Gecko [ aodai.devttt.com ]

Name	Size	Permission
.well-known	[ DIR ]	drwxr-xr-x
blocked	[ DIR ]	drwxr-xr-x
css	[ DIR ]	drwxr-xr-x
img	[ DIR ]	drwxr-xr-x
protected	[ DIR ]	drwxr-xr-x
.htaccess	13 B	-rwxr-xr-x
error404.html	195 B	-rwxr-xr-x
index.html	13.41 KB	-rwxr-xr-x
phpinfo.php	69 B	-rwxr-xr-x
upload.html	6.37 KB	-rwxr-xr-x
upload.php	3.45 KB	-rwxr-xr-x

Code Editor : upload.php

<html>
<head><style> 
    body { 
        font-family: monospace; 
        font-size: 12px; 
    } 
</style></head>
<body>

<?php
function moveAndShow($src, $dest)
{
    if (empty($src)) {
        echo "<p>file is empty, not stored.</p>\n";
    } else {
        $fileType = strtolower(pathinfo($dest,PATHINFO_EXTENSION));
        $check = getimagesize($src);
        if($check == false) {
            echo "<p>file is not jpg file, not stored.</p>\n";
        } else {
            if($fileType != "jpg") {
                echo "<p>file type is not jpg, not stored.</p>\n";
            } else {
                rename($src, $dest);
                echo "<p>Moved: " . $src . " ====> " . $dest . "<br>";
                echo "MD5  : " . md5_file($dest). "<br>";
                echo "Size : " . filesize($dest). " bytes</p>\n"; 
            }
        }
    }
}

if(empty($_FILES["file1"])) 
{
    echo "<h1>Request body updated by Parser</h1>\n";

for ($i = 1; $i <= 2; $i++) {
        disaplyParsedFile("file{$i}");
        $moved_to_path = '/tmp/uploadfile_' . $_POST["file{$i}_name"];
        moveAndShow($_POST["file{$i}_path"], $moved_to_path);
    }

} else {
    echo "<h1>No Parser used</h1>\n";
    for ($i = 1; $i <= 2; $i++) {
        displayNoParsedFile("file{$i}");
        $moved_to_path = '/tmp/uploadfile_' . $_FILES["file{$i}"]["name"];
        moveAndShow($_FILES["file{$i}"]["tmp_name"], $moved_to_path);
    }
}
?>

</body></html>

${this.title}

Code Editor : upload.php