403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/sportyone.com/public_html/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/sportyone.com/public_html/admin/m_popupload.php
<?php
 	include_once("../_config.php");
	require("thumbfnc.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Untitled Document</title>
<link href="../style.css" rel="stylesheet" type="text/css" />


</head>
<?php

$photo_act = $_GET["photo_act"];
$id = $_GET["id"];
$for = $_GET["for"];


	$tempf = $id.".jpg";
	$uploaddir = ROOT."/images/models/";
  

?>
<body bgcolor="#555f83" text="#FFFFFF" onunload="opener.location=('<?php echo $o_page; ?>?photo_act=<?php echo $photo_act; ?>&id=<?php echo $id; ?>')" onBlur=self.focus()>
<!-- onunload="opener.location=('<?php echo $o_page; ?>?photo_act=<?php echo $photo_act; ?>&id=<?php echo $id; ?>')" onBlur=self.focus()-->
<?php 
if(isset($_GET["act"]))
	{$act = $_GET["act"];} 
	elseif($act = "")
	{$act = "none";} 




if($act == "sent")
{
$new_name = $tempf;
$uploadfile = $uploaddir . $new_name;
$uploadfile;

		
echo $_FILES['userfile']['type'];

if($_FILES['userfile']['type'] != "image/jpeg")
	{
		exit("\n<center>Only Jpg Images are allowed!</center>\n");
	}

	if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) 
		{
   			echo "\n<center>".$uploadfile ." is valid</center><p>\n";
			chmod("$uploadfile", 0777);
		}
	else
	  	{
   			echo "Possible file upload attack!\n";
		}

$images_folder = $uploaddir;
		$thumbs_folder = $uploaddir;
		$from_name = $new_name;
		$image_type = 2;
		
/*		 if($for == "m_big")
		 	{*/	
				$to_name = $id.'_big.jpg';
				$max_x = "375";
				$max_y = "563";
				include("thumb.php");
/*			} 
		elseif($for == "m_sm")
			{	*/
				$to_name = $id.'_sm.jpg';
				$max_x = "175";
				$max_y = "263";
				include("thumb.php");
			/*} */

}

 ?>




<!--background="img/loads.jpg"-->
<table  align="center" height="250">
<tr valign="top">
<th>Select <?php  echo $_GET["for"]; ?> Image 

</th>
</tr>
<tr valign="top">
<th>
</th>
</tr>
<tr valign="top">
<th valign="top">
<!-- The data encoding type, enctype, MUST be specified as below -->
<form enctype="multipart/form-data" action="m_popupload.php?for=<?php echo $_GET["for"] ?>&amp;act=sent&amp;photo_act=<?php echo $photo_act; ?>&amp;id=<?php echo $id; ?>" method="POST">
    <!-- MAX_FILE_SIZE must precede the file input field -->
    <input type="hidden" name="MAX_FILE_SIZE" value="6000000" />
    <!-- Name of input element determines name in $_FILES array -->
    Send this file: <input name="userfile" type="file" />
    <input type="submit" value="Send File" />
</form>
</th>
</tr>
</table>

<div align="center"  style=" color:#FFFFFF;">

<a href="javascript:window.close()" style=" color:#FFFFFF;">Close Me</a></div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit