WooYun.org

<?php
/**
 * 如果没有登录时,要求必须指定参数orgcode: 单位代码
 * 如没有传入orgcode，则取orgid=1
 * 为当前的会话设置一个登录标识: WSLOGIN = 0/1, 如果没有登录, 则默认以当前ORG的admin登录,以便查看可用的WEB服务
 */
 
//从原始请求头中找出<xxx:Header><xx:PHPSESSID>中的SESSIONID信息
preg_match_all("/<[ a-zA-Z0-9:_='\"]*PHPSESSID[ a-zA-Z0-9:_='\"]*>([a-zA-Z0-9]+)<\/[a-zA-Z0-9:_]*PHPSESSID>/", $GLOBALS['HTTP_RAW_POST_DATA'], $matches, PREG_SET_ORDER);
//file_put_contents("c:/aa.txt", $matches[0][1]);
if(count($matches) > 0)
{
	$UserSessionID = $matches[0][1];
}
$DontCheckLogin = true;
include_once "tglobal.lib";
$gblObj = TGBL_getObject();
if($gblObj->getUserSession("WSLOGIN",0) == 0)
{
	//检查orgcode变量
	if (isEmptyString($orgcode))
	{
		$org_id = 1;
	}
	else 
	{
		$org_id = 0;
		$sql = "select org_id from tc_org_profile where org_code='$orgcode'";
		$rs = $gblDB->Query($sql);
		if($rs)
		{
			if($rs->fetchRecord())
				$org_id = $rs->getFieldValue(0);
			$rs->close();
		}
		if(!isValidID($org_id))
			die("parameter orgcode not found or invalid!");
	}
	//以admin模拟登录
	$gblObj->LoginWithUser(1,$org_id);
}
//加载WEB服务

HTTP/1.1 200 OK
Content-Length: 154
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
{"success":true,"code":"","message":"","files":[{"vname":"picfile","fname":"11.php","url":"\/tmpfile\/upd184.tmp.php_","type":"image\/jpeg","size":5158}]}

HTTP/1.1 200 OK
Date: Wed, 28 May 2014 02:45:25 GMT
Server: Apache/2.2.13 (Win32) PHP/5.2.10
X-Powered-By: PHP/5.2.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
Content-Length: 155
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
{"success":true,"code":"","message":"","files":[{"vname":"picfile","fname":"11.php ","url":"\/tmpfile\/upd186.tmp.php ","type":"image\/jpeg","size":5158}]}