403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Menu pusdu/ward/backup/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Menu pusdu/ward/backup/listitemadmin.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<title>ระบบใบเบิกพัสดุโรงพยาบาลสัตหีบ กม.10</title> 
<style type="text/css">
<!--
.style3 {color: #FF3300}
.style5 {
	font-size: 10px;
	color: #00FFFF;
}
.style6 {color: #FF0000}
-->
</style>
</head>
<body>
<div align="center">
  <p align="left"><a href="logout.php" class="style6" style="text-decoration: none;">Logout ออกจากระบบ </a><br>
    <br>
    <?
$objConnect = mysql_connect("localhost","root","090407") or die("Error Connect to Database");
$objDB = mysql_select_db("pusducom_pharma");
mysql_query("Set names 'tis620'");

//*** Add Condition ***//
if($_POST["hdnCmd"] == "Add")
{
	$strSQL = "INSERT INTO Month_1";
	$strSQL .="(Id_num,Seq,Item,Unit,Req_num,Allow,Pay) ";
	$strSQL .="VALUES ";
	$strSQL .="('".$_POST["txtAddId_num"]."','".$_POST["txtAddSeq"]."' ";
	$strSQL .=",'".$_POST["txtAddItem"]."','".$_POST["txtAddUnit"]."' ";
	$strSQL .=",'".$_POST["txtAddReq_num"]."','".$_POST["txtAddAllow"]."' ";
	$strSQL .=",'".$_POST["txtAddPay"]."') ";
	$objQuery = mysql_query($strSQL);
	if(!$objQuery)
	{
		echo "Error Save [".mysql_error()."]";
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}

//*** Update Condition ***//
if($_POST["hdnCmd"] == "Update")
{
	$strSQL = "UPDATE Month_1 SET ";
	$strSQL .="Seq = '".$_POST["txtEditSeq"]."' ";
	$strSQL .=",Item = '".$_POST["txtEditItem"]."' ";
	$strSQL .=",Unit = '".$_POST["txtEditUnit"]."' ";
	$strSQL .=",Req_num = '".$_POST["txtEditReq_num"]."' ";
	$strSQL .=",Allow = '".$_POST["txtEditAllow"]."' ";
	$strSQL .=",Pay = '".$_POST["txtEditPay"]."' ";
	$strSQL .="WHERE Seq = '".$_POST["hdnEditSeq"]."' ";
	$objQuery = mysql_query($strSQL);
	if(!$objQuery)
	{
		echo "Error Update [".mysql_error()."]";
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}


$strSQL = "SELECT * FROM Month_1 ORDER BY Id_num ASC";
$objQuery = mysql_query($strSQL) or die ("Error Query [".$strSQL."]");
?>
  </p>
</div>
<form name="frmMain" method="post" action="<?=$_SERVER["PHP_SELF"];?>">
<input type="hidden" name="hdnCmd" value="">
<table width="800" border="1" align="center">
  <tr bordercolor="#00CCFF">
    <th width="5"> <div align="center">ลำดับที่ </div></th>
    <th width="17"> <div align="center">รายการ</div></th>
    <th width="15"> <div align="center">หน่วยนับ</div></th>
    <th width="15"> <div align="center">จำนวนที่ต้องการเบิก </div></th>
    <th width="15"> <div align="center">อนุญาติให้เบิก</div></th>
    <th width="15"> <div align="center">จ่ายจริง </div></th>
    <th width="30"> <div align="center">Edit </div></th>
  </tr>
<?
while($objResult = mysql_fetch_array($objQuery))
{
?>

  <?
	if($objResult["Seq"] == $_GET["CusID"] and $_GET["Action"] == "Edit")
	{
  ?>
  <tr bordercolor="#666666">
    <td width="5" height="58">
		<div align="center">
		  <input type="text" name="txtEditSeq" size="5" value="<?=$objResult["Seq"];?>">
		  <input type="hidden" name="hdnEditSeq" size="5" value="<?=$objResult["Seq"];?>">
        </div></td>
    <td align="center"><div align="center">
      <input type="text" name="txtEditItem" size="15" value="<?=$objResult["Item"];?>">
    </div></td>
    <td align="left"><div align="center">
      <textarea name="txtEditUnit" cols="15" rows="8"><?=$objResult["Unit"];?>
    </textarea>
    </div></td>
    <td align="left"><div align="center">
      <textarea name="txtEditReq_num" cols="15" rows="8"><?=$objResult["Req_num"];?>
    </textarea>
    </div></td>
    <td align="left"><div align="center">
      <textarea name="txtEditAllow" cols="15" rows="8"><?=$objResult["Allow"];?>
    </textarea>
    </div></td>
    <td align="left"><div align="center">
      <textarea name="txtEditPay" cols="15" rows="8"><?=$objResult["Pay"];?>
    </textarea>
    </div></td>

    <td colspan="2" align="right">
      <div align="center">
        <input name="btnAdd" type="button" id="btnUpdate" value="Update" OnClick="frmMain.hdnCmd.value='Update';frmMain.submit();">
        <input name="btnAdd" type="button" id="btnCancel" value="Cancel" OnClick="window.location='<?=$_SERVER["PHP_SELF"];?>';">
        </div></td>
  </tr>
  <?
	}
  else
	{
  ?>
  <tr bordercolor="#666666">
    <td align="center"><?=$objResult["Seq"];?></td>
    <td align="center"><?=$objResult["Item"];?></td>
    <td align="left"><textarea  cols="15" rows="8"><?=$objResult["Unit"];?></textarea></td>
    <td align="left"><textarea  cols="15" rows="8"><?=$objResult["Req_num"];?></textarea></td>
    <td align="left"><textarea  cols="15" rows="8"><?=$objResult["Allow"];?></textarea></td>
    <td align="left"><textarea  cols="15" rows="8"><?=$objResult["Pay"];?></textarea></td>
    <td align="center"><a href="<?=$_SERVER["PHP_SELF"];?>?Action=Edit&CusID=<?=$objResult["Seq"];?>">Edit</a></td>
  </tr>
  <?
	}
  ?>
<?
}
?>
  <tr bordercolor="#666666">
    <td width="5">&nbsp;</td>
    <td>&nbsp;</td>
    <td align="right">&nbsp;</td>
    <td align="right">&nbsp;</td>
    <td align="right">&nbsp;</td>
    <td align="right">&nbsp;</td>
    <td colspan="2" align="right">&nbsp;</td>
  </tr>
</table>
<p>
<div align="center">
  <input name="btnAdd2" type="submit" id="btnAdd2" value="Add" OnClick="frmMain.hdnCmd.value='Add';frmMain.submit();">
</div>
</p>
</form>
<div align="center">
  <p>
    <?
mysql_close($objConnect);
?>
    <br>
    <br>
    <br>
    <br>
    <br>
    <br>
    
  <img src="../../img/icon/1.jpg" width="82" height="87"><br>
  <span class="style5">Powered by pozedorn@gmail.com โรงพยาบาลสัตหีบ กม.10 </span><br>
    <br>
  </p>
</div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit