xfnw/u.php
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

ensure unique filenames for unique files

Browse source
This commit is contained in:
vulpine 2022-01-10 20:59:27 -05:00 committed by GitHub
parent f35506829a
commit 1e6103b1f1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
foxes.php
View file

@ -194,6 +194,8 @@ function mime2ext($mime) {
<?php <?php
$target_dir = "i"; $target_dir = "i";
$hl = 4; $hl = 4;
$randchars = str_split('012345789abcdefghijkmnp');
//$real_dir = readlink($target_dir); //$real_dir = readlink($target_dir);
//if (!file_exists($real_dir)) { //if (!file_exists($real_dir)) {
// mkdir($real_dir, 0777, true); // mkdir($real_dir, 0777, true);
@ -223,13 +225,20 @@ $fileType = mime2ext(mime_content_type($_FILES['file']['tmp_name']));
if ($fileType == '' || $fileType == 'php' || $fileType == 'html' || $fileType == 'htm') { if ($fileType == '' || $fileType == 'php' || $fileType == 'html' || $fileType == 'htm') {
$fileType = 'txt'; $fileType = 'txt';
} }
$target_file = $target_dir . substr(md5_file($_FILES['file']['tmp_name']), 1, $hl) . "." . $fileType; $target_name = substr(md5_file($_FILES['file']['tmp_name']), 1, $hl) . "." . $fileType;
$target_file = $target_dir . $target_name;
if (file_exists($_FILES["file"]['tmp_name'])) { if (file_exists($_FILES["file"]['tmp_name'])) {
$uploadOk = 1; $uploadOk = 1;
} }
if (file_exists($target_file) && hash_file('sha256',$_FILES["file"]['tmp_name']) != hash_file('sha256',$target_file)) {
do {
$target_name = $randchars[array_rand($randchars)] . $target_name;
$target_file = $target_dir . $target_name;
} while (file_exists($target_file) && hash_file('sha256',$_FILES["file"]['tmp_name']) != hash_file('sha256',$target_file));
}
// Check if $uploadOk is set to 0 by an error // Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0) { if ($uploadOk == 0) {
@ -237,7 +246,7 @@ if ($uploadOk == 0) {
// if everything is ok, try to upload file // if everything is ok, try to upload file
} else { } else {
if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) {
echo "https://" . $_SERVER['HTTP_HOST'] . "/" . substr(md5_file($target_file), 1, $hl) . "." . $fileType . "\n"; echo "https://" . $_SERVER['HTTP_HOST'] . "/" . $target_name . "\n";
exit; exit;
} else { } else {
echo "Sorry, there was an error uploading your file."; echo "Sorry, there was an error uploading your file.";
@ -260,11 +269,18 @@ if ($uploadOk == 0) {
if ($fileType == '' || $fileType == 'php' || $fileType == 'html' || $fileType == 'htm') { if ($fileType == '' || $fileType == 'php' || $fileType == 'html' || $fileType == 'htm') {
$fileType = 'txt'; $fileType = 'txt';
} }
$target_name = substr(md5($file), 1, $hl) . "." . $fileType;
$target_file = $target_dir . $target_name;
$target_file = $target_dir . substr(md5($file), 1, $hl) . "." . $fileType; if (file_exists($target_file) && hash('sha256',$file) != hash_file('sha256',$target_file)) {
do {
$target_name = $randchars[array_rand($randchars)] . $target_name;
$target_file = $target_dir . $target_name;
} while (file_exists($target_file) && hash('sha256',$file) != hash_file('sha256',$target_file));
}
if ($file && file_put_contents($target_file, $file)) { if ($file && file_put_contents($target_file, $file)) {
echo "https://" . $_SERVER['HTTP_HOST'] . "/" . substr(md5($file), 1, $hl) . "." . $fileType . "\n"; echo "https://" . $_SERVER['HTTP_HOST'] . "/" . $target_name . "\n";
exit; exit;
} else { } else {
echo "Sorry, there was an error uploading your file."; echo "Sorry, there was an error uploading your file.";
@ -273,9 +289,18 @@ if ($uploadOk == 0) {
} elseif (isset($_POST['shorten'])) { } elseif (isset($_POST['shorten'])) {
$url = $_POST['shorten']; $url = $_POST['shorten'];
$target_file = $target_dir . substr(md5($url), 1, $hl) . "." . "php"; $target_name = substr(md5($url), 1, $hl);
$target_file = $target_dir . $target_name . "." . "php";
if (file_exists($target_file)) {
do {
$target_name = $randchars[array_rand($randchars)] . $target_name;
$target_file = $target_dir . $target_name;
} while (file_exists($target_file));
}
if (file_put_contents($target_file,'<?php header("Location: ".'.escapeshellarg($url).');exit;')) { if (file_put_contents($target_file,'<?php header("Location: ".'.escapeshellarg($url).');exit;')) {
echo "https://" . $_SERVER['HTTP_HOST'] . "/" . substr(md5($url), 1, $hl) . "\n"; echo "https://" . $_SERVER['HTTP_HOST'] . "/" . $target_name . "\n";
exit; exit;
} else { } else {
echo "Sorry, there was an error uploading your file."; echo "Sorry, there was an error uploading your file.";
@ -313,3 +338,4 @@ html, body {
</div> </div>
</body> </body>
</html> </html>