WooYun.org

<?
$fileName = $_GET['fileName'];
if(!$fileName){
	header("Content-type: text/html; charset=utf-8");
	echo "<script language='javascript'>";
	echo "alert('保存过程发生错误！')";
	echo "</script>";
	exit();
}
$handler = fopen("$fileName",'r');
if(!$handler){
	header("Content-type: text/html; charset='utf-8'");
	echo "<script language='javascript'>";
	echo "alert('保存过程中发生错误，打开文件失败！')";
	echo "</script>";
	exit();
}
$length = filesize($fileName);
if($length === false){
	header("Content-type: text/html; charset='utf-8'");
	echo "<script language='javascript'>";
	echo "alert('保存过程发生错误，读取文件长度失败！')";
	echo "</script>";
	exit();
}
$outputFile = 'Devices';
header("Cache-Control:");
header("Cache-Control: public");
header("Content-Type: application/force-download");
header("Content-Disposition: attachment; filename=\"$outputFile\"");
header("Accept-Ranges: bytes");
   $size=filesize($fileName);
   $fp=fopen("$fileName","rb");
   fseek($fp,$range);
   while(!feof($fp)){
       print(fread($fp,1024*8));
   }
   fclose($fp);
   unlink($fileName);
?>

<?
    include_once 'policy/CTaskManager.php';
     session_start();
     $fileName=$_GET['fileName'];
     $fileTar="report/".$fileName;
    
     header("Content-Description: File Transfer"); 
	 header("Content-Type: application/octet-stream"); 
   	 header("Content-Disposition: attachment; filename=".basename($fileTar)); 
     header("Content-Transfer-Encoding: binary");
     header("Expires:0");
     header("Cache-Control: must-revalidate, post-check=0, pre-check=0"); 
     header("Pragma: public"); 
     header("Content-Length: " . filesize($fileTar)); 
     ob_clean(); 
     flush();
     readfile($fileTar);
     exit();    
?>