403Webshell
Server IP : 206.188.193.52  /  Your IP : 216.73.217.55
Web Server : Apache
System : Linux prod-iad-vuxweb1501am 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : 2670060.2931588 ( 1910161)
PHP Version : 7.4.33
Disable Function : shell_exec,passthru,exec,system,pcntl_exec
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /data/20/2/18/60/2670060/user/2931588/htdocs/nsiwordpress/wp-content/themes/atahualpa/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /data/20/2/18/60/2670060/user/2931588/htdocs/nsiwordpress/wp-content/themes/atahualpa//upload.php
<?php
if (!empty($_SERVER['SCRIPT_FILENAME']) AND 'upload.php' == basename($_SERVER['SCRIPT_FILENAME'])) {
	die ('Please do not load this page directly.');
}
global $user_ID; 

if( $user_ID ) { 
	if( current_user_can('level_10') ) { 
		$import_options = bfa_file_get_contents($_FILES['userfile']['tmp_name']);
	
		// Since 3.5.2, use JSON 
		if ( json_decode($import_options) != NULL AND strpos($import_options, 'use_bfa_seo') !== FALSE ) {
			update_option('bfa_ata4', json_decode($import_options, TRUE));
			echo "<strong><span style='color:green'>Successfully imported. Reloading admin area in 2 seconds... </span><code>" . 
				basename($_FILES['userfile']['name']) . "</code></strong><br />";		
		
		// Probably not a valid settings file:
		} else {
			echo "<strong><span style='color:red'>Sorry, but </span><code>" . 
				basename($_FILES['userfile']['name']) . "</code> <span style='color:red'>doesn't appear 
				to be a valid Atahualpa Settings File.</span></strong>";
		}
		
	} else {
		die("<span style='color:green'>Only admins can import settings</span>");
	}
}
die();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit