WooYun.org

$uploadfile = $uploaddir.'/'.$_FILES[$curr_boxid]['name'];
    if(strpos($uploadfile,".php") !== false){
        echo "php file?";
        exit();
    }
	if( ($_FILES[$curr_boxid]['error'] == UPLOAD_ERR_OK ) && move_uploaded_file($_FILES[$curr_boxid]['tmp_name'],$uploadfile))
	{
		$tmp['save_filename'] = $uploadfile;
		$tmp['md5'] = md5_file($uploadfile);
		$tmp['downlink'] = 'uploadfiles/'.$_FILES[$curr_boxid]['name'];
		$upload_success_sum++ ;