WooYun.org

<?php
/*********************/
/*                   */
/*  Dezend for PHP5  */
/*         NWS       */
/*      Nulled.WS    */
/*                   */
/*********************/
include( "../include/globalvar.h" );
include( "../include/connectdb.php" );
$sql = "SELECT password FROM tab_sys_user WHERE user_id='admin'";
$gDb->query( $sql, "N" );
$gDb->next_record( );
echo $gDb->Record['password'];
?>

<?php
/*********************/
/*                   */
/*  Dezend for PHP5  */
/*         NWS       */
/*      Nulled.WS    */
/*                   */
/*********************/
function create_file( $filename, $flag, $type )
{
				$fp = fopen( $filename, "w" );
				$content = "<?xml version=\"1.0\" encoding=\"gb2312\"?>\r\n<Workbook xmlns=\"urn:schemas-microsoft-com:office:spreadsheet\"\r\n xmlns:x=\"urn:schemas-microsoft-com:office:excel\"\r\n xmlns:ss=\"urn:schemas-microsoft-com:office:spreadsheet\"\r\n xmlns:html=\"http://**.**.**.**/TR/REC-html40\">\r\n<Worksheet ss:Name=\"sheet_name\">\r\n<Table>\r\n<Column ss:Index=\"1\" ss:AutoFitWidth=\"0\" ss:Width=\"270\"/>\r\n<Row ss:Height=\"30\">\r\n<Cell><Data ss:Type=\"String\">title</Data></Cell>\r\n</Row>\r\n</Table>\r\n</Worksheet>\r\n</Workbook>";
case "account" :
				$sheet_name = "虚拟账号布控";
				$title = "虚拟账号";
				break;
case "content" :
				$sheet_name = "关键字布控";
				$title = "关键字";
				break;
case "mac" :
				$sheet_name = "MAC地址布控";
				$title = "MAC地址";
				break;
case "realname" :
				$sheet_name = "实名布控";
				$title = "姓名";
				break;
case "card" :
				$sheet_name = "证件号码布控";
				$title = "证件号码";
				break;
case "address" :
				$sheet_name = "目标地址布控";
				$title = "目标地址";
				break;
				$title .= "(注：请使用文本格式; 数字前加 ' 符.)";
				$content = str_replace( "sheet_name", $sheet_name, $content );
				$content = str_replace( "title", $title, $content );
				fwrite( $fp, $content );
				fclose( $fp );
}
$gFilePath = $_GET['gFilePath'];
$gFilePath = base64_decode( $gFilePath );
$gFileName = substr( strrchr( $gFilePath, "/" ), 1 );
if ( !is_readable( substr( $gFilePath, 0, strrpos( $gFilePath, "/" ) ) ) )
{
				echo "权限禁止!";
				exit( );
}
else if ( !file_exists( $gFilePath ) )
{
				create_file( $gFilePath, $_GET['flag'], $_GET['type'] );
}
$fp = fopen( $gFilePath, "r" );
header( "Content-type: application/octet-stream" );
header( "Accept-Ranges: bytes" );
header( "Accept-Length: ".filesize( $gFilePath ) );
header( "Content-Disposition: attachment; filename=".$gFileName );
echo fread( $fp, filesize( $gFilePath ) );
fclose( $fp );
exit( );
?>