WooYun.org

ob_start("");
	header("Expires: Sat, 01 Jan 2000 00:00:00 GMT");
	header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
	header("Pragma: public");
	header("Expires: 0");
	header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
	header("Cache-Control: public");
	header("Content-Description: File Transfer");
	session_cache_limiter("must-revalidate");
	include("include/common.inc");
//	include("include/sslcommon.inc");
//	$filename = basename($reqfile, '.req');
	if($reqfile)
	{
		$filename = $reqfile;
		$file = fopen($reqfile,"rb");
        	if ($file == FALSE)
	        {
                	db_close($dbh);
									echo "<script>";
									echo "alert('文件找不到');";
									echo "</script>";
	                exit();
        	}
	}
	else if($certfile)
	{
		$filename = $certfile;
		$file = fopen($certfile,"rb");
                if ($file == FALSE)
                {
									db_close($dbh);
									echo "<script>";
									echo "alert('文件找不到');";
									echo "</script>";
									exit();
                }
	}
	else if($licensefile)
	{
		$licensepath = "/Isc/".$licensefile; //漏洞触发点....网康的研发是不是有点操蛋？ 学学绿盟ok?
                $filename = $licensefile;
                $file = fopen($licensepath,"rb");
                if ($file == FALSE)
                {
			db_close($dbh);
			echo "<script>";
			echo "alert('文件找不到');";
			echo "</script>";
        		exit();
                }
        }
    Header("Content-type:   application/octet-stream\n");
    Header("Content-Disposition:   attachment;   filename=".$filename);
    fpassthru($file);
    flush();
    fclose($file);
	ob_end_flush();