WooYun.org

$_GET['selTpl'] = base64_decode( $_GET['selTpl'] );


if ( $_GET['selLang'] != "" && is_file( "../language/".$_GET['selLang']."/"."webmail_inc.php" ) )


{


    $userInfo2 = array( "id" => $USERINFO['id'], "username" => $USERINFO['username'], "domain" => $USERINFO['domain'], "home" => $USERINFO['home'], "language" => $_GET['selLang'], "quota" => $USERINFO['quota'], "nickname" => $USERINFO['nickname'] );


    $session->setuserinfo( $userInfo2 );


    $USERINFO = $session->getuserinfo( );


}


$SG_USERNAME = $USERINFO['username'];


$SG_DOMAIN = $USERINFO['domain'];


$SG_HOME = $USERINFO['home'];


$SG_QUOTA = $USERINFO['quota'];


$SG_NICKNAME = $USERINFO['nickname'];


$SG_ID = $USERINFO['id'];


$SG_LANG = $USERINFO['language'];


require_once( "../include/sys_inc.php" );


require_once( "class_config.php" );


$CFG_USERCONFIG = $SG_HOME."/".$CFG_USERCONFIG;


if ( $_GET['selTpl'] != "" )


{


    $post_Tpl = explode( "|", $_GET['selTpl'], 2 )[1];


    $post_Template = explode( "|", $_GET['selTpl'], 2 )[0];


    if ( trim( $post_Tpl ) == "" )


    {


        $post_Tpl = "webmail";


    }


    if ( is_file( $CFG_USERCONFIG ) )


    {


        require_once( $CFG_USERCONFIG );


    }


    $CFG_TEMPLATE = $post_Template;


    $CFG_TPL = $post_Tpl;


    $End = "?>";


    $Head = "<?php";


    $Config_Out = "";


    if ( !( $FD_CONFIG = fopen( $CFG_USERCONFIG, "w" ) ) )


    {


        exit( "Error open user configure file!" );


    }


    $Config_Out .= "{$Head}\n"."\$CFG_USER_LANGUAGE      = '{$CFG_USER_LANGUAGE}';\n"."\$CFG_GMT\t\t= '{$CFG_GMT}';\n"."\$CFG_TEMPLATE\t\t= '{$post_Template}';\n"."\$CFG_TPL\t\t= '{$post_Tpl}';\n"."\n"."\$CFG_List_NumPerPage\t= '{$CFG_List_NumPerPage}';\n"."\$CFG_List_AutoRefresh\t= '{$CFG_List_AutoRefresh}';\n"."\$CFG_List_AutoPOP\t= '{$CFG_List_AutoPOP}';\n"."\$CFG_List_MailTime\t= '{$CFG_List_MailTime}';\n"."\$CFG_List_SortBy\t= '{$CFG_List_SortBy}';\n"."\n"."\$CFG_Prev_Alternative\t= '{$CFG_Prev_Alternative}';\n"."\$CFG_Prev_IsRead\t= '{$CFG_Prev_IsRead}';\n"."\n"."\$CFG_Send_ContentType\t= '{$CFG_Send_ContentType}';\n"."\$CFG_Send_Encoding\t= '{$CFG_Send_Encoding}';\n"."\$CFG_Send_Charset\t= '{$CFG_Send_Charset}';\n"."\$CFG_Domain_Sign\t= '{$CFG_Domain_Sign}';\n"."\$CFG_User_Sign\t= '{$CFG_User_Sign}';\n"."\$CFG_Mailaddr_Fill = '{$CFG_Mailaddr_Fill}';\n"."\$CFG_ADDR_SHOW = '{$CFG_ADDR_SHOW}';\n"."\n"."\$CFG_POP_NumPer\t\t= 'CFG_POP_NumPer';\n"."\$CFG_POP_Timeout\t= '{$CFG_POP_Timeout}';\n"."\$CFG_List_attach = '{$CFG_List_attach}';\n"."\$CFG_Auto_Lang_Trans = '{$CFG_Auto_Lang_Trans}';\n"."\$CFG_Alert_Receipt = '{$CFG_Alert_Receipt}';\n"."\$CFG_Head_off_Openwin = '{$CFG_Head_off_Openwin}';\n"."\$CFG_Reply_to\t= '{$CFG_Reply_to}';\n"."\n"."\$CFG_ADDR_Group\t= '{$CFG_ADDR_Group}';\n"."\$CFG_ADDR_Sortby\t= '{$CFG_ADDR_Sortby}';\n"."{$End}\n";


    fputs( $FD_CONFIG, $Config_Out );


    fclose( $FD_CONFIG );


    chown_chgrp( $CFG_USERCONFIG, "" );


}