WooYun.org

if (this.realNameAuthenticationService.isApply(userName)) {//如果上传过，文件名用用户名命名，文件名可控，导致可截断上传
      UserRealNameInfo uRealNameInfo = null;
      uRealNameInfo = this.realNameAuthenticationManager.find(userName);
      uploadFile = this.imageFileManager.find(uRealNameInfo.getUploadFileId());
      uploadFile.setNewFileName(userName + "." + fileType);
      uploadFile.setUploadTime(System.currentTimeMillis());
      uploadFile.setOriginalFileName(fileName);
      uploadFile.setFileSize(fileSize);
      uploadFile.setImageUrl(uploadPath);
      uploadFile.setType(type);
      this.imageFileManager.update(uploadFile);
      LOG.debug("update User realName authentication upload file success :" + uploadFile);
    }
    else {
      uploadFile.setNewFileName(userName + "." + fileType);//同上，这里是第一次上传走这里
      uploadFile.setUploadTime(System.currentTimeMillis());
      uploadFile.setOriginalFileName(fileName);
      uploadFile.setFileSize(fileSize);
      uploadFile.setImageUrl(uploadPath);
      uploadFile.setNewFileName(DateUtil.timeMillisToString(System.currentTimeMillis(), "yyyyMM") + 
        File.separator + uploadFile.getNewFileName());
      uploadFile.setType(type);
      this.imageFileManager.add(uploadFile);
      LOG.debug("add User realName authentication upload file success :" + uploadFile);
    }

public static void createTxtFile(File f)
  {
    if (!f.exists()) {
      try {
        f.createNewFile();
      } catch (IOException e) {
        LOG.error("error while create new file: " + f, e);
      }
      LOG.debug(f + "已创建!");
    } else {
      LOG.debug(f + "已已存在!");
    }
  }
  public static void out(File f, String str)
  {
    out(f, str, "");
  }
  public static void out(File f, String str, String enc)
  {
    if (StringHelper.isEmpty(enc)) {
      enc = "UTF-8";
    }
    FileOutputStream fos = null;
    OutputStreamWriter out = null;
    BufferedWriter writer = null;
    try {
      fos = new FileOutputStream(f, true);
      out = new OutputStreamWriter(fos, enc);
      writer = new BufferedWriter(out);
      writer.write(str);
      writer.newLine();
      writer.flush();
      LOG.debug("write str: " + str + " to file: " + f);
    } catch (IOException e) {
      LOG.error("error while write string: " + str + " to file: " + f, e);
      try
      {
        if (writer != null) {
          writer.close();
          writer = null;
        }
        if (out != null) {
          out.close();
          out = null;
        }
      } catch (IOException e) {
        LOG.error("error while close writer and out", e);
      }
    }
    finally
    {
      try
      {
        if (writer != null) {
          writer.close();
          writer = null;
        }
        if (out != null) {
          out.close();
          out = null;
        }
      } catch (IOException e) {
        LOG.error("error while close writer and out", e);
      }
    }
  }