WooYun.org

protected void Page_Load(object sender, EventArgs e)
{
    if (!string.IsNullOrEmpty(base.Request.QueryString["case"]))
    {
        string str = base.Server.UrlDecode(base.Request.QueryString["case"]);
        if (!Directory.Exists(base.Server.MapPath("~/UploadFiles/DocTemp/" + str)))
        {
            Directory.CreateDirectory(base.Server.MapPath("~/uploadFiles/DocTemp/" + str));
        }
        string str2 = base.Server.MapPath("~/uploadFiles/DocTemp/" + str + "/");
        base.Response.Clear();
        string str3 = base.Request.Params["ID"];
        string str4 = "test";
        if (!string.IsNullOrEmpty(str3))
        {
            str4 = base.Server.UrlDecode(base.Request.Params["DocTitle"]);
        }
        string str5 = base.Request.Params["DocType"];
        str4 = base.Server.UrlDecode(base.Request.Params["DocTitle"]);
        base.Server.UrlDecode(base.Request.Params["content"]);
        if (str5 == "")
        {
            str5 = "doc";
        }
        str5 = str5.Substring(0, 3);
        if (base.Request.Files.Count > 0)
        {
            HttpPostedFile file = base.Request.Files[0];
            int contentLength = file.ContentLength;
            byte[] buffer = new byte[contentLength];
            file.InputStream.Read(buffer, 0, contentLength);
            if (!File.Exists(str2 + str4))
            {
                using (File.Create(str2 + str4))
                {
                }
            }
            File.WriteAllBytes(str2 + str4, buffer);
        }
        base.Response.ContentType = "text/plain";
        base.Response.Write("Complete");
        base.Response.Flush();
        base.Response.End();
    }
}