403Webshell
Server IP : 172.67.187.206  /  Your IP : 172.71.28.156
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/news/edu2018/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/news/edu2018/admin/detail.php

<?php
$code = $_GET['code'];
$userlevel=$_SESSION["user_login"];
?>
<?php 
$sql27= $mysqli->query("SELECT * FROM student where code='$code'");
$Row27 = mysqli_fetch_array($sql27);
?>
<style>
 th { font-size: 13px; }
td { font-size: 12px; }	
</style>
<div class="col-sm-6">
<section class="content">
<div class="box">
	<div class="box-header">
		<h3 class="box-title">ข้อมูลนักเรียน</h3>
	</div>
<div class="box-body">
<div class="col-sm-4">
	  <?php
if ($Row27['pic']=="") {
?>
<img src="../img/no-image.png" class="img-thumbnail" alt=" " width="200" height="220"><p><h4><b><?=$Row27['code'];?></b></h4></p>
<?php
}else {
?>
<img src="../student/photo/<?=$Row27['pic'];?>" class="img-thumbnail" alt="<?=$Row27['code'];?>" width="200" height="220">
<?php
}
?>
</div>	
<div class="col-sm-8">
	  <div class="row">
	  <div class="col-sm-12">
	  รหัส : <?=$Row27['code'];?>
	  </div>
	  </div>
	  <div class="row">
	  <div class="col-sm-12">
	  ชื่อ : <?=$Row27['prefix'];?><?=$Row27['name'];?>  <?=$Row27['sname'];?>
	  </div>
	  </div>
	  <div class="row">
	  <div class="col-sm-12">
	  ชื่อเล่น : <?=$Row27['nicname'];?>
	  </div>
	  </div>
	  <div class="row">
	  <div class="col-sm-12">
	  ชั้น : <?=$Row27['class'];?>
	  </div>
	  </div>
	  <div class="row">
	  <div class="col-sm-12">
	  ที่อยู่ :  บ้านเลขที่ <?=$Row27['ad'];?> หมู่ที่ <?=$Row27['moo'];?> ตำบล<?=$Row27['tambol'];?><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;อำเภอ<?=$Row27['ampher'];?> จังหวัด<?=$Row27['province'];?> <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;รหัสไปรษณีย์ <?=$Row27['zipcode'];?>
	  </div>
	  </div>
	  
</div>

</div>	
</div>
 </section>
</div>

<div class="col-sm-6">
<section class="content">
<div class="box">
	<div class="box-header">
		<h3 class="box-title">ผู้ปกครอง</h3>
	</div>
<div class="box-body">	
<?php
$sql= $mysqli->query("SELECT * FROM grand where stucode='$code' ");
$i = 0;
while($row=mysqli_fetch_array($sql)) {
$i++;
?>	
	  <div class="col-sm-4"><center><?=$row['tstatus'];?></center>
	  <?php
if ($row['tpic']=="") {
?>
<img src="../img/no-image.png" class="img-thumbnail" alt=" " width="200" height="220">
<?php
}else {
?>
<img src="../photo/grand/<?=$row['tpic'];?>" class="img-thumbnail" alt="<?=$row['stucode'];?>" width="200" height="220">
<?php
}
?><center><?=$row['idcard'];?></center>
<?=$row['tprefix'];?><?=$row['tname'];?>  <?=$row['tsname'];?><br>
<?php if($row['ttel1']=="") {}else{?>
<span class="glyphicon glyphicon-earphone"> <?=$row['ttel1'];?><br>
<?php } if($row['ttel2']==""){}else{?>
<span class="glyphicon glyphicon-earphone"> <?=$row['ttel2'];?><br>
<?php } ?>
	  </div>

<?php } ?>
	
</div>	
</div>
 </section>
 </div>
 
<section class="content">
<div class="box">
	<div class="box-header">
		<h3 class="box-title">ประวัติการเข้า-ออกโรงเรียน</h3>
	</div>
<div class="box-body">
<div class="col-sm-6">
<!--Breadcrumbs -->
<ol class="breadcrumb">
  <li>ประวัติการเข้าโรงเรียน</li>
</ol>
<!--End Breadcrumbs -->	
   <?php
   $SQL2 = $mysqli->query("SELECT * FROM checkin where stucode='$code' ORDER BY Id DESC");
   ?>
              <table id="example1" class="table table-bordered table-striped table-hover">
                <thead>
                <tr>
					<th width="50" align='center'>NO</th>
                    <th width="150" align='center'>เวลา</th>  
                    <th align='center'>ครูผู้บันทึก</th>  
                </tr>
                </thead>
                <tbody>
         <?php 
			$i=0;
			while($R2=mysqli_fetch_array($SQL2)) { 
			$i++
         ?>				
                <tr>
                  <td><?=$i;?></td>
                  <td><?=$R2["date"];?></td>
                  <td>
<?php 
$sql27= $mysqli->query("SELECT * FROM users where id_user='$R2[teacher]'");
$Row27 = mysqli_fetch_array($sql27);
?><?=$Row27["fullname"];?>				  
				  </td>
                </tr>
				<?php } ?>  
				</tbody>
              </table>
</div>
<div class="col-sm-6">
<!--Breadcrumbs -->
<ol class="breadcrumb">
  <li>ประวัติการกลับบ้าน</li>
</ol>
<!--End Breadcrumbs -->
   <?php
   $SQL1 = $mysqli->query("SELECT * FROM checkout where stucode='$code' AND active='yes' ORDER BY Id DESC");
   ?>
              <table id="example3" class="table table-bordered table-striped table-hover">
                <thead>
                <tr>
					<th width="20">NO</th>
                    <th align='center'>ผู้มารับ</th>  
                    <th align='center'>เวลา</th>
					<th width="110" align='center'>ครูผู้บันทึก</th> 
                </tr>
                </thead>
                <tbody>
         <?php 
			$i=0;
			while($R=mysqli_fetch_array($SQL1)) {
			$i++
         ?>				
                <tr>
                  <td><?=$i;?></td>
                                    <td align='left'>
<?php 
$sql29= $mysqli->query("SELECT * FROM grand where tid='$R[tid]'");
$Row29 = mysqli_fetch_array($sql29);
?>
 <a href="#id<?=$R['Id'];?>" data-toggle="modal"  data-toggle="tooltip" title="รูป">
<?=$Row29["tprefix"];?><?=$Row29["tname"];?>	<?=$Row29["tsname"];?>
</a>
<?php
$sql30= $mysqli->query("SELECT * FROM checkout where Id='$R[Id]' ");
$Row30 = mysqli_fetch_array($sql30);

?>

<!-- Modal -->
  <div class="modal fade" id="id<?=$R['Id'];?>" role="dialog">
    <div class="modal-dialog">
      <div class="modal-content">
        <div class="modal-header">
          <button type="button" class="close" data-dismiss="modal">&times;</button>
          <h4 class="modal-title">รูปภาพ</h4>
        </div>
        <div class="modal-body">
          <p><center><img src="../photo/chk-out/<?=$R['tphoto'];?>" width="500"><br><br>รูปภาพผู้ปกครองที่มารับนักเรียน ณ วันที่ <?=$R['date'];?></center></p>
        </div>
        <div class="modal-footer">
          <button type="button" class="btn btn-default" data-dismiss="modal">ยกเลิก</button>
        </div>
      </div>      
    </div>
  </div>
									</td> 
                  <td><?=$R["date"];?></td>
				  <td>
<?php 
$sql28= $mysqli->query("SELECT * FROM users where id_user='$R[teacher]'");
$Row28 = mysqli_fetch_array($sql28);
?><?=$Row28["fullname"];?>					  
				  </td>
                </tr>
				<?php } ?>  
				</tbody>
              </table>
</div>
</div>
</div>
 </section>
 
 <section class="content">
<div class="box">
	<div class="box-header">
		<h3 class="box-title">คะแนนความประพฤติ</h3>
	</div>
<div class="box-body">
<div class="col-sm-6">
     <?php
   $SQL7 = $mysqli->query("SELECT
  Sum(`catscore`.`score`) AS `Sum_score`
FROM
  `score`
  INNER JOIN `catscore` ON `score`.`idcat` = `catscore`.`Id` where code='$code' AND status='add'");
$Row7 = mysqli_fetch_array($SQL7);
   ?>
<!--Breadcrumbs -->
<ol class="breadcrumb">
  <li>การเพิ่มคะแนนความประพฤติ   (<b><font color="green">+<?=$Row7['Sum_score'];?></font></b>)</li>
</ol>
<!--End Breadcrumbs -->	
   <?php
   $SQL5 = $mysqli->query("SELECT
  `score`.`Id`,
  `score`.`idcat`,
  `score`.`code`,
  `score`.`date`,
  `score`.`detail`,
  `score`.`teacher`,
  `catscore`.`Id` AS `Id1`,
  `catscore`.`status`,
  `catscore`.`title`,
  `catscore`.`score`
FROM
  `score`
  INNER JOIN `catscore` ON `score`.`idcat` = `catscore`.`Id` where code='$code' AND status='add'");
   ?>	
              <table id="example4" class="table table-bordered table-striped table-hover">
                <thead>
                <tr>
					<th width="20">NO</th>
                    <th align='center'>รายการ</th>
					<th align='center' width="50">คะแนน</th> 
                </tr>
                </thead>
                <tbody>
         <?php 
			$i=0;
			while($R5=mysqli_fetch_array($SQL5)) { 
			$i++
         ?>				
                <tr>
                  <td><?=$i;?></td>
                                    <td align='left'>
									<a href="#<?=$R5["idcat"];?>" data-toggle="modal"  data-toggle="tooltip">
									<?=$R5["title"];?>
									</a>
<!-- Modal -->
  <div class="modal fade" id="<?=$R5["idcat"];?>" role="dialog">
    <div class="modal-dialog">
      <div class="modal-content">
        <div class="modal-header">
          <button type="button" class="close" data-dismiss="modal">&times;</button>
          <h4 class="modal-title">ข้อมูลการเพิ่มคะแนน </h4>
        </div>
        <div class="modal-body">
			 <div class="row clearfix">
<!--Table -->         
  <table class='table table-hover table-datatable table-striped table-bordered' style=\"width:80%;\">
    <tbody>
      <tr>
        <td width="100">พฤติกรรม</td>
        <td><?=$R5["title"];?></td>
      </tr>
      <tr>
        <td>รายละเอียด</td>
        <td><?=$R5["detail"];?></td>
      </tr>
      <tr>
        <td>ครูผู้บันทึก</td>
        <td>
<?php
$sqlT1= $mysqli->query("SELECT * FROM users where id_user='$R5[teacher]' ");
$add1 = mysqli_fetch_array($sqlT1);
$fullname=$add1["fullname"];
echo "$fullname";
?>		
		</td>
      <tr>
        <td width="100">เวลาบันทึก</td>
        <td><?=$R5["date"];?></td>
      </tr>		
      </tr>	  
    </tbody>
  </table>
</div>
<!--EndTable -->
			</div>
        <div class="modal-footer">
          <button type="button" class="btn btn-default" data-dismiss="modal">ยกเลิก</button>
        </div>
      </div>      
    </div>
  </div>									
									</td>
                  <td align='center'>+<?=$R5["score"];?></td> 
                </tr>
				<?php } ?>  
				</tbody>
              </table>
</div>
<div class="col-sm-6">
        <?php
   $SQL8 = $mysqli->query("SELECT
  Sum(`catscore`.`score`) AS `Sum_score`
FROM
  `score`
  INNER JOIN `catscore` ON `score`.`idcat` = `catscore`.`Id` where code='$code' AND status='rem'");
$Row8 = mysqli_fetch_array($SQL8);
   ?>
<!--Breadcrumbs -->
<ol class="breadcrumb">
  <li>การหักคะแนนความประพฤติ   (<b><font color="red">-<?=$Row8['Sum_score'];?></font></b>)</li>
</ol>
<!--End Breadcrumbs -->	
   <?php
   $SQL6 = $mysqli->query("SELECT
  `score`.`Id`,
  `score`.`idcat`,
  `score`.`code`,
  `score`.`date`,
  `score`.`detail`,
  `score`.`teacher`,
  `catscore`.`Id` AS `Id1`,
  `catscore`.`status`,
  `catscore`.`title`,
  `catscore`.`score`
FROM
  `score`
  INNER JOIN `catscore` ON `score`.`idcat` = `catscore`.`Id` where code='$code' AND status='rem'");
   ?>
               <table id="example5" class="table table-bordered table-striped table-hover">
                <thead>
                <tr>
									<th width="20">NO</th>
                                    <th align='center'>รายการ</th>  
                                    <th align='center' width="50">คะแนน</th> 
                </tr>
                </thead>
                <tbody>
         <?php 
			$i=0;
			while($R6=mysqli_fetch_array($SQL6)) { 
			$i++
         ?>				
                <tr>
                  <td><?=$i;?></td>
                                    <td align='left'>
									<a href="#<?=$R6["idcat"];?>" data-toggle="modal"  data-toggle="tooltip">
									<?=$R6["title"];?>
									</a>
<!-- Modal -->
  <div class="modal fade" id="<?=$R6["idcat"];?>" role="dialog">
    <div class="modal-dialog">
      <div class="modal-content">
        <div class="modal-header">
          <button type="button" class="close" data-dismiss="modal">&times;</button>
          <h4 class="modal-title">ข้อมูลการตัดคะแนน </h4>
        </div>
        <div class="modal-body">
			 <div class="row clearfix">
<!--Table -->         
  <table class='table table-hover table-datatable table-striped table-bordered' style=\"width:80%;\">
    <tbody>
      <tr>
        <td width="100">พฤติกรรม</td>
        <td><?=$R6["title"];?></td>
      </tr>
      <tr>
        <td>รายละเอียด</td>
        <td><?=$R6["detail"];?></td>
      </tr>
      <tr>
        <td>ครูผู้บันทึก</td>
        <td>
<?php
$sqlT= $mysqli->query("SELECT * FROM users where id_user='$R6[teacher]' ");
$rem = mysqli_fetch_array($sqlT);
$fullname=$rem["fullname"];
echo "$fullname";
?>		
		</td>
      <tr>
        <td width="100">เวลาบันทึก</td>
        <td><?=$R6["date"];?></td>
      </tr>		
      </tr>	  
    </tbody>
  </table>
</div>
<!--EndTable -->			 
			</div>
        <div class="modal-footer">
          <button type="button" class="btn btn-default" data-dismiss="modal">ยกเลิก</button>
        </div>
      </div>      
    </div>
  </div>									
									</td>  
                  <td align='center'>-<?=$R6["score"];?></td>
                </tr>
				<?php } ?>  
				</tbody>
              </table>  
</div>
</div>
</div>
 </section>


Youez - 2016 - github.com/yon3zu
LinuXploit