蚂蚁分类getshell

//???????????

if($ac == ‘base‘){

if(empty($tname)) write_msg(‘‘,‘?m=shop&type=corp&error=39‘);

if(empty($areaid)) write_msg(‘‘,‘?m=shop&type=corp&error=40‘);

$db -> query("UPDATE `{$db_mymps}member` SET tname=‘$tname‘,catid=‘$catids‘,areaid=‘$areaid‘,introduce=‘$introduce‘,address=‘$address‘,busway=‘$busway‘,mappoint=‘$mappoint‘,msn=‘$msn‘,web=‘$web‘ $where AND if_corp = ‘1‘");

write_msg(‘‘,‘?m=shop&type=corp&success=13‘);

} elseif($ac == ‘template‘) {

if($_FILES[$name_file][‘name‘]){

require_once MYMPS_INC.‘/upfile.fun.php‘;

$destination = "/banner/".date(‘Ym‘)."/";

$mymps_image = start_upload($name_file,$destination,0,‘‘,‘‘,$oldbanner,‘‘);

{

global $mymps_global;

global $timestamp;

if ( !is_uploaded_file( $_FILES[$file_name][‘tmp_name‘] ) )

{

write_msg( "请重新选择您要上传的图片!" );

}

$file = $_FILES[$file_name];

@createdir( MYMPS_UPLOAD.$destination_folder );

$file_name = $file[‘tmp_name‘];

$pinfo = pathinfo( $file[‘name‘] );

$ftype = $pinfo[‘extension‘];

$fname = $pinfo[basename];

if ( empty( $edit_filename ) && empty( $edit_pre_filename ) )

{

$destination_file = $timestamp.random( ).".".$ftype;

$destination = MYMPS_UPLOAD.$destination_folder.$destination_file;

$small_destination = MYMPS_UPLOAD.$destination_folder."pre_".$destination_file;

}

else

{

$destination = MYMPS_ROOT.$edit_filename;

$small_destination = MYMPS_ROOT.$edit_pre_filename;

$forbidarray = array(

MYMPS_ROOT."/images/logo.gif",

MYMPS_ROOT."/images/nopic.gif",

MYMPS_ROOT."/images/nophoto.jpg",

MYMPS_ROOT."/images/noavatar.gif",

MYMPS_ROOT."/images/noavatar_small.gif"

);

if ( !in_array( $destination, $forbidarray ) || $destination != MYMPS_ROOT )

{

@unlink( $destination );

}

if ( !in_array( $small_destination, $forbidarray ) || $destination != MYMPS_ROOT )

{

@unlink( $small_destination );

}

unset( $forbidarray );

}

if ( file_exists( $destination ) )

{

write_msg( "同名图片已存在，请重新选择您要上传的图片！" );

}

if ( !move_uploaded_file( $file_name, $destination ) )

{

write_msg( "图片上传失败，请重新选择您要上传的图片！" );

}

@createdir( MYMPS_UPLOAD.$destination_folder );

$file_name = $file[‘tmp_name‘];

$pinfo = pathinfo( $file[‘name‘] );

$ftype = $pinfo[‘extension‘];

$fname = $pinfo[basename];

$destination = MYMPS_ROOT.$edit_filename;

$small_destination = MYMPS_ROOT.$edit_pre_filename;

$forbidarray = array(

MYMPS_ROOT."/images/logo.gif",

MYMPS_ROOT."/images/nopic.gif",

MYMPS_ROOT."/images/nophoto.jpg",

MYMPS_ROOT."/images/noavatar.gif",

MYMPS_ROOT."/images/noavatar_small.gif"

);