HEX
Server: Apache
System: Linux web2213.uni5.net 5.4.282-1.el8.elrepo.x86_64 #1 SMP Mon Aug 19 18:33:22 EDT 2024 x86_64
User: clinicamaciel (596848)
PHP: 7.3.33
Disabled: apache_child_terminate,c99_buff_prepare,c99_sess_put,dl,eval,exec,leak,link,myshellexec,openlog,passthru,pclose,pcntl_exec,php_check_syntax,php_strip_whitespace,popen,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,show_source,symlink,system,socket_listen,socket_create_listen,putenv
Upload Files
File: /home/clinicamaciel/www/index_lixo/wp-content/plugins/cherry-plugin/admin/import-export/upload.php
<?php
// If this file is called directly, abort.
if ( ! defined( 'ABSPATH' ) ) {
	die('Error');
}

/**
 * Process file uploads for importer
 */
function cherry_plugin_process_upload() {

	// verify nonce
	check_ajax_referer( 'cherry_plugin_upload', '_wpnonce' );

	// check user caps
	if ( !current_user_can( 'import' ) ) {
		wp_die( 'You don\'t have permissions to do this', 'Error' );
	}

	if ( strtolower( $_SERVER['REQUEST_METHOD'] ) != 'post' ) {
		wp_die( 'Wrong method', 'Error' );
	}

	if ( array_key_exists( 'file', $_FILES ) ) {
		$upload_dir  = isset($_REQUEST['dir']) ? $_REQUEST['dir'] : $upload_dir ;
		$file_name   = basename($_FILES['file']['name']);
		$upload_file = $upload_dir . $file_name;
		$result      = move_uploaded_file($_FILES['file']['tmp_name'], $upload_file);
	}
	die();
}

add_action( 'wp_ajax_cherry_import_files', 'cherry_plugin_process_upload' );