| Server IP : 122.155.177.87 / Your IP : 122.155.177.87 Web Server : Apache/2 System : Linux cat177-87.static.lnwhostname.com 3.10.0-1160.62.1.el7.x86_64 #1 SMP Tue Apr 5 16:57:59 UTC 2022 x86_64 User : apache ( 994) PHP Version : 5.3.29 Disable Function : dl,eval,exec,mail,passthru,popen,posix_getpwuid,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_open,putenv,shell_exec,show_source,system MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/toongkwaik/domains/toongkwaikin.go.th/public_html/webboard/ |
Upload File : |
<?php
require_once("check_thai_ip.php");
if (!$___in_range) {
header('HTTP/1.1 403 Forbidden');
echo "<h1>403 Forbidden</h1><p>حҵҶ֧ҡ IP ͧس: " . $_SERVER['REMOTE_ADDR'] . "</p>";
exit();
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><!-- InstanceBegin template="/Templates/template_a.dwt.php" codeOutsideHTMLIsLocked="false" -->
<head>
<!-- InstanceBeginEditable name="doctitle" -->
<!-- InstanceEndEditable -->
<?php
require_once('../admin/Connections/conndb.php');
mysql_select_db($database_conndb, $conndb);
?>
<title> ȺŵӺž - ˹ͧ ҧ ѧѴѹ 22160 http://www.pawa.go.th</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<link href="../styles.css" rel="stylesheet" type="text/css">
<!-- InstanceBeginEditable name="head" --><!-- InstanceEndEditable -->
<style type="text/css">
<!--
body {
margin-left: 0px;
margin-top: 0px;
margin-right: 0px;
margin-bottom: 0px;
background-color: #3CFFFF;
}
-->
</style>
<!--styles -->
<link href="../styles.css" rel="stylesheet" type="text/css" />
<link href="../css/Hover%20Buttons.css" rel="stylesheet" type="text/css"/>
<link href="../css/Hoverable-Sidenav.css" rel="stylesheet" type="text/css"/>
<!--<script src="https://platform-api.sharethis.com/js/sharethis.js#property=5d255a83d97c100012d80679&product='inline-share-buttons'
async='async" type='text/javascript'> -->
</script>
<!--styles -->
<style type="text/css">
<!--
a:link {
text-decoration: none;
}
a:visited {
text-decoration: none;
}
a:hover {
text-decoration: none;
}
a:active {
text-decoration: none;
}
.style6 {color: #FFFFFF}
-->
</style></head>
<body background="../images/0bg1.png" style="background-repeat:no-repeat; background-position:top">
<!-- content -->
<div align="center">
<table width="950" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td align="center" valign="top"><tr>
<td align="center" valign="top"><table width="980" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td height="780" colspan="3" align="center" valign="top"> </td>
</tr>
<tr>
<td width="222" align="center" valign="top"> </td>
<td width="669" align="center" valign="top"><div align="left"><marquee direction="up" behavior="slide" scrollamount="4"><img src="../images/name-office.png" width="629" height="68"></marquee></div></td>
<td width="89" align="center" valign="top"> </td>
</tr>
<tr>
<td align="center" valign="top"> </td>
<td align="center" valign="top"><div align="left"><marquee direction="down" behavior="slide" scrollamount="1"><img src="../images/name-office2.png" width="302" height="36"></marquee></div></td>
<td align="center" valign="top"> </td>
</tr>
<tr>
<td colspan="3" align="center" valign="top"><table width="980" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td align="center" valign="top">
<div class="hover13 column">
<div>
<figure> <a href="http://www.pawa.go.th/index.php"><img src="../images/top-menu_01.png" width="136" height="53" border="0"></a> </figure>
</div> </td>
<td align="center" valign="top"><div class="hover13 column">
<div>
<figure>
<a href="http://www.pawa.go.th/news.php?cat_id=1">
<img src="../images/top-menu_02.png" width="186" height="53" border="0"></a> </figure>
</div> </td>
<td align="center" valign="top">
<div class="hover13 column">
<div>
<figure> <a href="http://www.pawa.go.th/news.php?cat_id=2">
<img src="../images/top-menu_03.png" width="168" height="53" border="0"></a> </figure>
</div> </td>
<td align="center" valign="top">
<div class="hover13 column">
<div>
<figure>
<a href="http://www.pawa.go.th/albums/index.php">
<img src="../images/top-menu_04.png" width="169" height="53" border="0"></a> </figure>
</div> </td>
<td align="center" valign="top">
<div class="hover13 column">
<div>
<figure>
<a href="http://www.pawa.go.th/contacts/?scon_id=1" target="_blank">
<img src="../images/top-menu_05.png" width="176" height="53" border="0"></a> </figure>
</div></td>
<td align="center" valign="top">
<div class="hover13 column">
<div>
<figure>
<a href="http://www.pawa.go.th/news.php?cat_id=14" target="_blank"><img src="../images/top-menu_06.png" width="145" height="53" border="0"></a> </figure>
</div></td>
</tr>
</table></td>
</tr>
</table></td>
</tr>
<tr>
<td align="center" valign="top"> </td>
</tr>
</td>
</tr>
<tr>
<td align="center" valign="top"><table width="980" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td align="center" valign="top"> </td>
</tr>
<tr>
<td align="center" valign="top"> </td>
</tr>
<tr>
<td align="center" valign="top"><!-- InstanceBeginEditable name="EditRegion3" -->
<table width="98%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td> </td>
</tr>
<tr>
<td><div align="center">
<?
include("config.inc.php");
include("function.php");
// Ǵͧ纺
mysql_connect($host,$user_db,$passwd_db);
mysql_query ("SET NAMES 'tis620'");
$c_sql = "select * from webboard_category where cat_name='$Category' ";
$c_result = mysql_db_query($dbname,$c_sql);
$c_NRow = mysql_num_rows($c_result);
$c_row = mysql_fetch_array($c_result);
$nlist = $c_row["cat_title"];
if($c_NRow==0) {
echo "<center><br>";
echo "<font color=red size=+1> سк Category çѺ web Դ¤Ѻ</font>";
echo "<br>";
echo "</center>";
exit();
}
//
if ($_SERVER['HTTP_CLIENT_IP']) {
$IP = $_SERVER['HTTP_CLIENT_IP'];
} elseif (ereg("[0-9]",$_SERVER["HTTP_X_FORWARDED_FOR"] )) {
$IP = $_SERVER["HTTP_X_FORWARDED_FOR"];
} else {
$IP = $_SERVER["REMOTE_ADDR"];
}
$Member = 0;
// ͧѹá html Ѻ ͧ ' "
$QTitle = htmlspecialchars($QTitle);
$QNote = htmlspecialchars($QNote);
$QName = htmlspecialchars($QName);
$QEmail = htmlspecialchars($QEmail);
// ===== ѧѹͧӵͧ =====
function hasBadWords($text) {
$badWords = array('ѹ', '', '', 'Ҥ', '', '','ᷧ','','','','','ᷧ', 'ᷧ', 'asd', '', '18+', 'xxx', '§⪤');
foreach ($badWords as $word) {
if (stripos($text, $word) !== false) {
return true;
}
}
return false;
}
// Ǵͧ纺
mysql_connect($host,$user_db,$passwd_db);
mysql_query ("SET NAMES 'tis620'");
$c_sql = "select * from webboard_category where cat_name='$Category' ";
$c_result = mysql_db_query($dbname,$c_sql);
$c_NRow = mysql_num_rows($c_result);
$c_row = mysql_fetch_array($c_result);
$nlist = $c_row["cat_title"];
if($c_NRow==0) {
echo "<center><br>";
echo "<font color=red size=+1> سк Category çѺ web Դ¤Ѻ</font>";
echo "<br>";
echo "</center>";
exit();
}
//
if ($_SERVER['HTTP_CLIENT_IP']) {
$IP = $_SERVER['HTTP_CLIENT_IP'];
} elseif (ereg("[0-9]",$_SERVER["HTTP_X_FORWARDED_FOR"] )) {
$IP = $_SERVER["HTTP_X_FORWARDED_FOR"];
} else {
$IP = $_SERVER["REMOTE_ADDR"];
}
$Member = 0;
// ͧѹá html Ѻ ͧ ' "
$QTitle = htmlspecialchars($QTitle);
$QNote = htmlspecialchars($QNote);
$QName = htmlspecialchars($QName);
$QEmail = htmlspecialchars($QEmail);
// ===== Ǩͺӵͧ Թõ =====
if (hasBadWords($QTitle) || hasBadWords($QNote)) {
echo "<center><br><font color=red size=+1> ͤդӵͧ þѹ ͤ س䢡ʵ</font><br>";
echo "<a href='javascript:history.back(1)' class='styles2'>[ Ѻ ]</a></center>";
exit();
}
// ͧѹҺ
$QTitle = CheckRude($QTitle);
$QNote = CheckRude($QNote);
$QName = CheckRude($QName);
$QEmail = CheckRude($QEmail);
// ǨͺáٻҾ
$txt = array(":b1:", ":b2:",":b3:", ":b4:", ":b5:", ":b6:", ":b7:", ":b8:", ":b9:", ":b10:", ":b11:");
$pic = array("b1.gif","b2.gif","b3.gif","b4.gif","b5.gif","b6.gif","b7.gif","b8.gif","b9.gif","b10.gif","b11.gif");
for ($a=0 ; $a<sizeof($txt) ; $a++) {
$QNote = eregi_replace($txt[$a],"<img src=\"pic/$pic[$a]\">",$QNote);
}
// Ǩͺ աû url email link
//Ѻ¹ѡз˹ ᷡ html ҧ
$QNote = eregi_replace ( "\[b\]", "<b> " , $QNote ) ;
$QNote = eregi_replace ( "\[/b\]", " </b>" , $QNote ) ;
$QNote = eregi_replace ( "\[i\]", "<i> " , $QNote ) ;
$QNote = eregi_replace ( "\[/i\]", " </i>" , $QNote ) ;
$QNote = eregi_replace ( "\[u\]", "<u> " , $QNote ) ;
$QNote = eregi_replace ( "\[sup\]", "<sup> " , $QNote ) ;
$QNote = eregi_replace ( "\[/sup\]", " </sup>" , $QNote ) ;
$QNote = eregi_replace ( "\[sub\]", "<sub> " , $QNote ) ;
$QNote = eregi_replace ( "\[/sub\]", " </sub>" , $QNote ) ;
$QNote = eregi_replace ( "\[/u\]", " </u>" , $QNote ) ;
$QNote = eregi_replace ( "\[\-\-\-\]", " " , $QNote ) ;
$QNote = eregi_replace ( "\[color=red\]", "<font color=red > " , $QNote ) ;
$QNote = eregi_replace ( "\[color=green\]", "<font color=green> " , $QNote ) ;
$QNote = eregi_replace ( "\[color=blue\]", "<font color=blue> " , $QNote ) ;
$QNote = eregi_replace ( "\[color=orange\]", "<font color=FF6600> " , $QNote ) ;
$QNote = eregi_replace ( "\[color=pink\]", "<font color=FF00FF> " , $QNote) ;
$QNote = eregi_replace ( "\[color=gray\]", "<font color=999999> " , $QNote ) ;
$QNote = eregi_replace ( "\[/color\]", " </font>" , $QNote ) ;
$QNote = eregi_replace ( "\[glow\]"," <table style=filter:glow(color=pink, strength=3)> ", $QNote ) ;
$QNote = eregi_replace ( "\[/glow\]", " </table>" , $QNote ) ;
$QNote = eregi_replace ( "\[shadow\]","<table style=\"filter:shadow(color=pink, direction=left)\"> ", $QNote ) ;
$QNote = eregi_replace ( "\[/shadow\]", " </table>" , $QNote ) ;
// 鹺ѹѴ óշա Enter
$QNote = eregi_replace(chr(13)," <br> ", $QNote );
$QNote = eregi_replace("(^|[>[:space:]\n])([[:alnum:]]+)://([^[:space:]]*)([[:alnum:]#?/&=])([<[:space:]\n]|$)","<a href=\"\\2://\\3\\4\" target=\"_blank\">\\2://\\3\\4</a>", $QNote );
$QNote = eregi_replace("([[:alnum:]]+)@([^[:space:]]*)([[:alnum:]])([<[:space:]\n]|$)","<a href=mailto:\\1@\\2\\3\>\\1@\\2\\3</a>", $QNote );
//Ǩͺʡз (Թ ӹǹк config)
CheckFlood($IP);
// ǨͺҪԡ
$sql = "select User,Password,Email from webboard_member where User='$QName'";
$result = mysql_db_query($dbname,$sql);
$NRow = mysql_num_rows($result);
$row = mysql_fetch_array($result);
$Member = $row["User"];
// Ǩͺ Password ١
if($QName==$row["User"] && $QPass==$row["Password"])
{
$Member = 1;
if(!$QEmail)
{
$QEmail = $row["Email"];
}
}else
{
$Member = 0;
}
if(strcmp($_POST['code_input'],$_POST['code_hidden'])==0){
// ӡ ҡʢͧҪԡ
if($Member) {
$sql3 = "update webboard_member set m_post=m_post+1 where User='$QName'";
$result3 = mysql_db_query($dbname,$sql3);
}
else { };
// ÷ӧҹ
// ѹ֡ٻҾ
if(($QNote =='')&&($QName==''))
{
echo "<center >";
echo "<font size=+1 color=\"red\">";
echo "ͤóҨú ͵ҧ觢 س觢ͤա<br><br>";
echo "<font size=+1 color=red >";
echo "<a href='javascript:history.back(1)'>[ Ѻ ] </a>";
echo "</font>";
echo "</center>";
exit();
}
if( $QPic !='')
{
srand((double)microtime()*1000000);
$QPic_name=$random_pic = rand(1,9999);
# Ǩͺҧͧٻ
$size = getimagesize($QPic);
# ǨͺҴͧ Flash
if ( $QPic_type == "application/x-shockwave-flash" ) {
if($QPic_size>$flashSize_limit) {
echo "<br><b><center><font size=3 color=red >Ҵͧ Flash Թ $flashSize_limit bytes [$flashSize_msg]</font></center></b><br>";
echo "<br><b><center><font size=3 color=red >[ <a href='javascript:history.back(1)'>Ѻ</a> ]</font></center></b>";
exit();
}
}
else {
# ǨͺҴͧٻ
if($QPic_size>$Image_size) {
echo "<br><b><center><font size=3 color=red >ҴͧҾԹ $Image_size bytes [$Image_msg]</font></center></b><br>";
echo "<br><b><center><font size=3 color=red >[ <a href='javascript:history.back(1)'>Ѻ</a> ]</font></center></b>";
exit();
}
}
#ŧʡ зӡ upload
if ( $QPic_type == "image/gif" )
{
$filename = $QPic_name.".gif";
}
if ( $QPic_type == "image/bmp" )
{
$filename = $QPic_name.".bmp";
}
if ( $QPic_type == "image/png" )
{
$filename = $QPic_name.".png";
}
if ( $QPic_type == "application/x-shockwave-flash" )
{
$filename = $QPic_name.".swf";
}
elseif (($QPic_type=="image/jpg")||($QPic_type=="image/jpeg")||($QPic_type=="image/pjpeg"))
{
$filename =strtolower($QPic_name.$random_pic . '.jpg');
}
copy ($QPic , "$path/" . $filename );
}
elseif ($QPic == "")
{
echo "";
}
// ҨеçѺͧ server ѹ
$mdate = date("Y-m-d H:i:s");
// ǨͺҪԡ öʻС
$sql2 = "select User from webboard_member where User='$QName' and Password='$QPass' and status='1' ";
$result2 = mysql_db_query($dbname,$sql2);
$row2 = mysql_fetch_array($result2);
$Member2 = $row2["User"];
// username öʢǻС
if($Member2 && $pst==1) {
$mp = 1;
}
else {
$mp = 0;
}
//ʤԻѡзСŧҹ
/* if(ereg("www",$_POST[QNote]) || ereg("http",$_POST[QNote]) || ereg("<a href",$_POST[QNote]) || ereg("<",$_POST[QNote])){
echo "\n";
echo "<center>";
echo "<BR><BR><a href='javascript:history.back(1)' class='styles2'> س͡١ͧ</a><BR><BR><BR><BR>";
exit;
}*/
// ¹ŧ database
$sql = "insert into webboard_data (Category,Question,Note,Name,Namer,Member,IP,Email,Date,nphoto,resolution,pst) values ('$Category','$QTitle','$QNote','$QName','$MsgBy','$Member','$IP','$QEmail','$mdate','$filename','$size[0]','$mp')";
$result1 = mysql_db_query($dbname,$sql);
mysql_close();
?>
</div></td>
</tr>
<tr>
<td><div align="center">
<table width=60% border=0 bgcolor=#000000 cellpadding=7 cellspacing=1>
<tr>
<td align=center bgcolor=#ffffff class="styles3"><span class="red">ѺǤѺ</span><br>
<br>
ҡѺ˹áǤӶͧسѧͧ Refresh/Reload Ѻ </font></td>
</tr>
</table>
</div></td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td class="styles3"><div align="center">| <a href="webboard.php?Category=<? echo $Category; ?>" class="styles2">ʴӶ</a> || <a href="postq.php?Category=<? echo $Category; ?>" class="styles2">駡з </a>|</div></td>
</tr>
<?
}
else{
echo "<br><b><center><span class=red>س Verification code</span></center></b><br>";
echo "<br><b><center><span class=styles1 >[ <a href='javascript:history.back(1)' class=styles2>Ѻ</a> ]</span></center></b>";
}
?>
<tr>
<td> </td>
</tr>
</table>
<!-- InstanceEndEditable --></td>
</tr>
</table></td>
</tr>
<tr>
<td align="center" valign="top"> </td>
</tr>
<tr>
<td align="center" valign="top"> </td>
</tr>
<tr>
<td align="center" valign="top" style="background-repeat:no-repeat"><img src="../images/foot.png"></td>
</tr>
</table>
</div>
<!-- end_content -->
<tr><td><a style="display:scroll;position:fixed;bottom:5px;right:5px;" class="backtotop" href="#top" rel="nofollow" title="Back to Top"><img src="../images/up.png" border="0" /></a></td>
</tr>
<map name="Map6" id="Map6"><area shape="rect" coords="210,1,302,41" href="http://www.tratlocal.go.th/index.php" target="_blank" />
</map>
</body>
<!-- InstanceEnd --></html>