Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/public_html/old-mophlawyer.com/admin/module/uploadphoto/   drwxr-xr-x
Free 201.49 GB of 981.82 GB (20.52%)
                            Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    

Viewing file:     upload.php.bak (2.6 KB)      -rw-r--r--

<?php
    include('class.uploader.php');
    include('config.php');
	$today = date("Y-m-d");
	if(trim($_FILES['files_thumb']['tmp_name']) != '')
	{
		$images = $_FILES['files_thumb']['tmp_name'];
		$new_images = 'thumbnails_'.$_FILES['files_thumb']['name'];
		//move_uploaded_file($_FILES['files_thumb']['tmp_name'],'Thumbnails/'.$new_images);
		$width=700; //*** Fix Width & Heigh (Autu caculate) ***//
		$size=GetimageSize($images);
		$height=round($width*$size[1]/$size[0]);
		$images_orig = ImageCreateFromJPEG($images);
		$photoX = ImagesX($images_orig);
		$photoY = ImagesY($images_orig);
		$images_fin = ImageCreateTrueColor($width, $height);
		ImageCopyResampled($images_fin, $images_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY);
		ImageJPEG($images_fin,'Thumbnails/'.$new_images);
		ImageDestroy($images_orig);
		ImageDestroy($images_fin);
	}
	
$v_cat = "cat_".date("YmdHis");	
$v_title =$_POST['title'];
$v_detail=$_POST['detail'];
 //error_reporting(0); 
 if(isset($_FILES['files']['name'])):
 define ("MAX_SIZE","2000");
  $fetch_cat=$db->query("INSERT INTO cat_image(title_id,title_name,thumbnail,detail,date_post)VALUES('$v_cat','$v_title','$new_images','$v_detail','$today')");
 for($i=0; $i<count($_FILES['files']['name']); $i++) {
$size=filesize($_FILES['files']['tmp_name'][$i]); 
 if($size < (MAX_SIZE*1024)): 
  $path = "uploads/";
   $name = $_FILES['files']['name'][$i];
    $size = $_FILES['files']['size'][$i];
	 list($txt, $ext) = explode(".", $name);
	  date_default_timezone_set ("Asia/Bangkok");  $currentdate=date("d M Y"); 
	   $file= time().substr(str_replace(" ", "_", $txt), 0);
	    $info = pathinfo($file); 
		$filename = $file.".".$ext;
		
		 if(move_uploaded_file($_FILES['files']['tmp_name'][$i], $path.$filename)) : 
     
		  $fetch=$db->query("INSERT INTO tbl_images(image_name,title_cat,title) VALUES('$filename','$v_cat','$v_title')");
		   if($fetch):
		    header('Location:../../showimages.php');
			 else : $error ='Data not inserting';
			  endif; 
			  else : $error = 'File moving unsuccessful';
			   endif;
			    else: $error = 'You have exceeded the size limit!'; endif; 
				 } else: $error = 'File not found!'; endif;
				   ?> 
                   <h2><?php echo @$error ?></h2> 
                   <a href="index.php">Try Again</a>
 
  <?php
    function onFilesRemoveCallback($removed_files){
        foreach($removed_files as $key=>$value){
            $file = '../uploads/' . $value;
            if(file_exists($file)){
                unlink($file);
            }
        }
        
        return $removed_files;
    }
?>