HEX
Server: nginx/1.18.0
System: Linux srv01 5.15.0-171-generic #181-Ubuntu SMP Fri Feb 6 22:44:50 UTC 2026 x86_64
User: RaviMohan (1026)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //opt/mailcow-dockerized-1/data/web/resource.php
<?php

if (!isset($_GET['file']) ) {
    http_response_code(404);
    exit;
}
$pathinfo = pathinfo($_GET['file']);

if (!array_key_exists('extension', $pathinfo)) {
    http_response_code(404);
    exit;
}
$extension = strtolower($pathinfo['extension']);

$filepath = '/tmp/' . $pathinfo['basename'];
$content = '';

if (file_exists($filepath)) {
    $secondsToCache = 31536000;
    $expires = gmdate('D, d M Y H:i:s', time() + $secondsToCache) . ' GMT';

    if ($extension === 'js') {
        header('Content-Type: application/javascript');
    } elseif ($extension === 'css') {
        header('Content-Type: text/css');
    } else {
        //currently just css and js should be supported!
        exit();
    }

    header("Expires: $expires");
    header('Pragma: cache');
    header('Cache-Control: max-age=' . $secondsToCache);
    $content = file_get_contents($filepath);
}

echo $content;