WooYun.org

public function Run() {
        $this->Analysis();
        $this->control = $_GET['c'];
        $this->action = $_GET['a'];
        if ($_GET['a'] === "list") {
            $this->action = "listAll";
        }
        //子目录支持
        $dir = '';
        if (isset($_GET['d'])) {
        	$dir .= $_GET['d'].'/';
        }
    	$adminDir = '/controller/';
        if (defined('IN_ADMIN')) {
        	$adminDir = '/admin/';
        }
        //子模块支持
        $module = strcmp(MODULE, "/") == 0 ? 'app' : MODULE;
        $controlFile = ROOT_PATH . '/' . $module . $adminDir . $dir . $this->control . '.class.php';
        if (!file_exists($controlFile)) {
            $this->setValue("error", $this->control . Config::lang("CONTROLLERNOTEXISTS"));
            $this->forward("error.html");
            exit;
        }
        include($controlFile);
        if (!class_exists($this->control)) {
            $this->setValue("error", $this->control . Config::lang("CONTROLLERNOTDEFINED"));
            $this->forward("error.html");
            exit;
        }
        $instance = new $this->control();
        if (!method_exists($instance, $this->action)) {
            $this->setValue("error", $this->action . Config::lang("METHODNOTFIND"));
            $this->forward("error.html");
            exit;
        }
        $methodName = $this->action;
        $instance->$methodName();
    }