WooYun.org

<%@page contentType="text/html;charset=gbk" import="java.io.*,java.util.*,java.net.*,javax.servlet.http.*" %>
<%!
	public void downLoad(HttpServletResponse response,String fileName, String realPath)  throws  Exception {
        File f = new File(realPath);
        if (!f.exists()) {
            response.sendError(404, "File not found!");
            return;
        }
       fileName = new String(fileName.getBytes("GBK"), "ISO8859_1"); //处理文件中含中文的问题,不是万能的
        boolean isOnLine = false;
        response.reset(); //非常重要
        if (isOnLine) { //在线打开方式
            URL u = new URL(realPath);
            response.setContentType(u.openConnection().getContentType());
            response.setHeader("Content-Disposition",
                               "inline; filename=" + f.getName());
        } else { //纯下载方式
            response.setContentType("application/x-msdownload");
            response.setHeader("Content-Disposition",
                               "attachment; filename=" + fileName);
        }
        byte[] buf = new byte[1024];
        int len = 0;
        BufferedInputStream br = null;
        OutputStream out = null;
        try {
            br = new BufferedInputStream(new FileInputStream(f));
            out = response.getOutputStream();
            while ((len = br.read(buf)) > 0) {
                out.write(buf, 0, len);
            }
            out.flush();
        } catch (Exception e) {
            //e.printStackTrace();
        } finally {
            if (br != null) {
                br.close();
                br = null;
            }
            if (out != null) {
                out.close();
                out = null;
            }
        }
    }
	 
%>
<%
  
    String s=request.getParameter("name"); //并没有进行有效的过滤，可以现在任意文件
	 String ss=request.getRealPath(s);
	 s=s.substring(9,s.length());
    downLoad(response,s,ss);
	
%>