403Webshell
Server IP : 61.19.30.66  /  Your IP : 216.73.216.59
Web Server : Apache/2.2.22 (Ubuntu)
System : Linux klw 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64
User : www-data ( 33)
PHP Version : 5.3.10-1ubuntu3.48
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/news.php
<?
require_once "connectdb.php";
?>
<html>
<head>
<title>-:- ADMIN -:-</title>
<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="style.css" rel="stylesheet" type="text/css">
</head>

<body bgcolor="#FFFFFF"  onLoad="javascript:document.getElementById('useradmin').focus();">

<table width="75%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td bgcolor="#003399">
<div align="center"><font color="#FFFFFF" size="+1"><strong>ข่าวประชาสัมพันธ์<font color="#FFFF00"></font></strong></font></div></td>
  </tr>
  <tr> 
    <td bgcolor="#FFFFFF"><table width="100%" border="0" cellspacing="1" cellpadding="1">
        <tr> 
          
        </tr>
       
        <tr> 
          <td><div align="center">
              <table width="773" border="0" align="center" cellpadding="0" cellspacing="0">
                <tr> 
                  
                  <td width="575"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                     
                    </table></td>
                </tr>
              </table>
			  <form name="frmSearch" method="post" action="sentgpas.php">
  <table width="599" border="0">
    <tr>
      <th>แสดงข้อมูล
        <select name="year">
				<option value="">-กลุ่มงาน-</option> 
				<?php
					$sql = "SELECT * FROM sara";
					$result = mysql_query( $sql, $connect);
					while ($rs = mysql_fetch_array($result))
						{	
							echo "<option value=\"$rs[sara_id]\">$rs[sara_name]</option>\n";
						}
				?>
				</select>	
        <select name="xterm">
				<option value="">-NNN-</option> 
				<?php
					$sql = "SELECT xterm FROM transcripts group by xterm";
					$result = mysql_query( $sql, $connect);
					while ($rs = mysql_fetch_array($result))
						{	
							echo "<option value=\"$rs[xterm]\">$rs[xterm]</option>\n";
						}
				?>
				</select>	
      <input type="submit" value="Search"></th>
    </tr>

  </table>
</form>
              <table width="76%" border="0" align="center" cellpadding="1" cellspacing="1">
                <tr> 
                  <td><table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
                      <tr class="jobscss"> 
                        <td bgcolor="#FFFFFF"> <table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr> 
                              <td bgcolor="#000000"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                                  <tr bgcolor="#006666"> 
                                    <td width="44" height="24"> <div align="center"><font color="#FFFFFF" size="2">#</font></div></td>
                                   
                                    <td width="210"><div align="center"><font color="#FFFFFF" size="2">หัวข้อเรื่อง</font></div></td>
                                    <td width="159"><div align="center"><font color="#FFFFFF" size="2">วันที่</font></div></td>
                                    <td width="94"> <div align="center"><font color="#FFFFFF" size="2">download</font></div></td>
									
									 
                                  </tr>
                                </table></td>
                            </tr>
                          </table>
                          <?
$page = $_GET['page'];
$num = 1;
$select_type="SELECT * FROM news";
$query_select=mysql_query($select_type);
$num_rows=mysql_num_rows($query_select);

if($num_rows<1){
echo "<br><br><center><font color=#666666 face=tahoma size=2>ยังไม่มีการเพิ่มข้อมูลค่ะ</font></center>";
}else{
		$select="select * from news";
		$q_ry = mysql_query($select);
	 	$num_rows=mysql_num_rows($q_ry);
  		$pagesize=10;
		$rt=$num_rows%$pagesize;
		if($rt!=0)
			{
				$totalpage=floor($num_rows/$pagesize)+1;
			}
		else
			{
				$totalpage=floor($num_rows/$pagesize);
				$toppic_id=1;
			}
		if(empty($page))
			{
				$page=1;
			}
		mysql_free_result($q_ry);
		$goto=($page-1)*$pagesize;
$sql_select_mem="select * from  news order by idnews desc  limit $goto,$pagesize";
		$fect=mysql_query($sql_select_mem);
		if(!$fect)
		{
		("ติดต่อฐานข้อมูลไม่ได้".mysql_error());
		exit;
		}

	  $bgcount=0;
	while($rows=mysql_fetch_array($fect))
	{
$idcode =$rows['idnews'];
$news_report  =$rows['news_report'];
$news_file =$rows['news_file'];
$fileupload =$rows['fileupload'];
$date = date("j/n/").(date("Y")+543) ;

	?>
                          <table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr> 
                              <td bgcolor="#000000"><table width="100%" border="0" cellspacing="1" cellpadding="1">
                                  <tr bgcolor="#FFFFFF"> 
                                    <td width="44" height="24"> <div align="center"><font color="#990000" size="2"><? echo "$num"; ?></font></div></td>
                                  
                                      <div align="left"></div></td>
                                    <td width="211"><font color="#003366" size="2"><? echo "$news_file"; ?></font></td>
                                    <td width="159"><font color="#003366" size="2"><? echo "$news_report"; ?></font>
									
									
				<? if($news_report == $date)
 {
   echo '<img src="images/news.gif" width="30" height="10" border="0" />';
 }
 else if($news_report != $date)
 {
   echo "";
 }
?>					
									
									
									
									
									
									</td>
									<td width="94"><center><a target="_blank" href="gpa/news/fileupload/<?php echo $rows["fileupload"];?>"><img src="gpa/images/open.jpg" width="20" height="20" border="0"></a></center></td>
                                    
										
                                  </tr>
                                </table></td>
                            </tr>
                          </table>
                          <?
$num = $num+1;
}
echo "<div align=center><br>
                    <font color=#999999 size=2><span class=cc> ";
	for($i=1;$i<$page;$i++)
	{
	echo"<a href='$PHP_SELF?page=$i'><font size=2 color='#000000' class=textborder>$i</font></a> ";
	}
	echo"<font size=2 color=#000000><b><font size=2 color='#FF00000' class=textborderok>$page</font></b></font> ";
	for($i=$page+1;$i<=$totalpage;$i++)
	{
	echo"<a href='$PHP_SELF?page=$i'><font size=2 color='#000000' class=textborder>$i</font></a> ";
	}
echo "</span></font> </div>";
}
?>
                        </td>
                      </tr>
                      <tr class="jobscss"> 
                        <td height="19">&nbsp;</td>
                      </tr>
                      <tr> 
                        <td><div align="center"></div></td>
                      </tr>
                    </table></td>
                </tr>
              </table>
            </div></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
        </tr>
      </table></td>
  </tr>
  <tr>
    <td><div align="center"><? echo "<font size=2 color=#ffffff>$footerweb</font>"; ?></div></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit