HEX
Server: Apache/2.4.65 (Debian)
System: Linux srv39710 6.1.0-41-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.158-1 (2025-11-09) x86_64
User: root (0)
PHP: 8.4.11
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/www-root/data/www/NEWs/news.mowik.click/actions/offer_add.php
<?php
//Охуевший Мистер Крабс
include('../inc/conf.php');
crabs_token_check($_POST['token']);
require('../inc/wu_resize_crop.php');
crabs_adm_check();

//Получение данных
$ti = mysqli_real_escape_string($connect_db, trim($_POST['iti']));
$url = mysqli_real_escape_string($connect_db, trim($_POST['url']));
$ty = intval($_POST['ity']);
$relasttab = intval($_POST['relasttab']);
if ($ty == 0) { $relasttab = 0; }
$prkl = intval($_POST['prkl']);
$icou = mysqli_real_escape_string($connect_db, trim($_POST['icou']));

if (empty($ti)) { exit('ti'); }
if (empty($url)) { exit('url'); }

//Загрузка обложки
if(!empty($_FILES['img_big']['name'])) {
$valid_types =  array('jpg', 'png', 'jpeg', 'gif', 'JPG', 'PNG', 'JPEG', 'GIF');
$path = '../img/upl/';
$si = getimagesize($_FILES['img_big']['tmp_name']);
$exts = substr($_FILES['img_big']['name'], 1 + strrpos($_FILES['img_big']['name'], "."));
$size = $_FILES['img_big']['size'];
if($size>(1024*1024*5)) { exit('img_big_big'); }
if (!in_array($exts, $valid_types)) { exit('img_big_error'); }
if(!stristr($_FILES['img_big']['type'], 'image/')) { exit('img_big_error'); }
if ($si[0] == 0 || $si[1] == 0) { exit('img_big_error'); }

$rand = rand(0,999);
$src_s_big = $path.$dt.'_'.$rand.'.'.$exts;
$srcs_big = $dt.'_'.$rand.'.'.$exts;
if (move_uploaded_file($_FILES["img_big"]["tmp_name"], $src_s_big)) {
if ($si[0] > 290) { resize($src_s_big, $src_s_big, 290, 0); }
$si2 = getimagesize($src_s_big);
if ($si2[1] > 218) { crop($src_s_big,$src_s_big,array(0,0,290,218)); }
} else { exit('img_big_error'); }
} else { exit('img_big_error'); }

mysqli_query($connect_db, "INSERT INTO `t_offers` (ti,img,url,cou,isprk,newtabtype,relasttab,dt) VALUES ('$ti','$srcs_big','$url','$icou','$prkl','$ty','$relasttab','$dt')");

exit('1');
?>