403Webshell
Server IP : 134.236.49.22  /  Your IP : 216.73.216.114
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/scan_inS/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/scan_inS/add.php
<?php
session_start();
include("dbconfig.php");
//$_SESSION['iUser'];
$date = date("Y-m-d H:i:s");
$ebits = ini_get('error_reporting');
error_reporting($ebits ^ E_NOTICE);
	 
			 
?>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

            
<?php
$pwd = $_POST['pwd'];
$id 	= $_POST['id'];
//echo $id;
if ( $Submit == "บันทึกเข้า" )
{
$name=$_POST['name'];
$dateIn=$_POST['dateIn'];
$comm=$_POST['comment'];
$objConnect = mysql_connect("localhost","root","090407") or die("Error Connect to Database");
	mysql_query("SET character_set_results=utf8");
	mysql_query("SET character_set_client=utf8");
	mysql_query("SET character_set_connection=utf8");
	$objDB = mysql_select_db("scan_inserver");
		
	$plquery="INSERT INTO report (IDUser,dateIn,comment) VALUES ('$name','$dateIn','$comment') ";
	//echo $plquery.'<br>';
	$result=mysql_query($plquery);
	if($result === false ){
						echo "<script language=\"JavaScript\">alert('บันทึกข้อมูลไม่สำเร็จ');</script>";
					}else
				echo "<script language=\"JavaScript\">alert('บันทึกเรียบร้อย');
					window.location='report.php?&name=".$name."';</script>";
}	
    //echo '2'.$result;
?><title>บันทึกเข้า-ออก</title><br /> 
   
	
<TABLE cellSpacing=0 cellPadding=0 width="50%" align=center border=0>
  <TBODY>
    <TR> 
      <TD align=left>&nbsp;</TD>
      <TD class=footer align=right>&nbsp;</TD>
    </TR>
    <TR> 
      <TD colSpan=2> 
      <TABLE cellSpacing=0 cellPadding=0 width="100%">
          <TBODY>
            <TR> 
              <TD align=left> </TD>
              <TD class=bodybold align=right>&nbsp;</TD>
            </TR>
            <TR> 
               <TD colSpan=2> <FORM id="Form" name="Form" action="add.php" method="post" >
                <TABLE borderColor="#00FFFF" cellSpacing="0" cellPadding="0" width="100%" border=3>
                    <TBODY>
                        <TR> 
                            <TD> 
                            <TABLE id=tbGeneral style="WIDTH: 100%;BORDER-COLLAPSE: collapse"
                             cellSpacing=0 cellPadding=7 border=0>
                                <TBODY>
                                    <TR> 
                                        <TD style="BORDER-RIGHT: #f5f5f5 1px solid;
                                         BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold;
                                         FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid;
                                         BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY:
                                         Arial,Helvetica,sans-serif; BACKGROUND-COLOR:
                                         whitesmoke" colSpan=2><SPAN id=lblMsg></SPAN></TD>
                                    </TR>
                                    <TR> 
                                        <TD style="BORDER-RIGHT: #f5f5f5 1px solid;
                                        BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold;
                                        FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid;
                                        BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY:
                                        Arial,Helvetica,sans-serif"></TD>
                                        <TD style="BORDER-RIGHT: #f5f5f5 1px solid;
                                        BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px
                                        solid; BORDER-BOTTOM: #f5f5f5 1px solid">
                                       
<?php
	$objConnect = mysql_connect("localhost","root","090407") or die("Error Connect to Database");
	mysql_query("SET character_set_results=utf8");
	mysql_query("SET character_set_client=utf8");
	mysql_query("SET character_set_connection=utf8");
	$objDB = mysql_select_db("scan_inserver");
		
	$plquery="select * from  User  where IDUser='$id' ";
	$result=mysql_query($plquery);
	while($objResult = mysql_fetch_array($result)){
		$name=$objResult['username'];
		}
	
?>
				                        <?php echo $name;?>
										<input name="name"  type="hidden"  value="<?php echo $id;?>" >
										<input name="dateIn"  type="hidden"  value="<?php echo $date;?>" ></TD>
										
                   				    </TR>
                       				<TR> 
                                        <TD style="BORDER-RIGHT: #f5f5f5 1px solid;
                                        BORDER-TOP: #f5f5f5 1px solid; FONT-WEIGHT: bold;
                                        FONT-SIZE: 10pt; BORDER-LEFT: #f5f5f5 1px solid;
                                        BORDER-BOTTOM: #f5f5f5 1px solid; FONT-FAMILY:
                                        Arial,Helvetica,sans-serif">กิจกกรม</TD>
                                        <TD style="BORDER-RIGHT: #f5f5f5 1px solid;
                                        BORDER-TOP: #f5f5f5 1px solid; BORDER-LEFT: #f5f5f5 1px
                                        solid; BORDER-BOTTOM: #f5f5f5 1px solid">
                                        <textarea name="comment" type="textbox" id="comment" rows="2" cols="30"></textarea>
                                        </TD>
                                    </TR>
                                    <TR> 
	                                    <TD style="BORDER-RIGHT: #f5f5f5 1px solid;
                                        BORDER-TOP: #f5f5f5 1px solid; FONT-SIZE: 10pt;
                                        BORDER-LEFT: #f5f5f5 1px solid; BORDER-BOTTOM:#f5f5f5
                                        1px solid; FONT-FAMILY:Arial,Helvetica,sans-serif;
                                        BACKGROUND-COLOR: whitesmoke" colSpan=2 align="center">
                                        <INPUT id="Submit" type="submit" value="บันทึกเข้า"
                                        name="Submit"></TD>
                                    </TR>
                                </TBODY>
                             </TABLE>
                          </TD>
   			          </TR>
             		</TBODY>
				</TABLE>
               </FORM></td>
            </tr>
        </TBODY>
     </TABLE>
    </TD></TR>
  </TBODY>
</TABLE>    
<?php
//}?>
</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit