| Server IP : 208.122.213.31 / Your IP : 216.73.216.45 Web Server : Apache System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64 User : WHMCS_MIA_382 ( 1001) PHP Version : 7.4.33 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/httpd/html/thelisaann.com/public_html/freephotos/ |
Upload File : |
<?php
include($_SERVER['DOCUMENT_ROOT']."/free/config.php");
require($_SERVER['DOCUMENT_ROOT']."/free/fnc/function_unzip.php");
// require($_SERVER['DOCUMENT_ROOT']."/free/fnc/thumbfnc.php");
require(DOC_ROOT."/free/fnc/fnc.php");
error_reporting(E_ALL);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Upload your Zipped content - <?php echo SITE_NAME ?></title>
<link href="../style.css" rel="stylesheet" type="text/css" />
</head>
<body bgcolor="#ffffff" text="#000000">
<div align="center">
<?php
$asset_id = $_GET["asset_id"];
$user_def_id = $_GET["user_def_id"];
if(isset($_GET["act"]))
{$act = $_GET["act"];}
else{$act = '';}
if(isset($_GET["t"])) // h = hosted
{$type = $_GET["t"];}
else{$type = 'tour';}
if($act == "sent")
{
//For troubleshooting, show the variables - Added by Michael Moody - 10/30/07
/* echo $_FILES['userfile']['name'];
echo '<br>';
echo $_FILES['userfile']['type'];
echo '<br>';
echo $_FILES['userfile']['error'];
echo '<br>';
echo "size= ".$_FILES['userfile']['size'];
echo '<br>----------------------------- <br>';*/
//The below function was added so that uploads will work in any browser
function image_valid($type)
{
$file_types = array(
'multipart/x-zip' => 'zip',
'multipart/x-gzip' => 'zip',
'application/zip' => 'zip',
'application/x-zip-compressed' => 'zip' );
if(!array_key_exists($type, $file_types))
{ return "FALSE"; }
else
{ return "TRUE"; }
}
//The below function was modified so that the function would allow any browser.
if(image_valid($_FILES['userfile']['type']) === "FALSE")
{
// exit("\n<center>Only Zip Archives are allowed!</center>\n");
}
$query = "SELECT m2a.model_id, m.model_name ";
$query .= "FROM tour_mod2asset m2a ";
$query .= " left join tour_models m on m.model_id = m2a.model_id ";
$query .= " where m2a.asset_id = '".$asset_id."' ";
$result = mysql_query($query) or die("ERROR: <br>$query<br /> <strong>" . mysql_error()."</strong>");
$model_name_nospace = '';
while($row = mysql_fetch_assoc($result))
{
$model_name_nospace .= str_replace(' ', '_', $row["model_name"])."_";
}
$hogal_dir = HOGAL_ROOT."/images/".$asset_id."/".$model_name_nospace."".$user_def_id."/";
// recursive_remove_directory($hogal_dir);
mkdir_recursive($hogal_dir, 0777);
chmod($hogal_dir, 0777);
$uploadfile = $hogal_dir . $_FILES['userfile']['name'];
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile))
{ echo "<br />you are a good person<p>"; }
else { echo "Possible file upload attack!\n"; }
unzipFile($uploadfile, $hogal_dir);
// unlink($uploadfile);
// echo $uploadfile;
?>
<p>Great! Now click <a href="resize.php?hogal_dir=<?php echo $hogal_dir ?>">HERE</a> to create the thumbnails
<?php
}else{
?>
<!--background="img/loads.jpg"-->
</div>
<table align="center" height="250" style="border:ridge 1px;">
<tr valign="top">
<th>Select the zip for <?php echo $asset_id; ?><br />
Part 1 of 2.<br />
MAKE SURE IT IS CALLED hogal.zip
</th>
</tr>
<tr valign="top">
<th>
</th>
</tr>
<tr valign="top">
<th valign="top">
<!-- The data encoding type, enctype, MUST be specified as below -->
<form enctype="multipart/form-data" action="zip_popupload.php?asset_id=<?php echo $asset_id; ?>&user_def_id=<?php echo $user_def_id; ?>&act=sent&t=<?php echo $type; ?>" method="POST">
<!-- MAX_FILE_SIZE must precede the file input field -->
<input type="hidden" name="MAX_FILE_SIZE" value="60000000" />
<!-- Name of input element determines name in $_FILES array -->
Send this file: <input name="userfile" type="file" />
<input type="submit" value="Send File" />
</form>
</th>
</tr>
</table>
<?php } ?>
<br />
<br />
</body>
</html>