Linux ns8.secondary29.go.th 2.6.32-754.28.1.el6.x86_64 #1 SMP Wed Mar 11 18:38:45 UTC 2020 x86_64
Apache/2.2.15 (CentOS)
: 122.154.134.11 | : 122.154.134.9
Cant Read [ /etc/named.conf ]
5.6.40
apache
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
var /
www /
html /
amss_test /
modules /
book /
expand /
[ HOME SHELL ]
Name
Size
Permission
Action
images
[ DIR ]
drwxr-xr-x
book_detail2.php
6.45
KB
-rw-r--r--
bookdetail_receive_saraban.php
12.01
KB
-rw-r--r--
bookdetail_receive_saraban_non...
7.99
KB
-rw-r--r--
index.php
1.11
KB
-rw-r--r--
livesearch_4.php
681
B
-rw-r--r--
receive.php
12.65
KB
-rw-r--r--
receive_file.php
2.05
KB
-rw-r--r--
receive_none.php
10.18
KB
-rw-r--r--
register_receive.php
5.25
KB
-rw-r--r--
select_send.php
9.17
KB
-rw-r--r--
send_book.php
21.66
KB
-rw-r--r--
send_detail.php
8.03
KB
-rw-r--r--
send_report_book.php
16.4
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : receive.php
<?php require_once "../time_inc.php"; $user=$remote_user_id; ////////////////////////////////// if(!(isset($_REQUEST['search_index']))){ $_REQUEST['search_index']=""; } if(!(isset($_REQUEST['field']))){ $_REQUEST['field']=""; } if(!(isset($_REQUEST['search']))){ $_REQUEST['search']=""; } echo "<br />"; echo "<table width='100%' border='0' align='center'>"; echo "<tr align='center'><td><font color='#006666' size='3'><strong>หนังสือราชการจากสำนักงานเขตพื้นที่การศึกษา</strong></font></td></tr>"; echo "</table>"; if($_REQUEST['search_index']==1){ $sql="select book_main.ms_id from book_main, book_sendto_answer where book_main.ref_id=book_sendto_answer.ref_id and book_sendto_answer.send_to='$remote_user_office' and book_sendto_answer.school is null and $_REQUEST[field] like '%$_REQUEST[search]%' "; } else { $sql="select book_main.ms_id from book_main, book_sendto_answer where book_main.ref_id=book_sendto_answer.ref_id and book_sendto_answer.send_to='$remote_user_office' and book_sendto_answer.status is null and book_sendto_answer.school is null"; } $dbquery = mysqli_query($connect,$sql); $num_rows = mysqli_num_rows($dbquery ); $pagelen=15; // 1_กำหนดแถวต่อหน้า $url_link="file=receive&search_index=$_REQUEST[search_index]&field=$_REQUEST[field]&search=$_REQUEST[search]&remote_user_office=$remote_user_office&remote_user_id=$remote_user_id&remote_login_status=$remote_login_status&remote_sync=$remote_sync"; // 2_กำหนดลิงค์ $totalpages=ceil($num_rows/$pagelen); if(!(isset($_REQUEST['page']))){ $_REQUEST['page']=""; } if(!(isset($_REQUEST['page']))){ $_REQUEST['page']==""; } if($_REQUEST['page']==""){ $page=$totalpages; if($page<2){ $page=1; } } else{ if($totalpages<$_REQUEST['page']){ $page=$totalpages; if($page<1){ $page=1; } } else{ $page=$_REQUEST['page']; } } $start=($page-1)*$pagelen; if(($totalpages>1) and ($totalpages<16)){ echo "<div align=center>"; echo "หน้า "; for($i=1; $i<=$totalpages; $i++) { if($i==$page){ echo "[<b><font size=+1 color=#990000>$i</font></b>]"; } else { echo "<a href=$_SERVER[PHP_SELF]?$url_link&page=$i>[$i]</a>"; } } echo "</div>"; } if($totalpages>15){ if($page <=8){ $e_page=15; $s_page=1; } if($page>8){ if($totalpages-$page>=7){ $e_page=$page+7; $s_page=$page-7; } else{ $e_page=$totalpages; $s_page=$totalpages-15; } } echo "<div align=center>"; if($page!=1){ $f_page1=$page-1; echo "<<a href=$_SERVER[PHP_SELF]?$url_link&page=1><font size='2'>หน้าแรก </font></a>"; echo "<<<a href=$_SERVER[PHP_SELF]?$url_link&page=$f_page1><font size='2'>หน้าก่อน </font></a>"; } else { echo "หน้า "; } for($i=$s_page; $i<=$e_page; $i++){ if($i==$page){ echo "[<b><font size=+1 color=#990000>$i</font></b>]"; } else { echo "<a href=$_SERVER[PHP_SELF]?$url_link&page=$i>[$i]</a>"; } } if($page<$totalpages) { $f_page2=$page+1; echo "<a href=$_SERVER[PHP_SELF]?$url_link&page=$f_page2><font size='2'> หน้าถัดไป</font></a>>>"; echo "<a href=$_SERVER[PHP_SELF]?$url_link&page=$totalpages><font size='2'> หน้าสุดท้าย</font></a>>"; } echo "</div>"; } //จบแยกหน้า ?> <table border="0" width="98%" id="table1" style="border-collapse: collapse" cellspacing="2" cellpadding="2" align="center"> <tr><td><FONT SIZE="2" COLOR="">ระดับความสำคัญ <IMG SRC="../images/level1.gif" WIDTH="20" HEIGHT="11" BORDER="0" ALT="ปกติ">ปกติ <IMG SRC="../images/level2.gif" WIDTH="20" HEIGHT="11" BORDER="0" ALT="ด่วน">ด่วน <IMG SRC="../images/level3.gif" WIDTH="20" HEIGHT="11" BORDER="0" ALT="ด่วนมาก">ด่วนมาก <IMG SRC="../images/level4.gif" WIDTH="20" HEIGHT="11" BORDER="0" ALT="ด่วนที่สุด">ด่วนที่สุด</FONT></td> <?php echo "<td>"; echo "</td>"; ?> <form method="POST" action="?file=receive"> <td align="right"> <font size="2">ค้นหาหนังสือ จาก </font> <select size="1" name="field"> <?php if($_REQUEST['field']=='subject'){ echo "<option value='subject' selected>เรื่อง</option>"; } else{ echo "<option value='subject'>เรื่อง</option>"; } if($_REQUEST['field']=='bookno'){ echo "<option value='bookno' selected>เลขหนังสือ</option>"; } else{ echo "<option value='bookno'>เลขหนังสือ</option>"; } echo "</select>"; echo "<font size='2'> ด้วยคำว่า </font>"; echo "<input type='text' name='search' size='20' value='$_REQUEST[search]'>"; echo "<input type='hidden' name='search_index' value='1'>"; echo " <input type='submit' value='ค้นหา'>"; echo "<input type='hidden' name='remote_user_office' value='$remote_user_office'>"; echo "<input type='hidden' name='remote_user_id' value='$remote_user_id'>"; echo "<input type='hidden' name='remote_login_status' value='$remote_login_status'>"; echo "<input type='hidden' name='remote_sync' value='$remote_sync'>"; ?> </td> </form> </tr> </table> <table border="1" width="98%" id="table2" style="border-collapse: collapse" align="center"> <tr bgcolor=#99ccff> <td width="70" align="center"> <font size="2" face="Tahoma" color=#FFFFFF>ที่</font></td> <td align="center" width="200"> <font face="Tahoma" size="2" color=#FFFFFF>เลขหนังสือ</font></td> <td align="center"><font face="Tahoma" size="2" color=#FFFFFF>เรื่อง </font></td> <td align="center" width="50"> <font face="Tahoma" size="2" color=#FFFFFF>ราย<br />ละเอียด</font></td> <td align="center" width="120"> <font face="Tahoma" size="2" color=#FFFFFF>ลงวันที่</font></td> <td align="center" width="200"> <font face="Tahoma" size="2" color=#FFFFFF>จาก</font></td> <td align="center" width="160"> <font face="Tahoma" size="2" color=#FFFFFF>วันเวลาที่ส่ง</font></td> </tr> <?php if($_REQUEST['search_index']==1){ $sql="select book_main.ms_id, book_main.ref_id, book_main.bookno, book_main.level, book_main.subject, book_main.signdate, book_main.office, book_main.send_date, book_sendto_answer.answer, book_sendto_answer.status, book_sendto_answer.forward_from, book_sendto_answer.rec_forward_date, book_sendto_answer.school, book_main.secret,book_main.bookregis_link,book_main.book_type from book_main, book_sendto_answer where book_main.ref_id=book_sendto_answer.ref_id and book_sendto_answer.send_to='$remote_user_office' and book_sendto_answer.school is null and $_REQUEST[field] like '%$_REQUEST[search]%' order by book_main.ms_id, book_sendto_answer.id limit $start,$pagelen"; } else { $sql="select book_main.ms_id, book_main.ref_id, book_main.bookno, book_main.level, book_main.subject, book_main.signdate, book_main.office, book_main.send_date, book_sendto_answer.answer, book_sendto_answer.status, book_sendto_answer.forward_from, book_sendto_answer.rec_forward_date, book_sendto_answer.school, book_main.secret,book_main.bookregis_link,book_main.book_type from book_main, book_sendto_answer where book_main.ref_id=book_sendto_answer.ref_id and book_sendto_answer.send_to='$remote_user_office' and book_sendto_answer.status is null and book_sendto_answer.school is null order by book_main.ms_id, book_sendto_answer.id limit $start,$pagelen"; } $dbquery = mysqli_query($connect,$sql); $N=(($page-1)*$pagelen)+1; //*เกี่ยวข้องกับการแยกหน้า $M=1; While ($result = mysqli_fetch_array($dbquery)){ $id = $result['ms_id']; $ref_id = $result['ref_id']; $level = $result['level']; $bookno = $result['bookno']; $signdate = $result['signdate']; $subject = $result['subject']; $status = $result['status']; $ref_id = $result['ref_id']; $rec_date = $result['send_date']; $school = $result['school']; if(($M%2) == 0) $color="#ffffff"; else $color="#E5E5FF"; $send_date=thai_date_4($rec_date); $signdate=thai_date_3($signdate); // ระดับความสำคัญ if ($level==1) { $img_level = "<IMG SRC=\"../images/level1.gif\" WIDTH=\"20\" HEIGHT=\"11\" BORDER=\"0\" ALT=\"ปกติ\">" ; }else if ($level==2) { $img_level = "<IMG SRC=\"../images/level2.gif\" WIDTH=\"20\" HEIGHT=\"11\" BORDER=\"0\" ALT=\"ด่วน\">" ; }else if ($level==3) { $img_level = "<IMG SRC=\"../images/level3.gif\" WIDTH=\"20\" HEIGHT=\"11\" BORDER=\"0\" ALT=\"ด่วนมาก\">" ; }else if ($level==4) { $img_level = "<IMG SRC=\"../images/level4.gif\" WIDTH=\"20\" HEIGHT=\"11\" BORDER=\"0\" ALT=\"ด่วนที่สุด\">" ; } // ตรวจสอบไฟล์แนบ if($result['bookregis_link']==0){ $file = mysqli_query($connect,"SELECT id FROM book_filebook WHERE ref_id='$ref_id' ") ; } else if($result['bookregis_link']==1 and $result['book_type']==1){ $file = mysqli_query($connect,"SELECT * FROM bookregister_send_filebook WHERE ref_id='$ref_id' ") ; } else if($result['bookregis_link']==1 and $result['book_type']==2){ $file = mysqli_query($connect,"SELECT * FROM bookregister_send_filebook_sch WHERE ref_id='$ref_id' ") ; } $file_num = mysqli_num_rows($file) ; if ($file_num==0) { $file_img = "" ; }else{ $file_img = "<IMG SRC=\"../images/file1.gif\" WIDTH=\"13\" HEIGHT=\"10\" BORDER=\"0\" ALT=\"มีไฟล์แนบ\">" ; } if($result['secret']==1){ $secret_txt="<font color='#FF0000'>[ลับ]</font>"; } else{ $secret_txt=""; } // อาเรย์ชื่อหน่วยงาาน $office_name_ar['saraban']="สารบรรณกลาง"; $sql_work_group = mysqli_query($connect,"SELECT * FROM system_workgroup") ; while ($row_work_group= mysqli_fetch_array($sql_work_group)){ $office_name_ar[$row_work_group['workgroup']]=$row_work_group['workgroup_desc']; } $sql_sch = mysqli_query($connect,"SELECT * FROM system_school") ; while ($row_sch= mysqli_fetch_array($sql_sch)){ $office_name_ar[$row_sch['school_code']]=$row_sch['school_name']; } //ตรวจสอบการรับหนังสือ if($result['answer']==1){ $answer_pic="<IMG SRC='../images/b_usrcheck.png' WIDTH='16' HEIGHT='16' BORDER='0'> "; } else{ $answer_pic="<span id='right$id' style='display:none'><IMG SRC='../images/b_usrcheck.png' WIDTH='16' HEIGHT='16' BORDER='0' ></span><span id='wrong$id'><IMG SRC='../images/b_usrdrop.png' WIDTH='16' HEIGHT='16' BORDER='0' ></span>"; } ?> <tr bgcolor="<?php echo $color;?>"> <td align="center"><?php echo $result['ms_id'];?></td> <td align="left"> <?php echo $bookno;?> <?php echo $img_level;?></td> <td align="left"> <?php echo $answer_pic.$subject ;?> <?php echo $file_img;?> <?php echo $secret_txt;?></td> <td align="center"><A HREF="javascript:void(0)" onclick="check('<?php echo $result['ms_id'];?>')"<span style="text-decoration: none">คลิก</span></A></td> <td align="left"><?php echo $signdate;?></td> <td ><?php if(isset($office_name_ar[$result['office']])){ echo $office_name_ar[$result['office']]; } ?></td> <td align="left"><?php echo $send_date;?></td> </tr> <?php $M++; $N++; //*เกี่ยวข้องกับการแยกหน้า } // end while echo "<tr><td colspan='7'> <FONT COLOR='#009933'><IMG SRC='../images/b_usrcheck.png' WIDTH='16' HEIGHT='16' BORDER='0'>ลงทะเบียนรับแล้ว <IMG SRC='../images/b_usrdrop.png' WIDTH='16' HEIGHT='16' BORDER='0' >ยังไม่ได้ลงทะเบียนรับ <IMG SRC='../images/file1.gif' WIDTH='16' HEIGHT='16' BORDER='0'>มีไฟล์เอกสาร</FONT></td></tr>"; echo "</table>"; ?> <script> function check(val){ window.open('bookdetail_receive_saraban.php'+'?b_id='+val+'&remote_user_office='+'<?php echo $remote_user_office ?>'+'&remote_user_id='+'<?php echo $remote_user_id ?>', 'bookdetail','width=550,height=500,scrollbars'); document.getElementById('wrong'+val).style.display="none"; document.getElementById('right'+val).style.display="block"; document.getElementById('right'+val).style.display="inline"; } </script> </body> </html>
Close