WooYun.org

public ActionForward execute(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
  {
    UploadFileForm uploadFileForm = (UploadFileForm)form;
    String realPath = request.getParameter("realPath");
    String dir = this.servlet.getServletContext().getRealPath(realPath);
    FormFile file = uploadFileForm.getFile();
    if (file == null) {
      return mapping.findForward("success");
    }
    String fname = file.getFileName();
    String size = Integer.toString(file.getFileSize()) + "bytes";
    SimpleDateFormat df = new SimpleDateFormat("yyyyMMddhhmmss");
    String tempfilename = df.format(new Date()) + "." + Utils.getFileSuffix(fname);
    try
    {
      InputStream streamIn = file.getInputStream();
      OutputStream streamOut = new FileOutputStream(dir + "/" + tempfilename);
      int bytesRead = 0;
      byte[] buffer = new byte[8192];
      while ((bytesRead = streamIn.read(buffer, 0, 8192)) != -1) {
        streamOut.write(buffer, 0, bytesRead);
      }
      streamOut.close();
      streamIn.close();