WooYun.org

case "download":
	downloadfile($filename);

case "tarfile":
	$count = count($logfile);
	if($count <=0)
		show_error("未选择打包文件!");
	
	$filename = "/tmp/".date("Y-m-d-H-i-s", time())."-http-tarfile.tgz";
	$commstr = "sudo tar -czvf $filename ";
	for($i = 0; $i<$count; $i++)
		$commstr .= " /tmp/rproxy/$logfile[$i]";
	exec($commstr);
	downloadfile($filename);
	break;

function downloadfile($filename)
{
	$strFullPath=$filename;
	$name=trim(basename($strFullPath));   
	header("Expires:   "   .   gmdate("D,   d   M   Y   H:i:s",time()+24*3600)   .   "   GMT");   
	header("Cache-Control:");   
	header("Pragma:   cache");   
	header("Connection:   close");   
    
	if(strpos(getenv("HTTP_USER_AGENT"), "MSIE")) {
		header("Content-type: application/download");   
		header("Content-Disposition: filename=$name");   
		header("Cache-Control: store, cache, must-revalidate, post-check=0, pre-check=0");   
		header("Keep-Alive: close");   
	} 
	else   
	{   
		header("Cache-Control: store, cache, must-revalidate, post-check=0, pre-check=0");   
		header("Content-type: application/octet-stream");
		header("Content-Disposition: attachment;filename=$name");   
	}
 
	$fp=fopen($strFullPath,"rb");   
	fpassthru($fp);   
	flush();   
	exit;   
}

case "delete":
	$count = count($logfile);
	if($count <=0)
		show_error("未选择操作数据行!");
	for($i = 0; $i<$count; $i++)
	{
		$del = "sudo rm -f ".$logfile[$i];
		system($del);
	}

switch ($action)
{
case "":
	$dbh = db_connect();
	$reqpara;
	$select = "select UserId,UserName,Password,EmailAddr from ISCUserTable where UserName='$username'";
	$res = db_query($dbh,$select,'查询找回密码用户的信息');
	list($UserId,$UserName,$Password,$EmailAddr)=db_fetch_row($res);
	$r_str = md5(base64_encode($UserName."*".$Password."*".$EmailAddr));
	$mesgstr="";
	db_close($dbh);
	if($r_str != $reqpara)
	{
		$mesgstr = " 此链接已经失效！";
		form_logon($UserId,$UserName,$para,$mesgstr,true);
	}
	else
		form_logon($UserId,$UserName,$para,$mesgstr,false);
	break;
case "update":   这里开始
	$dbh = db_connect();
	$update = "update ISCUserTable set Password='$password1' where UserId=$UserId";
	db_update($dbh,$update,"重置密码");
	form_logon($UserId,"",$para," 重置密码成功！",true);
	db_close($dbh);
	break;
}

switch ($type) {
    case 'syslog':
        echo "用户,日志产生时间,SessionId,日志内容";
        print("\n");
        $query = db_query($dbh, "SELECT UserName,LogTime,SessionId,LogMessage FROM LogTable", "查询日志信息");
        while ($LogInfo = db_fetch_array($query)) {
            echo $LogInfo['UserName'] . "," . $LogInfo['LogTime'] . "," . $LogInfo['SessionId'] . "," . $LogInfo['LogMessage'];
            print("\n");
        }
        break;
    case 'userflow':
        echo "用户名,总数据量,本次记录数据量,本次上线数据量,当前数据量,记录时间";
        print("\n");
        $query = db_query($dbh, "SELECT UserName,GrossWorkload,WorkLoad,SessionWorkload,DailyWorkLoad,WorkloadLogTime FROM ISCWorkloadTable", "查询用户统计信息");
        while ($userflow = db_fetch_array($query)) {
            echo $userflow['UserName'] . "," . $userflow['GrossWorkload'] . "," . $userflow['WorkLoad'] . "," . $userflow['SessionWorkload'] . "," . $userflow['DailyWorkLoad'] . "," . $userflow['WorkloadLogTime'];
            print("\n");
        }
        break;
    case 'userapp':
        echo "用户名,应用程序名,客户端应用程序名,描述,日期";
        print("\n");
        $query = db_query($dbh, "SELECT UserName,AppName,ClientAppName,Description,LogTime FROM ClientAppLog", "查询用户统计信息");
        while ($userapp = db_fetch_array($query)) {
            echo $userapp['UserName'] . "," . $userapp['AppName'] . "," . $userapp['ClientAppName'] . "," . $userapp['Description'] . "," . $userapp['LogTime'];
            print("\n");
        }
        break;
    case 'userlogin':
        echo "用户名,域名,用户组,登录时间,退出时间,客户端IP,客户分配IP,流量,速度";
        print("\n");
        $query = db_query($dbh, "SELECT Domain,GroupName,UserName,LogonTime,LogoutTime,ClientIP,AssignedIP,WorkLoad,OverSpeed FROM ISCUserActivityLog WHERE LogoutTime<>'0000-00-00 00:00:00'", "查询用户统计信息");
        while ($userlogin = db_fetch_array($query)) {
            echo $userlogin['UserName'] . "," . $userlogin['Domain'] . "," . $userlogin['GroupName'] . "," . $userlogin['LogonTime'] . "," . $userlogin['LogoutTime'] .
            "," . $userlogin['ClientIP'] . "," . $userlogin['AssignedIP'] . "," . $userlogin['WorkLoad'] . "," . $userlogin['OverSpeed'];
            print("\n");
        }
        break;
    case 'url':
        echo "用户名,主机,URL地址,统计时间";
        print("\n");
        $query = db_query($dbh, "SELECT UserName,Host,Url,LogTime FROM UrlLogTable", "查询url访问统计");
        while ($url = db_fetch_array($query)) {
            echo $url['UserName'] . "," . $url['Host'] . "," . $url['Url'] . "," . $url['LogTime'];
            print_r("\n");
        }
        break;
}