403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.155
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  E:/Inetpub/www/myoffice/2565/modules_22222/calendarswork/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : E:/Inetpub/www/myoffice/2565/modules_22222/calendarswork/view.php
<TABLE width="100%" align=center cellSpacing=1 cellPadding=1 border=0>
<?
$_GET['id'] = intval($_GET['id']);
//$_GET['dates'] = intval($_GET['dates']);
$datess=$_GET['dates'];
//แสดงปฏิทิน
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[event] = $db->select_query("SELECT id, date_event, timeout , timeout2 ,post_date, pageview , UNIX_TIMESTAMP(date_event) AS date_event2  FROM ".TB_CALENDARSWORK." WHERE date_event='".$_GET[dates]."' ");
$arr[event] = $db->fetch($res[event]);

$db->closedb ();
if(!$arr[event][date_event]){
	echo "<BR><BR><BR><BR><CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\" ><BR><BR><B>ไม่มีรายการปฏิทินกิจกรรมในวัน $datess </B></CENTER><BR><BR><BR><BR>";
}else{
//	$FileEventTopic = "calendardata/".$arr[event][date_event].".txt";
//	$file_open = @fopen($FileEventTopic, "r");
//	$content = @fread ($file_open, @filesize($FileEventTopic));
//	$Detail = stripslashes(FixQuotes($content));
	$Detail = $arr[event][detail];
	$ID=$arr[event][id];
	//ทำการเพิ่มจำนวนคนเข้าชม
	?>
	<TR>
	<TD colspan=5>
<B><IMG SRC="images/icon/calendar.gif" WIDTH="16" HEIGHT="15" BORDER="0" ALIGN="absmiddle"> <FONT COLOR="#990000">บัญชีลงเวลาปฏิบัติราชการ <?= ThaiTimeConvert($arr[event][date_event2],"1","");?></FONT><BR>
</TD>
</TR>
<tr bgcolor="#0099CC">
<td width="5%" align="center"><h5><font color="#FFFFFF">ที่</td>
<td  width="40%" align="center"><h5><font color="#FFFFFF">ชื่อ - สกุล</td>
<td  width="20%" align="center"><h5><font color="#FFFFFF">สถานะ</td>
<td  width="15%" align="center"><h5><font color="#FFFFFF">เวลามา</td>
<td  width="15%" align="center"><h5><font color="#FFFFFF">เวลากลับ</td>
</tr>
		<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
$arr[user] = $db->fetch($res[user]);
$res[events] = $db->select_query("SELECT id, date_event, timeout , timeout2 , p_work,  person ,post_date, pageview , UNIX_TIMESTAMP(date_event) AS date_event2  FROM ".TB_CALENDARSWORK." WHERE date_event ='".$_GET[dates]."'  order by p_work ,timeout asc");
$count=0;
$i=1;
while($arr[events] = $db->fetch($res[events])){
$Detail = $arr[events][detail];
$id=$arr[events][id];
	$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$arr[events][person]."'  ");
	$arr[user] = $db->fetch($res[user]);
	$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
	$q[Pageview] = "UPDATE ".TB_CALENDARSWORK." SET pageview = pageview+1 WHERE id = '$id' ";
	$sql[Pageview] = mysql_query ( $q[Pageview] ) or sql_error ( "db-query",mysql_error() );
?>
		<tr bgcolor="#FFFFDD" >
		<td align="center"valign="top"><? echo"".$i?></td>
		<td valign="top">&nbsp;&nbsp;<b>&nbsp;<?=$arr[user][category_name];?></b></td>
		<td valign="top">&nbsp;&nbsp;<b>&nbsp;<?=$arr[events][p_work];?></b></td>
		<td  align="center"valign="top">&nbsp;&nbsp;<b><? if ($arr[events][timeout]<>'') { echo "<font color=\"#CC0000\">".$arr[events][timeout]." </font>";}?></b></td>
		<td  align="center" valign="top">&nbsp;&nbsp;<b><? if ($arr[events][timeout2]<>'') { echo "<font color=\"#CC0000\">".$arr[events][timeout2]." </font>";}?></b></td>
		</tr>
				

<?
$i++;
 } 
?>
<?
}
?>
			</TABLE>

Youez - 2016 - github.com/yon3zu
LinuXploit