upload.cgi

   1 #!/usr/bin/perl\r
   2 use vars qw(%set %in);\r
   3 use strict;\r
   4 $set{'log_file'} = './log.cgi';         #\83\8d\83O\83t\83@\83C\83\8b\96¼\r
   5 $set{'max_log'} = 30;           #\95Û\8e\9d\8c\8f\90\94\r
   6 $set{'max_size'} = 1*1024;              #\8dÅ\91å\93\8a\8de\97e\97Ê(KB)\r
   7 $set{'min_flag'} = 0;           #\8dÅ\8f¬\97e\97Ê\90§\8cÀ\82ð\8eg\97p\82·\82é=1\r
   8 $set{'min_size'} = 100;         #\8dÅ\8f¬\93\8a\8de\97e\97Ê(KB)\r
   9 $set{'max_all_flag'} = 0;               #\91\8d\97e\97Ê\90§\8cÀ\82ð\8eg\97p\82·\82é=1\r
  10 $set{'max_all_size'} = 20*1024;         #\91\8d\90§\8cÀ\97e\97Ê(KB)\r
  11 $set{'file_pre'} = 'up';                #\83t\83@\83C\83\8b\90Ú\93ª\8e«\r
  12 $set{'pagelog'} = 10;           #1\83y\81[\83W\82É\95\\8e¦\82·\82é\83t\83@\83C\83\8b\90\94\r
  13 $set{'base_html'} = 'upload.html';              #1\83y\81[\83W\96Ú\82Ì\83t\83@\83C\83\8b\96¼\r
  14 $set{'interval'} = 0;           #\93¯\88êIP\93\8a\8de\8aÔ\8au\95b\90\94\r
  15 $set{'deny_host'} = '';         #\93\8a\8de\8bÖ\8e~IP/HOST ,\82Å\8bæ\90Ø\82é ex.(bbtec.net,219.119.66,ac.jp)\r
  16 $set{'admin_name'} = 'admin';           #\8aÇ\97\9d\8eÒ\83\8d\83O\83C\83\93ID\r
  17 $set{'admin_pass'} = '1234';            #\8aÇ\97\9d\8eÒ\83p\83X\83\8f\81[\83h\r
  18 \r
  19 # \88È\89º5\8d\80\96Ú\82ð\8dÄ\90Ý\92è\82·\82é\8dÛ\82É\82ÍPATH\81C\83f\83B\83\8c\83N\83g\83\8a\82Í / \82Å\8fI\82í\82é\82±\82Æ\r
  20 # $set{'html_dir'},$set{'base_cgi'}\82ð ./ \88È\8aO\82É\90Ý\92è\82·\82é\8fê\8d\87,\r
  21 # \82Ü\82½\82ÍDLkey\82ð\8eg\97p\82µ \82È\82¨\82©\82ÂHTML\83L\83\83\83b\83V\83\85($set{'dummy_html'} = 2 or 3)\82ð\8eg\97p\82·\82é\8fê\8d\87\82Í\r
  22 # $set{'base_cgi'} , $set{'http_html_path'} , $set{'http_src_path'} \82ð\83t\83\8b\83p\83X(http://\81`\81` or /\81`\81`)\82Å\8bL\8fq\82·\82é\r
  23 $set{'html_dir'} = './';                # \93à\95\94HTML\95Û\91¶\83f\83B\83\8c\83N\83g\83\8a\r
  24 $set{'src_dir'} = './src/';             # \93à\95\94\83t\83@\83C\83\8b\95Û\91¶\83f\83B\83\8c\83N\83g\83\8a\r
  25 $set{'base_cgi'} = './upload.cgi'; # \82±\82Ì\83X\83N\83\8a\83v\83g\96¼ http://\81`\82Ì\8ew\92è\89Â\94\\r
  26 $set{'http_html_path'} = './';          # html\8eQ\8fÆ httpPATH http://\81`\82Ì\8ew\92è\89Â\94\\r
  27 $set{'http_src_path'} = './src/';               # file\8eQ\8fÆ httpPATH http://\81`\82Ì\8ew\92è\89Â\94\\r
  28 \r
  29 $set{'dlkey'} = 0;              # DLKey\82ð\8eg\97p\82·\82é=1,DLkey\95K\90{=2\r
  30 $set{'up_ext'} = 'txt,lzh,zip,rar,gca,mpg,mp3,avi,swf,bmp,jpg,gif,png'; #\83A\83b\83v\83\8d\81[\83h\82Å\82«\82é\8aî\96{\8ag\92£\8eq \94¼\8ap\89p\90\94\8f¬\95¶\8e\9a ,\82Å\8bæ\90Ø\82é\r
  31 $set{'up_all'} = 0;             #\93o\98^\88È\8aO\82Ì\82à\82Ì\82àUP\82³\82¹\82ç\82ê\82é\82æ\82¤\82É\82·\82é=1\r
  32 $set{'ext_org'} = 0;    #$set{'up_all'}\82ª1\82Ì\8e\9e\83I\83\8a\83W\83i\83\8b\82Ì\8ag\92£\8eq\82É\82·\82é=1\r
  33 $set{'deny_ext'} = 'php,php3,phtml,rb,sh,bat,dll';      #\93\8a\8de\8bÖ\8e~\82Ì\8ag\92£\8eq \94¼\8ap\89p\90\94\8f¬\95¶\8e\9a ,\82Å\8bæ\90Ø\82é\r
  34 $set{'change_ext'} = 'cgi->txt,pl->txt,log->txt,jpeg->jpg,mpeg->mpg';           #\8ag\92£\8eq\95Ï\8a· \91O->\8cã \94¼\8ap\89p\90\94\8f¬\95¶\8e\9a ,\82Å\8bæ\90Ø\82é\r
  35 \r
  36 $set{'home_url'} = '';          #[HOME]\82Ì\83\8a\83\93\83N\90æ \91\8a\91Î\83p\83X\96\94\82Í http://\82©\82ç\8en\82Ü\82é\90â\91Î\83p\83X\r
  37 $set{'html_all'} = 1;           #[ALL]\82ð\8fo\82·=1\r
  38 $set{'dummy_html'} = 0;         #\83t\83@\83C\83\8b\8cÂ\95ÊHTML\82ð\8dì\90¬\82·\82é \92Ê\8fí\83t\83@\83C\83\8b\82Ì\82Ý=1,DLKey\90Ý\92è\83t\83@\83C\83\8b\82Ì\82Ý=2,\82·\82×\82Ä=3\r
  39 $set{'find_crypt'} = 1;         #\88Ã\8d\86\89»ZIP\82ð\8c\9f\8fo\82·\82é=1\r
  40 $set{'binary_compare'} = 0;             #\8aù\91¶\83t\83@\83C\83\8b\82Æ\83o\83C\83i\83\8a\94ä\8ar\82·\82é=1\r
  41 $set{'post_flag'} = 0;          #PostKey\82ð\8eg\97p\82·\82é=1\r
  42 $set{'post_key'} = 'postkey';           #PostKey ,\82Å\8bæ\90Ø\82é\82Æ\95¡\90\94\8ew\92è ex.(postkey1,postkey2)\r
  43 $set{'disp_error'} = 1;         #\83\86\81[\83U\81[\82É\83G\83\89\81[\82ð\95\\8e¦\82·\82é=1\r
  44 $set{'error_level'} = 1;                #\83G\83\89\81[\83\8d\83O\82ð\8bL\98^\82·\82é=1\r
  45 $set{'error_log'} = './error.cgi';              #\83G\83\89\81[\83\8d\83O\83t\83@\83C\83\8b\96¼\r
  46 $set{'error_size'} = 1024;      # \83G\83\89\81[\83\8d\83O\8dÅ\91å\97e\97Ê(KB) \90§\8cÀ\82È\82µ=0\r
  47 $set{'zero_clear'} = 1;         #\83t\83@\83C\83\8b\82ª\8c©\82Â\82©\82ç\82È\82¢\8fê\8d\87\83\8d\83O\82©\82ç\8dí\8f\9c\82·\82é=1\r
  48 \r
  49 $set{'disp_comment'} = 1;       #\83R\83\81\83\93\83g\82ð\95\\8e¦\82·\82é=1\r
  50 $set{'disp_date'} = 1;          #\93ú\95t\82ð\95\\8e¦\82·\82é=1\r
  51 $set{'disp_size'} = 1;          #\83T\83C\83Y\82ð\95\\8e¦\82·\82é=1\r
  52 $set{'disp_mime'} = 1;          #MIMETYPE\82ð\95\\8e¦\82·\82é=1\r
  53 $set{'disp_orgname'} = 1;       #\83I\83\8a\83W\83i\83\8b\83t\83@\83C\83\8b\96¼\82ð\95\\8e¦\82·\82é=1\r
  54 \r
  55 $set{'per_upfile'} = 0666;              #\83A\83b\83v\83\8d\81[\83h\83t\83@\83C\83\8b\82Ì\83p\81[\83~\83b\83V\83\87\83\93 suexec=0604,other=0666\r
  56 $set{'per_dir'} = 0777;         #\83\\81[\83X\83A\83b\83v\83f\83B\83\8c\83N\83g\83\8a\82Ì\83p\81[\83~\83b\83V\83\87\83\93 suexec=0701,other=0777\r
  57 $set{'per_logfile'} = 0666;             #\83\8d\83O\83t\83@\83C\83\8b\82Ì\83p\81[\83~\83b\83V\83\87\83\93\81@suexec=0600,other=0666\r
  58 $set{'link_target'} = '';               #target\91®\90«\r
  59 \r
  60 #------\r
  61 $set{'ver'} = '2005/10/10e';\r
  62 $set{'char_delname'} = 'D';\r
  63 \r
  64 $in{'time'} = time(); $in{'date'} = conv_date($in{'time'});\r
  65 $in{'addr'} = $ENV{'REMOTE_ADDR'};\r
  66 $in{'host'} = gethostbyaddr(pack('C4',split(/\./, $in{'addr'})), 2) || $ENV{'REMOTE_HOST'} || '(none)';\r
  67 \r
  68 if($in{'addr'} eq $in{'host'}){ $in{'host'} = '(none)'; }\r
  69 \r
  70 $set{'html_head'} =<<"EOM";\r
  71 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">\r
  72 <html lang="ja">\r
  73 <HEAD>\r
  74 <META name="robots" content="noindex,nofollow">\r
  75 <META name="ROBOTS" content="NOINDEX,NOFOLLOW">\r
  76 <META http-equiv="Content-type" content="text/html; charset=Shift_JIS">\r
  77 <META http-equiv="Pragma" content="no-cache">\r
  78 <META http-equiv="Cache-Control" content="no-cache">\r
  79 <META http-equiv="Expires" content="0">\r
  80 <TITLE>Uploader</TITLE>\r
  81 EOM\r
  82 \r
  83 $set{'html_css'} =<<"EOM";\r
  84 <META http-equiv="Content-Style-Type" content="text/css">\r
  85 <STYLE type="text/css"><!--\r
  86 input,td{ font-size: 10pt;font-family:Chicago,Verdana,Arial,sans-serif,"\82l\82r \82o\83S\83V\83b\83N"; }\r
  87 a:hover { background-color:#EECCCC; }\r
  88 input,textarea{ border-top : 1px solid ; border-bottom : 1px solid ; border-left : 1px solid ; border-right : 1px solid ;font-size:10pt;background-color:#FFFFFF; }\r
  89 -->\r
  90 </STYLE>\r
  91 EOM\r
  92 \r
  93 unless(-e $set{'log_file'}){ &init; }\r
  94 unless(-e $set{'base_html'}){ &makehtml; }\r
  95 { #\83f\83R\81[\83h\r
  96         my $readbuffsize = 1024*8;\r
  97         if ($ENV{'REQUEST_METHOD'} eq "POST" && $ENV{'CONTENT_TYPE'} =~ /multipart\/form-data/i){\r
  98                 if ($ENV{'CONTENT_LENGTH'} > ($set{'max_size'} * 1024 + 1024)){ if($ENV{'SERVER_SOFTWARE'} =~ /IIS/){ while(read(STDIN,my $buff,$readbuffsize)){} } &error(106,$ENV{'CONTENT_LENGTH'});}\r
  99         }else{\r
 100                 if ($ENV{'CONTENT_LENGTH'} > 1024*100){ error(98); }\r
 101         }\r
 102         my %ck; foreach(split(/;/,$ENV{'HTTP_COOKIE'})){ my($key,$val) = split(/=/); $key =~ s/\s//g; $ck{$key} = $val;}\r
 103         my @ck = split(/<>/,$ck{'SN_USER'});\r
 104         if(length($ck[0]) < 5){ \r
 105                 my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); srand;\r
 106                 my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))];\r
 107                 $in{'user'} = crypt($in{'addr'}.$in{'time'}, $salt);\r
 108         }else{ $in{'user'} = $ck[0]; }\r
 109 \r
 110         if($ENV{'REQUEST_METHOD'} eq "POST" && $ENV{'CONTENT_TYPE'} =~ /multipart\/form-data/i){\r
 111                 my %FORM;       my $subbuff; my $filename;      my $valuename;\r
 112                 my $upflag;     my $valueflag; my $bound;       my $mime;\r
 113                 my $readlength = 0;\r
 114                 my $random = int(rand(900000)) + 100000;\r
 115                 my $endflag = 0;\r
 116                 binmode(STDIN);\r
 117                 while(<STDIN>){ $readlength += length($_); if(/(--.*)\r\n$/){ $bound = $1; last; }}\r
 118                 if(-e "$set{'src_dir'}$random.temporary"){ $random++; }\r
 119                 if(-e "$set{'src_dir'}$random.temporary"){ $random++; }\r
 120                 if(-e "$set{'src_dir'}$random.temporary"){ &error(204); }\r
 121 \r
 122                 open(OUT,">$set{'src_dir'}$random.temporary");\r
 123                 binmode(OUT);\r
 124                 my $formbuff;\r
 125                 while(my $buff = <STDIN>){\r
 126                         $readlength += length($buff);\r
 127                         if($upflag == 1){ if($buff =~ /Content-Type:\s(.*)\r\n$/i){ $mime = $1; } $upflag++; next;}\r
 128                         if($upflag == 2){\r
 129                                 while(1){\r
 130                                         my $readblen; my $filebuff;\r
 131                                         if($ENV{'CONTENT_LENGTH'} - $readlength < $readbuffsize){ $readblen = $ENV{'CONTENT_LENGTH'} - $readlength; }\r
 132                                         else{ $readblen = $readbuffsize; }\r
 133                                         if(!read(STDIN,$filebuff,$readblen)){ last };\r
 134                                         $readlength += length($filebuff);\r
 135                                         if($ENV{'CONTENT_LENGTH'} - $readlength < $readbuffsize){\r
 136                                                 my $readblen = $ENV{'CONTENT_LENGTH'} - $readlength;\r
 137                                                 read(STDIN,my $subbuff,$readblen);\r
 138                                                 $readlength += length($subbuff);\r
 139                                                 $filebuff .= $subbuff;\r
 140                                                 $endflag = 1;\r
 141                                         }\r
 142                                         my $offset = index($filebuff,$bound);\r
 143                                         if($offset >= 0){\r
 144                                                 $buff = substr($filebuff,0,$offset-2); my $subbuff = substr($filebuff,$offset);\r
 145                                                 print OUT $buff; $upflag = 0; $formbuff .= $subbuff; last;\r
 146                                         }else{ print OUT $filebuff;     }\r
 147                                 }\r
 148                                 if($endflag){ last; }\r
 149                                 next;\r
 150                         }\r
 151                         if($buff =~ /^Content-Disposition:\sform-data;\sname=\"upfile\";\sfilename=\"(.*)\"\r\n$/i){\r
 152                                 $filename = $1; $upflag = 1; next;\r
 153                         }\r
 154                         $formbuff .= $buff;\r
 155                 }\r
 156                 close(OUT);\r
 157                 chmod($set{'per_upfile'},"$set{'src_dir'}$random.temporary");\r
 158                 { my $value;\r
 159                         foreach my $buff(split(/\r\n/,$formbuff)){\r
 160                                 $buff .= "\r\n";\r
 161                                 if($buff =~ /^$bound\-\-/){ $FORM{$value} =~ s/\r\n$//; $valueflag = 0; last;}\r
 162                                 if($buff =~ /^$bound/){ $FORM{$value} =~ s/\r\n$//; $valueflag = 0; next;}\r
 163                                 if($valueflag == 1){ $valueflag++; next; }\r
 164                                 if($valueflag == 2){ $FORM{$value} .= $buff; }\r
 165                                 if($buff =~ /^Content-Disposition: form-data; name=\"(.+)\"\r\n$/){ $value = $1; $valueflag++; }\r
 166                         }\r
 167                 }\r
 168                 if($upflag || $valueflag){ unlink("$set{'src_dir'}$random.temporary"); &error(108);}\r
 169 \r
 170                 $in{'org_pass'} = $in{'pass'} = $FORM{'pass'};\r
 171                 $in{'dlkey'} = $FORM{'dlkey'};\r
 172                 $in{'comment'} = $FORM{'comment'};\r
 173                 $in{'jcode'} = $FORM{'jcode'};\r
 174                 $in{'postkey'} = $FORM{'postkey'};\r
 175                 $in{'upfile'} = $filename;\r
 176                 $in{'type'} = $mime;\r
 177                 $in{'tmpfile'} = "$set{'src_dir'}$random.temporary";\r
 178                 $in{'orgname'} = $in{'upfile'};\r
 179                 if(-s "$in{'tmpfile'}" == 0){ unlink("$in{'tmpfile'}"); &error(99) }\r
 180                 if($set{'min_flag'} && ((-s "$in{'tmpfile'}") < $set{'min_size'} * 1024)){ &error(107,(-s "$in{'tmpfile'}"));}\r
 181                 if((-s "$in{'tmpfile'}") > $set{'max_size'} * 1024){ &error(106,(-s "$in{'tmpfile'}"));}\r
 182                 if($set{'post_flag'} && !check_postkey($in{'postkey'})){ &error(109); }\r
 183                 if($set{'dlkey'} == 2 && !$in{'dlkey'}){ unlink("$in{'tmpfile'}"); &error(61); }\r
 184         }else{\r
 185                 my ($buffer,%FORM,@admin_delno);\r
 186                 if ($ENV{'REQUEST_METHOD'} eq "POST") { read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});}\r
 187                 else { $buffer = $ENV{'QUERY_STRING'}; }\r
 188                 my @pairs = split(/&/,$buffer);\r
 189                 foreach my $pair (@pairs) {\r
 190                         my ($name, $value) = split(/=/, $pair);\r
 191                         $value =~ tr/+/ /;\r
 192                         $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;\r
 193                         if($name eq 'admin_delno'){\r
 194                                 push(@admin_delno,$value);\r
 195                         }else{\r
 196                                 $FORM{$name} = $value;\r
 197                         }\r
 198                 }\r
 199                 $in{'delpass'} = $FORM{'delpass'};\r
 200                 $in{'delno'} = $FORM{'delno'};\r
 201                 $in{'file'} = $FORM{'file'};\r
 202                 $in{'dlkey'} = $FORM{'dlkey'};\r
 203                 $in{'mode'} = $FORM{'mode'};\r
 204                 $in{'checkmode'} = $FORM{'checkmode'};\r
 205                 $in{'admin_delno'} = join(',',@admin_delno);\r
 206                 if($in{'delno'} eq $set{'admin_name'} && $in{'delpass'} eq $set{'admin_pass'}){ &admin_mode(); }\r
 207                 if(!$in{'delno'} && $in{'delpass'} eq $set{'admin_pass'}){ &makehtml; &quit; }\r
 208         }\r
 209 \r
 210         my @denyhost = split(/,/,$set{'deny_host'});\r
 211         foreach my $value (@denyhost){\r
 212                 if ($in{'addr'} =~ /$value/ || $in{'host'} =~ /$value/){ &error(101);}\r
 213         }\r
 214 \r
 215         my @form = ($in{'comment'},$in{'orgname'},$in{'type'},$in{'dlkey'});\r
 216         foreach my $value (@form) {\r
 217                 if (length($value) > 128) { $value = substr($value,0,128).'...'; }\r
 218 #               $value =~ s/&/&amp;/g;\r
 219                 $value =~ s/"/&quot;/g;\r
 220                 $value =~ s/</&lt;/g;\r
 221                 $value =~ s/>/&gt;/g;\r
 222                 $value =~ s/\r//g;\r
 223                 $value =~ s/\n//g;\r
 224                 $value =~ s/\t//g;\r
 225                 $value =~ s/\0//g;\r
 226         }\r
 227         ($in{'comment'},$in{'orgname'},$in{'type'},$in{'dlkey'}) = @form;\r
 228 }\r
 229 \r
 230 \r
 231 if($in{'mode'} eq 'delete'){ &delete(); &quit(); }\r
 232 if($in{'mode'} eq 'dl'){ &dlfile;} #DL\r
 233 if(!$in{'upfile'}){ &error(99); }\r
 234 \r
 235 {#\83\81\83C\83\93\8f\88\97\9d\r
 236 \r
 237         open(IN,$set{'log_file'})||&error(303);\r
 238         my @log = <IN>;\r
 239         close(IN);\r
 240         my ($no,$lastip,$lasttime) = split(/<>/,$log[0]);\r
 241 \r
 242         if($set{'interval'} && $in{'time'} <= ($lasttime + $set{'interval'}) && $in{'addr'} eq $lastip){ &error(203);}\r
 243         $in{'ext'} = extfind($in{'orgname'}); if(!$in{'ext'}){ &error(202); }\r
 244 \r
 245         my $orgname;\r
 246         if(split(/\//,$in{'orgname'}) > split(/\\/,$in{'orgname'})){    my @name = split(/\//,$in{'orgname'}); $orgname = $name[$#name]; }\r
 247         else{ my @name = split(/\\/,$in{'orgname'}); $orgname = $name[$#name];}\r
 248         \r
 249         my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/');\r
 250         srand;\r
 251         my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))];\r
 252         $in{'pass'} = crypt($in{'pass'}, $salt);\r
 253 \r
 254         if($set{'binary_compare'}){\r
 255                 my @files = globfile("$set{'src_dir'}",".*");\r
 256                 my @dir = globdir("$set{'src_dir'}",".*");\r
 257                 foreach my $dir (@dir){ push(@files,globfile($dir."/",".*")); }\r
 258                 foreach my $value (@files){\r
 259                         next if($value =~ /\.temporary$/);\r
 260                         if(binarycmp($in{'tmpfile'},$value)){ unlink($in{'tmpfile'}); &error(205,$value);}\r
 261                 }\r
 262         }\r
 263 \r
 264         if($set{'find_crypt'}){\r
 265                 open(FILE,$in{'tmpfile'}); binmode(FILE); seek(FILE,0,0); read(FILE,my $buff,4); my $crypt_flag = 0;\r
 266                 if($buff =~ /^\x50\x4b\x03\x04$/){ seek(FILE,6,0); read(FILE,my $buff,1); $crypt_flag = 1 if(($buff & "\x01") eq "\x01"); }\r
 267                 close(FILE);\r
 268                 $in{'comment'} = '<font color="#FF0000">*</font>'.$in{'comment'} if($crypt_flag);\r
 269         }\r
 270 \r
 271         open(IN,$set{'log_file'})||&error(303);\r
 272         @log = <IN>;\r
 273         close(IN);\r
 274         ($no,$lastip,$lasttime) = split(/<>/,$log[0]);\r
 275         shift(@log);\r
 276         $no++;\r
 277         my $tmpno = sprintf("%04d",$no);\r
 278 \r
 279         my $dlsalt;\r
 280         my $filedir;\r
 281         my $allsize = (-s $in{'tmpfile'});\r
 282         \r
 283         if($set{'dlkey'} && $in{'dlkey'}){\r
 284                 my @salt = ('a'..'z', 'A'..'Z', '0'..'9'); srand;\r
 285                 for (my $c = 1; $c <= 20; ++$c) { $dlsalt .= $salt[int(rand(@salt))]; }\r
 286                 $filedir = "$set{'src_dir'}$set{'file_pre'}${tmpno}.$in{'ext'}_$dlsalt/";\r
 287                 mkdir($filedir,$set{'per_dir'});\r
 288                 rename("$in{'tmpfile'}","$filedir$set{'file_pre'}$tmpno.$in{'ext'}");\r
 289                 open(OUT,">${filedir}index.html");\r
 290                 close(OUT);\r
 291                 chmod($set{'per_upfile'},"${filedir}index.html");\r
 292                 $in{'comment'} = '<font color="#FF0000">[DLKey] </font>'.$in{'comment'};\r
 293         }else{\r
 294                 undef $in{'dlkey'};\r
 295                 rename("$in{'tmpfile'}","$set{'src_dir'}$set{'file_pre'}$tmpno.$in{'ext'}");\r
 296         }\r
 297 \r
 298         if (length($orgname) > 128) { $orgname = substr($orgname,0,128).'...'; }\r
 299 \r
 300         my @note;\r
 301         if($set{'post_flag'} && $set{'post_key'}){\r
 302                 push(@note,'PostKey:'.$in{'postkey'});\r
 303         }\r
 304         if($ENV{'SERVER_SOFTWARE'} =~ /Apache|IIS/){\r
 305                 my $disptime;\r
 306                 my $time = time() - $in{'time'};\r
 307                 my @str = ('Upload:','\95b');\r
 308                 my $disptime = $time.$str[1];\r
 309                 push(@note,$str[0].$disptime);\r
 310         }\r
 311         if($in{'dlkey'}){\r
 312                 my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); srand;\r
 313                 my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))];\r
 314                 my $crypt_dlkey  = crypt($in{'dlkey'}, $salt);\r
 315                 push(@note,"DLKey<!-- DLKey:".$crypt_dlkey." --><!-- DLpath:".$dlsalt." -->");\r
 316         }\r
 317         my $note = join(',',@note);\r
 318         my $usersalt = substr($in{'user'},0,2);\r
 319         my $userid = crypt($in{'user'},$usersalt);\r
 320         $in{'time'} = time();\r
 321 #       $in{'date'} = conv_date(time());\r
 322         my @new;\r
 323         $new[0] = "$no<>$in{'addr'}<>$in{'time'}<>1\n";\r
 324         my $addlog = "$no<>$in{'ext'}<>$in{'date'}<>$in{'comment'}<>$in{'type'}<>$orgname<>$in{'addr'}<>$in{'host'}<>$in{'pass'},$userid<>$set{'file_pre'}<>$note<>1\n";\r
 325         $new[1] = $addlog;\r
 326 \r
 327 #       open(OUT,">>./alllog.cgi"); print OUT $addlog; close(OUT);\r
 328 \r
 329         my $i = 2;\r
 330 \r
 331         foreach my $value (@log){\r
 332                 my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value);\r
 333                 if(!$dummy){ $filepre = $set{'file_pre'};}\r
 334                 $no = sprintf("%04d",$no);\r
 335 \r
 336                 my $filename;\r
 337                 my $filedir;\r
 338                 if($note =~ /DLpath:(.+)\s/){\r
 339                         my $dlpath = $1;\r
 340                         $filename = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext";\r
 341                         $filedir = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/";\r
 342                 }else{\r
 343                         $filename = "$set{'src_dir'}$filepre$no.$ext";\r
 344                 }\r
 345                 $allsize += (-s $filename);\r
 346                 \r
 347                 if($i <= $set{'max_log'} && !($set{'max_all_flag'} && $set{'max_all_size'}*1024 < $allsize)){ \r
 348                         if((-e $filename)||!$set{'zero_clear'}){ push(@new,$value); $i++; }\r
 349                 }else{\r
 350                         if(unlink($filename)){\r
 351                                 unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir);\r
 352                         }elsif(unlink($filename)){\r
 353                                 unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir);\r
 354                         }elsif(-e $filename){\r
 355                                 push(@new,$value);\r
 356                         }else{\r
 357                                 unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir);\r
 358                         }\r
 359                 }\r
 360         }\r
 361         logwrite(@new);\r
 362         if($in{'dlkey'} && ( $set{'dummy_html'} == 2 || $set{'dummy_html'} == 3)){\r
 363                 &makedummyhtml("$set{'file_pre'}$tmpno.$in{'ext'}",$in{'comment'},"$set{'file_pre'}$tmpno.$in{'ext'}",$dlsalt,$in{'date'},$in{'type'},$orgname,$no);\r
 364         }elsif(!$in{'dlkey'} && ($set{'dummy_html'} == 1 || $set{'dummy_html'} == 3)){\r
 365                 &makedummyhtml("$set{'file_pre'}$tmpno.$in{'ext'}");\r
 366         }\r
 367         &makehtml(); &quit();\r
 368 }\r
 369 \r
 370 sub makehtml{\r
 371 \r
 372         my ($buff,$init,$postval,$dlkey);\r
 373         my $page = 0; my $i = 1;\r
 374         \r
 375         open(IN,$set{'log_file'})||&error(303);\r
 376         my $log = my @log = <IN>;\r
 377         close(IN);\r
 378         \r
 379         if($log == 1){ $log++; $init++;}\r
 380         my $lastpage = int(($log - 2)/$set{'pagelog'}) + 1;\r
 381         $postval = ' obj.postkey.value =  unescape(p[1]);' if($set{'post_flag'});\r
 382         my $header =<<"EOM";\r
 383 $set{'html_head'}<META http-equiv="Content-Script-Type" content="text/javascript">\r
 384 <script type="text/javascript">\r
 385 <!--\r
 386 function getCookie(obj,cookiename){\r
 387         var i,str; c = new Array(); p = new Array("",""); str = document.cookie;c = str.split(";");\r
 388         for (i = 0; i < c.length; i++) { if (c[i].indexOf(cookiename+"=") >= 0) { p = (c[i].substr(c[i].indexOf("=")+1)).split("<>"); break; }}\r
 389         if(cookiename == "SN_UPLOAD"){ obj.pass.value =  unescape(p[0]);$postval }\r
 390         else if(cookiename == "SN_DEL"){ obj.delpass.value =  unescape(p[0]);}\r
 391         return true;\r
 392 }\r
 393 function delnoin(no){\r
 394         document.Del.delno.value = no;\r
 395         document.Del.del.focus();\r
 396 }\r
 397 //-->\r
 398 </script>\r
 399 $set{'html_css'}</HEAD>\r
 400 <body bgcolor="#ffffff" text="#000000" LINK="#6060FF" VLINK="#6060FF" ALINK="#6060FF" onload="getCookie(document.Form,'SN_UPLOAD');getCookie(document.Del,'SN_DEL');">\r
 401 <table summary="title" width="100%"><tr><td bgcolor="#caccff"><strong><font size="4" color="#3366cc">Uploader</font></strong></td></tr></table>\r
 402 <p>\r
 403 Now.. Testing..\r
 404 </p>\r
 405 EOM\r
 406         my $maxsize = 'Max '.dispsize($set{'max_size'}*1024);\r
 407         my ($minsize,$total);\r
 408         if($set{'min_flag'}){ $minsize = 'Min '.dispsize($set{'min_size'}*1024).' - '; }\r
 409         if($set{'max_all_flag'}){ $total .= ' Total '.dispsize($set{'max_all_size'}*1024);}\r
 410         $header .= qq|<FORM METHOD="POST" ENCTYPE="multipart/form-data" ACTION="$set{'base_cgi'}" name="Form">FILE $minsize$maxsize (*$set{'max_log'}Files$total)<br>|;\r
 411         $header .='<INPUT TYPE=file  SIZE="40" NAME="upfile">';\r
 412         $header .= ' DLKey: <INPUT TYPE=text SIZE="8" NAME="dlkey" maxlength="8">' if($set{'dlkey'});\r
 413         $header .= '\r
 414 DELKey: <INPUT TYPE=password SIZE="10" NAME="pass" maxlength="8"><br>\r
 415 COMMENT<br>\r
 416 <INPUT TYPE=text SIZE="45" NAME="comment">\r
 417 <INPUT TYPE=hidden NAME="jcode" VALUE="\8a¿\8e\9a">\r
 418 <INPUT TYPE=submit VALUE="Upload"><INPUT TYPE=reset VALUE="Cancel"><br>\r
 419 ';\r
 420         if($set{'post_flag'}){ $header .= 'PostKey<br><INPUT TYPE=password SIZE="10" NAME="postkey" maxlength="10">'; }\r
 421         $header .= '</FORM>';\r
 422 \r
 423         my $allsize = 0;\r
 424         my @files = globfile("$set{'src_dir'}",".*");\r
 425         my @dir = globdir("$set{'src_dir'}",".*");\r
 426         foreach my $dir (@dir){ push(@files,globfile($dir."/",".*")); }\r
 427         foreach my $value (@files){ $allsize += (-s "$value"); }\r
 428 \r
 429         $allsize = dispsize($allsize);\r
 430 \r
 431         my $footer = "</table><HR size=1>Used ${allsize}\n<br>";\r
 432         if($set{'up_all'} && !$set{'ext_org'}){ $footer .= $set{'up_ext'}.' +'; }\r
 433         elsif(!$set{'up_all'}){ $footer .= $set{'up_ext'}; }\r
 434         $footer .= "\n<table summary=\"footer\" width=\"100%\"><tr><td><div align=left><FORM METHOD=POST ACTION=\"$set{'base_cgi'}\" name=\"Del\"><span style='font-size:9pt'><input type=hidden name=mode value=delete>No.<input type=text size=4 name=delno> key<input type=password size=4 name=delpass> <input type=submit value=\"del\" name=del></span></form></div>\n";\r
 435         $footer .= "</td><td><div align=right><!-- $set{'ver'} --><a href=\"http://sugachan.dip.jp/download/\" target=\"_blank\"><small>Sn Uploader</small></a></div></td></tr></table>\n</body>\n</html>";\r
 436 \r
 437         my $info_title = "<table summary=\"upinfo\" width=\"100%\">\n<tr><td></td><td>NAME</td>";\r
 438         if($set{'disp_comment'}){ $info_title .= "<td>COMMENT</td>"; } if($set{'disp_size'}){ $info_title .= "<td>SIZE</td>"; } if($set{'disp_date'}){ $info_title .= "<td>DATE</td>"; }\r
 439         if($set{'disp_mime'}){ $info_title .= "<td>MIME</td>"; } if($set{'disp_orgname'}){ $info_title .= "<td>ORIG</td>"; }\r
 440         $info_title .= "</tr>\n";\r
 441 \r
 442         my $home_url_link;\r
 443         if($set{'home_url'}){ $home_url_link = qq|<a href="$set{'home_url'}">[HOME]</a> |;}\r
 444         if($set{'html_all'}){\r
 445                 my $buff; my $no = 1; my $time = time; my $subheader;\r
 446                 foreach my $value (@log){\r
 447                         my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$dummy) = split(/<>/,$value);\r
 448                         if(!$dummy){ next; }\r
 449                         $buff .= makeitem($value);\r
 450                 }\r
 451                 $subheader .= "[ALL] ";\r
 452                 while($no <= $lastpage){\r
 453                         if($no == $page) { $subheader .= "\[$no\] ";}\r
 454                         else{   if($no == 1){ $subheader .= "<a href=\"$set{'http_html_path'}$set{'base_html'}?$time\">\[$no\]</a> "}\r
 455                                         else{$subheader .= "<a href=\"$set{'http_html_path'}$no.html?$time\">\[$no\]</a> ";}    }\r
 456                         $no++;\r
 457                 }\r
 458                 $subheader .= $info_title;\r
 459                 open(OUT,">$set{'html_dir'}all.html")||&error(306,"$set{'html_dir'}all.html");\r
 460                 print OUT $header."<hr size=1>".$home_url_link.$subheader."<hr size=1>".$buff.$footer;\r
 461                 close(OUT);\r
 462                 chmod($set{'per_upfile'},"$set{'html_dir'}all.html");\r
 463         }else{ unlink("$set{'html_dir'}all.html"); }\r
 464         \r
 465         while($log > $i){\r
 466                 $buff .= makeitem($log[$i]) unless($init);\r
 467                 if(($i % $set{'pagelog'}) == 0||$i == $log -1){\r
 468                         $page++; my $subheader; my $no = 1;     my $time = time;\r
 469                         if($set{'html_all'}){ $subheader .= "<a href=\"./all.html?$time\">[ALL]</a> "; }\r
 470                         while($no <= $lastpage){\r
 471                                 if($no == $page) { $subheader .= "\[$no\] ";}\r
 472                                 else{   if($no == 1){ $subheader .= "<a href=\"$set{'http_html_path'}$set{'base_html'}?$time\">\[$no\]</a> "}\r
 473                                                 else{$subheader .= "<a href=\"$set{'http_html_path'}$no.html?$time\">\[$no\]</a> ";}\r
 474                                 }\r
 475                                 $no++;\r
 476                         }\r
 477                         $subheader .= $info_title;\r
 478                         my $loghtml;\r
 479                         if($page == 1){ $loghtml = "$set{'html_dir'}$set{'base_html'}"; }\r
 480                         else{ $loghtml = "$set{'html_dir'}$page.html"; }\r
 481 \r
 482                         open(OUT,">$loghtml") || &error(306,"$loghtml");\r
 483                         print OUT $header."<hr size=1>".$home_url_link.$subheader."<hr size=1>".$buff.$footer;\r
 484                         close(OUT);\r
 485                         chmod($set{'per_upfile'},$loghtml);\r
 486                         undef $buff;\r
 487                 }\r
 488                 $i++;\r
 489         }\r
 490 \r
 491         while($page < 1000){\r
 492                 $page ++;\r
 493                 if(-e "$set{'html_dir'}$page.html"){ unlink("$set{'html_dir'}$page.html"); }else{ last; }\r
 494         }\r
 495 }\r
 496 \r
 497 sub delete{\r
 498         my $mode = $_[0];\r
 499         my @delno = split(/,/,$_[1]);\r
 500         my $delno; my $flag = 0; my $tmpaddr;\r
 501         my $delnote;\r
 502 \r
 503         if($in{'delno'} =~ /(\d+)/){ $delno = $1; }\r
 504         if($mode ne 'admin' && !$in{'delno'}){ return; }\r
 505         elsif($mode ne 'admin' && !$delno){ &error(401,$in{'delno'}); }\r
 506 \r
 507         open(IN,$set{'log_file'})|| &error(303);\r
 508         my @log = <IN>;\r
 509         close(IN);\r
 510 \r
 511         if($in{'addr'} =~ /(\d+).(\d+).(\d+).(\d+)/){ $tmpaddr = "$1.$2.$3."; }\r
 512         my $findflag = 0;\r
 513         foreach my $value (@log){\r
 514                 my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value);\r
 515                 $delnote = $note;\r
 516                 my $delflag = 0;\r
 517                 if(!$addr){ next; }\r
 518                 if($mode eq 'admin'){\r
 519                         foreach my $delno (@delno){ if($no == $delno){ $delflag = 1; last; } }\r
 520                 }elsif($no == $delno){\r
 521                         $findflag = 1;\r
 522                         unless ($addr =~ /^$tmpaddr/){\r
 523                                 my ($pass,$id) = split(/,/,$pass);\r
 524                                 my $delpass = $in{'delpass'} || $in{'addr'}.time();\r
 525                                 my $salt = substr($pass, 0, 2); $delpass = crypt($delpass,$salt);\r
 526                                 my $usersalt = substr($in{'user'},0,2); my $userid = crypt($in{'user'},$usersalt);\r
 527                                 if ($in{'delpass'} ne $set{'admin_pass'} && $delpass ne $pass && $userid ne $id){ \r
 528                                         if($mode ne 'admin'){ if(!$dummy){ $filepre = $set{'file_pre'};} $no = sprintf("%04d",$no); &error(404,"$filepre$no.$ext");}\r
 529                                 }\r
 530                         }\r
 531                         $delflag = 1;\r
 532                 }\r
 533                 if($delflag){\r
 534 #                       open(OUT,">>./del.cgi"); print OUT $value; close(OUT);\r
 535                         $flag = 1;\r
 536                         if(!$dummy){ $filepre = $set{'file_pre'};}\r
 537                         $no = sprintf("%04d",$no);\r
 538                         my $filename;\r
 539                         my ($dlpath,$filedir);\r
 540                         if($delnote =~ /DLpath:(.+)\s/){\r
 541                                 $dlpath = $1;\r
 542                                 $filename = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext";\r
 543                                 $filedir = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/";\r
 544                         }else{\r
 545                                 $filename = "$set{'src_dir'}$filepre$no.$ext";\r
 546                         }\r
 547                         \r
 548                         if(unlink($filename)){\r
 549                                 unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value;\r
 550                         }elsif(unlink($filename)){\r
 551                                 unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value;\r
 552                         }elsif(!(-e $filename)){\r
 553                                 unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value;\r
 554                         }else{\r
 555                                 if($mode ne 'admin'){ &error(403,"$filepre$no.$ext");}\r
 556                         }\r
 557                 }\r
 558         }\r
 559         if($mode ne 'admin' && !$findflag){ &error(402,$delno); }\r
 560         if($flag){\r
 561                 logwrite(@log);\r
 562                 &makehtml();\r
 563         }\r
 564 }\r
 565 \r
 566 \r
 567 sub quit{\r
 568         my ($cookiename,$buff);\r
 569         my $flag = 0;\r
 570         my @tmpfiles = globfile("$set{'src_dir'}","\.temporary");\r
 571         foreach my $value (@tmpfiles){ if((stat($value))[10] < time - 60*60){ unlink("$value"); $flag++; } }\r
 572         &makehtml() if($flag);\r
 573         $buff =<<"EOM";\r
 574 $set{'html_head'}<META HTTP-EQUIV="Refresh" CONTENT="1;URL=$set{'http_html_path'}$set{'base_html'}">\r
 575 EOM\r
 576         if($in{'jcode'} || $in{'mode'} eq 'delete'){\r
 577                 $buff .=<<"EOM";\r
 578 <META HTTP-EQUIV="Set-Cookie" content="SN_USER=$in{'user'}&lt;&gt;1; path=/; expires=Tue, 31-Dec-2030 23:59:59 GMT">\r
 579 <META HTTP-EQUIV="CONTENT-SCRIPT-TYPE" CONTENT="text/javascript">\r
 580 <script type="text/javascript">\r
 581 <!--\r
 582 setCookie();\r
 583 function setCookie() {\r
 584         var key1,key2;\r
 585         var tmp = "path=/; expires=Tue, 31-Dec-2030 23:59:59; ";\r
 586 EOM\r
 587                 if($in{'jcode'}){\r
 588                         my %ck; foreach(split(/;/,$ENV{'HTTP_COOKIE'})){ my($key,$val) = split(/=/); $key =~ s/\s//g; $ck{$key} = $val;}\r
 589                         my @ck = split(/<>/,$ck{'SN_DEL'});\r
 590                         if(!$ck[0] && $in{'org_pass'}){ $buff .= qq|\tdocument.cookie = "SN_DEL="+escape('$in{'org_pass'}')+"<>;"+ tmp;\n|;}\r
 591                         $cookiename = 'SN_UPLOAD'; $buff .= "\tkey1 = escape('$in{'org_pass'}'); key2 = escape('$in{'postkey'}');\n";}\r
 592                 else{ $cookiename = 'SN_DEL'; $buff .= "\tkey1 = escape('$in{'delpass'}'); key2 = '';\n"; }\r
 593                 $buff .= qq|\tdocument.cookie = "$cookiename="+key1+"<>"+key2+"; "+ tmp;\n}\n//-->\n</script>\n|;\r
 594         }\r
 595         $buff .=<<"EOM";\r
 596 <body>\r
 597 <br><br><div align=center><font size="+1"><br><br>\r
 598 <a href="$set{'http_html_path'}$set{'base_html'}?$in{'time'}">click here!</a></font><br>\r
 599 </div>\r
 600 </body></html>\r
 601 EOM\r
 602         print "Content-type: text/html\n\n";\r
 603         print $buff;\r
 604         exit;\r
 605 }\r
 606 \r
 607 sub admin_mode{\r
 608         &errorclear() if($in{'mode'} eq 'errorclear');\r
 609         &delete('admin',$in{'admin_delno'}) if($in{'mode'} eq 'delete');\r
 610 \r
 611         open(IN,$set{'log_file'})||error(303);\r
 612         my @log = <IN>;\r
 613         close(IN);\r
 614 \r
 615         my ($header,$buff,$footer,$value);\r
 616         $buff =<<"EOM";\r
 617 $set{'html_head'}$set{'html_css'}</HEAD>\r
 618 <body bgcolor="#ffffff" text="#000000" LINK="#6060FF" VLINK="#6060FF" ALINK="#6060FF">\r
 619 EOM\r
 620 \r
 621         $buff .= leaddisp(0,1,1).'<a name="up"></a><table summary="title" width="100%"><tr><td bgcolor="#caccff"><strong><font size="4" color="#3366cc">Upload Info</font></strong></td></tr></table>';\r
 622         $buff .= qq|<table summary="check"><tr><td><form action="$set{'base_cgi'}" method="POST"><input type=hidden name="checkmode" value="allcheck"><input type=hidden name=delno value="$in{'delno'}"><input type=hidden name=delpass value="$in{'delpass'}"><input type=submit value="\82·\82×\82Ä\83`\83F\83b\83N"></form></td><td><form action="$set{'base_cgi'}" method="POST"><input type=hidden name="checkmode" value="nocheck"><input type=hidden name=delno value="$in{'delno'}"><input type=hidden name=delpass value="$in{'delpass'}"><input type=submit value="\82·\82×\82Ä\8aO\82·"></form></td><td><form action="$set{'base_cgi'}" method="POST"><input type=hidden name=delpass value="$set{'admin_pass'}"><input type=submit value="HTML\82ð\8dX\90V\82·\82é/\83\8d\83O\83A\83E\83g"></form></td></tr></table>\n<form action="$set{'base_cgi'}" method="POST"><input type=hidden name="mode" value="delete"><input type=hidden name=delno value="$in{'delno'}"><input type=hidden name=delpass value="$in{'delpass'}"><input type=submit value="\83`\83F\83b\83N\82µ\82½\82à\82Ì\82ð\8dí\8f\9c"><br>\n|."<table summary=\"upinfo\" width=\"100%\">\n<tr><td>DEL</td><td>NAME</td><td>COMMENT</td><td>SIZE</td><td>ADDR</td><td>HOST</td><td>DATE</td><td>NOTE</td><td>MIME</td><td>ORIG</td></tr>\n";\r
 623         shift(@log);\r
 624         foreach (@log){ $buff .= makeitem($_,'admin'); }\r
 625         $buff .= '</table></form><br><br>';\r
 626 \r
 627         if($set{'error_level'}){\r
 628                 $buff .= leaddisp(-1,0,1).'<a name="error"></a><table summary="errortitle" width="100%"><tr><td bgcolor="#caccff"><strong><font size="4" color="#3366cc">Error Info</font></strong></td></tr></table>';\r
 629                 $buff .= qq|<form action="$set{'base_cgi'}" method="POST"><input type=hidden name=mode value="errorclear"><input type=hidden name=delno value="$in{'delno'}"><input type=hidden name=delpass value="$in{'delpass'}"><input type=submit value="\83G\83\89\81[\83\8d\83O\83N\83\8a\83A"></form>|;\r
 630                 $buff .= "<table summary=\"errorinfo\" width=\"100%\">\n<tr><td>DATE</td><td>ADDR</td><td>HOST</td><td>NOTE</td></tr>\n";\r
 631                 if(open(IN,$set{'error_log'})){ @log = reverse(<IN>); close(IN); foreach (@log){ my ($date,$no,$note,$addr,$host) = split(/<>/); $buff .= "<tr><td>$date</td><td>$addr</td><td>$host</td><td>$note</td></tr>\n"; }}\r
 632                 $buff .= "</table><br><br>\n";\r
 633         }\r
 634 \r
 635         $buff .= leaddisp(-1,-1,0);\r
 636         $buff .= '<a name="set"></a><table summary="settitle" width="100%"><tr><td bgcolor="#caccff"><strong><font size="4" color="#3366cc">Setting Info</font></strong></td></tr></table>'."\n<table summary=\"setting\">\n";\r
 637         $buff .= tablestr('\83X\83N\83\8a\83v\83gVer',$set{'ver'});\r
 638         $buff .= tablestr('\83\81\83C\83\93\83\8d\83O\83t\83@\83C\83\8b',$set{'log_file'});\r
 639         if($set{'error_level'}){\r
 640                 $buff .= tablestr('\83G\83\89\81[\83\8d\83O\83t\83@\83C\83\8b',$set{'error_log'});\r
 641                 if($set{'error_size'}){ $buff .= tablestr('\83G\83\89\81[\83\8d\83O\8dÅ\91å\97e\97Ê',dispsize($set{'error_size'}*1024).' '.($set{'error_size'}*1024).'Bytes'); }\r
 642                 else{ $buff .= tablestr('\83G\83\89\81[\83\8d\83O\8dÅ\91å\97e\97Ê\90§\8cÀ','\96³'); }\r
 643         }else{ $buff .= tablestr('\83G\83\89\81[\83\8d\83O\8bL\98^','\96³'); }\r
 644         $buff .= tablestr('\95Û\8e\9d\8c\8f\90\94',$set{'max_log'});\r
 645         $buff .= tablestr('\8dÅ\91å\93\8a\8de\97e\97Ê',dispsize($set{'max_size'}*1024).' '.($set{'max_size'}*1024).'Bytes');\r
 646 \r
 647         if($set{'min_flag'}){ $buff .= tablestr('\8dÅ\8f¬\90§\8cÀ\97e\97Ê',dispsize($set{'min_size'}*1024).' '.($set{'min_size'}*1024).'Bytes'); }\r
 648         else{ $buff .= tablestr('\8dÅ\8f¬\90§\8cÀ\97e\97Ê',"\96³"); }\r
 649         if($set{'max_all_flag'}){ $buff .= tablestr('\91\8d\97e\97Ê\90§\8cÀ',dispsize($set{'max_all_size'}*1024).' '.($set{'max_all_size'}*1024).'Bytes'); }\r
 650         else{ $buff .= tablestr('\91\8d\97e\97Ê\90§\8cÀ',"\96³"); }\r
 651 \r
 652         $buff .= tablestr("\83t\83@\83C\83\8b\90Ú\93ª\8e«",$set{'file_pre'});\r
 653         $buff .= tablestr("HTML\95Û\91¶\83f\83B\83\8c\83N\83g\83\8a",$set{'html_dir'});\r
 654         $buff .= tablestr("\83t\83@\83C\83\8b\95Û\91¶\83f\83B\83\8c\83N\83g\83\8a",$set{'src_dir'});\r
 655         if($set{'http_html_path'} && $set{'html_dir'} ne $set{'http_html_path'}){ $buff .= "<tr><td>HTTP_HTML_PATH</td><td>$set{'http_html_path'}</td></tr>\n";}\r
 656         if($set{'http_src_path'} && $set{'src_dir'} ne $set{'http_src_path'}){ $buff .= "<tr><td>HTTP_SRC_PATH</td><td>$set{'http_src_path'}</td></tr>\n";}\r
 657         $buff .= tablestr('1\83y\81[\83W\82É\95\\8e¦\82·\82é\83t\83@\83C\83\8b\90\94',$set{'pagelog'});\r
 658         if($set{'interval'} > 0){ $value = $set{'interval'}.'\95b'; }else{ $value = '\96³'; }\r
 659         $buff .= tablestr('\93¯\88êIP\93\8a\8de\8aÔ\8au\95b\90\94\90§\8cÀ',$value);\r
 660         if($set{'up_ext'}){     $set{'up_ext'} =~ s/,/ /g; $buff .= tablestr('\93\8a\8de\89Â\94\\8aî\96{\8ag\92£\8eq',$set{'up_ext'}); }\r
 661         if($set{'deny_ext'}){ $set{'deny_ext'} =~ s/,/ /g; $buff .= tablestr('\93\8a\8de\8bÖ\8e~\8ag\92£\8eq',$set{'deny_ext'}); }\r
 662         if($set{'change_ext'}){ $set{'change_ext'} =~ s/,/ /g; $set{'change_ext'} =~ s/>/&gt;/g; $buff .= tablestr('\8ag\92£\8eq\95Ï\8a·',$set{'change_ext'});    }\r
 663 \r
 664         if($set{'up_all'}){     $buff .= tablestr('\8ew\92è\8aO\8ag\92£\8eq\83A\83b\83v\83\8d\81[\83h\8b\96\89Â','\97L'); if($set{'ext_org'}){ $buff .= tablestr('\8ew\92è\8aO\83t\83@\83C\83\8b\8ag\92£\8eq','\83I\83\8a\83W\83i\83\8b'); }else{ $buff .= tablestr('\8ew\92è\8aO\83t\83@\83C\83\8b\8ag\92£\8eq','bin'); }}\r
 665         else{$buff .= tablestr('\8ew\92è\8aO\8ag\92£\8eq\83A\83b\83v\83\8d\81[\83h\8b\96\89Â','\96³');}\r
 666 \r
 667         if($set{'find_crypt'}){ $value = '\97L'; }else{ $value = '\96³';}\r
 668         $buff .= tablestr('\88Ã\8d\86\89»\83A\81[\83J\83C\83u\8c\9f\8fo(ZIP)',$value);\r
 669         if($set{'binary_compare'}){ $value = '\97L'; }else{ $value = '\96³';}\r
 670         $buff .= tablestr('\83o\83C\83i\83\8a\94ä\8ar',$value);\r
 671         if($set{'post_flag'}){ $value = '\97L'; }else{ $value = '\96³';}\r
 672         $buff .= tablestr('PostKey\93\8a\8de\90§\8cÀ',$value);\r
 673         if($set{'dlkey'}){ if($set{'dlkey'} == 2){$value = '\95K\90{'}else{$value = '\94C\88Ó';}}else{ $value = '\96³';}\r
 674         $buff .= tablestr('DLkey',$value);\r
 675         if($set{'dummy_html'}){ if($set{'dummy_html'} == 3){$value = 'ALL'}elsif($set{'dummy_html'} == 2){$value = 'DLKey\82Ì\82Ý';}else{$value = '\92Ê\8fí\83t\83@\83C\83\8b\82Ì\82Ý';}}else{ $value = '\96³';}\r
 676         $buff .= tablestr('\8cÂ\95ÊHTML\83L\83\83\83b\83V\83\85',$value);\r
 677         if($set{'disp_error'}){ $value = '\97L'; }else{ $value = '\96³';}\r
 678         $buff .= tablestr('\83\86\81[\83U\83G\83\89\81[\95\\8e¦',$value);\r
 679         if($set{'zero_clear'}){ $value = '\97L'; }else{ $value = '\96³';}\r
 680         $buff .= tablestr('\8dí\8f\9c\8dÏ\83t\83@\83C\83\8b\83\8a\83X\83g\8e©\93®\8fÁ\8b\8e',$value);\r
 681         if($set{'home_url'}){ $buff .= "<tr><td>HOMEURL</td><td>$set{'home_url'}</td></tr>\n";}\r
 682 \r
 683         $buff .= '</table></body></html>';\r
 684 \r
 685         print "Content-type: text/html\n\n";\r
 686         print $buff;\r
 687         exit;\r
 688 }\r
 689 \r
 690 sub extfind{\r
 691         my $orgname = @_[0];\r
 692         my @filename = split(/\./,$orgname);\r
 693         my $ext = $filename[$#filename];\r
 694         $ext =~ tr/[A-Z]/[a-z]/;\r
 695         foreach my $value (split(/,/,$set{'change_ext'})){ my ($src,$dst) = split(/->/,$value); if($ext eq $src){ $ext = $dst; last; }}\r
 696         foreach my $value (split(/,/,$set{'deny_ext'})){ if($ext eq $value){ &error(206,$ext); }}\r
 697         foreach my $value (split(/,/,$set{'up_ext'})){ if ($ext eq $value) { return $value; } }\r
 698         if(length($ext) >= 5 || length($ext) == 0){ $ext = 'bin'; }\r
 699         unless ($ext =~ /^[A-Za-z0-9]+$/){ $ext = 'bin'; }\r
 700         if($set{'up_all'} && $set{'ext_org'}){ return $ext;}\r
 701         elsif($set{'up_all'}){ return 'bin'; }\r
 702         return 0;\r
 703 }\r
 704 \r
 705 \r
 706 sub conv_date{\r
 707         my @date = gmtime($_[0] + 9*60*60);\r
 708         $date[5] -= 100; $date[4]++;\r
 709         if ($date[5] < 10) { $date[5] = "0$date[5]" ; } if ($date[4] < 10) { $date[4] = "0$date[4]" ; }\r
 710         if ($date[3] < 10) { $date[3] = "0$date[3]" ; } if ($date[2] < 10) { $date[2] = "0$date[2]" ; }\r
 711         if ($date[1] < 10) { $date[1] = "0$date[1]" ; } if ($date[0] < 10) { $date[0] = "0$date[0]" ; }\r
 712         my @w = ('Sun','Mon','Tue','Wed','Thu','Fri','Sat');\r
 713         return ("$date[5]/$date[4]/$date[3]($w[$date[6]]),$date[2]:$date[1]:$date[0]");\r
 714 }\r
 715 \r
 716 sub dispsize{\r
 717         my $size = $_[0];\r
 718         if($size >= 1024*1024*1024*100){ $size = int($size/1024/1024/1024).'GB';}\r
 719         elsif($size >= 1024*1024*1024*10){ $size = sprintf("%.1fGB",$size/1024/1024/1024);}\r
 720         elsif($size > 1024*1024*1024){ $size = sprintf("%.2fGB",$size/1024/1024/1024);}\r
 721         elsif($size >= 1024*1024*100){ $size = int($size/1024/1024).'MB'; }\r
 722         elsif($size > 1024*1024){ $size =  sprintf("%.1fMB",$size/1024/1024); }\r
 723         elsif($size > 1024){ $size = int($size/1024).'KB'; }\r
 724         else{ $size = int($size).'B';}\r
 725         return $size;\r
 726 }\r
 727 \r
 728 sub makeitem{\r
 729         my ($src,$mode) = @_; my ($buff,$check,$target);\r
 730         my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$src);\r
 731         if(!$dummy){ $filepre = $set{'file_pre'}; }\r
 732         my $orgno = $no;\r
 733         $no = sprintf("%04d",$no);\r
 734         my $size = 0;\r
 735         my $dlpath = 0;\r
 736 \r
 737         if($note =~ /DLpath:(.+)\s/){\r
 738                 $dlpath = $1;\r
 739                 $size = dispsize(-s "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext");\r
 740         }else{\r
 741                 $size = dispsize(-s "$set{'src_dir'}$filepre$no.$ext");\r
 742         }\r
 743 \r
 744         my $path = $set{'http_src_path'} || $set{'src_dir'};\r
 745         if($set{'link_target'}){ $target = qq| target="$set{'link_target'}"|; }\r
 746         if($mode eq 'admin'){\r
 747                 if($dlpath){ $path .= "$filepre$no.${ext}_$dlpath/"; }\r
 748                 if($addr eq $host){ undef $host; }\r
 749                 if($in{'checkmode'} eq 'allcheck'){$check = ' checked';}\r
 750                 $buff = "<tr><td><INPUT TYPE=checkbox NAME=\"admin_delno\" VALUE=\"$no\"$check></td><td><a href=\"$path$filepre$no.$ext\"$target>$filepre$no.$ext</a></td><td>$comment</td><td>$size</td><td>$addr</td><td>$host</td><td>$date</td><td>$note</td><td>$mime</td><td>$orgname</td></tr>\n";\r
 751         }else{\r
 752                 my($d_com,$d_date,$d_size,$d_mime,$d_org);\r
 753                 if($set{'disp_comment'}){ $d_com = "<td>$comment</td>"; } if($set{'disp_size'}){ $d_size = "<td>$size</td>"; } if($set{'disp_date'}){ $d_date= "<td>$date</td>"; }\r
 754                 if($set{'disp_mime'}){ $d_mime = "<td>$mime</td>"; } if($set{'disp_orgname'}){ $d_org = "<td>$orgname</td>"; }\r
 755                 if(-e "$set{'src_dir'}$filepre$no.$ext.html"){$buff = "<tr><td><SCRIPT type=\"text/javascript\" Language=\"JavaScript\"><!--\ndocument.write(\"<a href=\\\"javascript:delnoin($orgno)\\\">$set{'char_delname'}<\\/a>\");\n// --></SCRIPT></td><td><a href=\"$path$filepre$no.$ext.html\"$target>$filepre$no.$ext</a></td>$d_com$d_size$d_date$d_mime$d_org</tr>\n";}\r
 756                 elsif($dlpath){$buff = "<tr><td><SCRIPT type=\"text/javascript\" Language=\"JavaScript\"><!--\ndocument.write(\"<a href=\\\"javascript:delnoin($orgno)\\\">$set{'char_delname'}<\\/a>\");\n// --></SCRIPT></td><td><a href=\"$set{'base_cgi'}?mode=dl&file=$orgno\">$filepre$no.$ext</a></td>$d_com$d_size$d_date$d_mime$d_org</tr>\n";}\r
 757                 else{ $buff = "<tr><td><SCRIPT type=\"text/javascript\" Language=\"JavaScript\"><!--\ndocument.write(\"<a href=\\\"javascript:delnoin($orgno)\\\">$set{'char_delname'}<\\/a>\");\n// --></SCRIPT></td><td><a href=\"$path$filepre$no.$ext\"$target>$filepre$no.$ext</a></td>$d_com$d_size$d_date$d_mime$d_org</tr>\n";}\r
 758         }\r
 759         return $buff;\r
 760 }\r
 761 \r
 762 sub makedummyhtml{\r
 763         my ($filename,$com,$file,$orgdlpath,$date,$mime,$orgname,$no) = @_;\r
 764         my $buff;\r
 765 \r
 766         if(!$no){\r
 767                 $buff = "<html><head><title>$filename</title></head><body>";\r
 768                 $buff .= qq|Download <a href="./$filename">$filename</a>|;\r
 769                 $buff .= '</body></html>';\r
 770         }else{\r
 771                 $buff = cryptfiledl($com,$file,$orgdlpath,$date,$mime,$orgname,$no);\r
 772         }\r
 773 \r
 774         open(OUT,">$set{'src_dir'}$filename.html")||&error(307,"$set{'src_dir'}$filename.html");\r
 775         print OUT $buff;\r
 776         close(OUT);\r
 777         chmod($set{'per_upfile'},"$set{'src_dir'}$filename.html");\r
 778         return 1;\r
 779 }\r
 780 \r
 781 \r
 782 sub logwrite{\r
 783         my @log = @_;\r
 784         open(OUT,"+>$set{'log_file'}")||&error(304);\r
 785         eval{ flock(OUT, 2);};\r
 786         eval{ truncate(OUT, 0);};\r
 787         seek(OUT, 0, 0);\r
 788         print OUT @log;\r
 789         eval{ flock(OUT, 8);};\r
 790         close(OUT);\r
 791         chmod($set{'per_upfile'},$set{'log_file'});\r
 792         return 1;\r
 793 }\r
 794 \r
 795 sub binarycmp{\r
 796         my ($src,$dst) = @_;\r
 797         return 0 if (-s $src != -s $dst);\r
 798         open(SRC,$src)||return 0; open(DST,$dst)||return 0;\r
 799         my ($buff,$buff2);\r
 800         binmode(SRC); binmode(DST); seek(SRC,0,0); seek(DST,0,0); \r
 801         while(read(SRC,$buff,8192)){ read(DST,$buff2,8192); if($buff ne $buff2){ close(SRC); close(DST); return 0; } }\r
 802         close(SRC); close(DST);\r
 803         return 1;\r
 804 }\r
 805 \r
 806 sub init{\r
 807         my $buff;\r
 808         if(open(OUT,">$set{'log_file'}")){\r
 809                 print OUT "0<>0<>0<>1\n";\r
 810                 close(OUT);\r
 811                 chmod($set{'per_logfile'},$set{'log_file'});\r
 812         }else{\r
 813                 $buff = "<tr><td>\83\81\83C\83\93\83\8d\83O\82Ì\8dì\90¬\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>";\r
 814         }\r
 815         \r
 816         unless (-d "$set{'src_dir'}"){\r
 817                 if(mkdir("$set{'src_dir'}",$set{'per_dir'})){\r
 818                         chmod($set{'per_dir'},"$set{'src_dir'}");\r
 819                         open(OUT,">$set{'src_dir'}index.html");\r
 820                         close(OUT);\r
 821                         chmod($set{'per_upfile'},"$set{'src_dir'}index.html");\r
 822                 }else{\r
 823                         $buff .= "<tr><td>Source\95Û\91¶\83f\83B\83\8c\83N\83g\83\8a\82Ì\8dì\90¬\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>";\r
 824                 }\r
 825         }\r
 826 \r
 827         unless (-d "$set{'html_dir'}"){\r
 828                 if(mkdir("$set{'html_dir'}",$set{'per_dir'})){\r
 829                         chmod($set{'per_dir'},"$set{'html_dir'}");\r
 830                 }else{\r
 831                         $buff .= "<tr><td>HTML\95Û\91¶\83f\83B\83\8c\83N\83g\83\8a\82Ì\8dì\90¬\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>";\r
 832                 }\r
 833         }\r
 834 \r
 835         if($buff){\r
 836                 $buff .= "<tr><td>\83f\83B\83\8c\83N\83g\83\8a\82É\8f\91\82«\8d\9e\82Ý\8c \8cÀ\82ª\82 \82é\82©\8am\94F\82µ\82Ä\82\82¾\82³\82¢</td></tr>";\r
 837                 &error_disp($buff,'init');\r
 838         }\r
 839 }\r
 840 \r
 841 sub check_postkey{\r
 842         my $inputkey = @_[0];\r
 843         my @key = split(/,/,$set{'post_key'});\r
 844         foreach my $key (@key){ if($inputkey eq $key){ return 1; } }\r
 845         return 0;\r
 846 }\r
 847 \r
 848 sub leaddisp{\r
 849         my @src = @_;\r
 850         my ($str,$count);\r
 851         foreach my $value (@src){\r
 852                 my ($mark,$name,$link); $count++;\r
 853                 if($count == 1){ $name = 'Upload Info'; $link = 'up'; }\r
 854                 elsif($count == 2){ $name = 'Error Info'; $link = 'error'; next if(!$set{'error_level'}); }\r
 855                 elsif($count == 3){ $name = 'Setting Info'; $link = 'set'; }\r
 856                 if($value){ if($value > 0){ $mark = '\81¥'; }else{ $mark = '\81£'; } $str .= qq|<a href="#$link">${mark}${name}</a> |; }\r
 857                 else{ $str .= qq|[$name] |; }\r
 858         }\r
 859         return $str;\r
 860 }\r
 861 \r
 862 sub errorclear{\r
 863         open(OUT,">$set{'error_log'}")||return 0;\r
 864         eval{ flock(OUT, 2);}; eval{ truncate(OUT, 0);}; seek(OUT, 0, 0); eval{ flock(OUT, 8);}; close(OUT);\r
 865         chmod($set{'per_upfile'},$set{'log_file'});\r
 866         return 1;\r
 867 }\r
 868 \r
 869 sub tablestr{\r
 870         my ($value1,$value2) = @_;\r
 871         return ("<tr><td>$value1</td><td>$value2</td></tr>\n");\r
 872 }\r
 873 \r
 874 sub globfile{\r
 875         my ($src_dir,$filename) = @_;\r
 876         opendir(DIR,$src_dir)||return 0; my @dir = readdir(DIR); closedir(DIR);\r
 877         my @new = (); foreach my $value (@dir){ push(@new,"$src_dir$value") if($value =~ /$filename/ && !(-d "$src_dir$value")); }\r
 878         return @new;\r
 879 }\r
 880 \r
 881 sub globdir{\r
 882         my ($src_dir,$dir) = @_;\r
 883         opendir(DIR,$src_dir)||return 0; my @dir = readdir(DIR); closedir(DIR);\r
 884         my @new = (); foreach my $value (@dir){ if($value eq '.' ||$value eq '..' ){ next; } push(@new,"$src_dir$value") if($value =~ /$dir/ && (-d "$src_dir$value")); }\r
 885         return @new;\r
 886 }\r
 887 \r
 888 sub error_disp{\r
 889         my ($message,$mode) = @_;\r
 890         my $url;\r
 891         if($mode eq 'init'){ $url = qq|<a href="$set{'base_cgi'}">[\83\8a\83\8d\81[\83h]</a>|; }else{ $url = qq|<a href="$set{'http_html_path'}$set{'base_html'}">[\96ß\82é]</a>|; }\r
 892         my $buff =<<"EOM";\r
 893 $set{'html_head'}$set{'html_css'}</HEAD>\r
 894 <body bgcolor="#ffffff" text="#000000" LINK="#6060FF" VLINK="#6060FF" ALINK="#6060FF">\r
 895 <div align="center">\r
 896 <table summary="error">\r
 897 $message\r
 898 <tr><td></td></tr>\r
 899 <tr><td><div align="center">$url</div></td></tr>\r
 900 </table>\r
 901 <br><br>\r
 902 <table summary="info">\r
 903 <tr>\r
 904 <td>DATE</td><td>$in{'date'}</td></tr>\r
 905 <tr><td>ADDR</td><td>$in{'addr'}</td></tr>\r
 906 <tr><td>HOST</td><td>$in{'host'}</td></tr>\r
 907 </table>\r
 908 </div>\r
 909 </body></html>\r
 910 EOM\r
 911         print "Content-type: text/html\n\n";\r
 912         print $buff;\r
 913         exit;\r
 914 }\r
 915 \r
 916 sub error{\r
 917         my ($no,$note) = @_;\r
 918         if (length($note) > 64) { $note = substr($note,0,64).'...'; }\r
 919         $note =~ s/&/&amp;/g; $note =~ s/\"/&quot;/g; $note =~ s/</&lt;/g; $note =~ s/>/&gt;/g; $note =~ s/\r//g; $note =~ s/\n//g; $note =~ s/\t//g; $note =~ s/\0//g;\r
 920         my ($message,$dispmsg,$flag);\r
 921         \r
 922         if($no == 98){ $message = ""; }\r
 923         elsif($no == 99){ $message = "UpFile\82È\82µ"; }\r
 924         elsif($no == 101){ $message = "\93\8a\8de\8bÖ\8e~HOST"; }\r
 925         elsif($no == 106){ $flag = 1; $message = "POST\83T\83C\83Y\92´\89ß"; $note = dispsize($note); $dispmsg= '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\83A\83b\83v\83\8d\81[\83h\83t\83@\83C\83\8b('.$note.')\82Í \8dÅ\91å\97e\97Ê\90Ý\92è('.dispsize($set{'max_size'}*1024).')\82ð\89z\82¦\82Ä\82¢\82Ü\82·</td></tr>';}\r
 926         elsif($no == 107){ $flag = 1; $message = "POST\83T\83C\83Y\89ß\8f¬"; $note = dispsize($note); $dispmsg= '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\83A\83b\83v\83\8d\81[\83h\83t\83@\83C\83\8b('.$note.')\82Í \8dÅ\8f¬\97e\97Ê\90Ý\92è('.dispsize($set{'min_size'}*1024).')\96¢\96\9e\82Å\82·</td></tr>';}\r
 927         elsif($no == 108){ $flag = 1; $message = "POST\83f\81[\83^\95s\8a®\91S"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>POST\83f\81[\83^\82ª\95s\8a®\91S\82Å\82·</td></tr>';}\r
 928         elsif($no == 109){ $flag = 1; $message = "POSTKey\95s\88ê\92v"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>POSTKey\82ª\88ê\92v\82µ\82Ü\82¹\82ñ</td></tr>';}\r
 929         elsif($no == 202){ $flag = 1; $message = "\8ag\92£\8eq\8d\87\82í\82¸"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\93\8a\8de\82Å\82«\82é\8ag\92£\8eq\82Í'.$set{'up_ext'}.'\82Å\82·</td></tr>';}\r
 930         elsif($no == 203){ $flag = 1; $message = "\93\8a\8de\91\81\82·\82¬"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\93¯\88êIP\83A\83h\83\8c\83X\82©\82ç'.$set{'interval'}.'\95b\88È\93à\82É\8dÄ\93\8a\8de\82Å\82«\82Ü\82¹\82ñ</td></tr>';}\r
 931         elsif($no == 204){ $flag = 1; $message = "\88ê\8e\9e\83t\83@\83C\83\8b\8f\91\82«\8d\9e\82ß\82¸"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\88ê\8e\9e\83t\83@\83C\83\8b\82Ì\8dì\90¬\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>';}\r
 932         elsif($no == 205){ $flag = 1; $message = "\93¯\88ê\83t\83@\83C\83\8b\91¶\8dÝ"; $note =~ /([^\/]+)$/; my $filename = $1; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\93¯\88ê\83t\83@\83C\83\8b\82ª '.$filename.' \82É\91¶\8dÝ\82µ\82Ü\82·</td></tr>';}\r
 933         elsif($no == 206){ $flag = 1; $message = "\8bÖ\8e~\8ag\92£\8eq"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\8ag\92£\8eq '.$note.' \82Í\83A\83b\83v\83\8d\81[\83h\82Å\82«\82Ü\82¹\82ñ</td></tr>';}\r
 934         elsif($no == 303){ $flag = 1; $message = "\83\8d\83O\83t\83@\83C\83\8b\82É\93Ç\82Ý\8d\9e\82ß\82¸"; $dispmsg = '<tr><td>\83\81\83C\83\93\83\8d\83O\82Ì\93Ç\82Ý\8d\9e\82Ý\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>';}\r
 935         elsif($no == 304){ $flag = 1; $message = "\83\8d\83O\83t\83@\83C\83\8b\82É\8f\91\82«\8d\9e\82ß\82¸"; $dispmsg = '<tr><td>\83\81\83C\83\93\83\8d\83O\82Ì\8f\91\82«\8d\9e\82Ý\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>';}\r
 936         elsif($no == 306){ $message = "\83t\83@\83C\83\8b\83\8a\83X\83gHTML\8f\91\82«\8d\9e\82ß\82¸";}\r
 937         elsif($no == 307){ $message = "\83t\83@\83C\83\8bHTML\83t\83@\83C\83\8b\8f\91\82«\8d\9e\82ß\82¸";}\r
 938         elsif($no == 401){ $flag = 1; $message = "\8dí\8f\9cNo.\8c\9f\8fo\82Å\82«\82¸"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\8dí\8f\9c\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>'.$note.' \82©\82ç\8dí\8f\9cNo.\82ð\8c\9f\8fo\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>'.$set{'file_pre'}.'0774.zip\82Ì\8fê\8d\87 No.\82É\82Í 774 \82ð\93ü\97Í\82µ\82Ü\82·</td></tr>';}\r
 939         elsif($no == 402){ $flag = 1; $note = sprintf("%04d",int($note)); $message = "\8dí\8f\9cNo.\91¶\8dÝ\82¹\82¸"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\8dí\8f\9c\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>'.$set{'file_pre'}.$note.'.*** \82Í\83\81\83C\83\93\83\8d\83O\82É\91¶\8dÝ\82µ\82Ü\82¹\82ñ</td></tr>';}\r
 940         elsif($no == 403){ $flag = 1; $message = "\8dí\8f\9c\83A\83N\83Z\83X\8b\91\94Û"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\8dí\8f\9c\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>\83t\83@\83C\83\8b\8dí\8f\9c\8fð\8c\8f\82Í\96\9e\82½\82µ\82Ä\82¢\82Ü\82·\82ª '.$note.' \82Ì\83t\83@\83C\83\8b\82Ì\8dí\8f\9c\82ª\8b\91\94Û\82³\82ê\82Ü\82µ\82½</td></tr><tr><td>\83A\83N\83Z\83X\82ª\89ß\8fè\82È\8fê\8d\87\93\99\82Í\8e\9e\8aÔ\82ð\92u\82¢\82Ä\8dÄ\91\80\8dì\82·\82é\82Æ\8dí\8f\9c\82Å\82«\82é\82±\82Æ\82ª\82 \82è\82Ü\82·</td></tr>';}\r
 941         elsif($no == 404){ $flag = 1; $message = "\8dí\8f\9cKey\95s\88ê\92v"; $dispmsg = '<tr><td>\83t\83@\83C\83\8b\82ð\8dí\8f\9c\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>'.$note.' \8dí\8f\9cKey\82ª\88ê\92v\82µ\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr>';}\r
 942 \r
 943         elsif($no == 51){ $flag = 1; $message = "[DLMode] No.\8c©\82Â\82©\82ç\82¸";  $dispmsg = '<tr><td>[DLMode] \83t\83@\83C\83\8b\82ª\8c©\82Â\82©\82è\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>'.$note.' \82©\82ç\83t\83@\83C\83\8bNo.\82ð\8c\9f\8fo\82Å\82«\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr>'; }\r
 944         elsif($no == 52){ $flag = 1; $message = "[DLMode] File\8c©\82Â\82©\82ç\82¸";  $dispmsg = '<tr><td>[DLMode] \83t\83@\83C\83\8b\82ª\8c©\82Â\82©\82è\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr><tr><td>'.$set{'file_pre'}.$note.'.*** \82Í\83\81\83C\83\93\83\8d\83O\82É\91¶\8dÝ\82µ\82Ü\82¹\82ñ</td></tr>'; }\r
 945         elsif($no == 53){ $flag = 1; $message = "[DLMode] DLkey\96¢\90Ý\92è";  $dispmsg = '<tr><td>[DLMode] orgDLkeyError</td></tr><tr><td>'.$note.' DLKey\82ª\96¢\90Ý\92è\82Å\82·</td></tr>'; }\r
 946         elsif($no == 54){ $flag = 1; $message = "[DLMode] DLkey\95s\88ê\92v";  $dispmsg = '<tr><td>[DLMode] orgDLkeyError</td></tr><tr><td>'.$note.' DLKey\82ª\88ê\92v\82µ\82Ü\82¹\82ñ\82Å\82µ\82½</td></tr>'; }\r
 947         elsif($no == 55){ $flag = 1; $message = "[DLMode] File Oepn Error";  $dispmsg = '<tr><td>[DLMode] Open Error</td></tr><tr><td>'.$note.' \83t\83@\83C\83\8b\82Ì\93Ç\82Ý\8d\9e\82Ý\82É\8e¸\94s\82µ\82Ü\82µ\82½</td></tr>'; }\r
 948         elsif($no == 56){ $flag = 1; $message = "[DLMode] File Not Found";  $dispmsg = '<tr><td>[DLMode] Not Found</td></tr><tr><td>'.$note.' \83t\83@\83C\83\8b\82ª\91¶\8dÝ\82µ\82Ü\82¹\82ñ</td></tr>'; }\r
 949 \r
 950         elsif($no == 61){ $flag = 1; $message = "DLkey\96¢\90Ý\92è";  $dispmsg = '<tr><td>DLKey\82ª\96¢\90Ý\92è\82Å\82·</td></tr>'; }\r
 951 \r
 952         unlink($in{'tmpfile'});\r
 953         if($note){$message .= ' ';}\r
 954         if($set{'error_level'} && $no > 100){\r
 955                 unless(-e $set{'error_log'}){\r
 956                         open(OUT,">$set{'error_log'}");\r
 957                         close(OUT);\r
 958                         chmod($set{'per_logfile'},$set{'error_log'});\r
 959                 }\r
 960                 if($set{'error_size'} && ((-s $set{'error_log'}) > $set{'error_size'} * 1024)){\r
 961                         my $err_bkup = "$set{'error_log'}.bak.cgi";\r
 962                         unlink($err_bkup);\r
 963                         rename($set{'error_log'},$err_bkup);\r
 964                         open(OUT,">$set{'error_log'}");\r
 965                         close(OUT);\r
 966                         chmod($set{'per_logfile'},$set{'error_log'});\r
 967                 }\r
 968                 open(OUT,">>$set{'error_log'}");\r
 969                 print OUT "$in{'date'}<>$no<>$message$note<>$in{'addr'}<>$in{'host'}<>1\n";\r
 970                 close(OUT);\r
 971         }\r
 972         &error_disp($dispmsg) if($flag && $set{'disp_error'});\r
 973         &quit();\r
 974 }\r
 975 \r
 976 sub dlfile{\r
 977         my $msg;\r
 978         my ($orgdlkey,$orgdlpath);\r
 979         my ($dlext,$dlfilepre);\r
 980         my ($dl_date,$dl_comment,$dl_size,$dl_mime,,$dl_orgname);\r
 981         my $dlno = 0;\r
 982         my $findflag;\r
 983 \r
 984         open(IN,$set{'log_file'})||&error(303);\r
 985         my @log = <IN>;\r
 986         close(IN);\r
 987         shift(@log);\r
 988 \r
 989         if($in{'file'} =~ /(\d+)/){ $dlno = $1; }\r
 990         if($dlno == 0) { &error(51,$in{'file'}); }\r
 991 \r
 992         foreach my $value (@log){\r
 993                 my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value);\r
 994                         my @note = split(/,/,$note);\r
 995                         if(int($dlno) == $no){\r
 996                                 $dl_comment = $comment;\r
 997                                 $dl_mime = $mime;\r
 998                                 $dl_date = $date;\r
 999                                 $dl_orgname = $orgname;\r
1000                                 $dlext = $ext;\r
1001                                 $dlfilepre = $filepre;\r
1002                                 foreach my $tmpnote (@note){\r
1003                                         if($tmpnote =~ /\!--\sDLKey:(.+)\s--.*\!--\sDLpath:(.+)\s--/){\r
1004                                                 $orgdlkey = $1;\r
1005                                                 $orgdlpath = $2;\r
1006                                                 last;\r
1007                                         }\r
1008                                 }\r
1009                                 $findflag = 1;\r
1010                                 last;\r
1011                         }\r
1012         }\r
1013 \r
1014         my $dlfile = $dlfilepre.sprintf("%04d",int($dlno)).'.'.$dlext;\r
1015         if(!(-e "$set{'src_dir'}${dlfile}_$orgdlpath/$dlfile")){ &error(56,"$dlfile----$set{'src_dir'}${dlfile}_$orgdlpath/$dlfile"); }\r
1016 \r
1017         if($in{'dlkey'}){\r
1018                 my $dlsalt = substr($orgdlkey,0,2);\r
1019                 my $dlkey = crypt($in{'dlkey'},$dlsalt);\r
1020 \r
1021                 if($findflag == 0){ &error(52,$dlfile); }\r
1022                 elsif(!$orgdlkey){ &error(53,$dlfile); }\r
1023                 elsif($orgdlkey ne $dlkey && $set{'admin_pass'} ne $in{'dlkey'}){ &error(54,$dlfile); }\r
1024                 #print "Location: $set{'http_src_path'}${dlfile}_$orgdlpath/$dlfile\n\n";\r
1025                 my $buff =<<"EOM";\r
1026 $set{'html_head'}$set{'html_css'}\r
1027 <META HTTP-EQUIV="Refresh" CONTENT="1;URL=$set{'http_src_path'}${dlfile}_$orgdlpath/$dlfile">\r
1028 </HEAD>\r
1029 <body bgcolor="#ffffff" text="#000000" LINK="#6060FF" VLINK="#6060FF" ALINK="#6060FF">\r
1030 <div align="center">\r
1031 <br>\r
1032 <table summary="dlfrom">\r
1033 <tr><td>\94ò\82Î\82È\82¢\8fê\8d\87\82Í <a href="$set{'http_src_path'}${dlfile}_$orgdlpath/$dlfile">\82±\82¿\82ç</a> \82©\82ç</td></tr>\r
1034 </table>\r
1035 </div>\r
1036 </body></html>\r
1037 EOM\r
1038                 print "Content-type: text/html\n\n";\r
1039                 print $buff;\r
1040         }else{\r
1041                 my $buff = cryptfiledl($dl_comment,$dlfile,$orgdlpath,$dl_date,$dl_mime,$dl_orgname,$dlno);\r
1042                 print "Content-type: text/html\n\n";\r
1043                 print $buff;\r
1044         }\r
1045         exit;\r
1046 }\r
1047 \r
1048 sub cryptfiledl{\r
1049                 my($com,$file,$orgdlpath,$date,$mime,$orgname,$no) = @_;\r
1050                 my($d_com,$d_date,$d_size,$d_mime,$d_org);\r
1051 \r
1052                 if($set{'disp_comment'}){ $d_com = "<tr><td>COMMENT</td><td>$com</td></td>"; } if($set{'disp_size'}){ $d_size = "<tr><td>SIZE</td><td>".dispsize(-s "$set{'src_dir'}${file}_$orgdlpath/$file")." (".(-s "$set{'src_dir'}${file}_$orgdlpath/$file")."bytes)"."</td></tr>"; } if($set{'disp_date'}){ $d_date= "<tr><td>DATE</td><td>$date</td></tr>"; }\r
1053                 if($set{'disp_mime'}){ $d_mime = "<tr><td>ORGMIME</td><td>$mime</td></tr>"; } if($set{'disp_orgname'}){ $d_org = "<tr><td>ORGNAME</td><td>$orgname</td></tr>"; }\r
1054 \r
1055                 my $buff =<<"EOM";\r
1056 $set{'html_head'}$set{'html_css'}</HEAD>\r
1057 <body bgcolor="#ffffff" text="#000000" LINK="#6060FF" VLINK="#6060FF" ALINK="#6060FF">\r
1058 <div align="center">\r
1059 <br>\r
1060 $file \82É\82ÍDLKey\82ª\90Ý\92è\82³\82ê\82Ä\82¢\82Ü\82·\r
1061 <table summary="dlform">\r
1062 <tr><td></td></tr>\r
1063 <FORM METHOD=POST ACTION="$set{'base_cgi'}" name="DL">\r
1064 <tr><td>\r
1065 <input type=hidden name=file value=$no>\r
1066 <input type=hidden name=jcode value="\8a¿\8e\9a">\r
1067 <input type=hidden name=mode value=dl></td></tr>\r
1068 $d_com$d_date$d_size$d_mime$d_org\r
1069 <tr><td>DLKey:<input type=text size=8 name="dlkey"></td></tr>\r
1070 <tr><td><input type=submit value="DownLoad"></td></tr>\r
1071 </FORM>\r
1072 </table>\r
1073 </div>\r
1074 </body></html>\r
1075 EOM\r
1076 \r
1077         return $buff;\r
1078 }