Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- define('KEYWORD', 'yoursecretwordhere');
- define('BASE_URL', 'http://some.site/folder/');
- // Assumption: some.site/folder (the fs directory) is owned by the httpd user (usually www-data)
- // Assumption: This script is two subfolders below externally visible folder of pictures
- // Example: some.site/folder/secret/location/script.php
- /* Detailed setup instructions:
- -0-223323-ed-aegis </var/www> cd /web/www/
- -0-223326-ed-aegis </web/www> mkdir uplaoder.ocv.me
- -0-223330-ed-aegis </web/www> cd uplaoder.ocv.me/
- -0-223331-ed-aegis </web/www/uplaoder.ocv.me> wget http://pastebin.com/raw.php?i=9bPXt7Xh
- -0-223334-ed-aegis </web/www/uplaoder.ocv.me> mv raw.php\?i\=9bPXt7Xh index.php
- -1-223408-ed-aegis </web/www/uplaoder.ocv.me> mkdir secret1
- -0-223411-ed-aegis </web/www/uplaoder.ocv.me> mkdir secret1/secret2
- -0-223412-ed-aegis </web/www/uplaoder.ocv.me> mv index.php secret1/secret2/
- -0-223421-ed-aegis </web/www/uplaoder.ocv.me> echo no > index.html
- -0-223423-ed-aegis </web/www/uplaoder.ocv.me> cd secret1/secret2/
- -0-223813-ed-aegis </web/www/uplaoder.ocv.me/secret1/secret2> nano index.php
- # define('BASE_URL', 'http://uplaoder.ocv.me/');
- -0-224254-ed-aegis </web/www/uplaoder.ocv.me/secret1/secret2> su
- -0-224254-root-aegis </web/www/uplaoder.ocv.me/secret1/secret2> chown nobody.nobody /web/www/uplaoder.ocv.me
- */
- http://uplaoder.ocv.me/ShareX_-_Destination_settings_-_CUsersedDocume_2014-07-26_00-56-40.png
- header('Cache-Control: no-cache, must-revalidate');
- header('Expires: Wed, 09 Sep 2009 09:09:09 GMT');
- if (isset($_FILES[KEYWORD]))
- {
- if ($_FILES[KEYWORD]['error'] == UPLOAD_ERR_OK)
- {
- // ok
- }
- else die('fup error');
- }
- else die('nofup');
- $file = $_FILES[KEYWORD];
- $name = $file['name'];
- $name = ltrim($name, "./\\ \t\r\n");
- preg_match(
- '/(\.png|\.jpg|\.jpeg|\.gif|\.bmp)$/i',
- $name, $matches);
- if (count($matches) == 0) die("nope");
- $updir = '../../';
- $upfile = $updir . basename($file['name']);
- if (move_uploaded_file($file['tmp_name'], $upfile))
- {
- echo BASE_URL.$name;
- }
Advertisement
Add Comment
Please, Sign In to add comment