| Server IP : 49.231.201.246 / Your IP : 216.73.216.149 Web Server : Apache/2.4.18 (Ubuntu) System : Linux 246 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64 User : root ( 0) PHP Version : 7.0.33-0ubuntu0.16.04.16 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,pcntl_exec MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /proc/thread-self/root/usr/share/webmin/updown/ |
Upload File : |
#!/usr/bin/perl
# Output one file for download
require './updown-lib.pl';
&ReadParse();
&error_setup($text{'fetch_err'});
$can_fetch || &error($text{'fetch_ecannot'});
# Validate filename
$file = $ENV{'PATH_INFO'} || $in{'fetch'};
if ($file !~ /^([a-z]:)?\// && $can_dirs[0] ne "/") {
$file = "$can_dirs[0]/$file";
}
$file || &error($text{'fetch_efile'});
if ($file =~ /^(.*)\.zip$/ && $in{'unzip'}) {
# Remove .zip extension
$file = $1;
}
-r $file || -d $file || &error($text{'fetch_eexists2'});
&can_write_file($file) ||
&error(&text('fetch_eaccess', "<tt>$file</tt>", $!));
if (-d $file && !&has_command("zip")) {
&error($text{'fetch_ezip'});
}
if ($file eq "/" || $file =~ /^[a-z]:\/$/) {
&error($text{'fetch_eroot'});
}
if ($ENV{'PATH_INFO'}) {
# Switch to the correct user
if ($can_mode == 3) {
@uinfo = getpwnam($remote_user);
&switch_uid_to($uinfo[2], $uinfo[3]);
}
elsif ($can_mode == 1 && @can_users == 1) {
@uinfo = getpwnam($can_users[0]);
&switch_uid_to($uinfo[2], $uinfo[3]);
}
if (-d $file) {
# Zip up the whole directory
($shortfile = $file) =~ s/^.*\///g;
$shortfile =~ s/\s+//g;
$temp = &transname($shortfile.".zip");
$out = &backquote_command("cd ".quotemeta($file).
" && zip -r ".quotemeta($temp)." .");
if ($?) {
&error(&text('fetch_ezipcmd',
"<tt>".&html_escape($out)."</tt>"));
}
@st = stat($temp);
print "Content-length: $st[7]\n";
print "Content-type: application/zip\n\n";
open(FILE, "<$temp");
unlink($temp);
while(read(FILE, $buffer, &get_buffer_size_binary())) {
print("$buffer");
}
close(FILE);
}
else {
# Work out the type
&open_readfile(FILE, $file) ||
&error(&text('fetch_eopen', $!));
if ($fetch_show) {
$type = &guess_mime_type($file, undef);
if (!$type) {
# See if it is really text
$out = &backquote_command("file ".
quotemeta(&resolve_links($file)));
$type = "text/plain" if ($out =~ /text|script/);
}
}
else {
print "Content-Disposition: Attachment\n";
}
# Send it
$type ||= "application/octet-stream";
if (!$fetch_show) {
print "Content-Disposition: Attachment\n";
}
# Stat file
my @st = stat($file);
my $fsize = $st[7];
# Get and analyze the file contents first
my $fdata = "";
my $dangertypes = $type =~ /html|xml|pdf/i;
my $htmltype = $type =~ /html/i ? 1 : 0;
my $pdftype = $type =~ /pdf/i ? 'pdf' : 0;
if ($dangertypes) {
$fdata = do { local $/; <FILE> };
my $fdata_filtered = &filter_javascript($fdata, $pdftype);
# If content was changed upon
# filtering force download it
if ($fdata_filtered ne $fdata) {
$type = "application/octet-stream";
print "Content-Disposition: Attachment\n";
}
}
print "Content-length: $fsize\n";
print "X-Content-Type-Options: nosniff\n";
print "Content-type: $type\n\n";
# File is already read, so print it
if ($dangertypes) {
print "$fdata";
}
else {
# Send the file
while(read(FILE, $buffer, &get_buffer_size_binary())) {
print("$buffer");
}
}
close(FILE);
}
# Switch back to root
&switch_uid_back();
}
else {
# Save file in config
if ($module_info{'usermin'}) {
&lock_file("$user_module_config_directory/config");
$userconfig{'fetch'} = $file;
$userconfig{'show'} = $in{'show'};
&write_file("$user_module_config_directory/config", \%userconfig);
&unlock_file("$user_module_config_directory/config");
}
else {
&lock_file("$module_config_directory/config");
$config{'fetch_'.$remote_user} = $file;
$config{'show_'.$remote_user} = $in{'show'};
&write_file("$module_config_directory/config", \%config);
&unlock_file("$module_config_directory/config");
}
# Redirect to nice URL
$file =~ s/#/%23/g;
if (-d $file) {
&redirect("fetch.cgi".$file.".zip?unzip=1");
}
else {
&redirect("fetch.cgi".$file);
}
}