403Webshell
Server IP : 61.19.30.66  /  Your IP : 216.73.216.59
Web Server : Apache/2.2.22 (Ubuntu)
System : Linux klw 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64
User : www-data ( 33)
PHP Version : 5.3.10-1ubuntu3.48
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/gpa/homeroom/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/gpa/homeroom/apk.php
<?
require_once "head.php";
require_once "../config/confiteacher.inc.php";
?>
<?
require_once "../config/connectdb.php";
?>
<?
$sql2="SELECT namesc,tumbolsc,amps,dissc,years,termx FROM config";
mysql_query("SET character_set_results=tis620");//ตั้งค่าการดึงข้อมูลออกมาให้เป็น tis620
mysql_query("SET character_set_client=tis620");//ตั้งค่าการส่งข้อมุลลงฐานข้อมูลออกมาให้ เป็น tis620
mysql_query("SET character_set_connection=tis620");//ตั้งค่าการติดต่อฐานข้อมูลให้เป็น ti
$result2 = mysql_query($sql2);
while (list($namesc,$tumbolsc,$amps,$dissc,$years,$termx) = mysql_fetch_row($result2)) {
$xsc_Name = $namesc;
$xsc_tumbolsc = $tumbolsc;
$xsc_disc = $dissc;
$xsc_amps = $amps;
$xsc_years = $years;
$termxx = $termx;
}




?>
<html>
<head>
<title>-:- ADMIN -:-</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="style.css" rel="stylesheet" type="text/css">
</head>
<body bgcolor="#FFFFFF"  onLoad="javascript:document.getElementById('useradmin').focus();">
<table width="80%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td bgcolor="#003399">
<div align="center"><font color="#FFFFFF" size="+1"><strong>ตรวจสอบคะแนนหน่วยครู/ ก่อน กลาง หลัง ปลาย ต้องเท่ากัน<font color="#FFFF00"></font></strong></font></div></td>
  </tr>
  <tr> 
    <td bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="1" cellpadding="1">
        
              </table>
               <tr> 

<form name="frmSearch" method="post" action="homesearch.php">
  <table width="599" border="0">
    

  </table>
</form>
                  
               <table width="100%" border="0" align="center" cellpadding="1" cellspacing="1">
                <tr> 
                  <td><table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
                      <tr class="jobscss"> 
                        <td bgcolor="#FFFFFF"> <table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr> 
                              <td bgcolor="#000000"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                                  <tr bgcolor="#006666"> 
                                    <td width="15" height="24"> <div align="center"><font color="#FFFFFF" size="2">#</font></div></td>
                                    <td width="50"> <div align="center"><font color="#FFFFFF" size="2">รหัส</font></div></td>
                                    <td width="50"><div align="center"><font color="#FFFFFF" size="2">ก่อน</font></div></td>
                                    <td width="50"><div align="center"><font color="#FFFFFF" size="2">กลาง</font></div></td>
									 <td width="50"><div align="center"><font color="#FFFFFF" size="2">หลัง</font></div></td>
                                    <td width="50"><div align="center"><font color="#FFFFFF" size="2">ปลาย</font></div></td>
									<td width="50"><div align="center"><font color="#FFFFFF" size="2">รวม</font></div></td>

									<td width="50"> <div align="center"><font color="#FFFFFF" size="2">ครู</font></div></td>
                                  </tr>
                                </table></td>
                            </tr>
                          </table>

			








                          <?
$idschool=$objResult["teachcode"];
$page = $_GET['page'];
$num = 1;
$select_type="select * from registeacher

where registeach='$idschool' order by registeach asc";
$query_select=mysql_query($select_type);
$num_rows=mysql_num_rows($query_select);

if($num_rows<1){
echo "<br><br><center><font color=#666666 face=tahoma size=2>ยังไม่มีการเพิ่มข้อมูลค่ะ</font></center>";
}else{
		$select="select * from registeacher
		
		where registeach='$idschool' order by registeach asc";
		$q_ry = mysql_query($select);
	 	$num_rows=mysql_num_rows($q_ry);
  		$pagesize=45;
		$rt=$num_rows%$pagesize;
		if($rt!=0)
			{
				$totalpage=floor($num_rows/$pagesize)+1;
			}
		else
			{
				$totalpage=floor($num_rows/$pagesize);
				$toppic_id=1;
			}
		if(empty($page))
			{
				$page=1;
			}
		mysql_free_result($q_ry);
		$goto=($page-1)*$pagesize;


$sql_select_mem="select * from registeacher

where codeteach ='$_GET[id]' and yearsxx='$xsc_years' and termxx='$termxx' order by registeach asc limit $goto,$pagesize";
		$fect=mysql_query($sql_select_mem);
		if(!$fect)
		{
		("ติดต่อฐานข้อมูลไม่ได้".mysql_error());
		exit;
		}

	  $bgcount=0;
	while($rows=mysql_fetch_array($fect))
	{

$idschool2=$objResult["teachcode"];
$idmember =$rows['idregist'];
$registeach =$rows['registeach'];
$codeteach =$rows['codeteach'];
$midterm  =$rows['midterm'];
$final  =$rows['final'];






				$crsql="SELECT ( ku1+pu1+au1+ku2+pu2+au2+ku3+pu3+au3 ) FROM `registeacher`
				WHERE codeteach = '$_GET[id]' and registeach = '$registeach' and yearsxx='$xsc_years' and termxx='$termxx'";
				$slr=mysql_query($crsql) or die(mysql_error()."<br>".$crsql);
				$dcrd = mysql_fetch_array($slr);
				$bescore=$dcrd[0];



				$crsql="SELECT ( ku4+pu4+au4+ku5+pu5+au5+ku6+pu6+au6 ) FROM `registeacher`
				WHERE codeteach = '$_GET[id]' and registeach = '$registeach' and yearsxx='$xsc_years' and termxx='$termxx'";
				$slr=mysql_query($crsql) or die(mysql_error()."<br>".$crsql);
				$dcrd = mysql_fetch_array($slr);
				$afscore=$dcrd[0];


				$crsql="SELECT (name ) FROM `teacher`
				WHERE teachcode	 = '$registeach'";
				$slr=mysql_query($crsql) or die(mysql_error()."<br>".$crsql);
				$dcrd = mysql_fetch_array($slr);
				$name=$dcrd[0];

				$all=$bescore+$midterm+$afscore+$final;
	?>
                          <table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr> 
  <td bgcolor="#000000"><table width="100%" border="0" cellspacing="1" cellpadding="1">
  <tr bgcolor="#FFFFFF"> 
   <td width="15" height="24"> <div align="center"><font color="#990000" size="2"><? echo "$num"; ?></font></div></td>
   <td width="50"><font color="#003366" size="2">
   

 
  <? echo "$codeteach"; ?>
   
  



   </font></td>
<td width="50"><font color="#003366" size="2"><? echo "$bescore"; ?></td>
<td width="50"><font color="#003366" size="2"><? echo "$midterm"; ?></font></td>
<td width="50"><font color="#003366" size="2"><? echo "$afscore"; ?></font></td>
<td width="50"><div align="center"><? echo "$final"; ?></div></td>
<td width="50"><div align="center"><? echo "$all"; ?></div></td>
<td width="50"><div align="center"> <? echo "$name"; ?></div></td>
                                  </tr>
                                </table></td>
                            </tr>
                          </table>
                          <?
$num = $num+1;
}
echo "";
}
?>
                        </td>
                      </tr>
                      <tr class="jobscss"> 
                        <td height="19">&nbsp;</td>
                      </tr>
                      <tr> 
                        <td><div align="center"></div></td>
                      </tr>
                    </table></td>
                </tr>
              </table>
            </div></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
        </tr>
      </table></td>
  </tr>
  <tr>
    <td><div align="center"><? echo "<font size=2 color=#ffffff>$footerweb</font>"; ?></div></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit