tempdl.php

学校网站源码http://您的网址/admin/admin_login.asp 默认登录用户：admin 默认登录密码：admin

<?php


include( "../config.inc.php" );
include( "../includes/SysGlobal.php" );
include( "language/".$aLan."_".$charset.".php" );
include( "../includes/version.php" );
include( "../includes/pro.php" );
include( "func/adm.inc.php" );
include( "func/common.inc.php" );
include( "func/link.inc.php" );
include( "func/db.inc.php" );
include( "func/nocatch.php" );
needauth( 14 );
$step = $_REQUEST['step'];
$fold = $_REQUEST['fold'];
if ( $fold == "" || strstr( $fold, "/" ) || strstr( $fold, ":" ) )
{
	echo "No rights for this fold";
	exit( );
}
$openfold = "../templates/".$fold;
$imagefold = "../templates/".$fold."/images";
if ( $step == "downimg" )
{
	$fname = $_REQUEST['fname'];
	if ( !strstr( $fname, "/" ) && file_exists( $imagefold."/".$fname ) )
	{
		header( "Content-type: application/octetstream" );
		header( "Content-disposition: attachment;filename=".$fname );
		header( "Pragma: no-cache" );
		header( "Expires: 0" );
		$client = getenv( "HTTP_USER_AGENT" );
		if ( ereg( "[^(]*\\((.*)\\)[^)]*", $client, $regs ) )
		{
			$os = $regs[1];
			if ( eregi( "Win", $os ) )
			{
				$crlf = "\r\n";
			}
		}
		$fd = fopen( $imagefold."/".$fname, "r" );
		$con = fread( $fd, filesize( $imagefold."/".$fname ) );
		fclose( $fd );
		echo $con;
		exit( );
	}
}
if ( $step == "downfile" )
{
	$fname = $_REQUEST['fname'];
	if ( !strstr( $fname, "/" ) && file_exists( $openfold."/".$fname ) )
	{
		header( "Content-type: application/octetstream" );
		header( "Content-disposition: attachment;filename=".$fname );
		header( "Pragma: no-cache" );
		header( "Expires: 0" );
		$client = getenv( "HTTP_USER_AGENT" );
		if ( ereg( "[^(]*\\((.*)\\)[^)]*", $client, $regs ) )
		{
			$os = $regs[1];
			if ( eregi( "Win", $os ) )
			{
				$crlf = "\r\n";
			}
		}
		$fd = fopen( $openfold."/".$fname, "r" );
		$con = fread( $fd, filesize( $openfold."/".$fname ) );
		fclose( $fd );
		echo $con;
		exit( );
	}
}
?>