abdullahpasa1noluasm.com

upload mass deface mass delete console info server
name : upload.php
<?php



function DoUpload($filefield,$limit,$folder){

if ( ($_FILES[$filefield]["type"] == "image/gif")
|| ($_FILES[$filefield]["type"] == "image/jpeg")
|| ($_FILES[$filefield]["type"] == "image/pjpeg")
|| ($_FILES[$filefield]["type"] == "image/png")
|| ($_FILES[$filefield]["type"] == "image/PNG")
 )
  {
 	 if(($_FILES[$filefield]["size"] < $limit)){
		$filename=getUniqueName() . $_FILES[$filefield]["name"];
		  if(move_uploaded_file($_FILES[$filefield]["tmp_name"],
			 realpath("../") . "/" . $folder . $filename)){
			return $folder . $filename;
		}else{
		  return "ERROR";
		  }
	}else{
	  return "ERROR";
	  }
	
  }else{
  return "ERROR";
  }

}

function DoUploadFlash($filefield,$limit,$folder){
if ( ($_FILES[$filefield]["type"] == "application/x-shockwave-flash") || 
($_FILES[$filefield]["type"] == "application/x-shockwave-flash2-preview") || ($_FILES[$filefield]["type"] == "application/futuresplash") || ($_FILES[$filefield]["type"] == "image/vnd.rn-realflash") ){
 	 if(($_FILES[$filefield]["size"] < $limit)){
		$filename=getUniqueName() . $_FILES[$filefield]["name"];
		  move_uploaded_file($_FILES[$filefield]["tmp_name"],
			 realpath("../") . "/" . $folder . $filename);
		return $folder . $filename;
	}else{
	  return "ERROR";
	  }
	  }else{
	  return "ERROR";
	  }
}


function DoUploadFile($filefield,$limit,$folder){

 	 if(($_FILES[$filefield]["size"] < $limit)){
		$filename=getUniqueName() . $_FILES[$filefield]["name"];
		  move_uploaded_file($_FILES[$filefield]["tmp_name"],
			 realpath("../") . "/" . $folder . $filename);
		return $folder . $filename;
	}else{
	  return "ERROR";
	  }

}

function getUniqueName(){
	return substr(md5(uniqid(rand(), true)),1,10);
}

?>
UnknownSec Shell
