WooYun.org

$sql_select = "select * from staff where name='".$user_name."' and password='".$user_password."'";
	$dataset = yjwt_mysql_select($sql_select);
	//echo "$sql_select";
	if($dataset && $row = mysql_fetch_array($dataset)){
		setcookie("php_user", $row["flag"], time()+1800);//半小时,这个语句必需要html这前    //这俩行是神设置 
		setcookie("Id_user", $row["Id"], time()+1800);

longer_cookie('php_user');
longer_cookie('Id_user');
if ($_GET['t'] == 'exit') {
	echo "<script>";
	echo "alert('请重新登陆！');";
	echo "window.location.href = '?t=login';";
	echo "</script>";
}
if ($_GET['t'] == '') {
	echo "<script>";
	echo "window.location.href = '?t=getid';";
	echo "</script>";
}

<?
	header("Content-type: application/txt");
	header("Content-Disposition: attachment; filename=$_GET[name].txt");
	readfile("$_GET[path]");
?>

$to_ping = $_GET["ip"]; 
$count = 1; 
$psize = 65;
exec("ping $to_ping -n $count -w 1", $list);
 if($list[2] == "请求超时。") print "<div style=\"background-color:#999999;height:1000px;width:1000px;color:#ffffff;\">".$_GET["name"]."</div>";
 else print "<div style=\"background-color:#00ff00;height:1000px;width:1000px;color:#ffffff;\">".$_GET["name"]."</div>";