WooYun.org

include "../../includes/commons.inc.php";
@set_time_limit(0);
$agent = $_SERVER['HTTP_USER_AGENT'];
if($agent!='phpdisk-client'){
	exit('<a href="http://faq.phpdisk.com/search?w=p403&err=code" target="_blank">[PHPDisk Access Deny] Invalid Entry!</a>');
}
$u_info = trim(gpc('u_info','P',''));
parse_str(pd_encode(base64_decode($u_info),'DECODE'));
// checked username and pwd...
/*$username = trim(gpc('username','GP',''));
$password = trim(gpc('password','GP',''));*/
$username = is_utf8() ? $username : convert_str('utf-8','gbk',$username);
$password = is_utf8() ? $password : convert_str('utf-8','gbk',$password);
$userinfo = $db->fetch_one_array("select userid from {$tpf}users where username='$username' and password='$password'");
if(!$userinfo){
	$str = '网盘登录出错：用户名或密码不正确，请重新输入';
	$str = is_utf8() ? convert_str('utf-8','gbk',$str) : $str;
	echo $str;
}else{
	$uid = (int)$userinfo[userid];
}

switch ($action){
	case 'upload_file':
		//write_file(PHPDISK_ROOT.'system/2.txt',var_export($_POST,true));
		//write_file(PHPDISK_ROOT.'system/3.txt',var_export($_FILES,true));
		$file = $_FILES['file1'];
		$file_name = trim(gpc('file_name','P',''));
		$file_do_name = trim(gpc('file_do_name','P',''));
		$file_local_path = trim(gpc('file_local_path','P',''));
		$folder_id = (int)gpc('folder_id','P',0);
		$file_size = (int)gpc('file_size','P',0);
		$file_parts = (int)gpc('file_parts','P',0);
		$tmp_dir = PHPDISK_ROOT.'system/cache/';
		make_dir($tmp_dir);
		$file_local_path = is_utf8() ? convert_str('gbk','utf-8',$file_local_path) : $file_local_path;
		$file_do_name = is_utf8() ? convert_str('gbk','utf-8',$file_do_name) : $file_do_name;
		$file_name = is_utf8() ? convert_str('gbk','utf-8',$file_name) : $file_name;
		if(upload_file($file['tmp_name'],$tmp_dir.$file[name])){
			//insert db

function upload_file($source, $target) {
	if (function_exists('move_uploaded_file') && @move_uploaded_file($source, $target)) {
		@chmod($target, 0666);
		return $target;
	} elseif (@copy($source, $target)) {
		@chmod($target, 0666);
		return $target;
	} elseif (@is_readable($source)) {
		if ($fp = @fopen($source,'rb')) {
			@flock($fp,2);
			$filedata = @fread($fp,@filesize($source));
			@fclose($fp);
		}
		if ($fp = @fopen($target, 'wb')) {
			@flock($fp, 2);
			@fwrite($fp, $filedata);
			@fclose($fp);
			@chmod ($target, 0666);
			return $target;
		} else {
			return false;
		}
	}
}