WooYun.org

header('Content-Type: text/html; charset=utf-8');
require_once '../config/config.php';
require_once '../functions/mime.php';
$sd = $_GET['sd'];
$box_name = $sd;
$uid = $_GET['uid'];
$action = $_GET['action'];
$filename = $_GET['file_name'];
$userArr = explode('@', $_GET['user']);
$dir = HM_BOXS."tmp/".$userArr[1]."/".$userArr[0]."/".$box_name.$uid."/";
......................
......................
......................
if($sd && $uid && $filename && !$action){
	
	if(strpos($_SERVER['HTTP_USER_AGENT'], 'MSIE')!==false && strtolower($default_charset)=='utf-8') {
		$down_name = rawurlencode($filename);
	}else{
		$down_name = $filename;
	}
	$attDir = $dir.$filename;
	
	header('Content-Type: application/force-download; name="'.$down_name.'"');
	header('Content-Length: '.filesize($attDir).'');
	header('Content-Disposition: attachment; filename="'.$down_name.'"');
	readfile($attDir);
	exit;
}else{
	header("HTTP/1.0 404 Not Found");
}