WooYun.org

<?php\ninclude_once 'command\/CCmdsPolling.php';\n\n
$command = isset($_POST['command'])?$_POST['command']:\"\";\n
$saveFile = isset($_POST['filename'])?$_POST['filename']:\"\";\n
$cmdParam = isset($_POST['cmdParam'])?$_POST['cmdParam']:\"\";\n
$cmdParam = trim($cmdParam);\n
$faultStr = json_encode(array('type'=>'event', 'name'=>'message', 'data'=>array(\"exception\", \"\", \"\") ));\n\n\/\/command is null\nif(empty($command))
{  \n    echo $faultStr;\n    exit();\n}
\n\n\/\/exec and get result\n$result = array();
\n$pollingObj = new CCmdsPolling();\nif($command == \"ping\") 
{\n    $result = $pollingObj->getPingInfo($cmdParam, $saveFile);\n} 
else if ($command == \"traceroute\")
 {\n    $result = $pollingObj->getTracerouteInfo($cmdParam, $saveFile);\n} 
else {\n    echo $faultStr;\n    exit();\n}
\n\n\/\/analyse result state and return\nif($result['state'] == \"exception\")
 {\t\n    echo $faultStr;\n} 
 else if($result['state'] == \"starting\") 
 {\t\t   \n       $re_file=$result['result'];\n       $filename=$result['filename'];
\n       $finished=false;
\n       echo json_encode(array(\n                         'type'=>'event',
\n                         'name'=>'message',
\n                         'data'=>array(\"starting\", $re_file, $filename)\n                        ));
 \n} else if($result['state'] == \"dealing\") {\n       $re_file=$result['result'];
 \n       $filename=$result['filename'];
 \n       echo json_encode(array(\n                         'type'=>'event',
 \n                         'name'=>'message',
 \n                         'data'=>array(\"dealing\", $re_file, $filename)\n                        )); 
 \n} else if($result['state'] == \"finished\") {\n     $re_file=$result['result'];
 \n     echo json_encode(array(\n                        'type'=>'event',
 \n                        'name'=>'message',
 \n                        'data'=>array(\"finished\", $re_file, \"\")\n                        ));
 \n} else {
 \n     echo json_encode
 (array(\n                        
 'type'=>'event',\n                        
 'name'=>'message',\n                        
 'data'=>array(\"unknown\", \"\", \"\")\n                        
 )); \n}\n\n?> \n","