WooYun.org

public function upload_save() {  //多文件
            $ac   = $this->input->get_post('ac', TRUE);
			
            if (!empty($_FILES)) {
	            $tempFile = $_FILES['Filedata']['tmp_name'];
				
	            $targetPath = './attachment/' . $ac . '/'.date('Ym').'/'.date('d').'/';
				
				
	            $file_name = $_FILES['Filedata']['name'];
                    $file_size = @filesize($_FILES['Filedata']['tmp_name']);
	            //获得文件扩展名
	            $file_ext = strtolower(trim(substr(strrchr($file_name, '.'), 1)));
                    if($file_ext=='mp3' || $file_ext=='wma' || $file_ext=='m4a' || $file_ext=='f4a' || $file_ext=='mp4' || $file_ext=='flv' || $file_ext=='avi' || $file_ext=='asf' || $file_ext=='wmv' || $file_ext=='swf'){  //判断后缀
                    }else{
                            @unlink($tempFile);
                    }
                    //---------获取歌曲属性------------------
                    $djinfo=$this->CsdjSkins->djinfo(@iconv('utf-8','gbk',$tempFile));
                    if($djinfo){
                       $info=explode("|",$djinfo);
                       $dx =$info[0];
                       $yz =$info[1];
                       $sc =$info[2];
                    } else {
                       $dx ='';
                       $yz ='';
                       $sc ='';
                    }
	            //新文件名
	            $new_file_name = date("YmdHis") . '_' . rand(10000, 99999) . '.' . $file_ext;
				
	            $targetFile =  str_replace('//','/',$targetPath) . $new_file_name;
	
                    if(FTP_Fun==1){  //开启远程附件
                              $FTPUP['hostname'] = FTP_Server;
                              $FTPUP['port']     = FTP_Port;
                              $FTPUP['username'] = FTP_Name;
                              $FTPUP['password'] = FTP_Pass;
                              //$FTPUP['debug']    = TRUE;
                              $FTPUP['passive']  = FTP_Ive;
                              $this->ftp->connect($FTPUP);
                              $targetPath = './attachment/' . $ac . '/'.date('Ymd').'/';
                              //----------创建目录------------------------
                              $Dirs=FTP_Dir;
                              if(substr($Dirs,0,1)=='/') $Dirs=substr($Dirs,1);
                              if(substr($Dirs,-1)=='/') $Dirs=substr($Dirs,0,-1);
                              if(!empty($Dirs)) $Dirs.='/';
                              $All=explode("/",$targetPath);
                              $Dir1='./'.$Dirs.$All[1].'/';
                              $this->ftp->mkdir($Dir1, DIR_WRITE_MODE); 
                              $Dir2=$Dir1.$All[2].'/';
                              $this->ftp->mkdir($Dir2, DIR_WRITE_MODE); 
                              $Dir3=$Dir2.$All[3].'/';
                              $this->ftp->mkdir($Dir3, DIR_WRITE_MODE); 
                              //----------上传文件------------------------
                              $this->ftp->mkdir($targetPath, DIR_WRITE_MODE); 
                              $this->ftp->upload($tempFile, $Dir3.$new_file_name);
                              $this->ftp->close();
	                      echo "/attachment/" . $ac . "/".date('Ymd')."/".$new_file_name."=cscms=".$dx."=cscms=".$yz."=cscms=".$sc;
                    }else{  //本地附件
	                      !is_dir(str_replace('//','/',$targetPath)) && mkdir(str_replace('//','/',$targetPath), 0755, true);
		
                              if(!file_exists($targetPath.'index.html')){
	                             @file_put_contents($targetPath.'index.html','cscms');
                              }
	                      @move_uploaded_file($tempFile,$targetFile);
	                      echo "/attachment/" . $ac . "/".date('Ym')."/".date('d')."/".$new_file_name."=cscms=".$dx."=cscms=".$yz."=cscms=".$sc;
                    }
            }
        }