div></td>
                              <td> <? echo $item_name ; ?> </td>
                              <td><input name="price[]" type="text" id="price[]" size="10" >
                                บาท </td>
                            </tr>
							  <?  $i =$i+1 ; 
							   }   ?>
                          </table> 
                          <div align="center"></div></td>
                      </tr>
                    </table>
                  </DIV></TD>
              </TR>
            </TBODY>
          </TABLE>
          <BR>
          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;กรอกรายละเอียดครบแล้ว 
          คลิ๊กปุ่มนี้ &gt;&gt; 
          <input name="cmdSubmit" type="submit" id="cmdSubmit" value="บันทึกการบำรุง"> 
        </TD>
      </TR>
    </TBODY>
  </TABLE>
  </form>
 
</body>
</html>
<? 
}
ob_flush() ;?>

Youez - 2016 - github.com/yon3zu
LinuXploit