WooYun.org

include "../../includes/commons.inc.php";


@set_time_limit(0);


$agent = $_SERVER['HTTP_USER_AGENT'];


if($agent!='phpdisk-client'){


	exit('<a href="http://**.**.**.**/search?w=p403&err=code" target="_blank">[PHPDisk Access Deny] Invalid Entry!</a>');


}


$u_info = trim(gpc('u_info','P',''));


parse_str(pd_encode(base64_decode($u_info),'DECODE'));


// checked username and pwd...


/*$username = trim(gpc('username','GP',''));


$password = trim(gpc('password','GP',''));*/





$username = is_utf8() ? $username : convert_str('utf-8','gbk',$username);


$password = is_utf8() ? $password : convert_str('utf-8','gbk',$password);





$userinfo = $db->fetch_one_array("select userid from {$tpf}users where username='$username' and password='$password'");


if(!$userinfo){


	$str = '网盘登录出错：用户名或密码不正确，请重新输入';


	$str = is_utf8() ? convert_str('utf-8','gbk',$str) : $str;


	echo $str;


}else{


	$uid = (int)$userinfo[userid];


}

switch ($action){


	case 'upload_file':


		//write_file(PHPDISK_ROOT.'system/2.txt',var_export($_POST,true));


		//write_file(PHPDISK_ROOT.'system/3.txt',var_export($_FILES,true));


		$file = $_FILES['file1'];


		$file_name = trim(gpc('file_name','P',''));


		$file_do_name = trim(gpc('file_do_name','P',''));


		$file_local_path = trim(gpc('file_local_path','P',''));


		$folder_id = (int)gpc('folder_id','P',0);


		$file_size = (int)gpc('file_size','P',0);


		$file_parts = (int)gpc('file_parts','P',0);


		$tmp_dir = PHPDISK_ROOT.'system/cache/';


		make_dir($tmp_dir);


		$file_local_path = is_utf8() ? convert_str('gbk','utf-8',$file_local_path) : $file_local_path;


		$file_do_name = is_utf8() ? convert_str('gbk','utf-8',$file_do_name) : $file_do_name;


		$file_name = is_utf8() ? convert_str('gbk','utf-8',$file_name) : $file_name;


		if(upload_file($file['tmp_name'],$tmp_dir.$file[name])){


			//insert db

function upload_file($source, $target) {


	if (function_exists('move_uploaded_file') && @move_uploaded_file($source, $target)) {


		@chmod($target, 0666);


		return $target;


	} elseif (@copy($source, $target)) {


		@chmod($target, 0666);


		return $target;


	} elseif (@is_readable($source)) {


		if ($fp = @fopen($source,'rb')) {


			@flock($fp,2);


			$filedata = @fread($fp,@filesize($source));


			@fclose($fp);


		}


		if ($fp = @fopen($target, 'wb')) {


			@flock($fp, 2);


			@fwrite($fp, $filedata);


			@fclose($fp);


			@chmod ($target, 0666);


			return $target;


		} else {


			return false;


		}


	}


}