HEX
Server: Apache
System: Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: camjab_ssh (1000)
PHP: 5.3.29
Disabled: NONE
Upload Files
File: /home/httpd/html/tubeshemale.com/public_html/process/process.video_upload.php
<?php
	//allowed extensions by the uploader.
	$allowedArr = array("wmv","mpg","flv","mp4","avi","qt","mov","mpeg");	
	if (isset($_FILES["video"]) && is_uploaded_file($_FILES["video"]["tmp_name"]) && $_FILES["video"]["error"] == 0) {
	include '../admin/db.php';
	$uniq1=uniqid();
	$video1 = $_FILES["video"]["name"];
	$video1=$uniq1.$video1;
	$video1=preg_replace('/[^a-z0-9\s\.]+/i','',$video1);
	$uploadfiles = $content_path.'/'.$video1;

	$ext = explode(".",$video1);
	$ext = array_reverse($ext); 
	$extension = $ext[0]; 
	if(!in_array($extension,$allowedArr)) {
		exit("InvalidExtension"); 
	}
	if(move_uploaded_file($_FILES['video']['tmp_name'],$uploadfiles)) {
		chmod($uploadfiles,0777);
		echo mysql_real_escape_string($video1);
	}
	else {
		echo 'CantMoveFile';
	}
	exit();
	} 
	
else {
		echo ' '; // I have to return something or SWFUpload won't fire uploadSuccess
	}
?>