WooYun.org

<%
  String path=request.getParameter("path");
  String del=request.getParameter("del");
  String hiddenName=request.getParameter("hiddenName");
  String visualName=request.getParameter("visualName");
  String filePath="//upload//"+path+"//";
  String mode=request.getParameter("mode");
  if(mode==null) mode="normal";
  if("yes".equals(del)){
	  //删除原来的附件
  }
  if(mode.equals("add")){
	  String fileName="";
	  String saveName="";
	  myUpload.initialize(pageContext);
	  myUpload.upload();
	  for (int j=0;j<myUpload.getFiles().getCount();j++){
		  String myRandom=new com.whir.common.util.Random().getRandom();
		  com.jspsmart.upload.File myFile = myUpload.getFiles().getFile(j);
		  if (!myFile.isMissing()) {
			  saveName=myRandom+"."+myFile.getFileExt();
			  fileName=myFile.getFileName();
			  myFile.saveAs(filePath + saveName);
		  }
	  }
	  %>
	  <SCRIPT LANGUAGE="JavaScript">
		  <!--
		  alert("附件上传成功！");
		  opener.document.all.<%=visualName%>.value = "<%=fileName%>";
		  opener.document.all.<%=hiddenName%>.value = "<%=saveName%>";
		  window.close();
		  //-->