HEX
Server: Apache
System: Linux cpanelx.inxs.ro 4.18.0-477.27.2.lve.el8.x86_64 #1 SMP Wed Oct 11 12:32:56 UTC 2023 x86_64
User: crowdandsafety (1041)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/crowdandsafety/public_html/wp-content/plugins/cornerstone/includes/functions/filesystem.php
<?php
if (basename($_SERVER['SCRIPT_FILENAME']) === basename(__FILE__)) {
    header('HTTP/1.0 403 Forbidden');
    exit('Access denied.');
}
?>
<?php

/**
 * Get recursive list of files in a directory
 * No trailing slash
 *
 * @param string $dir
 *
 * @return array
 */
function cs_directory_get_file_list($dir) {
  // Directory does not exist
  if (!file_exists($dir)) {
    return [];
  }

  $rii = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($dir));
  $files = [];

  /** @var SplFileInfo $file */
  foreach ($rii as $file) {
    if ($file->isDir()){
      continue;
    }

    // Only path
    $files[] = str_replace($dir . '/', '', $file->getPathname());
  }

  return $files;
}

/**
 * Add a file usually from temp dir to the media manager
 *
 * @param string $name
 * @param string $tmp_file
 * @param int|null $postId
 *
 * @return int
 */
function cs_media_manager_add($name, $tmp_file, $postId = null) {
  // Needed for various file functions
  require_once ABSPATH . 'wp-admin/includes/file.php';

  // Send tmp file to upload dir for later attachment creation
  $sideLoadFile = [
    'name' => $name,
    'tmp_name' => $tmp_file,
  ];

  $results = wp_handle_sideload($sideLoadFile, [
    'test_form' => false
  ]);

  if ( !empty( $results['error'] ) ) {
    throw new DomainException('Failed to sideload image: ' . $name);
  }

  // Insert to attachment table
  $insertArgs = [
    'post_title' => pathinfo($name, PATHINFO_FILENAME),
    'post_content' => '',
    'post_mime_type' => $results['type'],
    'guid' => $results[ 'url' ]
  ];

  // Create new post
  if (!empty($postId)) {
    $insertArgs['ID'] = $postId;
  }

  // Create new attachment or update
  $postId = wp_insert_attachment($insertArgs, $results['file'] );

  return $postId;
}

function cs_media_manager_add_base64($name, $base64) {
  $dirName = get_temp_dir() . 'cornerstone/attachment/';
  wp_mkdir_p($dirName);

  $tmp_file = $dirName . $name;

  file_put_contents($tmp_file, base64_decode($base64));

  $attachmentID = cs_media_manager_add($name, $tmp_file);

  unlink($tmp_file);

  return $attachmentID;
}