403Webshell
Server IP : 134.236.49.22  /  Your IP : 216.73.216.114
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Menu pusdu/year60/insuranc/list หน้าแรกไม่ได้ใช้/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Menu pusdu/year60/insuranc/list หน้าแรกไม่ได้ใช้/พังlistclinic.php
<?php
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
?>
<html>
<head>
<title>кԹԡѳä ҧ</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<style type="text/css">
<!--
.style3 {color: #FF3300}
.style5 {
	font-size: 10px;
	color: #00FFFF;
}
-->
</style>
</head>
<body>
<div align="center"><img src="../img/icon/3.jpg" width="104" height="128"><br>
    <span class="style3">Թյ͹ѺкŤѳä</span><br>
  <br>
  <?
$objConnect = mysql_connect("localhost","root","") or die("Error Connect to Database");
$objDB = mysql_select_db("clinic");

//*** Add Condition ***//
if($_POST["hdnCmd"] == "Add")
{
	$strSQL ="INSERT INTO wannaroke ";
	$strSQL .="(TBNO,name,address,diac,smear,xray,medicine,includepaint,comorbid,status,result) ";
	$strSQL .="VALUES ";
	$strSQL .="('".$_POST["txtAddTBNO"]."','".$_POST["txtAddname"]."' ";
	$strSQL .=",'".$_POST["txtAddaddress"]."' ";
	$strSQL .=",'".$_POST["txtAdddiac"]."','".$_POST["txtAddsmear"]."' ";
	$strSQL .=",'".$_POST["txtAddxray"]."' ";
	$strSQL .=",'".$_POST["txtAddmedicine"]."','".$_POST["txtAddincludepaint"]."' ";
	$strSQL .=",'".$_POST["txtAddcomorbid"]."' ";
	$strSQL .=",'".$_POST["txtAddstatus"]."','".$_POST["txtAddresult"]."') ";
	$objQuery = mysql_query($strSQL);
	if(!$objQuery)
	{
		echo "Error Save [".mysql_error()."]";
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}

//*** Update Condition ***//
if($_POST["hdnCmd"] == "Update")
{
	$strSQL = "UPDATE customer SET ";
	$strSQL .="TBNO = '".$_POST["txtEditTBNO"]."' ";
	$strSQL .=",name = '".$_POST["txtEditname"]."' ";
	$strSQL .=",address = '".$_POST["txtEditaddress"]."' ";
	$strSQL .=",diac = '".$_POST["txtEditdiac"]."' ";
	$strSQL .=",smear = '".$_POST["txtEditsmear"]."' ";
	$strSQL .=",xray = '".$_POST["txtEditxray"]."' ";
	$strSQL .=",medicine = '".$_POST["txtEditmedicine"]."' ";
	$strSQL .=",includepaint = '".$_POST["txtEditincludepaint"]."' ";
	$strSQL .=",comorbid = '".$_POST["txtEditcomorbid"]."' ";
	$strSQL .=",status = '".$_POST["txtEditstatus"]."' ";
	$strSQL .=",result = '".$_POST["txtEditresult"]."' ";
	$strSQL .="WHERE TBNO = '".$_POST["hdnEditTBNO"]."' ";
	$objQuery = mysql_query($strSQL);
	if(!$objQuery)
	{
		echo "Error Update [".mysql_error()."]";
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}

//*** Delete Condition ***//
if($_GET["Action"] == "Del")
{
	$strSQL = "DELETE FROM wannaroke ";
	$strSQL .="WHERE TBNO = '".$_GET["CusID"]."' ";
	$objQuery = mysql_query($strSQL);
	if(!$objQuery)
	{
		echo "Error Delete [".mysql_error()."]";
	}
	//header("location:$_SERVER[PHP_SELF]");
	//exit();
}

$strSQL = "SELECT * FROM wannaroke";
$objQuery = mysql_query($strSQL) or die ("Error Query [".$strSQL."]");
?>
</div>
<form name="frmMain" method="post" action="<?=$_SERVER["PHP_SELF"];?>">
<input type="hidden" name="hdnCmd" value="">
<table width="800" border="1">
  <tr bordercolor="#00CCFF">
    <th width="5"> <div align="center">TBNO </div></th>
    <th width="17"> <div align="center"> ʡ</div></th>
    <th width="15"> <div align="center"> </div></th>
    <th width="15"> <div align="center">ԹԨ </div></th>
    <th width="15"> <div align="center">ŵǨ (Smear) </div></th>
    <th width="15"> <div align="center">Chest film </div></th>
	<th width="15"> <div align="center">ٵ </div></th>
	<th width="15"> <div align="center">ҡâҧ§ </div></th>
	<th width="15"> <div align="center">ä </div></th>
	<th width="15"> <div align="center">ʶҹ </div></th>
	<th width="15"> <div align="center">šѡ </div></th>
    <th width="30"> <div align="center">Edit </div></th>
    <th width="30"> <div align="center">Delete </div></th>
  </tr>
<?
while($objResult = mysql_fetch_array($objQuery))
{
?>

  <?
	if($objResult["TBNO"] == $_GET["CusID"] and $_GET["Action"] == "Edit")
	{
  ?>
  
    <td width="5" height="58"><div align="center">
		<input type="text" name="txtEditTBNO" size="5" value="<?=$objResult["TBNO"];?>">
		<input type="hidden" name="hdnEditTBNO" size="5" value="<?=$objResult["TBNO"];?>">
	</div></td>
    <td><textarea name="txtEditname" size="15" value="<?=$objResult["name"];?>"></td>
    <td><textarea name="txtEditaddress"  cols="15" rows="4" value="<?=$objResult["address"];?>"></textarea></td>
    <td><div align="center"><textarea name="txtEditdiac"  cols="15" rows="4" value="<?=$objResult["diac"];?>"></textarea></div></td>
    <td align="right"><textarea name="txtEditsmear"  cols="15" rows="4" value="<?=$objResult["smear"];?>"></textarea></td>
    <td align="right"><textarea name="txtEditxray"  cols="15" rows="4" value="<?=$objResult["xray"];?>"></textarea></td>
	<td align="right"><textarea name="txtEditmedicine"  cols="15" rows="4" value="<?=$objResult["medicine"];?>"></textarea></td>
	<td align="right"><textarea name="txtEditincludepaint"  cols="15" rows="4" value="<?=$objResult["includepaint"];?>"></textarea></td>
	<td align="right"><textarea name="txtEditcomorbid"  cols="15" rows="4" value="<?=$objResult["comorbid"];?>"></textarea></td>
	<td align="right"><textarea name="txtEditstatus"  cols="15" rows="4" value="<?=$objResult["status"];?>"></textarea></td>
	<td align="right"><textarea name="txtEditresult"  cols="15" rows="4" value="<?=$objResult["result"];?>"></textarea></td>
    <td colspan="2" align="right"><div align="center">
      <input name="btnAdd" type="button" id="btnUpdate" value="Update" OnClick="frmMain.hdnCmd.value='Update';frmMain.submit();">
	  <input name="btnAdd" type="button" id="btnCancel" value="Cancel" OnClick="window.location='<?=$_SERVER["PHP_SELF"];?>';">
    </div>
	</td>

  <?
	}
  else
	{
  ?>
  <tr bordercolor="#666666">
    <td width="5"><div align="center"><?=$objResult["TBNO"];?></div></td>
    <td><?=$objResult["name"];?></td>
    <td><?=$objResult["address"];?></td>
    <td><div align="center"><?=$objResult["diac"];?></div></td>
    <td align="right"><?=$objResult["smear"];?></td>
    <td align="right"><?=$objResult["xray"];?></td>
	<td align="right"><?=$objResult["medicine"];?></td>
	<td align="right"><?=$objResult["includepaint"];?></td>
	<td align="right"><?=$objResult["comorbid"];?></td>
	<td align="right"><?=$objResult["status"];?></td>
	<td align="right"><?=$objResult["result"];?></td>
    <td align="center"><a href="<?=$_SERVER["PHP_SELF"];?>?Action=Edit&CusID=<?=$objResult["TBNO"];?>">Edit</a></td>
	<td align="center"><a href="JavaScript:if(confirm('Confirm Delete?')==true){window.location='<?=$_SERVER["PHP_SELF"];?>?Action=Del&CusID=<?=$objResult["TBNO"];?>';}">Delete</a></td>
  </tr>
  <?
	}
  ?>
<?
}
?>
  <tr bordercolor="#666666">
    <td width="5"><div align="center"><input type="text" name="txtAddTBNO" size="5"></div></td>
    <td><input type="text" name="txtAddname" size="15"></td>
    <td><textarea name="txtAddaddress" cols="15" rows="4"></textarea></td>
    <td><div align="center"><textarea name="txtAdddiac" cols="15" rows="4"></textarea></div></td>
    <td align="right"><textarea name="txtAddsmear" cols="15" rows="4"></textarea></td>
    <td align="right"><textarea name="txtAddxray" cols="15" rows="4"></textarea></td>
	<td align="right"><textarea name="txtAddmedicine" cols="15" rows="4"></textarea></td>
	<td align="right"><textarea name="txtAddinclude" cols="15" rows="4"></textarea></td>
	<td align="right"><textarea name="txtAddcomorbid" cols="15" rows="4"></textarea></td>
	<td align="right"><textarea name="txtAddstatus" cols="15" rows="4"></textarea></td>
	<td align="right"><textarea name="txtAddresult" cols="15" rows="4"></textarea></td>
    <td colspan="2" align="right"><div align="center">
      <input name="btnAdd" type="button" id="btnAdd" value="Add" OnClick="frmMain.hdnCmd.value='Add';frmMain.submit();">
    </div></td>
  </tr>
</table>
</form>
<div align="center">
  <p>
    <?
mysql_close($objConnect);
?>
    <br>
    <br>
    <br>
    <br>
    <br>
    <br>
    
  <img src="../img/icon/1.jpg" width="82" height="87"><br>
  <span class="style5">Powered by pozedorn@gmail.com çҺѵպ .10 </span><br>
    <br>
  </p>
</div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit