Friendzone - HackTheBox

Some hint for ha** page in friendzone box? I could retrieve source code from dash***** and understand how bypass the LF* but don’t know how get the php shell uploaded in Brazilian Dance.