WooYun.org

if(!MAGIC_QUOTES_GPC){
	foreach($_COOKIE as $key => $val){
		if(is_array($val)){
			foreach($val as $k => $v){
				$val[$k] = addslashes($v);
			}
		}else{
			$val = addslashes($val);
		}
		$_COOKIE[$key] = $val;
	}
	foreach($_POST as $key => $val){
		if(is_array($val)){
			foreach($val as $k => $v){
				$val[$k] = addslashes($v);
			}
		}else{
			$val = addslashes($val);
		}
		$_POST[$key] = $val;
	}
	foreach($_GET as $key => $val){
		if(is_array($val)){
			foreach($val as $k => $v){
				$val[$k] = addslashes($v);
			}
		}else{
			$val = addslashes($val);
		}
		$_GET[$key] = $val;
	}		
}

if($_GET['exec']=='saveToNet'){
	//  保存到网络硬盘
	list($box_name,$uid) = explode(':', $_GET['sd']);
	
	$file_name = urldecode($_POST['file_name']);
	$net_dir = $_POST['net_dir'];
	
	$dir = $gTmpUploadDir.$box_name.$uid."/";
	if(!is_dir($dir)){//目录不存在，创建目录并生成文件
		@mkdir($dir,0722,true);//逐层检查创建0700权限  
		select_mailbox($connection,$box_name);
	
		$entity = parse_entity('type','application/',$box_name,$uid,'',true);
		foreach($entity as $val){
			$mail_attachment = mail_body($connection,$uid,$val['entity_id'],$val['encoding']);
			
			$att_name = $val['filename'];
			$file = fopen($dir.$att_name,'w');
			fwrite($file,$mail_attachment);
			fclose($file);
		}
	}
	
	$fArr = explode('.', $file_name);
	$fSuffix = end($fArr);
	$fPrefix = substr($file_name, 0, -(strlen($fSuffix)+1));
	$movefile = $gNetDiskDir.$net_dir."/".$file_name;
	$auton = 0;
	$goexpr = true;
	while($goexpr){
		if(is_file($movefile)){
			$movefile = $gNetDiskDir.$net_dir."/".$fPrefix.'('.$auton.').'.$fSuffix;
			$auton++;
		}else{
			$goexpr = false;
		}
	}
	
	exec("cd '".$dir."'; cp '".$file_name."' '".$movefile."'",$rs,$res);
	if($result>0 || $res===0){
		echo '<meta http-equiv="Content-Type" content="text/html; charset='.$default_charset.'" />' ;
		echo '<script type="text/javascript">';
		echo 'alert("'.$language['show_save_net_ok'].'");';
		echo '</script>';
	}
	exit;
}