FM / images

/var/www/greso.tech/images

Name	Size	Mode	Actions
dl/	-	0777	rm
deleter.php	190	0644	edit dl rm
index.html	4	0644	edit dl rm
uploader.php	5228	0644	edit dl rm

Edit: /var/www/greso.tech/images/uploader.php (5228B)

<?php

define('IMG_DIR','/mnt/hdd/user/images.nextstopmoving.com/');

$type = $_REQUEST['type'];

if($type == 'document_attachment'||$type == 'item_attachment'){
			if($type == 'document_attachment'){
				$type_dir = 'doc_attachment';
			}
			if($type == 'item_attachment'){
				$type_dir = 'item_attachment';
			}
			$validextensions = array("jpeg", "jpg", "png", "doc", "pdf", "xls");  //Extensions which are allowed
			if (($file["size"] < 10000000) //Approx. 10Mb files can be uploaded.
						&& in_array($file_extension, $validextensions)) {
					$new_name = md5(uniqid());
					$file_name = IMG_DIR.$type_dir.'/'.$new_name.'.'.$file_extension;
					if(move_uploaded_file($file['tmp_name'],$file_name)){
						$new_file['error'] = 0;
						$new_file['image'] = 'dl/'.$type_dir.'/'.$new_name.'.'.$file_extension;
						$new_file['icon'] = '';
						$new_file['imageSmall'] = '';
						$new_file['imageLarge'] = '';
					}else{
						$new_file['error'] = 101;
						$new_file['error'] = 'save error';
					}
					$new_file['old_name'] = $file['name'];
					$new_file['size'] = $file['size'];
			}else{
					$new_file['name'] = json_encode($file);
					$new_file['old_name'] = $file['name'];
					$new_file['ext'] = $ext;
					$new_file['error'] = 100;
					$new_file['error'] = 'size or extension error';
					$new_file['size'] = $file['size'];
			}
		}else{
			$validextensions = array("jpeg", "jpg", "png");  //Extensions which are allowed
			if (($file["size"] < 10000000) //Approx. 10Mb files can be uploaded.
						&& in_array($file_extension, $validextensions)) {
					$new_name = md5(uniqid());
					$file_name = IMG_DIR.'normal/'.$new_name.'.'.$file_extension;
					$file_name64 = IMG_DIR.'icon/'.$new_name.'.'.$file_extension;
					$file_name256 = IMG_DIR.'small/'.$new_name.'.'.$file_extension;
					$file_name512 = IMG_DIR.'large/'.$new_name.'.'.$file_extension;
					if(move_uploaded_file($file['tmp_name'],$file_name)){
						try{
							image_resize($file_name,$file_name64,64,64);
							image_resize($file_name,$file_name256,256,256);
							image_resize($file_name,$file_name512,512,512);
						}catch(Exception $e){
							file_put_contents("./uploader_errors.log",$e);
						}
						$new_file['error'] = 0;
						$new_file['image'] = 'dl/normal/'.$new_name.'.'.$file_extension;
						$new_file['icon'] = 'dl/icon/'.$new_name.'.'.$file_extension;
						$new_file['imageSmall'] = 'dl/small/'.$new_name.'.'.$file_extension;
						$new_file['imageLarge'] = 'dl/large/'.$new_name.'.'.$file_extension;
					}else{
						$new_file['error'] = 101;
						$new_file['error'] = 'save error';
					}
					$new_file['old_name'] = $file['name'];
					$new_file['size'] = $file['size'];
			}else{
					$new_file['name'] = json_encode($file);
					$new_file['old_name'] = $file['name'];
					$new_file['ext'] = $ext;
					$new_file['error'] = 100;
					$new_file['error'] = 'size or extension error';
					$new_file['size'] = $file['size'];
			}
		}
		$new_file['type'] = $type;

$ans['files'][] = $new_file;
    }

//    echo IMG_DIR;
	if(isset($ans))
    	echo json_encode($ans);

cmd: