bbs1.cgi

--黑客防线-精华奉献本(攻册)

#!/usr/bin/perl
#------------------------------------------------------#
#　　　　　　　　　本程序为Yuzi工作室提供　  　　　　　#
#　　　　　　　　Yuzi论坛3000(BBS3000)v4.00　　　　　　#
#------------------------------------------------------#
$cgipa=".";  # CGI程序文件的绝对路径
######################
## 以下部分不需修改 ##
######################
require "$cgipa/setup.cgi";
&GetCookies;
$cgiurl="bbs1.cgi";
##########
if ($ENV{'REQUEST_METHOD'} eq "POST") {
read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
}
else {
$buffer = $ENV{'QUERY_STRING'};
}
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
($name, $value) = split(/=/, $pair);
$value=~tr/+/ /;
$value=~s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$value=~s/\t/    /g;
$value=~s/>/>/g;
$value=~s/</&lt;/g;
$value=~s/\n/\<br\>/g;
$value=~s///g;
$FORM{$name} = $value;
}
##########
$id=$FORM{'id'};
$see=$FORM{'see'};
$emote=$FORM{'emote'};
$username=$FORM{'username'};
$userpsd=$FORM{'userpsd'};
$titles=$FORM{'titles'};
$comment=$FORM{'comment'};
$search=$FORM{'search'};
$no=$FORM{'no'};
$yjhf=$FORM{'yjhf'};
$menu=$FORM{'menu'};
$replytime=$FORM{'replytime'};
$retitles=$FORM{'retitles'};
$deltitle=$FORM{'deltitle'};
$rthistime=$FORM{'rthistime'};
$xgtz=$FORM{'xgtz'};
$rdcomment=$FORM{'rdcomment'};
$slttitle=$FORM{'slttitle'};
if ($username eq ""){$username=$Cookies{username}};
if ($userpsd eq ""){$userpsd=$Cookies{password}};
$no=~s/\.//g;
$id=~s/\.\.//g;
$xgtz=~s/\.//g;
$slttitle=~s/\.//g;
$username=~s/\ //g;
$username=~s/\　//g;
if($id=~m/[\#\&\*\=\+\\\:\"\/\<\>?'`