| Server IP : 208.122.213.31 / Your IP : 216.73.216.45 Web Server : Apache System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64 User : WHMCS_MIA_382 ( 1001) PHP Version : 7.4.33 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/ |
Upload File : |
<?php
$skip_header = TRUE;
include ('../config.php');
dbConn();
function getIncrement($directory, $filename) {
$lastIncrement_sql = mysql_query("SELECT * FROM `cms_content` WHERE `directory` = '" . $directory . '/' . $filename . "'");
if (mysql_num_rows($lastIncrement_sql) == 1) {
$lastIncrement = mysql_fetch_object($lastIncrement_sql);
return $lastIncrement->num_photos + 1;
} else {
return 1;
}
}
function getFolderIncrement($directory, $filename) {
if (isset($directory) && isset($filename)) {
$dirCount = 1;
while ($dirCount < 50) {
if ($dirCount < 10) {
$dirCount = '0' . $dirCount;
}
$imageDirectory = '../../../content/models/' . $directory . '/' . $filename . $dirCount;
if (!is_dir($imageDirectory)) {
return $dirCount;
}
$dirCount++;
}
}
return '01';
}
function uploadImage($directory, $filename) {
include_once '../class.upload.php';
$foo = new upload($_FILES['file']['tmp_name']);
if ($foo->uploaded) {
$filenameFolder = $filename;
// $increment = getIncrement($directory, $filenameFolder);
$filename = $filename . "-" . uniqid();
$foo->file_new_name_body = $filename;
$foo->image_resize = true;
$foo->image_x = 141;
$foo->image_y = 212;
$foo->image_ratio = true;
$foo->image_convert = 'jpg';
$foo->file_new_name_ext = 'jpg';
$foo->jpeg_quality = 90;
$foo->dir_chmod = 0777;
$foo->Process('../content/models/' . $directory . '/' . $filenameFolder . '/tn/');
if ($foo->processed) {
$foo->file_new_name_body = $filename;
$foo->image_convert = 'jpg';
$foo->file_new_name_ext = 'jpg';
$foo->jpeg_quality = 90;
$foo->Process('../../../content/models/' . $directory . '/' . $filenameFolder);
if ($foo->processed) {
mysql_query("UPDATE `cms_content` SET `num_photos` = `num_photos` + 1 WHERE `directory` = '" . $directory . '/' . $filenameFolder . "'");
return TRUE;
} else {
return FALSE;
}
} else {
return FALSE;
}
} else {
return FALSE;
}
}
function uploadArchive($directory, $filename) {
include_once '../class.upload.php';
$foo = new upload($_FILES['file']['tmp_name']);
if ($foo->uploaded) {
$foo->file_new_name_body = $filename;
$foo->file_auto_rename = FALSE;
$foo->file_overwrite = TRUE;
$foo->dir_chmod = 0777;
if (pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION) == "rar") {
$foo->file_new_name_ext = 'rar';
} else {
$foo->file_new_name_ext = 'zip';
}
$foo->Process('../../../content/models/' . $directory . '/' . $filename);
if ($foo->processed) {
return TRUE;
} else {
return FALSE;
}
} else {
return FALSE;
}
}
function uploadVideo($directory, $filename) {
include_once '../class.upload.php';
$foo = new upload($_FILES['file']['tmp_name']);
if ($foo->uploaded) {
$foo->file_new_name_body = $filename;
$foo->file_auto_rename = FALSE;
$foo->file_overwrite = TRUE;
$foo->file_new_name_ext = pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION);
$foo->Process('../../../content/models/' . $directory . '/' . $filename);
if ($foo->processed) {
return TRUE;
} else {
return FALSE;
}
} else {
return FALSE;
}
}
if (isset($_POST['type'])) {
if (($_POST['type'] == "createFolder" || $_POST['type'] == "generateFolder") && isset($_POST['modelNumbers']) && isset($_POST['creationDate']) && isset($_POST['content_type'])) {
$creationDate = filter_var($_POST['creationDate'], FILTER_SANITIZE_STRING);
if ($_POST['modelNumbers'] != "") {
$modelNames = '';
$model_names_sql = mysql_query("SELECT `name` FROM `cms_models` WHERE model_id IN (" . $_POST['modelNumbers'] . ")") or die(mysql_error());
if (mysql_num_rows($model_names_sql) > 0) {
while ($model_names = mysql_fetch_object($model_names_sql)) {
$modelName = str_replace(" ", "-", $model_names->name);
if (isset($modelNames) && $modelNames != "") {
$modelNames .= '-';
}
$modelNames .= strtolower($modelName);
}
}
if ($_POST['content_type'] == 1) {
$contentType = 'p';
} elseif ($_POST['content_type'] == 2) {
$contentType = 'v';
} else {
$contentType = 'o';
}
$directory = $modelNames;
$filename = $modelNames . '-' . $creationDate . '-' . $contentType;
$filename .= getFolderIncrement($directory, $filename);
if ($_POST['type'] == "createFolder") {
mkdir('../../../content/models/' . $directory . '/' . $filename, 0755, true);
}
echo $directory . '/' . $filename;
exit;
}
}
}
if (isset($_POST['uniqid']) && isset($_POST['dropzoneFolder']) && $_POST['dropzoneFolder'] != "") {
$uploadSuccess = FALSE;
$dropzoneFolder = filter_var($_POST['dropzoneFolder'], FILTER_SANITIZE_STRING);
$directorySplit = explode("/", $dropzoneFolder);
if (isset($directorySplit[0]) && isset($directorySplit[1])) {
$directory = $directorySplit[0];
$filename = $directorySplit[1];
}
if (isset($directory) && isset($filename) && $directory != "" && $filename != "") {
$bytes = file_get_contents($_FILES['file']['tmp_name'], FALSE, NULL, 0, 7);
$ext = strtolower(substr($_FILES['file']['name'], - 4));
$finfo = finfo_open(FILEINFO_MIME_TYPE);
$fileMime = finfo_file($finfo, $_FILES['file']['tmp_name']);
finfo_close($finfo);
if (($ext == '.rar' && bin2hex($bytes) == '526172211a0700') || ($ext == '.zip' && substr($bytes, 0, 2) == 'PK')) {
$uploadSuccess = uploadArchive($directory, $filename);
} elseif (isset($fileMime)) {
if ($fileMime == 'image/gif' || $fileMime == 'image/jpg' || $fileMime == 'image/jpeg' || $fileMime == 'image/png') {
$uploadSuccess = uploadImage($directory, $filename);
} elseif ($fileMime == 'video/mp4' || $fileMime == 'video/quicktime' || $fileMime == 'video/x-msvideo' || $fileMime == 'video/x-ms-wmv' || $fileMime == 'video/x-flv' || $fileMime == 'video/webm') {
$uploadSuccess = uploadVideo($directory, $filename);
}
}
}
if ($uploadSuccess == FALSE) {
header("HTTP/1.0 404 Not Found");
}
}