WooYun.org

http://**.**.**.**/k3cloud/

public void ProcessRequest(HttpContext context)
{
    try
    {
        context.Response.ContentType = "text/plain";
        string physicalPath = context.Request.Headers["filefolder"];
        if (string.IsNullOrEmpty(physicalPath))
        {
            physicalPath = context.Server.MapPath("UploadFiles");
        }
        else
        {
            physicalPath = PathUtils.GetPhysicalPath(physicalPath);
        }
        if (!Directory.Exists(physicalPath))
        {
            Directory.CreateDirectory(physicalPath);
        }
        HttpFileCollection files = context.Request.Files;
        int count = files.Count;
        if (count > 0)
        {
            for (int i = 0; i < count; i++)
            {
                HttpPostedFile file = files[i];
                if ((file != null) && (file.ContentLength > 0))
                {
                    string filename = physicalPath + "/" + file.FileName;
                    file.SaveAs(filename);
                }
            }
            context.Response.Write("0");
        }
        else
        {
            string str3 = context.Request.Headers["Name"].ToString();
            if (string.IsNullOrWhiteSpace(str3))
            {
                str3 = "null";
            }
            FileStream stream = new FileStream(physicalPath + "/" + str3, FileMode.Append);
            context.Request.InputStream.CopyTo(stream);
            stream.Flush();
            stream.Close();
            context.Response.Write("1");
        }
    }
    catch (Exception exception)
    {
        context.Response.Write("-1");
        throw exception;
    }
}