403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/RM/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/RM/สำรอง2 save_rm.asp
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>save</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
</head>
<body>
<%
if request.Form("submit") = "Êè§¢éͤÇÒÁ" then

member = "risk.mdb"

if  trim(request.Form("precare")) = "" then 
	precare = " " 
else
	precare =trim(request.Form("precare"))
end if
if  trim(request.Form("ploplem")) = "" then 
	ploplems = " "
else
	ploplems = trim(request.Form("ploplem"))
end if	 
if  trim(request.Form("comment")) = "" then 
	clinicrak = " " 
else
	clinicrak =  trim(request.Form("comment"))
end if	
if  trim(request.Form("sendto")) = "- - - - select - - - -" then 
	sendto = " " 
else
	sendto =  trim(request.Form("sendto"))
end if	
'''''''
Clinicrak_list = trim(request.Form("Clinicrak_list"))
NonClinicrak_list = trim(request.Form("NonClinicrak_list"))
user_rca = trim(request.Form("user_rca"))
color = trim(request.Form("color"))
date_acc = trim(request.Form("date_acc"))

if  trim(request.Form("hn")) = "" then 
	hn = " "
else
	hn = trim(request.Form("hn"))
end if	 

if  trim(request.Form("diag")) = "" then 
	 diag = " "
else
	diag = trim(request.Form("diag"))
end if	 

if  trim(request.Form("pt_complication")) = "" then 
	pt_complication = "0"
else
	pt_complication = "1"
end if	 

if  trim(request.Form("pt_comunication")) = "" then 
	pt_comunication = "0"
else
	pt_comunication= "1"
end if	 

if  trim(request.Form("pt_level")) = "" then 
	pt_level = "0"
else
	pt_level= "1"
end if	 

if  trim(request.Form("pt_behaveir")) = "" then 
	pt_behaveir= "0"
else
	pt_behaveir= "1"
end if	 
 
 if  trim(request.Form("user_knowlege")) = "" then 
	user_knowlege= "0"
else
	user_knowlege= "1"
end if	 

 if  trim(request.Form("user_method")) = "" then 
	user_method= "0"
else
	user_method= "1"
end if	 

 if  trim(request.Form("user_workload")) = "" then 
	user_workload= "0"
else
	user_workload= "1"
end if	 

 if  trim(request.Form("user_intensive")) = "" then 
	user_intensive= "0"
else
	user_intensive= "1"
end if	 

 if  trim(request.Form("user_priority")) = "" then 
	user_priority= "0"
else
	user_priority= "1"
end if	 

 if  trim(request.Form("team_note")) = "" then 
	team_note= "0"
else
	team_note= "1"
end if	

 if  trim(request.Form("team_diag")) = "" then 
	team_diag= "0"
else
	team_diag= "1"
end if	

 if  trim(request.Form("team_tran")) = "" then 
	team_tran= "0"
else
	team_tran= "1"
end if	

 if  trim(request.Form("team_consult")) = "" then 
	team_consult= "0"
else
	team_consult= "1"
end if	 

 if  trim(request.Form("env_cpr")) = "" then 
	env_cpr= "0"
else
	env_cpr= "1"
end if	 

 if  trim(request.Form("env_bal")) = "" then 
	env_bal= "0"
else
	env_bal= "1"
end if	

 if  trim(request.Form("env_mat")) = "" then 
	env_mat= "0"
else
	env_mat= "1"
end if	

 if  trim(request.Form("env_secur")) = "" then 
	env_secur= "0"
else
	env_secur= "1"
end if	

 if  trim(request.Form("policy_prevent")) = "" then 
	policy_prevent= "0"
else
	policy_prevent= "1"
end if	

 if  trim(request.Form("policy_monitor")) = "" then 
	policy_monitor= "0"
else
	policy_monitor= "1"
end if	 

 if  trim(request.Form("policy_comunication")) = "" then 
	policy_comunication= "0"
else
	policy_comunication= "1"
end if	 

 if  trim(request.Form("org_support")) = "" then 
	org_support= "0"
else
	org_support= "1"
end if	 

 if  trim(request.Form("org_priority")) = "" then 
	org_priority= "0"
else
	org_priority= "1"
end if	 

'''''''''''''''''''
ClinicrakRisk = trim(request.Form("ClinicalRisk"))
clinicraklevel = trim(request.Form("clinicraklevel"))
nonClinicrak = trim(request.Form("nonClinicrak"))
nonClinicraklevel = trim(request.Form("nonClinicraklevel"))
SentinelEvent = trim(request.Form("SentinelEvent"))
place = trim(request.Form("place"))
comment = trim(request.Form("comment"))
reportby= trim(request.Form("reportby"))
set conn=server.CreateObject("ADODB.Connection")
conn.mode = 3 ' adModeReadWrite 
'conn.Open "DBQ=" & Server.MapPath(member) & ";Driver={Microsoft Access Driver (*.mdb)};"
conn.open "provider=microsoft.jet.oledb.4.0; data source=" & server.mappath("\risk.mdb")

Set recset = Server.CreateObject("ADODB.Recordset")
Sql_r = "insert into risk (sendto,place,ploplem,clinicrak,nonclinicrak,clinicraklevel,nonclinicraklevel,SentinelEvent,precare,comment,reportby,Clinicrak_list,NonClinicrak_list,user_rca,color,hn,diag,pt_complication,pt_comunication,pt_level,pt_behaveir,user_knowlege,user_method,user_workload,user_intensive,user_priority,team_note,team_diag,team_tran,team_consult,env_cpr,env_bal,env_mat,env_secur,policy_prevent,policy_monitor,policy_comunication,org_support,org_priority,date_acc) values  "
Sql_r = Sql_r  & " ( '" & sendto  & "','" & place &"','" & ploplems & "','" & clinicrak & "','" & nonclinicrak & "','" & clinicraklevel & "','" & nonclinicraklevel & "','" & SentinelEvent & "','"  & precare & "','" & comment  & "','" & reportby & "','" & Clinicrak_list  & "','" & NonClinicrak_list & "','" & user_rca  & "','" & color & "','"  & hn & "','" & diag  & "','" & pt_complication & "','" & pt_comunication & "','" & pt_level & "','" & pt_behaveir  & "','" &user_knowlege & "','" & user_method & "','" &user_workload & "','" &user_intensive & "','" & user_priority & "','" & team_note & "','" & team_diag & "','" & team_tran & "','" & team_consult & "','" & env_cpr & "','" &env_bal & "','" &env_mat & "','" & env_secur & "','" & policy_prevent & "','" & policy_monitor & "','" & policy_comunication & "','" & org_support & "','" & org_priority & "','"& date_acc &"' )"
'response.Write("") &  Sql_r
recset.open Sql_r,Conn,1,3
conn.close
set conn = nothing
		response.Write("<script  language='JavaScript'> ")
		response.Write("alert('ºÑ¹·Ö¡àÃÕºÃéÍÂáÅéÇ ');")		
		response.Write("window.close();")		
		response.Write("</script>")
end if
%>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit