WooYun.org

<package name="crud-default" extends="convention-default">
		<!-- 基于paramsPrepareParamsStack,
			增加store interceptor保证actionMessage在redirect后不会丢失 -->
		<interceptors>
			<interceptor-stack name="crudStack">
				<interceptor-ref name="store">
					<param name="operationMode">AUTOMATIC</param>
				</interceptor-ref>
				<interceptor-ref name="paramsPrepareParamsStack" />
			</interceptor-stack>
		</interceptors>
		<default-interceptor-ref name="crudStack" />
        <action name="showUpload">
            <result>/common/testStrutsUpload.jsp</result>
        </action>
        
        <action name="doUpload" class="**.**.**.**mon.upload.StrutsFileUpload">
        	<param name="fileSavePath">/upload</param>
            <result name="input">/common/testStrutsUpload.jsp</result>
            <result>/common/testStrutsUploadSuccess.jsp</result>
            
        </action>
	</package>

public StrutsFileUpload()
	{
		ft = 0;
		uploadPath = SystemProperties.instance().webUploadPath;//上传保存文件路径/opt/uficc/icc_datahttps://wooyun-img.oss-cn-beijing.aliyuncs.com/upload/
		allowTypes = SystemProperties.instance().webUploadAllowTypes;//上传检查白名单application/rtf,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,application/vnd.openxmlformats-officedocument.presentationml.presentation,application/vnd.openxmlformats-officedocument.wordprocessingml.document,application/vnd.openxmlformats-officedocument.wordprocessingml.template,application/msword,application/vnd.ms-excel,text/plain,application/vnd.ms-powerpoint,application/pdf,image/png,image/gif,image/jpeg,image/pjpeg,image/jpg,image/bmp,application/x-zip-compressed,.zip
	}
 private int checkTypes(String fileType)
  {
    int type = 0;
    if (fileType == null) {
      return 0;
    }
    String[] types = this.allowTypes.split(",");
    for (int i = 0; i < types.length; i++) {
      if (types[i].equals(fileType.toLowerCase())) {
        type = 1;
        break;
      }
    }
    return type;
  }
	
public String execute()
    throws Exception
  {
    try
    {
      String targetDirectory = this.uploadPath;//保存路径
      if (this.filename != null) {
        this.uploadFileName = this.filename;//将filename赋值给uploadFileName
        this.upload = this.file;
      }
      if (this.ft == 10) {//当ft=10时将上传对象传递给upload
        this.upload = this.attach;
      }
      
      String extName = this.uploadFileName.substring(this.uploadFileName.lastIndexOf(".") + 1);//获取后缀
      if (extName.equals(this.uploadFileName)) {//文件名中没有.时退出
        this.successFlag = 3;
        return "success";
      }
      if (checkTypes(this.uploadContentType) == 0) {//未通过checkTypes()白名单检查时则退出
        if ((this.uploadContentType == null) && (this.uploadFileName != null))
        {
          if ((!extName.equals("jpg")) && 
            (this.f != 1)) {
            this.successFlag = 3;
            return "success";
          }
        }
        else
        {
          this.successFlag = 3;
          return "success";
        }
      }
      String targetFileName = "";
      if (this.filename != null) {//filename不为空时再将filename取值回来传递给targetFileName
        targetFileName = this.uploadFileName;
      } else {
       ……
      }
      File target = new File(targetDirectory, targetFileName);//创建文件
      FileUtils.copyFile(this.upload, target);//生成文件内容
      ……

http://**.**.**.**/web/icc/

http://**.**.**.**/web/testabc.jsp

银联 https://**.**.**.**/web/testabc.jsp
人保财险 http://**.**.**.**/web/testabc.jsp
交行信用卡 http://**.**.**.**/web/abctest.jsp
猎豹 http://**.**.**.**/web/testabc.jsp
上海电信 http://**.**.**.**/web/testabc.jsp