From 3c0ecea0b0f6a62e417b129cb483f8b31a9c5334 Mon Sep 17 00:00:00 2001
From: soumajitaws <soumajit.aws@gmail.com>
Date: Tue, 3 Feb 2026 00:08:12 +0530
Subject: [PATCH] Create fileupload.php

---
 fileupload.php | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 fileupload.php

diff --git a/fileupload.php b/fileupload.php
new file mode 100644
index 0000000..85ffa08
--- /dev/null
+++ b/fileupload.php
@@ -0,0 +1,19 @@
+<?php
+
+if( isset( $_POST[ 'Upload' ] ) ) {
+	// Where are we going to be writing to?
+	$target_path  = DVWA_WEB_PAGE_TO_ROOT . "hackable/uploads/";
+	$target_path .= basename( $_FILES[ 'uploaded' ][ 'name' ] );
+
+	// Can we move the file to the upload folder?
+	if( !move_uploaded_file( $_FILES[ 'uploaded' ][ 'tmp_name' ], $target_path ) ) {
+		// No
+		$html .= '<pre>Your image was not uploaded.</pre>';
+	}
+	else {
+		// Yes!
+		$html .= "<pre>{$target_path} succesfully uploaded!</pre>";
+	}
+}
+
+?>