403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/reportservice - Copy/3/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/reportservice - Copy/3/view_rq.php
<?php
include("dbconfig.php");
include( "function.php" );
?>
<?
if ( $cmdSubmit == "เห็นสมควรอนุญาตขอรถ" )
{
if ( empty( $approv ) )	{ 
		echo "<script language='JavaScript'>";
		echo "alert('ไม่ได้ลงชื่อผู้อนุญาต')";
		echo "history.back(1)";
		echo "</script>"; 
		}
	
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
	//$datedb = formatDateDB($date);
	 $usql="update tran set  comment = '$comment',approv='$approv'  where no ='$no' ";
	 $uresult = mysql_query($usql );
	
 	 				
echo "<script language='JavaScript'>";
echo "alert('บันทึกการขอรถ  เรียบร้อยแล้ว');";
echo "location = 'rq_chk.php' ;";
echo "</script>";
}
?>
<html>
<head>
<title>อนุมัติการใช้รถ </title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:white;text-decoration:none;font-family:ms sans serif;}
a:visited{color:white;text-decoration:none;font-family:ms sans serif;}
a:hover{color:yellow;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>

<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>
<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>
<TABLE height=54 cellSpacing=0 cellPadding=0 width="100%" border=0>
  <TBODY>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f7ff" colSpan=2></TD>
    </TR>
    <TR bgColor=#c7d2e7> 
      <TD class=thwbold width="89%" height=28> <div align="center">เรียน &nbsp;&nbsp; 
          <? echo $a_name ;?>&nbsp;&nbsp; คลิ๊กปุ่มด้านล่างเพื่อขอรถให้กับคุณ 
          &nbsp;&nbsp;<? echo $name ; ?></div></TD>
      <TD width="11%" height=28 align=right vAlign=center bgColor=#c7d1e7 class=thsans> 
        <A 
      href=""></A> &nbsp; <A href=""></A> <A 
      href=""></A>&nbsp; </TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black" colSpan=2></TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: #f0f8ff" colSpan=2></TD>
    </TR>
    <TR vAlign=center bgColor=#216289> 
      <TD class=thwbold colSpan=2 height=20>&nbsp; </TD>
    </TR>
    <TR> 
      <TD style="BACKGROUND-COLOR: black; heigth: 1" 
colSpan=2></TD>
    </TR>
  </TBODY>
</TABLE>
<?php

mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
			$sql="select  *  from tran  where no = '$no' ";
			$result=mysql_query($sql);
					
			while ($object = mysql_fetch_object($result))
			  {
			  $user_id = $object ->user_id;
			  $target = $object ->target;
			  $person = $object ->person;	
			  $dept_id = $object->dept_id;
			  $dept_h_name = $object->dep_h_name;
			  $u1 = $object ->u1;
			  $u2 = $object ->u2;
			  $u3 = $object ->u3;
			  $u4 = $object ->u4;
			  $u5 = $object ->u5;
			  $reason = $object ->reason;
			  $date = $object ->date ;
			  $date1 = $object ->date1;
			  $time1 = $object ->time1;
			  $time = $object ->time;
    		  $date2 = $object ->date2 ;
			  $time2 = $object ->time2;
			   $approv = $object ->approv;
				
				$dept_id = $object->dept_id;
				$dept_name = $object->dept_name;
				$dept_h_full_name = $object->dept_h_full_name;
				
			  }			

			  ?> 

			  <? 
					#$res = mysql_query("select dept_h_full_name from tran where no = 13732;");
					#$row = mysql_fetch_object($res);
					#echo $row->dept_h_full_name;
			  ?>

<form name="form1" method="post" action="view_rq.php">
  <TABLE cellSpacing=0 cellPadding=3 width="100%" align=center border=0>
    <TBODY>
      <TR> 
        <TD height="126" vAlign=top> 
          <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
            <TBODY>
              <TR> 
                <TD width="100%" colSpan=2> 
                  <TABLE width="100%" border=0>
                    <TBODY>
                      <TR> 
                        <TD 
                      style="BACKGROUND-IMAGE: url(pointsmall.gif); BACKGROUND-REPEAT: repeat-x"></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  <DIV class=thtahomasmall 
                  style="PADDING-RIGHT: 2px; PADDING-LEFT: 2px; PADDING-BOTTOM: 2px; PADDING-TOP: 2px" 
                  align=right> </DIV>
                  <DIV id=news_newyear 
                  style="BORDER-RIGHT: #c7d2e7 1px solid; PADDING-RIGHT: 3px; BORDER-TOP: #c7d2e7 1px solid; PADDING-LEFT: 3px; MARGIN-BOTTOM: 3px; PADDING-BOTTOM: 3px; BORDER-LEFT: #c7d2e7 1px solid; PADDING-TOP: 3px; BORDER-BOTTOM: #c7d2e7 1px solid; BACKGROUND-COLOR: #f0f8ff"> 
                    <table width="95%" border="0" cellpadding="0" cellspacing="2">
                      <tr> 
                        <td width="12%" height="25"><input name="no" type="hidden" id="no" size="6" value="<? echo $no ;?>"> 
                          <? echo "ใบขอเลขที่ : ".$no ;?></td>
                        <td width="88%"> <div align="right">วันที่ กรอกใบขอรถ 
                            <input name="date" type="text" id="date" value="<? echo FormatDateshow($date) ; ?>" size="12" maxlength="12">
                            <input name="time" type="text" id="date2" value="<? echo  $time; ?>" size="12" maxlength="12">
                          </div></td>
                      </tr>
                      <tr> 
                        <td nowarp height="23" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ชื่อผู้ขอ</strong></font> 
                          <input type="hidden" name="textfield"  value="<? echo $name ; ?>"> 
                          <? echo $name ; ?> <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp; 

                          <strong>แผนก</strong>&nbsp;<input type="text" name="dept_name" size="<?=strlen($dept_name)?>"  id="kn_car_department_name" value="<?=$dept_name?>"  readonly disabled />
						  <input type="hidden" name="kn_car_department_id" id="dept_id" value="<?=$dept_id?>" readonly disabled />&nbsp;&nbsp;
						  <? //echo $dept_id;exit;////////////////////////////////////////////////////////////////////////////////////////////////////////////// ?>
                          <strong>หัวหน้าแผนก</strong>&nbsp;<input type="text" name="dep_h_full_name" size="<?=strlen($dept_h_full_name)?>" id="dept_head_name_thai" value="<?=$dept_h_full_name?>" readonly disabled/> 
                         
						  </font></td>
                      </tr>
                      <tr> 
                        <td height="20" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ขออนุญาตใช้รถยนต์ 
                          ( ไปที่ไหน )</strong></font> <input name="target" type="text" id="target" size="80" value="<? echo  $target ; ?>" ></td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="2"><strong><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">เพื่อ</font></strong> 
                          <input name="reason" type="text" id="code22" size="90" value="<? echo $reason ;?>"> 
                          <strong>มีคนนั่ง</strong> <input name="person" type="text" id="person" size="3" maxlength="3" value="<? echo $person ;?>"> 
                          <strong> คน </strong></td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ขอใช้รถในวันที่</strong></font>ี่ 
                          <input name="date1" type="text" id="date22" value="<? echo formatDateshow($date1) ; ?>" size="12" maxlength="12"> 
                          <strong>เวลา</strong> <input name="time1" type="text" id="time1" size="6" value="<? echo $time1 ;?>"> 
                          <strong> ถึงวันที่</strong> <input name="date2" type="text" id="date32" value="<? echo formatDateshow($date2) ; ?>" size="12" maxlength="12"> 
                          <strong> เวลา</strong> <input name="time2" type="text" id="time2" size="6" value="<? echo $time2 ;?>"></td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="2"> <div align="right">ผู้ขออนุญาต 
                            <input name="approv" type="text" id="approv" value="<? echo $a_name ;?>" readonly="yes">
                          </div></td>
                      </tr>
                      <tr> 
                        <td height="20"><strong>รายชื่อผู้นั่ง</strong></td>
                        <td> 1. 
                          <input name="u1" type="text" id="u1"  value="<? echo $u1 ;?>">
                          2. 
                          <input name="u2" type="text" id="u2" value="<? echo $u2 ;?>">
                          3. 
                          <input name="u3" type="text" id="u3" value="<? echo $u3 ;?>" ></td>
                      </tr>
                      <tr> 
                        <td height="20">&nbsp;</td>
                        <td>4. 
                          <input name="u4" type="text" id="u42" value="<? echo $u4 ;?>">
                          5. 
                          <input name="u5" type="text" id="u52" value="<? echo $u5 ;?>"></td>
                      </tr>
                      <tr> 
                        <td height="22"><strong><font color="#FF0000" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">หมายเหตุ</font></strong></td>
                        <td><strong><font color="#FF0000" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">ไม่อนุญาต 
                          เพราะ </font><font face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          <input name="comment" type="text" id="comment" size="60">
                          </font></strong></td>
                      </tr>
                      <tr> 
                        <td height="39">&nbsp;</td>
                        <td> <div align="right"> เมื่ออ่านรายละเอียดแล้ว คลิ๊กปุ่มนี้เพื่อขออนุญาต 
                            &gt;&gt; 
                            <input name="cmdSubmit" type="submit" id="cmdSubmit" value="เห็นสมควรอนุญาตขอรถ">
                          </div></td>
                      </tr>
                    </table>
                  </DIV></TD>
              </TR>
            </TBODY>
          </TABLE>
        </TD>
      </TR>
    </TBODY>
  </TABLE>
  </form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit