403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR - Copy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR - Copy/view_chk3.php
<?php
session_start();
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
include("dbconfig.php");
if (isset($_GET['chk'])) $chk = $_GET['chk']; 
else $chk ='';
if (isset($_GET['no'])) $no = $_GET['no']; 
else $no ='';
if (isset($_GET['del'])) $del = $_GET['del']; 
else $del ='';
if (isset($_GET['name'])) $name = $_GET['name']; 
else $name ='';
if(!empty($del)) {
	mysql_select_db($__db__);
	mysql_query(" SET NAMES 'tis620'; ");
	$delsql="delete from tran where no ='$del' ";
	$delresult = mysql_query($delsql ) or die(mysql_error()) ;
	echo "<script language='JavaScript'>";
	echo "alert('ลบเรียบร้อยแล้ว');";
	echo "location='rq_chk3.php';";
	echo "</script>" ;	
}
include( "function.php" );
if (isset($_POST['cmdSubmit'])){
	$cmdSubmit = $_POST['cmdSubmit'];
} else $cmdSubmit = 'X';
if ( $cmdSubmit == "ลงนามสั่งใช้รถ" ){
	if ( empty( $_SESSION['auth']) )	{ 
		echo "<script language='JavaScript'>";
		echo "alert('ไม่ได้ login อย่างถูกต้อง');";
		echo "history.back(1);";
		echo "</script>";
	 }
	mysql_select_db($__db__);
	mysql_query(" SET NAMES 'tis620'; ");
	$usql="update tran set  boss = '".$_SESSION['auth']."',chk='$chk',comment='".$_POST['comment']."' where no='$no'";
	$uresult = mysql_query($usql ) or die(mysql_error()) ;
	if (uresult) {
		echo "<script language='JavaScript'>";
		echo "alert('อนุญาตเรียบร้อยแล้ว');";
		echo "location = 'rq_chk3.php' ;";
		echo "</script>";
		exit() ;
	} 				
}
?>
<html>
<head>
<title>ลงนาม สั่งใช้รถ</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:black;text-decoration:none;font-family:ms sans serif;}
a:visited{color:blue;text-decoration:none;font-family:ms sans serif;}
a:hover{color:red;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>

<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>
<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>
<?php
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
$sql="select  *  from tran  where no = '$no' ";
$result=mysql_query($sql);
while ($object = mysql_fetch_object($result)) {
	$user_id = $object ->user_id;
	$target = $object ->target;
	$person = $object ->person;				
	$u1 = $object ->u1;
	$u2 = $object ->u2;
	$u3 = $object ->u3;
	$u4 = $object ->u4;
	$u5 = $object ->u5;
	$reason = $object ->reason;
	$_SESSION['res_id'] = $object ->res_id;
	$comment = $object ->comment;
	$nameboss = $object ->boss;
	$date = $object ->date ;
	$time = $object ->time ;
	$date1 = $object ->date1;
	$time1 = $object ->time1;
	$date2 = $object ->date2 ;
	$time2 = $object ->time2;
	$approv = $object ->approv;
	$dept_id = $object->dept_id;
	$dept_name = $object->dept_name;
	$dept_h_full_name = $object->dept_h_full_name;
}	
if (empty($u1)) $pu1='........................................';
else $pu1= $u1;
if (empty($u2)) $pu2='........................................';
else $pu2= $u2;
if (empty($u3)) $pu3='........................................';
else $pu3= $u3;
if (empty($u4)) $pu4='........................................';
else $pu4= $u4;
if (empty($u5)) $pu5='........................................';
else $pu5= $u5;
if (strlen($approv) < 2) $xname='........................................';
else $xname=$approv;
if (strlen($nameboss) > 2) {
	mysql_select_db($__dbwp__);
	mysql_query(" SET NAMES 'tis620'; ");
	$sqll="select  id,name  from user  where id = '$nameboss' limit 1";
	$lresult=mysql_query($sqll);
	while ($objectl = mysql_fetch_object($lresult)) {
		$nameboss = $objectl->name;
	}
	mysql_free_result($lresult);
}
if (strlen($nameboss) < 2) $nameboss='........................................';
?>
<form name="form1" method="post" action="view_chk3.php?&no=<?php echo $no;?>&chk=<?php echo $chk;?>">
  <TABLE cellSpacing=0 cellPadding=3 width="100%" align=center border=0>
    <TBODY>
      <TR> 
        <TD height="126" vAlign=top> 
          <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
            <TBODY>
              <TR> 
                <TD width="100%" colSpan=2> 
                  <TABLE width="100%" border=0>
                    <TBODY>
                      <TR> 
                        <TD 
                      style="BACKGROUND-IMAGE: url(pointsmall.gif); BACKGROUND-REPEAT: repeat-x"></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  <DIV class=thtahomasmall 
                  style="PADDING-RIGHT: 2px; PADDING-LEFT: 2px; PADDING-BOTTOM: 2px; PADDING-TOP: 2px" 
                  align=right> </DIV>
                  <DIV id=news_newyear style="BORDER-RIGHT: #c7d2e7 1px solid; PADDING-RIGHT: 3px; 
				  BORDER-TOP: #c7d2e7 1px solid; PADDING-LEFT: 3px; MARGIN-BOTTOM: 3px; PADDING-BOTTOM: 3px; 
				  BORDER-LEFT: #c7d2e7 1px solid; PADDING-TOP: 3px; BORDER-BOTTOM: #c7d2e7 1px solid; BACKGROUND-COLOR: #f0f8ff"> 
                  <table width="95%" border="0" cellpadding="0" cellspacing="2">
				  	  <tr> 
                        <td width="5%" height="25"> เลขที่ <input name="no" type="hidden" id="no" size="6" value="<? echo $no ;?>" readonly="yes"  ></td>
						<td  colspan="2" align="left"><? echo $no ;?></td>
                        <td width="29%"> <div align="right"><input name="date" type="hidden" id="date" value="<? echo $date; ?>" 
						   size="12" maxlength="12" >วันที่บันทึก&nbsp;<? 
						   $y=substr($date ,0,4)+543;
							 $m=substr($date ,5,2);
							 $d=substr($date ,8,2);
							$dateN = $y.'-'.$m.'-'.$d;
						   echo FormatDateshow($dateN)." เวลา : ".$time ; ?> </div>						</td>
                      </tr>
					  <tr> 
                        <td nowarp height="23" colspan="4"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ชื่อผู้ขอ</strong></font> 
                          <input name="name" type="hidden" id="name"  value="<? echo $name ; ?>"> 
                          <? echo $name ; ?> <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp; 
						  <strong>แผนก</strong>&nbsp;<input type="text" name="dept_name" size="<?=strlen($dept_name)?>"  id="kn_car_department_name" 
						  value="<?=$dept_name?>"  readonly disabled />
						  <input type="hidden" name="kn_car_department_id" id="dept_id" value="<?=$dept_id?>" readonly disabled />&nbsp;&nbsp;
                          <strong>หัวหน้าแผนก</strong>&nbsp;<input type="text" name="dep_h_full_name" size="<?=strlen($dept_h_full_name)?>" 
						  id="dept_head_name_thai" value="<?=$dept_h_full_name?>" readonly disabled/></font>						 </td>
                      </tr>
                      <tr> 
                        <td height="20" colspan="4"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ขออนุญาตใช้รถยนต์ 
                          ( ไปที่ไหน )</strong></font> <input name="target" type="hidden" id="target" size="80" value="<? echo  $target ; ?>" > 
                          <? echo  $target ; ?>						 </td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="4"><strong><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">เพื่อ</font></strong>
						<?php 
							mysql_select_db($__db__);
							mysql_query(" SET NAMES 'tis620'; ");
							$sqlr="select  *  from c_reason  where res_id = '".$_SESSION['res_id']."' ";
							$resultr=mysql_query($sqlr);
							// echo 't'. $sqlr.'<br>';
							// echo 't'. $resultr.'<br>';
							while ($objectlr = mysql_fetch_object($resultr)) {
								 $reason2 = $objectlr->reason2 ;
								// echo 'k'. $reason2.'<br>';
								 //echo 'k'. $reason2.'<br>';
							}
						?>
                          <input name="res_id" type="hidden" id="res_id" size="90" value="<? echo $res_id ;?>">
                          <? echo $reason2 ;?>
						  <input name="reason" type="hidden" id="code22" size="90" value="<? echo $reason ;?>"> 
                          <? echo $reason ;?>
						   <strong>มีคนนั่ง</strong> <input name="person" type="hidden" id="person" size="3" maxlength="3" value="<? echo $person ;?>"> 
                        <? echo $person ;?> <strong> คน </strong></td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="4"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ขอใช้รถในวันที่</strong></font> 
                          <input name="date1" type="hidden" id="date22" value="<? echo formatDateshow($date1) ; ?>" size="12" maxlength="12"> 
                          <? 
						   $y1=substr($date1 ,0,4)+543;
							 $m1=substr($date1 ,5,2);
							 $d1=substr($date1 ,8,2);
							$dateS = $y1.'-'.$m1.'-'.$d1;
							echo formatDateshow($dateS) ; ?> <strong>เวลา</strong> 
                          <input name="time1" type="hidden" id="time1" size="6" value="<? echo $time1 ;?>"> 
                          <? echo $time1 ;?> <strong> ถึงวันที่</strong>
						  <input name="date2" type="hidden" id="date32" value="<? 
						  echo formatDateshow($date2) ; ?>" size="12" maxlength="12"> 
                          <?
						  $y2=substr($date2 ,0,4)+543;
							 $m2=substr($date2 ,5,2);
							 $d2=substr($date2 ,8,2);
							$dateE= $y2.'-'.$m2.'-'.$d2; 
						  echo formatDateshow($dateE) ; ?> <strong> เวลา</strong> 
                          <input name="time2" type="hidden" id="time2" size="6" value="<? echo $time2 ;?>"> 
                          <? echo $time2 ;?>						</td>
                      </tr>
                      <tr> 
                        <td height="21" colspan="4"> <div align="right">ผู้ขออนุญาต 
                            <input name="approv" type="hidden" id="approv" value="<? echo $name ;?>" readonly="yes">
                            <? echo $name ;?> </div></td>
                      </tr>
                      <tr> 
                        <td height="24" colspan="3">&nbsp;</td>
                        <td><div align="right">ผู้ลงนาม สั่งใช้รถ<?php echo $nameboss ;?>
                            <input name="boss" type="hidden" id="boss" value="<? echo $nameboss ; ?>" readonly="yes">
                          </div>						 </td>
                      </tr>
                      <tr> 
               		      <td height="20"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>รายชื่อผู้นั่ง</strong></font></td>
                    	   <td width="22%"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          1.<input name="u1" type="hidden" id="u1"  value="<? echo $u1 ;?>" readonly="yes"><? echo "  ".$pu1 ;?></font>						 </td>
						 <td width="22%"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                           2.<input name="u2" type="hidden" id="u2" value="<? echo $u2 ;?>" readonly="yes"><? echo "  ".$pu2 ;?></font>						  </td>
						  <td width="22%"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                           3.<input name="u3" type="hidden" id="u3" value="<? echo $u3 ;?>"  readonly="yes"><? echo "  ".$pu3 ;?></font>						   </td> 
					  </tr>
                      <tr> 
                        <td height="20"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp;</font></td>
                        <td><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          4.<input name="u4" type="hidden" id="u4"  value="<? echo $u4 ;?>" readonly="yes"><? echo "  ".$pu4 ;?></font>						 </td>
						 <td><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                           5.<input name="u5" type="hidden" id="u5" value="<? echo $u5 ;?>" readonly="yes"><? echo "  ".$pu5 ;?></font>						  </td>
                      </tr>
                      <tr> 
                        <td height="22" colspan="2"><strong><font color="#FF0000" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">
						หมายเหตุ ไม่สามารถจัดรถได้เนื่องจาก</font></strong></td>
                        <td colspan="2"><strong>	<font face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          <input name="comment" type="text" id="comment" size="80" value="<?php echo $comment; ?>">
                          </font></strong></td>
                      </tr>
                      <tr> 
                        <td colspan="2"  height="39" bgcolor="#9999FF"><div align="center"><? 
							echo"<a href=\"javascript:;\" onClick=\"cf=confirm('คุณกำลังจะลบใบขอรถเลขที่ $no ?');
							if (cf)window.location='view_chk3.php?del=$no'; return false;\" style=\"font-size: 18px;\">[  ลบใบนี้  ]</a>"; ?></div>						</td>
                        <td colspan="2"> <div align="right"> ลงนามสั่งใช้รถ คลิ๊กที่ปุ่มนี้&gt;&gt; 
                            <input name="cmdSubmit" type="submit" id="cmdSubmit" value="ลงนามสั่งใช้รถ">
                          </div></td>
                      </tr>
                    </table>
                  </DIV></TD>
              </TR>
            </TBODY>
          </TABLE>
        </TD>
      </TR>
    </TBODY>
  </TABLE>
</form>
<div align="center"></div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit