WooYun.org

protected void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException
  {
    response.setContentType("application/json;charset=UTF-8");
    String paraStr = "sucess";
    String serverPath = getServletConfig().getServletContext().getRealPath("");
    String savePath = serverPath + File.separator + "login" + File.separator + "temp" + File.separator;
    String skinPath = serverPath + File.separator + "login" + File.separator + "theme" + File.separator; //这里是解压的路径，后面用到
    try
    {
      File pathDir = new File(savePath);
      if (!pathDir.exists())
      {
        pathDir.mkdirs();
      }
      DiskFileItemFactory factory = new DiskFileItemFactory();
      factory.setSizeThreshold(4096);
      factory.setRepository(pathDir);
      ServletFileUpload load = new ServletFileUpload(factory);
      List items = load.parseRequest(request);
      Iterator i = items.iterator();
      while (i.hasNext())
      {
        FileItem fi = (FileItem)i.next();
        String fileName = fi.getName();
        if (fileName != null)
        {
          File savedFile = new File(savePath + File.separator + "tempskin.zip");
          fi.write(savedFile);
        }
      }
      int stuats = FileForLoginUtil.unzip(savePath + File.separator + "tempskin.zip", skinPath);//这里解压压缩目录，后面继续跟踪
      if (stuats < 0)
      {
        paraStr = "上传的不是一个合法的主题包";
      }
      else if (stuats == 1)
      {
        paraStr = "上传的风格名已经存在，请修改config.xml的title";
      }
      else if (stuats == 2)
      {
        paraStr = "上传的风格名不能为空，请修改config.xml的title";
      }
      ......

public static int unzip(String zipFileName, String extDirectory)
    throws IOException
  {
    ZipFile zipFile = null;
    InputStream in = null;
    OutputStream out = null;
    int stuats = -1;
    String tempExt = extDirectory;
    try
    {
      zipFile = new ZipFile(new File(zipFileName));
      Enumeration enumeration = zipFile.getEntries();
      ZipEntry zipEntry = null;
      boolean flag = true;
      do
      {
        int random = new Random().nextInt(100); //这里生成随机数，拼接在目录后面
        if (random >= 10)
        {
          File skin = new File(extDirectory + "skin" + random);
          if (!skin.exists())
          {
            extDirectory = extDirectory + "skin" + random;
            flag = false;
          }
        }
      }
      while (
        flag);
     ......

<?xml version="1.0" encoding="utf-8"?>
<root>
<title>
wooyun
</title>
</root>

<form id="form1" name="form1" action="http://xxxx/servlet/UploadSkinServlet" method="post" enctype ="multipart/form-data">
		<input type="file" name="File1"/>
		<input type="submit" value="go">
		</form>