403Webshell
Server IP : 61.19.30.66  /  Your IP : 216.73.216.59
Web Server : Apache/2.2.22 (Ubuntu)
System : Linux klw 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64
User : www-data ( 33)
PHP Version : 5.3.10-1ubuntu3.48
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/admissions3/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/admissions3/search4test.php
<?
	session_start();
	if($_SESSION['idt'] == "")
	{
		echo "Please Login!";
		exit();
	}

	if($_SESSION['Status'] != "USER")
	{
		echo "This page for Admin only!";
		exit();
	}	
	
	mysql_connect("localhost","root","klw3322");
	mysql_select_db("klw");
	mysql_query("SET character_set_results=tis620");//ตั้งค่าการดึงข้อมูลออกมาให้เป็น tis620
	mysql_query("SET character_set_client=tis620");//ตั้งค่าการส่งข้อมุลลงฐานข้อมูลออกมาให้ เป็น tis620
	mysql_query("SET character_set_connection=tis620");//ตั้งค่าการติดต่อฐานข้อมูลให้เป็น tis6
	
	$strSQL = "SELECT * FROM teacher WHERE idt = '".$_SESSION['idt']."' ";
	$objQuery = mysql_query($strSQL);
	$objResult = mysql_fetch_array($objQuery);
?>




<?

require_once "connectdb.php";
require_once "tdate.php";


?>
<html>
<head>
<title>-:- ADMIN -:-</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="style.css" rel="stylesheet" type="text/css">
</head>

<body bgcolor="#5A697E"  onLoad="javascript:document.getElementById('useradmin').focus();">
<table width="75%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td bgcolor="#003399">
<div align="center"><font color="#FFFFFF" size="+1"><strong>ฝายบริหารงานวิชาการ <font color="#FFFF00">โรงเรียนกันทรลักษ์วิทยา</font></strong></font></div></td>
  </tr>
  <tr> 
    <td bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="1" cellpadding="1">
        <tr> 
          <td><div align="right"><font color="#ff0000" size="2"><font color="#333333">ยินดีต้อนรับ 
              :</font> <font color="#ff0000"><? echo "<u>$adminname</u>"; ?> 
              <font color="#666666">เข้าสู่ระบบค่ะ </font></font></font></div></td>
        </tr>
        <tr> 
          <td><div align="right"><font color="#666666" size="2"><a href="home.php">หน้าหลักระบบ</a> 
              | <a href="../web2/logout.php">ออกจากระบบ</a></font></div></td>
        </tr>
        <tr> 
          <td><div align="center">
              <table width="773" border="0" align="center" cellpadding="0" cellspacing="0">
                <tr> 
                  <td width="198"><a href="add.php"><font color="#FF0000" size="2">เพิ่มข้อมูลสมาชิก</font></a></td>
                  <td width="575"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                      <form method="post" action="search4test.php">
                        <tr> 
                          <td><div align="center"><font color="#666666" size="2">ค้นหา 
                              : 
                              <input type=text name=txtsearch size=20 class=input>
                              <input name="searchtype" type="radio" value="idstd" checked>เลขนักเรียน 
                              <input name="searchtype" type="radio" value="room">ห้อง 
                              <input type="radio" name="searchtype" value="name">ชื่อ 
                              <input name="Submit" type="submit" class="submitad" value="ค้นหา">
                              </font> </div></td>
                        </tr>
                      </form>
                    </table></td>
                </tr>
                <tr> 
                  <td colspan="2"><font size="2">ข้อมูลที่ค้นหา : <font color="#000066"><? echo "$_POST[txtsearch]"; ?></font></font></td>
                </tr>
              </table>
              <table width="76%" border="0" align="center" cellpadding="1" cellspacing="1">
                <tr> 
                  <td><table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
                      <tr class="jobscss"> 
                        <td bgcolor="#FFFFFF"> <table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr> 
                              <td bgcolor="#000000"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                                  <tr bgcolor="#006666"> 
                                    <td width="44" height="24"> <div align="center"><font color="#FFFFFF" size="2">#</font></div></td>
                                    <td width="246"> <div align="center"><font color="#FFFFFF" size="2">ชื่อ-นามสกุล</font></div></td>
                                    <td width="210"><div align="center"><font color="#FFFFFF" size="2">เลขประจำตัวเดิม</font></div></td>
                                    <td width="159"><div align="center"><font color="#FFFFFF" size="2">เลขประจำตัวสอบ</font></div></td>
                                    <td width="94"> <div align="center"><font color="#FFFFFF" size="2">#</font></div></td>
                                  </tr>
                                </table></td>
                            </tr>
                          </table>
                          <?
$page = $_GET['page'];
$num = 1;
$select_type="select * from member4  where $_POST[searchtype]  LIKE '%$_POST[txtsearch]%' order by id asc";
$query_select=mysql_query($select_type);
$num_rows=mysql_num_rows($query_select);

if($num_rows<1){
echo "<br><br><center><font color=#666666 face=tahoma size=2>ไม่พบข้อมูลทีี่ท่านค้นหาค่ะ</font></center>";
}else{
		$select="select * from member4  where $_POST[searchtype]  LIKE '%$_POST[txtsearch]%'   order by id asc";
		$q_ry = mysql_query($select);
	 	$num_rows=mysql_num_rows($q_ry);
  		$pagesize=45;
		$rt=$num_rows%$pagesize;
		if($rt!=0)
			{
				$totalpage=floor($num_rows/$pagesize)+1;
			}
		else
			{
				$totalpage=floor($num_rows/$pagesize);
				$toppic_id=1;
			}
		if(empty($page))
			{
				$page=1;
			}
		mysql_free_result($q_ry);
		$goto=($page-1)*$pagesize;
$sql_select_mem="Select * From member4  where room <1 and $_POST[searchtype]  LIKE '%$_POST[txtsearch]%'   order by id asc limit $goto,$pagesize";
		$fect=mysql_query($sql_select_mem);
		if(!$fect)
		{
		("ติดต่อฐานข้อมูลไม่ได้".mysql_error());
		exit;
		}

	  $bgcount=0;
	while($rows=mysql_fetch_array($fect))
	{
$idmember =$rows['id'];
$idstudent  =$rows['idstudent'];
$name =$rows['name'];
$surname  =$rows['surname'];
$sex  =$rows['sex'];
$pin  =$rows['pin'];
$room  =$rows['room'];
$idtest =$rows['idtest'];
$idstd =$rows['idstd'];
	?>
                          <table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr> 
                              <td bgcolor="#000000"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                                  <tr bgcolor="#FFFFFF"> 
                                    <td width="44" height="24"> <div align="center"><font color="#990000" size="2"><? echo "$num"; ?></font></div></td>
                                    <td width="245"><font color="#003366" size="2"><? echo "$name"; ?> &nbsp;&nbsp; <? echo "$surname"; ?></font><br> 
                                      <div align="left"></div></td>
                                    <td width="211"><font color="#003366" size="2"><? echo "$idstd"; ?></font></td>
                                    <td width="159"><font color="#003366" size="2"><? echo "$room"; ?></font></td>
                                    <td width="94"><div align="center"><a href=edit4test.php?id=<? echo "$idmember"; ?>><img src="images/pencil.jpg" width="20" height="20" border="0"></a> 
                                        <a href=del.php?id=<? echo "$idmember"; ?> onClick="return confirm ('คุณต้องการลบข้อมูลนี้? ')"><img src=images/delete.png width=22 height=22 border=0 alt=ลบข้อมูล></a></div></td>
                                  </tr>
                                </table></td>
                            </tr>
                          </table>
                          <?
$num = $num+1;
}
echo "<div align=center><br>
                    <font color=#999999 size=2><span class=cc> ";
	for($i=1;$i<$page;$i++)
	{
	echo"<a href='$PHP_SELF?page=$i'><font size=2 color='#000000' class=textborder>$i</font></a> ";
	}
	echo"<font size=2 color=#000000><b><font size=2 color='#FF00000' class=textborderok>$page</font></b></font> ";
	for($i=$page+1;$i<=$totalpage;$i++)
	{
	echo"<a href='$PHP_SELF?page=$i'><font size=2 color='#000000' class=textborder>$i</font></a> ";
	}
echo "</span></font> </div>";
}
?>
                        </td>
                      </tr>
                      <tr class="jobscss"> 
                        <td height="19">&nbsp;</td>
                      </tr>
                      <tr> 
                        <td><div align="center"></div></td>
                      </tr>
                    </table></td>
                </tr>
              </table>
            </div></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
        </tr>
      </table></td>
  </tr>
  <tr>
    <td><div align="center"><? echo "<font size=2 color=#ffffff>$footerweb</font>"; ?></div></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit