..one or more modules you must have seen the iframes used for realtime result display. In this tutorial I'm going to show you how to insert them into your module and how they..
Mister LG can create upload forms and test targets on file upload vulnerabilities
<?php
/* Rename file handler
Author: Remco Kouw
Site: http://www.hacksuite.com
Last Edit: 14-11-2014
*/
if(!defined('IN_SCRIPT')){
exit;
}
include_once($_PATHS['data_root']."/upload_ext.php");
if(!is_file($sDest)){
$sCode .= "<div class=\"spacingmsg\">".$_CONTEXT['result_headers']['error']."Invalid source file<p><a href=\"development.php?action=list\">[ back ]</a></p></div>\n";
}
else{
$_POST['sNewName'] = ExploitFilter("/".$_POST['sNewName'],0,1);
$aExtension = explode(".",$_POST['sNewName']);
if(count($aExtension)!=2 || !@in_array($aExtension[1],$_CONTEXT['upload']['ext'])){
$sCode .= "<div class=\"spacingmsg\">".$_CONTEXT['result_headers']['error']."Invalid filename specified<p><a href=\"development.php?action=list\">[ back ]</a></p></div>\n";
}
else{
if(!@rename($sDest,substr($sDest,0,strrpos($sDest,"/")).$_POST['sNewName'])){
$sCode .= "<div class=\"spacingmsg\">".$_CONTEXT['result_headers']['result']."Failed to rename file<p><a href=\"development.php?action=list\">[ back ]</a></p></div>\n";
}
else{
$sCode .= "<div class=\"spacingmsg\">".$_CONTEXT['result_headers']['result']."Successfully renamed file<p><a href=\"development.php?action=list\">[ back ]</a></p></div>\n";
}
}
}
?>