From: mitty Date: Tue, 26 Jan 2010 06:48:23 +0000 (+0000) Subject: * add Sn Uploader from http://sugachan.dip.jp/obsolete/snup/ X-Git-Url: http://lab.mitty.jp/git/?p=lab.git;a=commitdiff_plain;h=b8bd724add704529a9fa2187e330f4ab304e7d7e * add Sn Uploader from sugachan.dip.jp/obsolete/snup/ git-svn-id: https://lab.mitty.jp/svn/lab/vendor@29 7d2118f6-f56c-43e7-95a2-4bb3031d96e7 --- diff --git a/SnUploader/snup_051010e.zip b/SnUploader/snup_051010e.zip new file mode 100644 index 0000000..89610de Binary files /dev/null and b/SnUploader/snup_051010e.zip differ diff --git a/SnUploader/snup_051010e/readme.txt b/SnUploader/snup_051010e/readme.txt new file mode 100644 index 0000000..403cdea --- /dev/null +++ b/SnUploader/snup_051010e/readme.txt @@ -0,0 +1,204 @@ +21:05 2005/10/10 +suga@snpn.net + +Sn Uploader + +•’Ê‚Ì(‰½ +”Ä—pƒtƒ@ƒCƒ‹ƒAƒbƒvƒ[ƒ_‚Å‚· +Žv‚¤‚悤‚È‚Ì‚ª–³‚©‚Á‚½‚Ì‚Å +‚±‚̍ۍì‚Á‚Ä‚Ý‚Ü‚µ‚½ + +ƒXƒNƒŠƒvƒg–{‘Ì‚Í +/uploader/ NoCGI.pm”Å +/uploader+cgipm/ CGI.pm”Å +‚̃fƒBƒŒƒNƒgƒŠ‚ÉŠi”[‚³‚ê‚Ä‚¢‚Ü‚· + +“K“–‚ɍì‚Á‚½‚à‚ñ‚È‚Ì‚Å +ƒ^ƒCƒgƒ‹‚̐ݒ荀–Ú‚È‚Ç‚Í‚ ‚è‚Ü‚¹‚ñ +ƒfƒUƒCƒ““™•Ï‚¦‚½‚¢ê‡‚Í‚»‚ê‚قǓ‚­‚È‚¢‚ÆŽv‚¢‚Ü‚·‚Ì‚Å +ƒ\[ƒX‚»‚Ì‚Ü‚Ü‚¢‚À‚Á‚Ä‚­‚¾‚³‚¢ + +Šî–{“I‚È“®ì‚ÍCGI.pm”Å/NoCGI.pm”Å‹¤‚É•Ï‚í‚è‚Ü‚¹‚ñ‚ª +NoCGI.pm”Å‚Ì•û‚ªƒpƒtƒH[ƒ}ƒ“ƒX‚ª‚æ‚¢Žv‚¢‚Ü‚· +ˆµ‚¤ƒTƒCƒY‚ª‚ ‚ñ‚Ü‚è—e—Ê‚ª‘å‚«‚­‚È‚¢ê‡‚Í‚Ç‚¿‚ç‚Å‚à‚©‚Ü‚í‚È‚¢‚©‚Æ +‚È‚¨IIS‚ł̓Aƒbƒvƒ[ƒh‚Å‚«‚È‚¢‚±‚Æ‚à‚È‚¢‚ÆŽv‚¢‚Ü‚·‚ª +“®ì‚ª•sR‚É‚È‚éŒXŒü‚ª‚ ‚é‚̂ŏo—ˆ‚ê‚Î”ð‚¯‚½•û‚ª‚悳‚»‚¤‚Å‚· + +ƒA[ƒJƒCƒu‚É“Y•t‚³‚ê‚Ä‚¢‚éƒXƒNƒŠƒvƒg‚Ì +Š¿ŽšƒR[ƒh‚ÍShift-JIS/‰üsƒR[ƒh‚ÍCRLF‚É‚È‚Á‚Ä‚¢‚Ü‚· + +¦ +‚±‚̃XƒNƒŠƒvƒg‚Ì’˜ìŒ ‚͍ìŽÒ‚É‹A‘®‚µ‚Ü‚·‚ª +—˜—pŽÒ‚̐ӔC‚É‚¨‚¢‚ÄŽ©—R‚ɉü•Ï,‰^—p‚·‚邱‚Æ‚ª‚Å‚«‚Ü‚· +‚Ü‚½—˜—p‚µ‚½‚±‚Æ‚É‚æ‚Á‚Ä”­¶‚µ‚½‘¹ŠQ‚ɑ΂µ‚Ä +ìŽÒ‚͈êØ‚̐Ӗ±‚𕉂í‚È‚¢‚à‚Ì‚Æ‚µ‚Ü‚· + +////// +Ý’u•û–@ +1. Ý’u‚·‚éƒfƒBƒŒƒNƒgƒŠ‚ðì¬‚µ‚Ü‚· + ‚È‚¨‚±‚̃fƒBƒŒƒNƒgƒŠ‚ÍCGIŽÀsŒ ŒÀ‚ŏ‘‚«ž‚ß‚é‚悤‚É + @suEXECŠÂ‹«‚È‚ç‚Î701 ‚»‚Ì‘¼‚È‚ç 777‚̂悤‚Ƀp[ƒ~ƒbƒVƒ‡ƒ“‚ðÝ’è‚·‚é + suEXECŠÂ‹«‚Å 777‚È‚Ç‚É‚µ‚½ê‡ƒXƒNƒŠƒvƒg‚ɃAƒNƒZƒX‚·‚é‚Æ 500 Internal Server Error ‚ªo‚邱‚Æ‚ª‚ ‚è‚Ü‚· +2. upload.cgi‚ðƒGƒfƒBƒ^“™‚ÅŠJ‚«‚Í‚¶‚ß‚Ì•û‚̃pƒ‰ƒ[ƒ^‚ðÝ’è‚·‚é +@ Šî–{“I‚É‚Í$set{'admin_pass'}‚̕ύX‚ÆPerl‚ÌPATH‚ÌŠm”F‚¾‚¯‚Å‚¢‚¢‚ÆŽv‚¢‚Ü‚· +3. ƒT[ƒo‚ɃAƒbƒvƒ[ƒh‚µ“K“x‚Ƀp[ƒ~ƒbƒVƒ‡ƒ“ex.(suEXEC:700 other:755)‚ðÝ’è‚·‚é +4. ƒuƒ‰ƒEƒU‚Å upload.cgi‚É’¼ÚƒAƒNƒZƒX‚·‚é‚ƃƒOƒtƒ@ƒCƒ‹/ƒfƒBƒŒƒNƒgƒŠ‚ðŽ©“®“I‚ɍ쐬‚µ‚Ü‚· + ƒAƒbƒvƒ[ƒ_‚ւ̃Šƒ“ƒN‚Íupload.cgi‚Å‚Í‚È‚­ upload.html(1ƒy[ƒW–ڂ̃AƒhƒŒƒX)‚É‚µ‚Ä‚­‚¾‚³‚¢ + ”upload.cgi‚ɃAƒNƒZƒX‚³‚ꂽê‡‚Í–³‘ʂɃvƒƒZƒX‚ð‹N“®‚µ‚Äupload.html‚É“]‘—‚·‚邾‚¯‚Å‚· + + * ‰‚߂ăAƒNƒZƒX‚µ‚½Û‚ɁuƒƒCƒ“ƒƒO‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½v‚È‚Ç‚Ì•\Ž¦‚ªo‚½ê‡‚Í + 1.‚̃fƒBƒŒƒNƒgƒŠ‚̃p[ƒ~ƒbƒVƒ‡ƒ“Ý’è‚ðŒ©’¼‚µ‚Ä‚­‚¾‚³‚¢ + +‚ ‚Æ‚Í“K“–‚ɐݒè‚Æ‚©•Ï‚¦‚Ä‚Ý‚Ä‚­‚¾‚³‚¢ +‚È‚¨1ƒy[ƒW–Ú‚ðindex.html“™‚É‚·‚é‚ÆURL‚ª‚¿‚å‚Á‚Æ’Z‚­‚È‚é‚©‚à‚µ‚ê‚Ü‚¹‚ñ +”Ý’u‚µ‚½ƒfƒBƒŒƒNƒgƒŠ‚É‚Íindex.html‚ðì¬‚µ‚È‚¢‚Ì‚Å + ƒCƒ“ƒfƒbƒNƒXƒŠƒXƒg‚ª•\Ž¦‚³‚ê‚éŠÂ‹«‚Ì•û‚͏ã‹L‚̂悤‚ɐݒ肷‚é‚© + ‹ó‚Ìindex.html‚Å‚àƒAƒbƒvƒ[ƒh‚µ‚Ä‚­‚¾‚³‚¢ + +suEXECŽž‚̍\¬—á +-- upload [701] / upload.cgi [700] +@@| log.cgi [600] --- Ž©“®ì¬ +@@| upload.html[604] --- Ž©“®ì¬ + | +@@+-- src [701] --- Ž©“®ì¬ + +‚»‚Ì‘¼ˆê”Ê“I‚ȍ\¬ +-- upload [777] / upload.cgi [755] +@@| log.cgi [666] --- Ž©“®ì¬ +@@| upload.html[666] --- Ž©“®ì¬ + | +@@+-- src [777] --- Ž©“®ì¬ +////// + +ƒtƒ@ƒCƒ‹‚̍폜•û–@ + 1.ƒtƒ@ƒCƒ‹No‚Ì—“‚ÉNo‚ð“ü‚ê‚Ü‚· + up0001.jpg -> 1, 0001 , up0001 , up0001.jpg “™ ”’l‚ªŒŸo‚Å‚«‚ê‚Î(hoge001.png‚Å‚à)OK‚Å‚· + JavaScript‚ª—LŒø‚ȏꍇ "D" ‚ÆŒ¾‚¤•¶Žš‚ªƒtƒ@ƒCƒ‹–¼‚̍¶‘¤‚ɏo‚Ä‚«‚Ü‚·‚Ì‚Å‚»‚ê‚ðƒNƒŠƒbƒN‚³‚ê‚Ä‚àŒ‹\‚Å‚· + 2.íœƒL[‚ª•K—v‚È‚Æ‚«‚Í“ü—Í‚·‚é + ŠÇ—ŽÒPASS‚ð“ü‚ê‚é‚Æ‘S‚Ẵtƒ@ƒCƒ‹‚ªíœ‰Â”\‚Å‚· + ‚Ü‚½íœŽž‚ÌIPƒAƒhƒŒƒX‚ª“ŠeŽžIPƒAƒhƒŒƒX‚Ì‘æ3ƒIƒNƒeƒbƒg(192.168.0.9 ‚Ì 192.168.0.)‚Ü‚Å + ˆê’v‚·‚éê‡–”‚̓†[ƒU[ŒÅ—LID‚ªˆê’v‚·‚éê‡‚ÉŒÀ‚Á‚Ă͍폜ƒL[‚Í•K—v‚Å‚Í‚ ‚è‚Ü‚¹‚ñ + 3.del‚ð‰Ÿ‚· + –”,ŠÇ—ŽÒ‚ÍSUSS(Sn Uploader Support Script)‚ɃƒOƒCƒ“‚·‚邱‚Æ‚É‚æ‚è‘I‘ð/ˆêŠ‡íœ‚ª‚Å‚«‚Ü‚· + +HTML‚ðXV‚µ‚½‚¢ê‡ + ƒXƒNƒŠƒvƒg‰ü•Ï/POSTKey—L–³“™‚ŃtƒH[ƒ€ƒfƒUƒCƒ“‚ª•Ï‚í‚Á‚čXV‚µ‚½‚¢ê‡‚Í + íœƒtƒH[ƒ€‚ÉNo‚ð“ü‚ꂸKey‚Ì—“‚ÉŠÇ—ŽÒPASS($set{'admin_pass'})‚Ì’l‚ð“ü‚ê‚Ädel‚ð‰Ÿ‚µ‚Ä‚­‚¾‚³‚¢ + –”‚ÍSUSS(Sn Uploader Support Script)‚ɃƒOƒCƒ“‚µ‚čì‹Æ‚ð‚µ‚Ä‚­‚¾‚³‚¢ + +SUSS(Sn Uploader Support Script) + —v‚·‚é‚ÉŠÇ—‰æ–Ê‚Å‚· Œ³X•ÊƒXƒNƒŠƒvƒg‚Å‚µ‚½‚ª“‡‚³‚ê‚Ü‚µ‚½ + SUSS‚ɃƒOƒCƒ“‚·‚邽‚ß‚É‚Í íœƒtƒH[ƒ€‚Ì Del—“‚ɐݒ肵‚½ŠÇ—ŽÒƒƒOƒCƒ“ID + Key—“‚ÉŠÇ—ŽÒƒpƒXƒ[ƒh ‚ð“ü—Í‚µ‚Ädel‚ð‰Ÿ‚µ‚Ü‚· + ƒƒOƒCƒ“‚·‚é‚ÆŠÇ—ŽÒ‰æ–ʂɐ؂è‘Ö‚í‚è ƒƒO‚̈ꊇíœ/ƒGƒ‰[ƒƒO•\Ž¦/Ý’è•\Ž¦‚È‚Ç‚ðŒ©‚é‚±‚Æ‚ª‚Å‚«‚Ü‚· + +Cookie‚ɂ‚¢‚Ä + ‚±‚̃XƒNƒŠƒvƒg‚Å‚ÍCookie‚ðŽg—p‚µ‚Ä‚¢‚Ü‚· Žå‚ɍ폜•â•‚Æ‚µ‚ÄŽg‚¢‚Ü‚· + SN_UPLOAD(JavaScript) “ŠeƒtƒH[ƒ€‚ÌDelKey/PostKey‚ð‹L‰¯‚µ‚Ü‚· + SN_DEL (JavaScript) íœƒtƒH[ƒ€‚ÌKey‚ð‹L‰¯‚µ‚Ü‚· ’l‚ª‚È‚¢ê‡SN_UPLOAD‚ÌDelKey‚ðƒRƒs[‚µ‚Ü‚· + SN_USER (HTML_META) ƒ†[ƒU[ŒÅ—LID‚ð‹L‰¯‚µ‚Ü‚· + Cookie‚Ì•Û‘¶‚ÌŠúŒÀ‚Æ‚©‚Í“Á‚ɐ§ŒÀ‚µ‚Ä‚¢‚È‚¢‚Ì‚Å‹C‚ɐH‚í‚È‚©‚Á‚½‚çŠY“–•”•ª‚ðC³‚µ‚Ä‚­‚¾‚³‚¢ + ŠÇ—ŽÒ‚Í‚Ü‚¸íœƒtƒH[ƒ€‚ÉŠÇ—ŽÒPASS‚ð“ü‚ê[del]‚ð‰Ÿ‚µ‹L‰¯‚³‚¹‚é‚Æ + ƒtƒ@ƒCƒ‹íœ‚âSUSS‚É“ü‚Á‚½‚è‚·‚éÛ‚É‚¢‚­‚ç‚©Šy‚É‚È‚é‚ÆŽv‚¢‚Ü‚· + +ƒoƒO‚ðŒ©‚Â‚¯‚½‚çc + ’¼‚·•ÛØ‚Í‚ ‚è‚Ü‚¹‚ñ‚ªŒfŽ¦”“™‚É•ñ‚à‚炦‚½‚ç‘Pˆ‚µ‚½‚¢‚ÆŽv‚¢‚Ü‚· + +‚ ‚ñ‚Ü‚è‘債‚½‚±‚Æ‚Å‚Í‚È‚¢‚±‚Æ + ‹H‚ɐݒu‚³‚ꂽƒAƒbƒvƒ[ƒ_‚É‚ ‚éƒtƒ@ƒCƒ‹‚̍폜ˆË—Š‚È‚Ç‚ª‰º•”‚̃Šƒ“ƒN‚ð’H‚Á‚Ä + ‚±‚¿‚ç‚É—ˆ‚邱‚Æ‚ª‚ ‚é‚Ì‚Å ƒfƒtƒHƒ‹ƒg‚ł͏ȗª‚³‚ê‚Ä‚¢‚Ü‚·‚ª + ‚Å‚«‚ê‚Î $set{'home_url'}([HOME]‚̃Šƒ“ƒNæ‚Ì’l) ‚Í–„‚ß‚Ä‚Ù‚µ‚¢‚©‚à‚µ‚ê‚Ü‚¹‚ñ + ‚È‚¨‚±‚Ì’l‚Í ../ ‚â http://example.org/~user/ ‚È‚Ç‘Š‘΃pƒX‚Å‚àâ‘΃pƒX‚Å‚à\‚¢‚Ü‚¹‚ñ + +‚³‚ç‚ɑ債‚½‚±‚Æ‚Å‚Í‚È‚¢‚±‚Æ + ”z•zƒA[ƒJƒCƒu‚Ì’†‚É‚ ‚éƒXƒNƒŠƒvƒgƒtƒ@ƒCƒ‹‚Í•W€“I‚ȃGƒfƒBƒ^‚Å‚à + •ÒW‚µ‚â‚·‚¢‚悤‚É•¶ŽšƒR[ƒh‚ÉShift-JIS‚ðŽg—p‚µ‚Ä‚¢‚Ü‚· + ‚»‚Ì‚½‚߃oƒO‚Æ‚¢‚¤‚©Shift-JIS‚̈ꕔ‚Ì•¶ŽšƒR[ƒh‚ª\‚Əd‚È‚Á‚Ä‚¢‚é‰e‹¿‚Å + ƒtƒ@ƒCƒ‹–¼‚É"•\,—\,ƒ\,["‚È‚Ç‚ªŠÜ‚Ü‚ê‚Ä‚¢‚é‚ƃtƒ@ƒCƒ‹–¼‚ª“r’†‚Ő؂ê‚Ü‚· + ƒfƒUƒCƒ“•ÏX“™‚Å•¶Žš‚ð’ljÁ‘}“ü‚µ‚½ê‡ êŠ‚É‚æ‚Á‚Ä‚Í500ƒGƒ‰[‚ª‚ł邱‚Æ‚à‚ ‚è‚Ü‚· + •Ê‚ɃoƒCƒiƒŠ‚ª‰»‚¯‚½‚è‚·‚é‚킯‚Å‚Í‚È‚¢‚Ì‚Å‚·‚ª‹C‚É‚È‚él‚Í + ƒGƒfƒBƒ^“™‚ŃXƒNƒŠƒvƒg‘S‘Ì‚ðEUC‚É•ÏŠ·‚·‚é‚Ì‚ª‚æ‚¢‚©‚ÆŽv‚¢‚Ü‚· + Ý’荀–ڂ̏I‚í‚è‚Ì•û‚É $set{'html_head'} ‚Æ‚¢‚¤€–Ú‚ª‚ ‚é‚Ì‚Åcharset‚ð euc-jp ‚É‚·‚é‚Æ + ”roHTML‚ÌMETAƒ^ƒO•”•ª‚͏‘‚«Š·‚í‚è‚Ü‚· + ”“r’†‚©‚çEUC‚ɐ؂è‘Ö‚¦‚é‚Æ‚«‚̓ƒOƒtƒ@ƒCƒ‹‚Ì•ÏŠ·‚à‚¨–Y‚ꂸ‚É... + +–{“–‚ɑ債‚½‚±‚Æ‚Å‚Í‚È‚¢‚±‚Æ + ‚±‚̃XƒNƒŠƒvƒg‚̃fƒtƒHƒ‹ƒg‚ł͐¶¬‚·‚éHTML‚̉E‰º‚É”z•zƒy[ƒW‚ւ̃Šƒ“ƒN‚ª’£‚Á‚Ä‚ ‚è‚Ü‚·‚ª + ƒfƒUƒCƒ“‚̕ύX‚â“s‡ãíœ‚µ‚½‚¢ê‡‚Í(‚à‚¿‚ë‚ñŽc‚µ‚Ä’¸‚¯‚ê‚ÎŠð‚µ‚¢‚Ì‚Å‚·‚ª) + ƒŠƒ“ƒN‹y‚Ñ•\Ž¦‚ðíœ‚µ‚Ä’¸‚¢‚Ä‚àˆêŒü‚ɍ\‚¢‚Ü‚¹‚ñ + ’A‚µ‚±‚ê‚̓XƒNƒŠƒvƒg‚Ì’˜ìŒ ‚ð•úŠü‚·‚é‚Æ‚¢‚¤‚±‚Æ‚Å‚Í‚ ‚è‚Ü‚¹‚ñ + + +•â‘«Ž–€ + ƒXƒNƒŠƒvƒg“à‚Ìà–¾‚ŏ­Xà–¾‚ª‘«‚è‚È‚¢‚Æ‚±‚낪‚ ‚é‚©‚à‚µ‚ê‚Ü‚¹‚ñ‚Ì‚Å•â‘«‚µ‚Ä‚¨‚«‚Ü‚· + +$set{'interval'} + “¯ˆêIP‚©‚ç‚̘A‘±“Še‚ðŽw’肵‚½•b”‚ÌŠÔ‹‘”Û‚µ‚Ü‚· + ƒfƒtƒHƒ‹ƒg‚Í0•b‚É‚È‚Á‚Ä‚¢‚Ü‚·‚ª —Ⴆ‚Î10•ª‚È‚ç‚Î 60*10 ‚Æ•\‹L‚µ‚Ä‚à–â‘è‚ ‚è‚Ü‚¹‚ñ + ‚È‚¨ÅI“Še‚ÌIP/ŽžŠÔ‚Å‚µ‚©”»’f‚µ‚Ä‚¢‚È‚¢‚̂ŏã‹L‚Ì—á‚Å‚·‚Æ + 10•ªˆÈ“à‚É‘¼‚̐l‚ªƒAƒbƒvƒ[ƒh‚ð‚µ‚½ê‡‚Í‰ðœ‚³‚ê‚Ä‚µ‚Ü‚¢‚Ü‚· + +$set{'max_all_flag'} + ‚±‚Ì’l‚ð—LŒø‚É‚·‚é‚Æ“Še”ˆÈŠO‚Ƀtƒ@ƒCƒ‹‚Ì—e—Ê‚Å‚àƒƒO—Ž‚¿‚ð”»’è‚·‚é‚悤‚É‚È‚è‚Ü‚· + ƒŒƒ“ƒ^ƒ‹ƒT[ƒo‚È‚Ç—e—Ê‚ªŒÀ‚ç‚ê‚Ä‚¢‚éê‡–ð‚É—§‚‚̂ł͂Ȃ¢‚Å‚µ‚傤‚©H + ’ˆÓ‚Æ‚µ‚Ä‚Í —Ⴆ‚Î 1ƒtƒ@ƒCƒ‹‚̍őå—e—Ê‚ª10MB($set{'max_size'} = 10*1024), + ‘—e—Ê50MB($set{'max_all_size'}= 50*1024) ‚ɐݒ肵‚½ê‡ + ƒT[ƒo‚ÉŠù‚É50MB‚ ‚éó‘Ô‚Å 10MB‚̃tƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚³‚ê‚é‚Æ + ˆêŽž“I‚É 50MB+10MB = 60MB ‚ªÁ”‚ê‚Ü‚· ‚Ü‚½•¡”“¯ŽžƒAƒbƒvƒ[ƒhŽž‚É‚à“¯—l‚Ì‚±‚Æ‚ªŒ¾‚¦‚Ü‚·‚Ì‚Å + ­‚µ—]—T‚ðŽ‚Á‚Ä(ƒT[ƒo§ŒÀ—Ê‚æ‚è‚͏­‚È‚ß‚É)Ý’肵‚½‚Ù‚¤‚ª‚悳‚»‚¤‚Å‚· + ‚Ü‚½•ÛŽŒ”§ŒÀŽž‚à‚»‚¤‚Å‚·‚ª ƒp[ƒ~ƒbƒVƒ‡ƒ“Ý’è,ƒAƒNƒZƒXŒ ‚È‚Ç‚ÌŠÖŒW‚Å + ƒtƒ@ƒCƒ‹‚ªíœ‚Å‚«‚È‚©‚Á‚½ê‡‚Í(ƒtƒ@ƒCƒ‹‚ªŽÀÛ‚ÉŽc‚Á‚Ä‚¢‚é‚Ì‚Å)ƒƒCƒ“ƒƒO‚©‚ç‚͍폜‚µ‚Ä‚¢‚Ü‚¹‚ñ + ‚æ‚Á‚Đݒ胍ƒO”/—e—Ê‚æ‚èŽÀÛ‚̃ƒO”/—e—Ê‚ª‘½‚­‚Ȃ邱‚Æ‚ª‚ ‚è‚Ü‚· + +$set{'up_all'} + ‚±‚Ì’l‚ð—LŒø‚É‚·‚é‚Æ$set{'up_ext'}‚É“o˜^‚³‚ê‚Ä‚¢‚é‚à‚̈ȊO‚Å‚àƒAƒbƒvƒ[ƒh‚ðŽó‚¯•t‚¯‚Ü‚· + $set{'ext_org'}‚ª–³Œø‚É‚È‚Á‚Ä‚¢‚éê‡(=0)‚ÍŠg’£Žq'.bin'‚Å“o˜^‚³‚ê‚Ü‚· + $set{'ext_org'}‚ª—LŒø‚É‚È‚Á‚Ä‚¢‚éê‡(=1)‚Í“ŠeŽž‚ÌŠg’£Žq‚É‚È‚è‚Ü‚· + $set{'ext_org'}‚ð—LŒø‚É‚·‚éê‡(=1)‚Í + ƒXƒNƒŠƒvƒgŒ¾Œê‚È‚Ç—\Šú‚¹‚Ê“®ì‚ð‚·‚éê‡‚ª‚ ‚è‚Ü‚·‚Ì‚Å + ƒZƒLƒ…ƒŠƒeƒB[‚ɂ͏\•ª‹C‚ð‚‚¯‚ĉº‚³‚¢ + +$set{'find_crypt'} + ‚±‚Ì’l‚ª—LŒø‚É‚È‚Á‚Ä‚¢‚é‚ƃAƒbƒvƒ[ƒh‚³‚ꂽƒA[ƒJƒCƒu‚ªˆÃ†‰»‚³‚ê‚Ä‚¢‚é‚©’²‚ׂ܂·(ZIP‚Ì‚Ý) + ˆÃ†‰»‚³‚ê‚Ä‚¢‚éê‡‚ÍCOMMENT‚̍ŏ‰‚ɐԂÌ"*"‚ª•t‚«‚Ü‚· + ‘å‘ÌŒŸoo—ˆ‚Ä‚éƒi ‚ÆŽv‚í‚ê‚éê‡‚É‚Í”roHTML‚Ì‚Ç‚±‚©‚É*‚ÍPASS•t‚¾ ‚Ə‘‚¢‚Ä‚¨‚¯‚Î + ƒ_ƒEƒ“ƒ[ƒh‚·‚鑤‚É‚à‘½­‚̓ƒŠƒbƒg!?‚ª‚ ‚é‚©‚È‚ÆŽv‚¢‚Ü‚· + +$set{'binary_compare'} + ‚±‚Ì’l‚ª—LŒø‚É‚È‚Á‚Ä‚¢‚é‚ÆŠù‚ɃAƒbƒvƒ[ƒh‚³‚ê‚Ä‚¢‚éƒtƒ@ƒCƒ‹‚ƃoƒCƒiƒŠ”äŠr‚ð‚µ‚Ü‚· + ˆê’v‚µ‚½‚çƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚³‚¹‚Ü‚¹‚ñ + +$set{'post_key'} + $set{'post_flag'}‚ª—LŒø‚É‚È‚Á‚Ä‚¢‚éê‡(=1)‚Í‚±‚Ì’l‚ðƒtƒH[ƒ€‚É“ü—Í‚µ‚È‚¢‚Æ + ƒAƒbƒvƒ[ƒh‚Å‚«‚È‚­‚È‚è‚Ü‚· PostKey‚Í,‚Å‹æØ‚邱‚Æ‚Å•¡””­s‚·‚邱‚Æ‚ª‚Å‚« + ƒƒCƒ“ƒƒO‚É‚Í”õl‚Æ‚µ‚Ä“Še‚³‚ꂽÛ‚ÌPostKey‚ª‹L˜^‚³‚ê‚Ü‚· + “r’†‚©‚çPostKey‚ð—LŒø‚É‚·‚éê‡‚Í“ŠeƒtƒH[ƒ€‚ÉPostKey‚̍€–Ú‚ª‚ ‚è‚Ü‚¹‚ñ‚Ì‚Å + ƒXƒNƒŠƒvƒg‚ðÝ’肵‚½‚çã‹L‚́uHTML‚ðXV‚µ‚½‚¢ê‡v‚ðŽQl‚ÉHTML‚ðXV‚µ‚Ä‚­‚¾‚³‚¢ + +$set{'dlkey'} + DLKey‚ÌŽg—p‚Ì—L–³ + ƒAƒbƒvƒ[ƒh‚³‚ꂽƒtƒ@ƒCƒ‹‚ð ./src/up****.*** ‚©‚ç ./src/up****.***_[a-zA-Z0-9]{20}/up****.*** + ‚ɃŠƒl[ƒ€‚·‚邱‚Æ‚É‚æ‚Á‚č쐬‚³‚ê‚éƒtƒ@ƒCƒ‹ƒŠƒXƒg‚̃Šƒ“ƒN‚æ‚è’H‚ê‚È‚­‚µ‚Ü‚· + ŽÀURL‚Í“ŠeŽžÝ’肵‚½DLKey‚É‚Ä”FØ‚·‚邱‚Æ‚É‚æ‚Á‚ÄŽQÆ‚Å‚«‚Ü‚· + perl‚𖳑ʂɋN“®‚µ‚½‚­‚È‚¢ê‡‚Í $set{'dummy_html'} ‚Ì’l‚ð 2ˆÈã‚É‚·‚é‚ƁA + ”FØŽž‚ÌHTML‚ðÃ“IHTML‚Å“f‚«o‚·‚悤‚É‚È‚è‚Ü‚·B + –³‘Ê‚ÈCGI‚Ì‹N“®‚ªŒ¸‚è‚Ü‚·‚Ì‚Å–â‘肪‚È‚¯‚ê‚ΐÓIHTML‚ð“f‚«o‚·‚悤‚É‚·‚邱‚Æ‚ð‚¨Š©‚ß‚µ‚Ü‚·B + +$set{'zero_clear'} + FTP‚È‚ÇCGIˆÈŠO‚©‚ç‚Ì‘€ì‚Ńtƒ@ƒCƒ‹‚ðíœ‚µ‚½ê‡ + ƒƒCƒ“ƒƒO‚ɂ͏î•ñ‚ªŽc‚Á‚Ä‚¢‚邪ƒŠƒ“ƒNæ‚̃tƒ@ƒCƒ‹‚ª‚È‚¢‚Æ‚¢‚¤‚±‚Æ‚ª‚ ‚è‚Ü‚· + ‚±‚Ì’l‚ª—LŒø‚ȏꍇŽŸ‰ñƒtƒ@ƒCƒ‹ƒAƒbƒvƒ[ƒhŽž‚ÉŠY“–ƒtƒ@ƒCƒ‹î•ñ‚ðƒƒCƒ“ƒƒO‚©‚çíœ‚µ‚Ü‚· + —LŒø‚É‚µ‚È‚©‚Á‚½ê‡‚ÍŽŸ‰ñXVŽž‚©‚ç‚à0ƒoƒCƒg‚̃tƒ@ƒCƒ‹‚Æ‚µ‚ÄHTMLƒtƒ@ƒCƒ‹ƒŠƒXƒg‚É‹LÚ‚³‚ê‚Ü‚· + +$set{'http_src_path'} + ‹H‚Ƀtƒ@ƒCƒ‹ƒŠƒXƒg‚̃Šƒ“ƒN‚É‘Š‘ÎPATH‚ðŽg‚¦‚È‚¢ƒP[ƒX‚ª‚ ‚è‚Ü‚·‚Ì‚Å + ‚»‚̂悤‚ȏꍇ‚Í‚±‚Ì’l‚ðÝ’è‚·‚鎖‚É‚æ‚Á‚Ä–¾Ž¦“I‚Ƀtƒ@ƒCƒ‹‚̈ʒu‚ðŽw’è‚Å‚«‚Ü‚· + ®Žw’肵‚½ê‡‚Í ƒtƒ@ƒCƒ‹•Û‘¶ƒfƒBƒŒƒNƒgƒŠ $set{'src_dir'} ‚É‚Í + /home/user/public_html/upload/src/ ‚Ȃǂ̃T[ƒo“àâ‘ÎPATH‚ðŽg—p‚·‚邱‚Æ‚à‚Å‚«‚Ü‚· + ‘Š‘ÎPATH(ƒfƒtƒHƒ‹ƒg)‚Å–â‘è‚È‚¢ê‡‚Í“Á‚ɐݒ肵‚È‚­‚č\‚¢‚Ü‚¹‚ñ + +$set{'link_target'} + ƒtƒ@ƒCƒ‹–¼‚É’£‚ç‚ê‚Ä‚¢‚郊ƒ“ƒN‚Ìtarget‘®«‚Å‚· + V‹K‚̃EƒBƒ“ƒhƒE‚ÅŠJ‚«‚½‚¢ê‡‚Í _blank ‚Æ“ü—Í‚µ‚Ü‚· + +Sn Uploader (c) 2003-2005 SUGA All rights reserved. diff --git a/SnUploader/snup_051010e/snfaq.txt b/SnUploader/snup_051010e/snfaq.txt new file mode 100644 index 0000000..2485d4c --- /dev/null +++ b/SnUploader/snup_051010e/snfaq.txt @@ -0,0 +1,180 @@ +21:34 2005/10/10 + +“K“–‚È Sn Uploader FAQ + +Q1. ‚±‚ê‚͉½‚Å‚·‚©H +Q2. Perl‚Å‚·‚©HPHP‚Å‚·‚©H +Q3. Ý’u‚Å‚«‚Ü‚¹‚ñ(“®‚«‚Ü‚¹‚ñ,500ƒGƒ‰[‚ª‚Å‚é) +Q4. NoCGI.pm”Å‚ÆCGI.pm”Å‚Ç‚Á‚¿Žg‚¦‚΂¢‚¢‚ñ‚Å‚·‚©H +Q5. Ý’è‚Ì 0‚Æ‚© 1‚Æ‚© ‚Á‚ĉ½‚Å‚·‚©H +Q6. ƒtƒŒ[ƒ€‚ðŽg‚Á‚Ä‚¢‚éƒy[ƒW‚Ȃ̂ŃŠƒ“ƒN‚ðƒNƒŠƒbƒN‚µ‚½‚çV‚µ‚¢ƒEƒBƒ“ƒhƒE‚ÅŠJ‚«‚½‚¢ +Q7. Ý’è‚̓fƒtƒHƒ‹ƒg‚Ì‚Ü‚Ü‚¶‚á‚¢‚¯‚È‚¢‚́H +Q8. ƒ†[ƒU‚©‚çkey‚Í‚ ‚Á‚Ä‚é(‚Í‚¸‚È)‚̂Ƀtƒ@ƒCƒ‹‚ªíœ‚Å‚«‚Ü‚¹‚ñ‚ÆŒ¾‚í‚ê‚é +Q9. ƒGƒ‰[ƒƒbƒZ[ƒW‚ª‘S‚­•\Ž¦‚³‚ê‚Ü‚¹‚ñ +Q10. NoCGI.pm”łŃGƒ‰[ƒƒbƒZ[ƒW‚ÉPOSTƒf[ƒ^•sŠ®‘S‚Æ‘å—Ê‚ÉŽc‚Á‚Ä‚¢‚Ü‚· +Q11. ŠÇ—ƒ‚[ƒh‚É“ü‚é‚Ì‚ª–Ê“|‚Å‚· +Q12. Ô‚¢"*"‚Á‚ĉ½H +Q13. POSTKey•¡”Ý’è‚Å‚«‚é‚Á‚ĉ½‚̈Ӗ¡‚ª‚ ‚é‚ñ‚Å‚·‚©H +Q14. íœKey‚ð–Y‚ê‚Ä‚µ‚Ü‚¢‚Ü‚µ‚½íœƒtƒH[ƒ€‚É‚àŽ©“®“ü—Í‚³‚ê‚Ä‚Ü‚¹‚ñ +Q15. [Upload][Cancel]‚Ì[Upload]‚ªÁ‚¦‚¿‚á‚¢‚Ü‚µ‚½ +Q16. IIS‚Å‚Í“®‚©‚È‚¢‚́H +Q17. ANHTTPD,BlackJumboDog‚Å‚à“®‚«‚Ü‚·‚©H +Q18. ƒ^ƒCƒgƒ‹‚Ì"Uploader" ‚â "Now.. Testing.." ‚Æ•\Ž¦‚³‚ê‚Ä‚¢‚é•”•ª‚ð‘‚«Š·‚¦‚½‚¢ +Q19. ƒŠƒXƒg‚̏‡”Ô‚ª“ŠeŽžŠÔ‡‚Å‚Í‚ ‚è‚Ü‚¹‚ñ‚ª‚È‚º‚Å‚µ‚傤‚©H +Q20. Ý’u‚µ‚½‚çƒT[ƒo‚ªd‚­‚È‚è‚Ü‚µ‚½ ‰½‚©‰ü‘P‚·‚é•û–@‚Í‚ ‚è‚Ü‚·‚©H +Q21. Å‘å“Še—e—Ê‚Í‚Ç‚ê‚­‚ç‚¢‚Ü‚Å‚¢‚¯‚Ü‚·‚©H +Q22. —e—ʐ§ŒÀ‚ª‚ ‚éƒT[ƒo‚ł͂ǂ̂悤‚Ȑݒ肪–]‚Ü‚µ‚¢‚Ì‚Å‚µ‚傤‚©H +Q23. Šg’£ŽqMP4(‘啶Žš)‚ð’ljÁ‚µ‚½‚Ì‚Å‚·‚ª”FŽ¯‚³‚ê‚Ü‚¹‚ñ +Q24. Šg’£ŽqMP4(‘啶Žš)‚ðƒAƒbƒvƒ[ƒh‚·‚é‚Ə¬•¶Žš‚É‚È‚Á‚Ä‚µ‚Ü‚¤ + +/////////////////////////////////////////////// + +Q1. ‚±‚ê‚͉½‚Å‚·‚©H +A1. ”Ä—pƒtƒ@ƒCƒ‹ƒAƒbƒvƒ[ƒ_‚Å‚· + ‹CŒy‚Ƀuƒ‰ƒEƒU‚©‚çƒT[ƒo‚Ƀtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚·‚邱‚Æ‚ª‚Å‚«‚Ü‚· + +Q2. Perl‚Å‚·‚©HPHP‚Å‚·‚©H +A2. PerlƒXƒNƒŠƒvƒg‚Å‚· Perl5‚È‚ç“®‚­‚ÆŽv‚¢‚Ü‚· PHPƒXƒNƒŠƒvƒg‚Å‚Í‚ ‚è‚Ü‚¹‚ñ + +Q3. Ý’u‚Å‚«‚Ü‚¹‚ñ(“®‚«‚Ü‚¹‚ñ,500ƒGƒ‰[‚ª‚Å‚é) +A3. Šù‚É‘¼‚ÌCGIƒvƒƒOƒ‰ƒ€‚ðÝ’u‚µ‚Ä‚¢‚éê‡‚Í‚»‚̐ݒè‚ðŽQl‚É‚µ‚Ä‚Ý‚Ä‚­‚¾‚³‚¢ + Žå‚ÉPerl‚ÌPATH‚ªˆá‚¤ê‡‚âsuexec‚Ȃ̂ɐݒuƒfƒBƒŒƒNƒgƒŠ‚̃p[ƒ~ƒbƒVƒ‡ƒ“‚ª777‚Ȃǂ̏ꍇ‚ª‘½‚¢‚悤‚Å‚· + ‚Ü‚½ƒƒOƒtƒ@ƒCƒ‹‚âƒtƒ@ƒCƒ‹•Û‘¶ƒfƒBƒŒƒNƒgƒŠ‚͏‰‰ñƒAƒNƒZƒXŽž‚ÉŽ©“®¶¬‚µ‚Ü‚·‚Ì‚Å + FTP‘€ì‚Ȃǂł͍ì‚ç‚È‚¢•û‚ªŒœ–½‚Å‚· + +Q4. NoCGI.pm”Å‚ÆCGI.pm”Å‚Ç‚Á‚¿Žg‚¦‚΂¢‚¢‚ñ‚Å‚·‚©H +A4. ‚Ç‚Á‚¿‚Å‚à\‚¢‚Ü‚¹‚ñ‚ª NoCGI.pm”Å‚Ì•û‚ªƒAƒbƒvƒ[ƒhˆ—‚ª‘½­‘¬‚¢‚Ý‚½‚¢‚Å‚· + +Q5. Ý’è‚Ì 0‚Æ‚© 1‚Æ‚© ‚Á‚ĉ½‚Å‚·‚©H +A5. Šî–{“I‚ÉON‚©OFF‚Őݒ肷‚é‚à‚Ì‚Í ON=1,OFF=0 ‚Å”»•Ê‚µ‚Ü‚· + +Q6. ƒtƒŒ[ƒ€‚ðŽg‚Á‚Ä‚¢‚éƒy[ƒW‚Ȃ̂ŃŠƒ“ƒN‚ðƒNƒŠƒbƒN‚µ‚½‚çV‚µ‚¢ƒEƒBƒ“ƒhƒE‚ÅŠJ‚«‚½‚¢ +A6. $set{'link_target'} ‚Ì’l‚É _blank ‚ðÝ’肵‚Ä‚­‚¾‚³‚¢ + +Q7. Ý’è‚̓fƒtƒHƒ‹ƒg‚Ì‚Ü‚Ü‚¶‚á‚¢‚¯‚È‚¢‚́H +A7. Šî–{“I‚É‚ÍŠÇ—ŽÒPASS‚̕ύX‚¾‚¯‚ō\‚í‚È‚¢‚ÆŽv‚¢‚Ü‚· + Ý’è‚̏d—v“x‚Í(ŒÂl“I‚É‚Í)ã‚̍‚‚­ ‰º‚Ì•û‚͈ꕔ‚Ì•û‚ªŽg‚¤‚悤‚ÈŠ´‚¶‚¾‚ÆŽv‚¢‚Ü‚· + +Q8. ƒ†[ƒU‚©‚çkey‚Í‚ ‚Á‚Ä‚é(‚Í‚¸‚È)‚̂Ƀtƒ@ƒCƒ‹‚ªíœ‚Å‚«‚Ü‚¹‚ñ‚ÆŒ¾‚í‚ê‚é +A8. íœðŒ‚ª‚ ‚Á‚Ä‚È‚¢‚ÆŽv‚¢‚Ü‚· (L[M)ƒm~~ + ŽÀÛ‚â‚Á‚Ă݂ďÁ‚¦‚È‚©‚Á‚½‚ç˜A—‚­‚¾‚³‚¢ + 031003ˆÈ~‚ɂ͌•ÊCookie‚Å‚Ì”»’肪’ljÁ‚³‚ê‚Ä‚Ü‚· + +Q9. ƒGƒ‰[ƒƒbƒZ[ƒW‚ª‘S‚­•\Ž¦‚³‚ê‚Ü‚¹‚ñ +A9. 031003ˆÈ‘O‚Ì‚à‚Ì‚ÍŽd—l‚Å‚·...031003ˆÈ~‚ɂ̓Gƒ‰[•\Ž¦‹@”\‚ª‚‚¢‚Ä‚¢‚Ü‚· + +Q10.NoCGI.pm”łŃGƒ‰[ƒƒbƒZ[ƒW‚ÉPOSTƒf[ƒ^•sŠ®‘S‚Æ‘å—Ê‚ÉŽc‚Á‚Ä‚¢‚Ü‚· +A10.ƒAƒbƒvƒ[ƒh’†‚Ƀuƒ‰ƒEƒU[‚Ì’†Ž~‚È‚Ç‚ð‰Ÿ‚·‚Æ‚»‚¤‹L˜^‚³‚ê‚Ü‚· + POSTƒf[ƒ^•sŠ®‘S = ƒ†[ƒU[ƒAƒbƒvƒ[ƒh’†Ž~ ‚ƍl‚¦‚Ä‚à‚ç‚Á‚č\‚¢‚Ü‚¹‚ñ + ‚¿‚È‚Ý‚ÉNoCGI.pm”Å‚ªƒAƒbƒvƒ[ƒhƒ~ƒX‚ª‘½‚¢‚ÆŒ¾‚¤‚킯‚Å‚Í‚ ‚è‚Ü‚¹‚ñ + CGI.pm”ł̓fƒR[ƒh•û–@‚ªˆá‚¢‚Ü‚·‚Ì‚Å‚±‚ÌŽè‚ÌŒŸoƒ‹[ƒ`ƒ“‚ª–³‚¢‚¾‚¯‚Å‚· + ‘¼‚̃Aƒbƒvƒ[ƒ_‚É‚Í‚È‚¢(‹L˜^‚·‚郌ƒxƒ‹‚Å‚Í‚È‚¢)ƒGƒ‰[ƒƒbƒZ[ƒW‚Ì—Þ‚È‚Ì‚Å + ‚¢‚ç‚È‚¢‚ÆŽv‚¦‚Ήq¶ãƒƒO‚É‹L˜^‚µ‚È‚¢‚悤‚É‚µ‚½‚Ù‚¤‚ª‚¢‚¢‚©‚à‚µ‚Ü‚¹‚ñ +> 1004”Å‚¾‚ƃXƒNƒŠƒvƒgŠJ‚¢‚Ä POSTƒf[ƒ^•sŠ®‘S ‚ÅŒŸõ‚·‚é‚ƍŌã‚Ì•û‚É +> elsif($no == 108){ $flag = 1; $message = "POSTƒf[ƒ^•sŠ®‘S" ` +> ‚Æ‚ ‚è‚Ü‚·‚̂Ł@‚±‚±‚ð +> # elsif($no == 108){ $flag = 1; $message = "POSTƒf[ƒ^•sŠ®‘S" ` +> ‚Æ æ“ª‚É # ‚ð’ljÁ‚·‚é‚Æ +> ƒGƒ‰[ƒƒbƒZ[ƒW‚É‚Í‹L˜^‚µ‚È‚­‚È‚è‚Ü‚·B + +Q11.ŠÇ—ƒ‚[ƒh‚É“ü‚é‚Ì‚ª–Ê“|‚Å‚· +A11.ŠÇ—l‚Í‚Ü‚¸íœƒtƒH[ƒ€‚ÉŠÇ—lPASS‚ðŠo‚¦‚³‚¹‚Ä‚­‚¾‚³‚¢ + Cookie&JavaScript‚ªŽg‚¦‚éê‡‚Í ŽŸ‚©‚ç‚̓tƒH[ƒ€‚ÉPASS‚ªŽ©“®“ü—Í‚³‚ê‚Ü‚·‚Ì‚Å + ”Žš‚ð“ü‚ê‚é‚ƃtƒ@ƒCƒ‹íœ,ŠÇ—ƒ†[ƒUID“ü‚ê‚é‚ÆŠÇ—‰æ–Ê‚É“ü‚ê‚Ü‚· + +Q12.Ô‚¢"*"‚Á‚ĉ½H +A12.“K“–‚È“ÆŽ©ŽÀ‘•‚É‚æ‚éˆÃ†‰»ZIPŒŸo‚̃}[ƒLƒ“ƒO‚Å‚· + ‚à‚µ‚©‚µ‚½‚çŒë”»•Ê‚µ‚Ä‚éê‡‚à‚ ‚é‚©‚à‚µ‚ê‚Ü‚¹‚ñ + +Q13.POSTKey•¡”Ý’è‚Å‚«‚é‚Á‚ĉ½‚̈Ӗ¡‚ª‚ ‚é‚ñ‚Å‚·‚©H +A13.ŒÂl–ˆ‚É”­s‚·‚é‚Æ’N‚ª‚ ‚°‚Ä‚é‚©•ª‚©‚é‚©‚à‚µ‚ê‚Ü‚¹‚ñ + FTP‚̃AƒJƒEƒ“ƒgID‚ÆPASS‚ð1l‚É‹³‚¦‚½‚çˆêƒ•ŒŽŒã‚É‚Í + ‚È‚º‚©‚»‚̃AƒJƒEƒ“ƒgID‚ÆPASS‚Å•¡”ƒNƒ‰ƒCƒAƒ“ƒg‚ªŒq‚ª‚Á‚Ä‚½‚Æ‚¢‚¤ + ˜b‚ð’m‚荇‚¢‚©‚ç•·‚¢‚½‚Ì‚Å‚Ç‚ÌPOSTKey‚ŃAƒbƒvƒ[ƒh‚µ‚Ä‚é‚© + ‹L˜^‚µ‚Ä‚Ý‚é‚Æ–Ê”’‚¢‚©‚È‚Æ•¡”Ý’è‚Å‚«‚é‚悤‚É‚µ‚Ä‚Ý‚Ü‚µ‚½ + +Q14.íœKey‚ð–Y‚ê‚Ä‚µ‚Ü‚¢‚Ü‚µ‚½íœƒtƒH[ƒ€‚É‚àŽ©“®“ü—Í‚³‚ê‚Ä‚Ü‚¹‚ñ +A14.“ŠeƒtƒH[ƒ€‚ÉŽ©“®“ü—Í‚ªŽc‚Á‚Ä‚¢‚éê‡‚ÉŒÀ‚Á‚Ä‚Í + 1.íœƒtƒH[ƒ€‚ÌNo,key‹¤‚É‚¢‚ꂸ‚É[del]‚ð‰Ÿ‚·(íœCookieƒNƒŠƒA) + 2.“ŠeƒtƒH[ƒ€‚Ì[Upload]‚ð‰Ÿ‚·(íœCookieƒRƒs[) + ã‹L‘€ì‚Å“ŠeƒtƒH[ƒ€‚ÌDelKey‚ªƒRƒs[‚³‚ê‚éƒnƒY‚Å‚· + +Q15.[Upload][Cancel]‚Ì[Upload]‚ªÁ‚¦‚¿‚á‚¢‚Ü‚µ‚½ +A15.•¶ŽšƒR[ƒh‚ðEUC‚É‚µ‚悤‚Æ‚µ‚½‚Ì‚Å‚Í‚È‚¢‚Å‚µ‚傤‚©H + $set{'charset'} = euc-jp; ‚É‚µ‚Ä‚à •¶ŽšƒR[ƒh‚ªSHIFT-JIS‚̂܂܂̏ꍇ + ‚»‚̂悤‚É•\Ž¦‚³‚ê‚邱‚Æ‚ª‚ ‚è‚Ü‚· + ƒGƒfƒBƒ^‚âFTP“]‘—‚ŃXƒNƒŠƒvƒg‚Ì•¶ŽšƒR[ƒh‚àEUC‚É•ÏŠ·‚µ‚Ä‚­‚¾‚³‚¢ + +Q16.IIS‚Å‚Í“®‚©‚È‚¢‚́H +A16.‘S‚­“®‚©‚È‚¢‚±‚Æ‚à‚È‚¢‚Å‚·‚ª‚±‚¿‚ç‚ÌŠm”F‚µ‚½ŒÀ‚è‚Å‚Í“®ì‚É•sR‚È“_‚ª‚ ‚邽‚ß‚¨Š©‚ß‚µ‚Ü‚¹‚ñ + “Á’è‚Ì‘€ì‚ð‚·‚é‚ƃvƒƒZƒX‚ªI‚í‚ç‚È‚­‚È‚èCPUŽg—p—¦‚ª100%‚Ì‚Ü‚Ü‚É‚È‚è‚Ü‚· +@@‚»‚Ì—l‚ȃP[ƒX‚ɊׂÁ‚½ê‡‚Í [WebƒTƒCƒg‚̃vƒƒpƒeƒB] ‚©‚çƒAƒvƒŠƒP[ƒVƒ‡ƒ“‚Ì [ƒAƒ“ƒ[ƒh] ‚ð‚µ‚Ä‚­‚¾‚³‚¢ + 2003/10/11Œ»Ý ‚±‚¿‚ç‚ł̈ê’Ê‚è‚Ì“®ì‚ðŠm”F‚µ‚½ŠÂ‹«‚Í CGI.pm”Å/NoCGI.pm”Å‹¤‚É + @ WinXPPro (Perl5.8.0) -> Apache1.3.28/2.0.47 ANHTTPD1.42k BlackJumboDog3.3.5 + Redhat6.2 (Perl5.6.1) -> Apache1.3.27 + @ FreeBSD4.8R(Perl5.005_3) -> Apache1.3.27/2.0.47 + Solaris8 (Perl5.6.1) -> Apache1.3.27 + ‚Æ‚È‚Á‚Ä‚¢‚Ü‚·(‚¢‚¸‚ê‚ài386,Redhat‚ÆFreeBSD‚ÍsuEXEC) + Œ©‚ê‚Εª‚©‚é‚悤‚É‚±‚¿‚ç‚Æ‚µ‚Ä‚ÍŠî–{“I‚Éhttpd‚É‚ÍApache„§‚Å‚· + +Q17.ANHTTPD,BlackJumboDog‚Å‚à“®‚«‚Ü‚·‚©H +A17.NoCGI.pm”Å/CGI.pm”Å‹¤‚É–â‘è‚È‚­“®‚­‚ÆŽv‚¢‚Ü‚·‚ª + ƒpƒtƒH[ƒ}ƒ“ƒX‚Ì–Ê‚ÅŒ©‚é‚Æ Apache + NoCGI.pm”Å ‚ª‚悳‚»‚¤‚Å‚· + +Q18.ƒ^ƒCƒgƒ‹‚Ì"Uploader" ‚â "Now.. Testing.." ‚Æ•\Ž¦‚³‚ê‚Ä‚¢‚é•”•ª‚ð‘‚«Š·‚¦‚½‚¢ +A18.Šù‚É‚ ‚镶Žš‚ð‘‚«Š·‚¦‚é’ö“x‚È‚çƒXƒNƒŠƒvƒg“à‚ðŠY“–•¶Žš‚ÅŒŸõ‚µ‚Ä’u‚«Š·‚¦‚Ä‚­‚¾‚³‚¢ + HTMLƒwƒbƒ_‚È‚Ç‚ÍŒ‹\ƒqƒAƒhƒLƒ…ƒƒ“ƒg‚ŏ‘‚¢‚Ä‚é•”•ª‚ª‘½‚¢‚Ì‚Å + HTMLƒ^ƒO‚Ì’mŽ¯‚ª‚ ‚ê‚ΔäŠr“IŠÈ’P‚ɏ‘‚«Š·‚¦‚ç‚ê‚é‚ÆŽv‚¢‚Ü‚· + +Q19.ƒŠƒXƒg‚̏‡”Ô‚ª“ŠeŽžŠÔ‡‚Å‚Í‚ ‚è‚Ü‚¹‚ñ‚ª‚È‚º‚Å‚µ‚傤‚©H +A19.ƒŠƒXƒg‚É•\Ž¦‚³‚ê‚é“ŠeŽžŠÔ‚Í POSTŠJŽnŽž ‚ÌŽžŠÔ‚Å‚· + ƒƒO‚ªXV‚³‚ê‚é‚Ì‚Í POSTŠ®—¹Œã ‚Ȃ̂эƒO‚ÌŽžŠÔ•\‹L‚̏‡”Ô‚ª‘½­“ü‚ê‘Ö‚í‚邱‚Æ‚ª‚ ‚è‚Ü‚· + ŒÂl“I‚É‚ÍPOST‚ðŽn‚ß‚½ŽžŠÔ‚𓊍eŽžŠÔ‚Æ‚µ‚½‚¢‚Ì‚Å‚±‚̂悤‚ÈŽd—l‚É‚È‚Á‚Ä‚¢‚Ü‚· + # ‚Æ‚¢‚¤‚©—]‚è‹C‚É‚µ‚Ä‚Ü‚¹‚ñ‚Å‚µ‚½ + ‚Ç‚¤‚µ‚Ä‚àƒŠƒXƒg‚àŽžŠÔ‡‚É‚µ‚½‚¢‚Æ‚¢‚¤‚Ì‚È‚ç‚ÎDATE‚ð POSTŠ®—¹Œã ‚ÌŽžŠÔ‚É‚·‚ê‚΂悢‚©‚ÆŽv‚¢‚Ü‚· +> $new[0] ‚ÅŒŸõ‚ð‚©‚¯‚é‚Æ +> $new[0] = "$no<>$in{'addr'}<>$in{'time'}<>1\n"; +> ‚Æ‚¢‚¤s‚ª‚ ‚è‚Ü‚·‚Ì‚Å ‚»‚̍s‚̏ã‚É‚Å‚à +> $in{'date'} = conv_date(time()); +> ‚Æ‚¢‚¤s‚ð‘«‚·‚Æ DATE ‚É‹L˜^‚³‚ê‚鎞ŠÔ‚Í POSTŠ®—¹Œã ‚ÌŽžŠÔ‚Æ‚È‚è‚Ü‚· +> # $in{'date'} = conv_date(time()); ‚ÆŠù‚ɏ‘‚©‚ê‚Ä‚¢‚és‚ª‚ ‚é‚à‚Ì‚ðŽg‚Á‚Ä‚¢‚é‚Ì‚È‚ç‚Î +> æ“ª‚Ì # ‚ðíœ‚·‚邾‚¯‚ÅŒ‹\‚Å‚· + +Q20.Ý’u‚µ‚½‚çƒT[ƒo‚ªd‚­‚È‚è‚Ü‚µ‚½ ‰½‚©‰ü‘P‚·‚é•û–@‚Í‚ ‚è‚Ü‚·‚©H +A20.(;L„DM)‚ ‚ñ‚Ü–³—‚µ‚È‚¢‚Å‚­‚¾‚³‚¢ + •’Ê‚ÌŒfŽ¦”“™‚É”ä‚ׂé‚ƃf[ƒ^‚̏o“ü—Í‚ª‘½‚­s‚í‚ê‚é‚Ì‚Å + ‰ñü/CPU•‰‰×‚͍‚‚ß‚É‚È‚éƒP[ƒX‚ª‘½‚¢‚ÆŽv‚¢‚Ü‚· + —˜—pŽÒl”‚â•Û‘¶Œ”/ƒtƒ@ƒCƒ‹ƒTƒCƒY‚È‚Ç‚ðl—¶‚µ‚ÄŽg‚Á‚Ä‚¢‚½‚¾‚¯‚ê‚΂悢‚©‚ÆŽv‚¢‚Ü‚· + +Q21.Å‘å“Še—e—Ê‚Í‚Ç‚ê‚­‚ç‚¢‚Ü‚Å‚¢‚¯‚Ü‚·‚©H +A21.A1‚ɏ‘‚¢‚½‚悤‚Ȉʒu‚¯‚¾‚ÆŽv‚Á‚Ä‚¢‚Ü‚·‚Ì‚Å–³’ƒ‚Ȑݒè/Žg‚¢•û‚Í‚µ‚È‚¢•û‚ª‚æ‚¢‚©‚Æ + ˆê‰ž100MbpsLANŠÂ‹«(A16‚ÌApacheŠÂ‹«/Client-Win2000ProIE6)‚Å‚Í1GB’ö“x‚Ü‚ÅŠm”F‚µ‚Ü‚µ‚½‚ª + ƒT[ƒoŠÂ‹«EƒNƒ‰ƒCƒAƒ“ƒgŠÂ‹«E‰ñü•iŽ¿‚â‚»‚Ì‘¼Žg—pŠÂ‹«‚Ɉˑ¶‚µ‚Ü‚·‚µ + ‚Ü‚½‰Â”\‚ÆŽÀ—p‚͈Ⴂ‚Ü‚·‚Ì‚Å‚ ‚é’ö“x‚̉^—p‚ðŽ‚Á‚ĐݒuŽÒŽ©g‚ª”»’f‚µ‚Ä‚­‚¾‚³‚¢ + ’A‚µ‚ ‚Ü‚è‚É‘å‚«‚¢ƒTƒCƒY‚̃tƒ@ƒCƒ‹‚ÍFTP‚ȂǕʃvƒƒgƒRƒ‹‚Å‚â‚èŽæ‚肵‚½‚Ù‚¤‚ª‚悳‚»‚¤‚Å‚· + +Q22.—e—ʐ§ŒÀ‚ª‚ ‚éƒT[ƒo‚ł͂ǂ̂悤‚Ȑݒ肪–]‚Ü‚µ‚¢‚Ì‚Å‚µ‚傤‚©H +A22.Œ‹˜_“I‚É‚Í‚©‚È‚è‚Ì—]—T‚ðŽ‚½‚¹‚½Ý’è‚ð‚·‚é‚Ì‚ª–³“ï‚Å‚· + ‚Æ‚¢‚¤‚Ì‚à ‚±‚̃XƒNƒŠƒvƒg‚Å‚Í 1ƒtƒ@ƒCƒ‹‚ ‚½‚è‚Ì—e—Ê, •ÛŽƒƒO(ƒtƒ@ƒCƒ‹)”, ‘—e—Ê + ‚ðÝ’è‚Å‚«‚Ü‚·‚ª—e—ʐ§ŒÀ‚ª‚ ‚éƒT[ƒo‚É‚¨‚¢‚Ä‚Í‚±‚ê‚ç‚̐ݒè‚É’ˆÓ‚·‚é“_‚ª‚ ‚è‚Ü‚· + [ƒAƒbƒvƒ[ƒh] ---> [ƒƒO”/—e—ʃ`ƒFƒbƒN] ---> [ƒƒO—Ž‚¿•ª‚͍폜] + ‚Æ‚¢‚¤‡˜‚ŃXƒNƒŠƒvƒg‚͏ˆ—‚ð‚µ‚Ä‚¢‚é‚Ì‚Å —Ⴆ‚Î50MB‚̐§ŒÀ‚ªŠ|‚¯‚ç‚ê‚Ä‚¢‚éƒAƒJƒEƒ“ƒg‚Å + 1ƒtƒ@ƒCƒ‹‚ ‚½‚è‚̍őå—e—Ê‚ð 50MB ‚ɐݒ肷‚é‚Æ 1ƒtƒ@ƒCƒ‹–Ú‚É50MB‚ðƒAƒbƒvƒ[ƒh‚µ‚½ê‡ + •ÛŽƒƒO”‚ª1 ‚Å‚à 2ƒtƒ@ƒCƒ‹–Ú‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚È‚­‚È‚Á‚Ä‚µ‚Ü‚¤‚±‚Æ‚ª‚ ‚è‚Ü‚· + ‚±‚ê‚Í ƒAƒbƒvƒ[ƒhŠ®—¹Žž‚Ü‚Å‚É 1ƒtƒ@ƒCƒ‹–Ú‚ªŽc‚Á‚Ä‚¢‚邱‚Æ‚ªŒ´ˆö‚Æ‚È‚è‚Ü‚· + 2ƒtƒ@ƒCƒ‹–ڂ̃Aƒbƒvƒ[ƒhŠJŽn‚Æ“¯Žž‚É1‚–ڂðÁ‚¹‚Ζâ‘肪–³‚­‚È‚é—l‚É‚àŒ©‚¦‚Ü‚·‚ª + ƒAƒbƒvƒ[ƒhŠ®—¹Žž‚Ü‚Å‚»‚ꂪ³í‚ɏI‚í‚é‚©‚Ç‚¤‚©‚Í•ª‚©‚è‚Ü‚¹‚ñ + ‚µ‚©‚µ‚È‚ª‚ç‚»‚Ì—l‚ÈŽd—l‚É‚µ‚½‚¢ê‡‚̓XƒNƒŠƒvƒg‚ð‚ ‚é’ö“x‰ü•Ï‚·‚邱‚Ƃʼn”\‚É‚È‚è‚Ü‚· + ‚Ü‚½•¡”ƒ†[ƒU[‚©‚ç‚Ì“¯Žž(•À—ñ)ƒAƒbƒvƒ[ƒhŽž‚à“¯—l‚È‚Ì‚Å•p“x‚ª‘½‚¢‚悤‚È‚ç + ’N‚©‚ªƒAƒbƒvƒ[ƒhŽž‚ɂ̓Aƒbƒvƒ[ƒh‚³‚¹‚È‚¢‚悤‚É‚·‚é‚Ȃǂ̍H•v‚ð‚µ‚½•û‚ª—Ç‚¢‚©‚à‚µ‚ê‚Ü‚¹‚ñ + +Q23.Šg’£ŽqMP4(‘啶Žš)‚ð’ljÁ‚µ‚½‚Ì‚Å‚·‚ª”FŽ¯‚³‚ê‚Ü‚¹‚ñ +Q24.Šg’£ŽqMP4‚ðƒAƒbƒvƒ[ƒh‚·‚é‚Ə¬•¶Žš‚É‚È‚Á‚Ä‚µ‚Ü‚¤ +A23.A24 Šg’£ŽqƒtƒBƒ‹ƒ^[‚̏ˆ—‡˜‚ÌŠÖŒW‚Å + $set{'up_ext'} ‚É MP4 ‚ð’ljÁ‚·‚é‚Ì‚Ý‚Å‚Í”FŽ¯‚³‚ê‚Ü‚¹‚ñ + ‚±‚ê‚ÍŒ³ƒtƒ@ƒCƒ‹–¼Šg’£Žq‚ðˆê’U¬•¶Žš‚É•ÏŠ·‚µ‚½Œã‚É + Šg’£Žq•ÏŠ·‚ðŠ|‚¯‚Ä‚¢‚邱‚ƂɈö‚è‚Ü‚·. + ˆÈ‰º‚Ì•û–@‚ʼnñ”ð‚·‚é‚±‚Æ‚ª‚Å‚«‚Ü‚· + $set{'up_ext'} ƒAƒbƒvƒ[ƒh‚Å‚«‚éŠî–{Šg’£Žq ‚É MP4 ‚ð’ljÁ + $set{'change_ext'} Šg’£Žq•ÏŠ· ‚Ɂ@mp4->MP4 ‚ð’ljÁ +/////////////////////////////////////////////// diff --git a/SnUploader/snup_051010e/uploader+cgipm/upload.cgi b/SnUploader/snup_051010e/uploader+cgipm/upload.cgi new file mode 100644 index 0000000..15bec93 --- /dev/null +++ b/SnUploader/snup_051010e/uploader+cgipm/upload.cgi @@ -0,0 +1,1008 @@ +#!/usr/bin/perl +use CGI; +use vars qw(%set %in); +use strict; +$set{'log_file'} = './log.cgi'; #ƒƒOƒtƒ@ƒCƒ‹–¼ +$set{'max_log'} = 30; #•ÛŽŒ” +$set{'max_size'} = 1*1024; #Å‘å“Še—e—Ê(KB) +$set{'min_flag'} = 0; #Å¬—e—ʐ§ŒÀ‚ðŽg—p‚·‚é=1 +$set{'min_size'} = 100; #Å¬“Še—e—Ê(KB) +$set{'max_all_flag'} = 0; #‘—e—ʐ§ŒÀ‚ðŽg—p‚·‚é=1 +$set{'max_all_size'} = 20*1024; #‘§ŒÀ—e—Ê(KB) +$set{'file_pre'} = 'up'; #ƒtƒ@ƒCƒ‹Ú“ªŽ« +$set{'pagelog'} = 10; #1ƒy[ƒW‚É•\Ž¦‚·‚éƒtƒ@ƒCƒ‹” +$set{'base_html'} = 'upload.html'; #1ƒy[ƒW–ڂ̃tƒ@ƒCƒ‹–¼ +$set{'interval'} = 0; #“¯ˆêIP“ŠeŠÔŠu•b” +$set{'deny_host'} = ''; #“Še‹ÖŽ~IP/HOST ,‚Å‹æØ‚é ex.(bbtec.net,219.119.66,ac.jp) +$set{'admin_name'} = 'admin'; #ŠÇ—ŽÒƒƒOƒCƒ“ID +$set{'admin_pass'} = '1234'; #ŠÇ—ŽÒƒpƒXƒ[ƒh + +# ˆÈ‰º5€–Ú‚ðÄÝ’è‚·‚éÛ‚É‚ÍPATHCƒfƒBƒŒƒNƒgƒŠ‚Í / ‚ŏI‚í‚邱‚Æ +# $set{'html_dir'},$set{'base_cgi'}‚ð ./ ˆÈŠO‚ɐݒ肷‚éê‡, +# ‚Ü‚½‚ÍDLkey‚ðŽg—p‚µ ‚È‚¨‚©‚ÂHTMLƒLƒƒƒbƒVƒ…($set{'dummy_html'} = 2 or 3)‚ðŽg—p‚·‚éê‡‚Í +# $set{'base_cgi'} , $set{'http_html_path'} , $set{'http_src_path'} ‚ðƒtƒ‹ƒpƒX(http://`` or /``)‚Å‹Lq‚·‚é +$set{'html_dir'} = './'; # “à•”HTML•Û‘¶ƒfƒBƒŒƒNƒgƒŠ +$set{'src_dir'} = './src/'; # “à•”ƒtƒ@ƒCƒ‹•Û‘¶ƒfƒBƒŒƒNƒgƒŠ +$set{'base_cgi'} = './upload.cgi'; # ‚±‚̃XƒNƒŠƒvƒg–¼ http://`‚ÌŽw’è‰Â”\ +$set{'http_html_path'} = './'; # htmlŽQÆ httpPATH http://`‚ÌŽw’è‰Â”\ +$set{'http_src_path'} = './src/'; # fileŽQÆ httpPATH http://`‚ÌŽw’è‰Â”\ + +$set{'dlkey'} = 0; # DLKey‚ðŽg—p‚·‚é=1,DLkey•K{=2 +$set{'up_ext'} = 'txt,lzh,zip,rar,gca,mpg,mp3,avi,swf,bmp,jpg,gif,png'; #ƒAƒbƒvƒ[ƒh‚Å‚«‚éŠî–{Šg’£Žq ”¼Šp‰p”¬•¶Žš ,‚Å‹æØ‚é +$set{'up_all'} = 0; #“o˜^ˆÈŠO‚Ì‚à‚Ì‚àUP‚³‚¹‚ç‚ê‚é‚悤‚É‚·‚é=1 +$set{'ext_org'} = 0; #$set{'up_all'}‚ª1‚ÌŽžƒIƒŠƒWƒiƒ‹‚ÌŠg’£Žq‚É‚·‚é=1 +$set{'deny_ext'} = 'php,php3,phtml,rb,sh,bat,dll'; #“Še‹ÖŽ~‚ÌŠg’£Žq ”¼Šp‰p”¬•¶Žš ,‚Å‹æØ‚é +$set{'change_ext'} = 'cgi->txt,pl->txt,log->txt,jpeg->jpg,mpeg->mpg'; #Šg’£Žq•ÏŠ· ‘O->Œã ”¼Šp‰p”¬•¶Žš ,‚Å‹æØ‚é + +$set{'home_url'} = ''; #[HOME]‚̃Šƒ“ƒNæ ‘Š‘΃pƒX–”‚Í http://‚©‚çŽn‚Ü‚éâ‘΃pƒX +$set{'html_all'} = 1; #[ALL]‚ðo‚·=1 +$set{'dummy_html'} = 0; #ƒtƒ@ƒCƒ‹ŒÂ•ÊHTML‚ðì¬‚·‚é ’Êíƒtƒ@ƒCƒ‹‚Ì‚Ý=1,DLKeyÝ’èƒtƒ@ƒCƒ‹‚Ì‚Ý=2,‚·‚ׂÄ=3 +$set{'find_crypt'} = 1; #ˆÃ†‰»ZIP‚ðŒŸo‚·‚é=1 +$set{'binary_compare'} = 0; #Šù‘¶ƒtƒ@ƒCƒ‹‚ƃoƒCƒiƒŠ”äŠr‚·‚é=1 +$set{'post_flag'} = 0; #PostKey‚ðŽg—p‚·‚é=1 +$set{'post_key'} = 'postkey'; #PostKey ,‚Å‹æØ‚é‚Æ•¡”Žw’è ex.(postkey1,postkey2) +$set{'disp_error'} = 1; #ƒ†[ƒU[‚ɃGƒ‰[‚ð•\Ž¦‚·‚é=1 +$set{'error_level'} = 1; #ƒGƒ‰[ƒƒO‚ð‹L˜^‚·‚é=1 +$set{'error_log'} = './error.cgi'; #ƒGƒ‰[ƒƒOƒtƒ@ƒCƒ‹–¼ +$set{'error_size'} = 1024; # ƒGƒ‰[ƒƒOÅ‘å—e—Ê(KB) §ŒÀ‚È‚µ=0 +$set{'zero_clear'} = 1; #ƒtƒ@ƒCƒ‹‚ªŒ©‚‚©‚ç‚È‚¢ê‡ƒƒO‚©‚çíœ‚·‚é=1 + +$set{'disp_comment'} = 1; #ƒRƒƒ“ƒg‚ð•\Ž¦‚·‚é=1 +$set{'disp_date'} = 1; #“ú•t‚ð•\Ž¦‚·‚é=1 +$set{'disp_size'} = 1; #ƒTƒCƒY‚ð•\Ž¦‚·‚é=1 +$set{'disp_mime'} = 1; #MIMETYPE‚ð•\Ž¦‚·‚é=1 +$set{'disp_orgname'} = 1; #ƒIƒŠƒWƒiƒ‹ƒtƒ@ƒCƒ‹–¼‚ð•\Ž¦‚·‚é=1 + +$set{'per_upfile'} = 0666; #ƒAƒbƒvƒ[ƒhƒtƒ@ƒCƒ‹‚̃p[ƒ~ƒbƒVƒ‡ƒ“ suexec=0604,other=0666 +$set{'per_dir'} = 0777; #ƒ\[ƒXƒAƒbƒvƒfƒBƒŒƒNƒgƒŠ‚̃p[ƒ~ƒbƒVƒ‡ƒ“ suexec=0701,other=0777 +$set{'per_logfile'} = 0666; #ƒƒOƒtƒ@ƒCƒ‹‚̃p[ƒ~ƒbƒVƒ‡ƒ“@suexec=0600,other=0666 +$set{'link_target'} = ''; #target‘®« + +#------ +$set{'ver'} = '2005/10/10e CGI.pm'; +$set{'char_delname'} = 'D'; + +$in{'time'} = time(); $in{'date'} = conv_date($in{'time'}); +$in{'addr'} = $ENV{'REMOTE_ADDR'}; +$in{'host'} = gethostbyaddr(pack('C4',split(/\./, $in{'addr'})), 2) || $ENV{'REMOTE_HOST'} || '(none)'; +if($in{'addr'} eq $in{'host'}){ $in{'host'} = '(none)'; } + +$set{'html_head'} =<<"EOM"; + + + + + + + + + +Uploader +EOM + +$set{'html_css'} =<<"EOM"; + + +EOM + +unless(-e $set{'log_file'}){ &init; } +unless(-e $set{'base_html'}){ &makehtml; } + +{ #ƒfƒR[ƒh + if ($ENV{'REQUEST_METHOD'} eq "POST" && $ENV{'CONTENT_TYPE'} =~ /multipart\/form-data/i){ + if ($ENV{'CONTENT_LENGTH'} > ($set{'max_size'} * 1024 + 1024)){ if($ENV{'SERVER_SOFTWARE'} =~ /IIS/){ while(read(STDIN,my $buff,8192)){} } &error(106,$ENV{'CONTENT_LENGTH'});} + }else{ + if ($ENV{'CONTENT_LENGTH'} > 1024*100){ error(98); } + } + my %ck; foreach(split(/;/,$ENV{'HTTP_COOKIE'})){ my($key,$val) = split(/=/); $key =~ s/\s//g; $ck{$key} = $val;} + my @ck = split(/<>/,$ck{'SN_USER'}); + if(length($ck[0]) < 5){ + my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); srand; + my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))]; + $in{'user'} = crypt($in{'addr'}.$in{'time'}, $salt); + }else{ $in{'user'} = $ck[0]; } + + my $q = new CGI; + $in{'upfile'} = $q->param('upfile'); + $in{'tmpfile'} = $q->tmpFileName($in{'upfile'}); + $in{'type'} = $q->uploadInfo($in{'upfile'})->{'Content-Type'} if ($in{'upfile'}); + $in{'pass'} = $q->param('pass'); $in{'mode'} = $q->param('mode'); + $in{'delno'} = $q->param('delno'); $in{'comment'} = $q->param('comment'); + $in{'jcode'} = $q->param('jcode'); $in{'delpass'} = $q->param('delpass'); + $in{'orgname'} = $in{'upfile'}; $in{'postkey'} = $q->param('postkey'); + $in{'org_pass'} = $in{'pass'}; + $in{'checkmode'} = $q->param('checkmode'); + $in{'file'} = $q->param('file'); $in{'dlkey'} = $q->param('dlkey'); + $in{'admin_delno'} = join(',',$q->param('admin_delno')); + my @denyhost = split(/,/,$set{'deny_host'}); + foreach my $value (@denyhost){ + if ($in{'addr'} =~ /$value/ || $in{'host'} =~ /$value/){ &error(101);} + } + + my @form = ($in{'comment'},$in{'orgname'},$in{'type'},$in{'dlkey'}); + foreach my $value (@form) { + if (length($value) > 128) { $value = substr($value,0,128).'...'; } +# $value =~ s/&/&/g; + $value =~ s/"/"/g; + $value =~ s//>/g; + $value =~ s/\r//g; + $value =~ s/\n//g; + $value =~ s/\t//g; + $value =~ s/\0//g; + } + ($in{'comment'},$in{'orgname'},$in{'type'},$in{'dlkey'}) = @form; + $in{'tmpfile2'} = &filewrite() if ($in{'upfile'}); +} + +if($in{'delno'} eq $set{'admin_name'} && $in{'delpass'} eq $set{'admin_pass'}){ &admin_mode(); } +if(!$in{'delno'} && $in{'delpass'} eq $set{'admin_pass'}){ &makehtml(); &quit(); } +if($in{'mode'} eq 'dl'){ &dlfile;} #DL +if($in{'mode'} eq 'delete'){ &delete(); &quit(); } + +{#ƒƒCƒ“ˆ— + if(!$in{'upfile'}){ &error(99); } + if($set{'post_flag'} && !check_postkey($in{'postkey'})){ error(109); } + if($set{'dlkey'} == 2 && !$in{'dlkey'}){ unlink("$in{'tmpfile2'}"); &error(61); } + open(IN,$set{'log_file'})||&error(303); + my @log = ; + close(IN); + my ($no,$lastip,$lasttime) = split(/<>/,$log[0]); + + if($set{'interval'} && $set{'interval'} && $in{'time'} <= ($lasttime + $set{'interval'}) && $in{'addr'} eq $lastip){ &error(203);} + $in{'ext'} = extfind($in{'orgname'}); if(!$in{'ext'} && $in{'upfile'}){ &error(202); } + + my $orgname; + if(split(/\//,$in{'orgname'}) > split(/\\/,$in{'orgname'})){ my @name = split(/\//,$in{'orgname'}); $orgname = $name[$#name]; } + else{ my @name = split(/\\/,$in{'orgname'}); $orgname = $name[$#name];} + + my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); + srand; + my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))]; + $in{'pass'} = crypt($in{'pass'}, $salt); + + if($set{'binary_compare'}){ + my @files = globfile("$set{'src_dir'}",".*"); + my @dir = globdir("$set{'src_dir'}",".*"); + foreach my $dir (@dir){ push(@files,globfile($dir."/",".*")); } + foreach my $value (@files){ + next if($value =~ /\.temporary$/); + if(binarycmp($in{'tmpfile2'},$value)){ unlink($in{'tmpfile2'}); &error(205,$value);} + } + } + + if($set{'find_crypt'}){ + open(FILE,$in{'tmpfile'}); binmode(FILE); seek(FILE,0,0); read(FILE,my $buff,4); my $crypt_flag = 0; + if($buff =~ /^\x50\x4b\x03\x04$/){ seek(FILE,6,0); read(FILE,my $buff,1); $crypt_flag = 1 if(($buff & "\x01") eq "\x01"); } + close(FILE); + $in{'comment'} = '*'.$in{'comment'} if($crypt_flag); + } + + open(IN,$set{'log_file'})||&error(303); + @log = ; + close(IN); + ($no,$lastip,$lasttime) = split(/<>/,$log[0]); + shift(@log); + $no++; + my $tmpno = sprintf("%04d",$no); + + my $dlsalt; + my $filedir; + my $allsize = (-s $in{'tmpfile2'}); + + if($set{'dlkey'} && $in{'dlkey'}){ + my @salt = ('a'..'z', 'A'..'Z', '0'..'9'); srand; + for (my $c = 1; $c <= 20; ++$c) { $dlsalt .= $salt[int(rand(@salt))]; } + $filedir = "$set{'src_dir'}$set{'file_pre'}${tmpno}.$in{'ext'}_$dlsalt/"; + mkdir($filedir,$set{'per_dir'}); + rename("$in{'tmpfile2'}","$filedir$set{'file_pre'}$tmpno.$in{'ext'}"); + open(OUT,">${filedir}index.html"); + close(OUT); + chmod($set{'per_upfile'},"${filedir}index.html"); + $in{'comment'} = '[DLKey] '.$in{'comment'}; + }else{ + undef $in{'dlkey'}; + rename("$in{'tmpfile2'}","$set{'src_dir'}$set{'file_pre'}$tmpno.$in{'ext'}"); + } + + if (length($orgname) > 128) { $orgname = substr($orgname,0,128).'...'; } + + my @note; + if($set{'post_flag'} && $set{'post_key'}){ + push(@note,'PostKey:'.$in{'postkey'}); + } + if($ENV{'SERVER_SOFTWARE'} =~ /Apache|IIS/){ + my $disptime; + my $time = time() - $in{'time'}; + my @str = ('Upload:','•b'); + my $disptime = $time.$str[1]; + push(@note,$str[0].$disptime); + } + if($in{'dlkey'}){ + my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); srand; + my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))]; + my $crypt_dlkey = crypt($in{'dlkey'}, $salt); + push(@note,"DLKey"); + } + my $note = join(',',@note); + my $usersalt = substr($in{'user'},0,2); + my $userid = crypt($in{'user'},$usersalt); + $in{'time'} = time(); +# $in{'date'} = conv_date(time()); + my @new; + $new[0] = "$no<>$in{'addr'}<>$in{'time'}<>1\n"; + my $addlog = "$no<>$in{'ext'}<>$in{'date'}<>$in{'comment'}<>$in{'type'}<>$orgname<>$in{'addr'}<>$in{'host'}<>$in{'pass'},$userid<>$set{'file_pre'}<>$note<>1\n"; + $new[1] = $addlog; + +# open(OUT,">>./alllog.cgi"); print OUT $addlog; close(OUT); + + my $i = 2; + + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value); + if(!$dummy){ $filepre = $set{'file_pre'};} + $no = sprintf("%04d",$no); + + my $filename; + my $filedir; + if($note =~ /DLpath:(.+)\s/){ + my $dlpath = $1; + $filename = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext"; + $filedir = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/"; + }else{ + $filename = "$set{'src_dir'}$filepre$no.$ext"; + } + $allsize += (-s $filename); + + if($i <= $set{'max_log'} && !($set{'max_all_flag'} && $set{'max_all_size'}*1024 < $allsize)){ + if((-e $filename)||!$set{'zero_clear'}){ push(@new,$value); $i++; } + }else{ + if(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir); + }elsif(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir); + }elsif(-e $filename){ + push(@new,$value); + }else{ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir); + } + } + } + logwrite(@new); + if($in{'dlkey'} && ( $set{'dummy_html'} == 2 || $set{'dummy_html'} == 3)){ + &makedummyhtml("$set{'file_pre'}$tmpno.$in{'ext'}",$in{'comment'},"$set{'file_pre'}$tmpno.$in{'ext'}",$dlsalt,$in{'date'},$in{'type'},$orgname,$no); + }elsif(!$in{'dlkey'} && ($set{'dummy_html'} == 1 || $set{'dummy_html'} == 3)){ + &makedummyhtml("$set{'file_pre'}$tmpno.$in{'ext'}"); + } + &makehtml(); &quit(); +} + +sub makehtml{ + + my ($buff,$init,$postval,$dlkey); + my $page = 0; my $i = 1; + + open(IN,$set{'log_file'})||&error(303); + my $log = my @log = ; + close(IN); + + if($log == 1){ $log++; $init++;} + my $lastpage = int(($log - 2)/$set{'pagelog'}) + 1; + $postval = ' obj.postkey.value = unescape(p[1]);' if($set{'post_flag'}); + my $header =<<"EOM"; +$set{'html_head'} + +$set{'html_css'} + +
Uploader
+

+Now.. Testing.. +

+EOM + my $maxsize = 'Max '.dispsize($set{'max_size'}*1024); + my ($minsize,$total); + if($set{'min_flag'}){ $minsize = 'Min '.dispsize($set{'min_size'}*1024).' - '; } + if($set{'max_all_flag'}){ $total .= ' Total '.dispsize($set{'max_all_size'}*1024);} + $header .= qq|
FILE $minsize$maxsize (*$set{'max_log'}Files$total)
|; + $header .=''; + $header .= ' DLKey: ' if($set{'dlkey'}); + $header .= ' +DELKey:
+COMMENT
+ + +
+'; + if($set{'post_flag'}){ $header .= 'PostKey
'; } + $header .= '
'; + + my $allsize = 0; + my @files = globfile("$set{'src_dir'}",".*"); + my @dir = globdir("$set{'src_dir'}",".*"); + foreach my $dir (@dir){ push(@files,globfile($dir."/",".*")); } + foreach my $value (@files){ $allsize += (-s "$value"); } + + $allsize = dispsize($allsize); + + my $footer = "
Used ${allsize}\n
"; + if($set{'up_all'} && !$set{'ext_org'}){ $footer .= $set{'up_ext'}.' +'; } + elsif(!$set{'up_all'}){ $footer .= $set{'up_ext'}; } + $footer .= "\n
No. key
\n"; + $footer .= "
\n\n"; + + my $info_title = "\n"; + if($set{'disp_comment'}){ $info_title .= ""; } if($set{'disp_size'}){ $info_title .= ""; } if($set{'disp_date'}){ $info_title .= ""; } + if($set{'disp_mime'}){ $info_title .= ""; } if($set{'disp_orgname'}){ $info_title .= ""; } + $info_title .= "\n"; + + my $home_url_link; + if($set{'home_url'}){ $home_url_link = qq|[HOME] |;} + if($set{'html_all'}){ + my $buff; my $no = 1; my $time = time; my $subheader; + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$dummy) = split(/<>/,$value); + if(!$dummy){ next; } + $buff .= makeitem($value); + } + $subheader .= "[ALL] "; + while($no <= $lastpage){ + if($no == $page) { $subheader .= "\[$no\] ";} + else{ if($no == 1){ $subheader .= "\[$no\] "} + else{$subheader .= "\[$no\] ";} } + $no++; + } + $subheader .= $info_title; + open(OUT,">$set{'html_dir'}all.html")||&error(306,"$set{'html_dir'}all.html"); + print OUT $header."
".$home_url_link.$subheader."
".$buff.$footer; + close(OUT); + chmod($set{'per_upfile'},"$set{'html_dir'}all.html"); + }else{ unlink("$set{'html_dir'}all.html"); } + + while($log > $i){ + $buff .= makeitem($log[$i]) unless($init); + if(($i % $set{'pagelog'}) == 0||$i == $log -1){ + $page++; my $subheader; my $no = 1; my $time = time; + if($set{'html_all'}){ $subheader .= "[ALL] "; } + while($no <= $lastpage){ + if($no == $page) { $subheader .= "\[$no\] ";} + else{ if($no == 1){ $subheader .= "\[$no\] "} + else{$subheader .= "\[$no\] ";} + } + $no++; + } + $subheader .= $info_title; + my $loghtml; + if($page == 1){ $loghtml = "$set{'html_dir'}$set{'base_html'}"; } + else{ $loghtml = "$set{'html_dir'}$page.html"; } + + open(OUT,">$loghtml") || &error(306,"$loghtml"); + print OUT $header."
".$home_url_link.$subheader."
".$buff.$footer; + close(OUT); + chmod($set{'per_upfile'},$loghtml); + undef $buff; + } + $i++; + } + + while($page < 1000){ + $page ++; + if(-e "$set{'html_dir'}$page.html"){ unlink("$set{'html_dir'}$page.html"); }else{ last; } + } +} + +sub filewrite{ + my $random = int(rand(900000)) + 100000; + if(-e "$set{'src_dir'}$random.temporary"){ $random++; } + if(-e "$set{'src_dir'}$random.temporary"){ &error(204); } + open (FILE,">$set{'src_dir'}$random.temporary") || &error(204); + binmode(FILE); + eval{ while(my $read = read($in{'upfile'}, my $buff, 8192)){ print FILE $buff; }}; + close(FILE); + chmod($set{'per_upfile'},"$set{'src_dir'}$random.temporary"); + if((-s "$set{'src_dir'}$random.temporary") == 0){ unlink("$set{'src_dir'}$random.temporary"); &error(99); } + my $size = (-s "$set{'src_dir'}$random.temporary"); + if($set{'min_flag'} && ($size < $set{'min_size'} * 1024)){ unlink("$set{'src_dir'}$random.temporary"); &error(107,$size);} + if($size > $set{'max_size'} * 1024){ unlink("$set{'src_dir'}$random.temporary"); &error(106,$size);} + eval { close($in{'upfile'});}; + unlink($in{'tmpfile'}); + return("$set{'src_dir'}$random.temporary"); +} + +sub delete{ + my $mode = $_[0]; + my @delno = split(/,/,$_[1]); + my $delno; my $flag = 0; my $tmpaddr; + my $delnote; + + if($in{'delno'} =~ /(\d+)/){ $delno = $1; } + if($mode ne 'admin' && !$in{'delno'}){ return; } + elsif($mode ne 'admin' && !$delno){ &error(401,$in{'delno'}); } + + open(IN,$set{'log_file'})|| &error(303); + my @log = ; + close(IN); + + if($in{'addr'} =~ /(\d+).(\d+).(\d+).(\d+)/){ $tmpaddr = "$1.$2.$3."; } + my $findflag = 0; + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value); + $delnote = $note; + my $delflag = 0; + if(!$addr){ next; } + if($mode eq 'admin'){ + foreach my $delno (@delno){ if($no == $delno){ $delflag = 1; last; } } + }elsif($no == $delno){ + $findflag = 1; + unless ($addr =~ /^$tmpaddr/){ + my ($pass,$id) = split(/,/,$pass); + my $delpass = $in{'delpass'} || $in{'addr'}.time(); + my $salt = substr($pass, 0, 2); $delpass = crypt($delpass,$salt); + my $usersalt = substr($in{'user'},0,2); my $userid = crypt($in{'user'},$usersalt); + if ($in{'delpass'} ne $set{'admin_pass'} && $delpass ne $pass && $userid ne $id){ + if($mode ne 'admin'){ if(!$dummy){ $filepre = $set{'file_pre'};} $no = sprintf("%04d",$no); &error(404,"$filepre$no.$ext");} + } + } + $delflag = 1; + } + if($delflag){ +# open(OUT,">>./del.cgi"); print OUT $value; close(OUT); + $flag = 1; + if(!$dummy){ $filepre = $set{'file_pre'};} + $no = sprintf("%04d",$no); + my $filename; + my ($dlpath,$filedir); + if($delnote =~ /DLpath:(.+)\s/){ + $dlpath = $1; + $filename = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext"; + $filedir = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/"; + }else{ + $filename = "$set{'src_dir'}$filepre$no.$ext"; + } + + if(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value; + }elsif(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value; + }elsif(!(-e $filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value; + }else{ + if($mode ne 'admin'){ &error(403,"$filepre$no.$ext");} + } + } + } + if($mode ne 'admin' && !$findflag){ &error(402,$delno); } + if($flag){ + logwrite(@log); + &makehtml(); + } +} + +sub quit{ + my ($cookiename,$buff); + my $flag = 0; + my @tmpfiles = globfile("$set{'src_dir'}","\.temporary"); + foreach my $value (@tmpfiles){ if((stat($value))[10] < time - 60*60){ unlink("$value"); $flag++; } } + &makehtml() if($flag); + $buff =<<"EOM"; +$set{'html_head'} +EOM + if($in{'jcode'} || $in{'mode'} eq 'delete'){ + $buff .=<<"EOM"; + + +\n|; + } + $buff .=<<"EOM"; + +

+ +EOM + print "Content-type: text/html\n\n"; + print $buff; + exit; +} + +sub admin_mode{ + &errorclear() if($in{'mode'} eq 'errorclear'); + &delete('admin',$in{'admin_delno'}) if($in{'mode'} eq 'delete'); + + open(IN,$set{'log_file'})||error(303); + my @log = ; + close(IN); + + my ($header,$buff,$footer,$value); + $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + +EOM + + $buff .= leaddisp(0,1,1).'
NAMECOMMENTSIZEDATEMIMEORIG
Upload Info
'; + $buff .= qq|
\n

\n|."\n\n"; + shift(@log); + foreach (@log){ $buff .= makeitem($_,'admin'); } + $buff .= '
DELNAMECOMMENTSIZEADDRHOSTDATENOTEMIMEORIG


'; + + if($set{'error_level'}){ + $buff .= leaddisp(-1,0,1).'
Error Info
'; + $buff .= qq|
|; + $buff .= "\n\n"; + if(open(IN,$set{'error_log'})){ @log = reverse(); close(IN); foreach (@log){ my ($date,$no,$note,$addr,$host) = split(/<>/); $buff .= "\n"; }} + $buff .= "
DATEADDRHOSTNOTE
$date$addr$host$note


\n"; + } + + $buff .= leaddisp(-1,-1,0); + $buff .= '
Setting Info
'."\n\n"; + $buff .= tablestr('ƒXƒNƒŠƒvƒgVer',$set{'ver'}); + $buff .= tablestr('ƒƒCƒ“ƒƒOƒtƒ@ƒCƒ‹',$set{'log_file'}); + if($set{'error_level'}){ + $buff .= tablestr('ƒGƒ‰[ƒƒOƒtƒ@ƒCƒ‹',$set{'error_log'}); + if($set{'error_size'}){ $buff .= tablestr('ƒGƒ‰[ƒƒOÅ‘å—e—Ê',dispsize($set{'error_size'}*1024).' '.($set{'error_size'}*1024).'Bytes'); } + else{ $buff .= tablestr('ƒGƒ‰[ƒƒOÅ‘å—e—ʐ§ŒÀ','–³'); } + }else{ $buff .= tablestr('ƒGƒ‰[ƒƒO‹L˜^','–³'); } + $buff .= tablestr('•ÛŽŒ”',$set{'max_log'}); + $buff .= tablestr('Å‘å“Še—e—Ê',dispsize($set{'max_size'}*1024).' '.($set{'max_size'}*1024).'Bytes'); + + if($set{'min_flag'}){ $buff .= tablestr('Å¬§ŒÀ—e—Ê',dispsize($set{'min_size'}*1024).' '.($set{'min_size'}*1024).'Bytes'); } + else{ $buff .= tablestr('Å¬§ŒÀ—e—Ê',"–³"); } + if($set{'max_all_flag'}){ $buff .= tablestr('‘—e—ʐ§ŒÀ',dispsize($set{'max_all_size'}*1024).' '.($set{'max_all_size'}*1024).'Bytes'); } + else{ $buff .= tablestr('‘—e—ʐ§ŒÀ',"–³"); } + + $buff .= tablestr("ƒtƒ@ƒCƒ‹Ú“ªŽ«",$set{'file_pre'}); + $buff .= tablestr("HTML•Û‘¶ƒfƒBƒŒƒNƒgƒŠ",$set{'html_dir'}); + $buff .= tablestr("ƒtƒ@ƒCƒ‹•Û‘¶ƒfƒBƒŒƒNƒgƒŠ",$set{'src_dir'}); + if($set{'http_html_path'} && $set{'html_dir'} ne $set{'http_html_path'}){ $buff .= "\n";} + if($set{'http_src_path'} && $set{'src_dir'} ne $set{'http_src_path'}){ $buff .= "\n";} + $buff .= tablestr('1ƒy[ƒW‚É•\Ž¦‚·‚éƒtƒ@ƒCƒ‹”',$set{'pagelog'}); + if($set{'interval'} > 0){ $value = $set{'interval'}.'•b'; }else{ $value = '–³'; } + $buff .= tablestr('“¯ˆêIP“ŠeŠÔŠu•b”§ŒÀ',$value); + if($set{'up_ext'}){ $set{'up_ext'} =~ s/,/ /g; $buff .= tablestr('“Še‰Â”\Šî–{Šg’£Žq',$set{'up_ext'}); } + if($set{'deny_ext'}){ $set{'deny_ext'} =~ s/,/ /g; $buff .= tablestr('“Še‹ÖŽ~Šg’£Žq',$set{'deny_ext'}); } + if($set{'change_ext'}){ $set{'change_ext'} =~ s/,/ /g; $set{'change_ext'} =~ s/>/>/g; $buff .= tablestr('Šg’£Žq•ÏŠ·',$set{'change_ext'}); } + + if($set{'up_all'}){ $buff .= tablestr('Žw’èŠOŠg’£ŽqƒAƒbƒvƒ[ƒh‹–‰Â','—L'); if($set{'ext_org'}){ $buff .= tablestr('Žw’èŠOƒtƒ@ƒCƒ‹Šg’£Žq','ƒIƒŠƒWƒiƒ‹'); }else{ $buff .= tablestr('Žw’èŠOƒtƒ@ƒCƒ‹Šg’£Žq','bin'); }} + else{$buff .= tablestr('Žw’èŠOŠg’£ŽqƒAƒbƒvƒ[ƒh‹–‰Â','–³');} + + if($set{'find_crypt'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('ˆÃ†‰»ƒA[ƒJƒCƒuŒŸo(ZIP)',$value); + if($set{'binary_compare'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('ƒoƒCƒiƒŠ”äŠr',$value); + if($set{'post_flag'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('PostKey“Še§ŒÀ',$value); + if($set{'dlkey'}){ if($set{'dlkey'} == 2){$value = '•K{'}else{$value = '”CˆÓ';}}else{ $value = '–³';} + $buff .= tablestr('DLkey',$value); + if($set{'dummy_html'}){ if($set{'dummy_html'} == 3){$value = 'ALL'}elsif($set{'dummy_html'} == 2){$value = 'DLKey‚Ì‚Ý';}else{$value = '’ʏíƒtƒ@ƒCƒ‹‚Ì‚Ý';}}else{ $value = '–³';} + $buff .= tablestr('ŒÂ•ÊHTMLƒLƒƒƒbƒVƒ…',$value); + if($set{'disp_error'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('ƒ†[ƒUƒGƒ‰[•\Ž¦',$value); + if($set{'zero_clear'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('íœÏƒtƒ@ƒCƒ‹ƒŠƒXƒgŽ©“®Á‹Ž',$value); + if($set{'home_url'}){ $buff .= "\n";} + + $buff .= '
HTTP_HTML_PATH$set{'http_html_path'}
HTTP_SRC_PATH$set{'http_src_path'}
HOMEURL$set{'home_url'}
'; + + print "Content-type: text/html\n\n"; + print $buff; + exit; +} + +sub extfind{ + my $orgname = @_[0]; + my @filename = split(/\./,$orgname); + my $ext = $filename[$#filename]; + $ext =~ tr/[A-Z]/[a-z]/; + foreach my $value (split(/,/,$set{'change_ext'})){ my ($src,$dst) = split(/->/,$value); if($ext eq $src){ $ext = $dst; last; }} + foreach my $value (split(/,/,$set{'deny_ext'})){ if($ext eq $value){ &error(206,$ext); }} + foreach my $value (split(/,/,$set{'up_ext'})){ if ($ext eq $value) { return $value; } } + if(length($ext) >= 5 || length($ext) == 0){ $ext = 'bin'; } + unless ($ext =~ /^[A-Za-z0-9]+$/){ $ext = 'bin'; } + if($set{'up_all'} && $set{'ext_org'}){ return $ext;} + elsif($set{'up_all'}){ return 'bin'; } + return 0; +} + +sub conv_date{ + my @date = gmtime($_[0] + 9*60*60); + $date[5] -= 100; $date[4]++; + if ($date[5] < 10) { $date[5] = "0$date[5]" ; } if ($date[4] < 10) { $date[4] = "0$date[4]" ; } + if ($date[3] < 10) { $date[3] = "0$date[3]" ; } if ($date[2] < 10) { $date[2] = "0$date[2]" ; } + if ($date[1] < 10) { $date[1] = "0$date[1]" ; } if ($date[0] < 10) { $date[0] = "0$date[0]" ; } + my @w = ('Sun','Mon','Tue','Wed','Thu','Fri','Sat'); + return ("$date[5]/$date[4]/$date[3]($w[$date[6]]),$date[2]:$date[1]:$date[0]"); +} + +sub dispsize{ + my $size = $_[0]; + if($size >= 1024*1024*1024*100){ $size = int($size/1024/1024/1024).'GB';} + elsif($size >= 1024*1024*1024*10){ $size = sprintf("%.1fGB",$size/1024/1024/1024);} + elsif($size > 1024*1024*1024){ $size = sprintf("%.2fGB",$size/1024/1024/1024);} + elsif($size >= 1024*1024*100){ $size = int($size/1024/1024).'MB'; } + elsif($size > 1024*1024){ $size = sprintf("%.1fMB",$size/1024/1024); } + elsif($size > 1024){ $size = int($size/1024).'KB'; } + else{ $size = int($size).'B';} + return $size; +} + +sub makeitem{ + my ($src,$mode) = @_; my ($buff,$check,$target); + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$src); + if(!$dummy){ $filepre = $set{'file_pre'}; } + my $orgno = $no; + $no = sprintf("%04d",$no); + my $size = 0; + my $dlpath = 0; + + if($note =~ /DLpath:(.+)\s/){ + $dlpath = $1; + $size = dispsize(-s "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext"); + }else{ + $size = dispsize(-s "$set{'src_dir'}$filepre$no.$ext"); + } + + my $path = $set{'http_src_path'} || $set{'src_dir'}; + if($set{'link_target'}){ $target = qq| target="$set{'link_target'}"|; } + if($mode eq 'admin'){ + if($dlpath){ $path .= "$filepre$no.${ext}_$dlpath/"; } + if($addr eq $host){ undef $host; } + if($in{'checkmode'} eq 'allcheck'){$check = ' checked';} + $buff = "$filepre$no.$ext$comment$size$addr$host$date$note$mime$orgname\n"; + }else{ + my($d_com,$d_date,$d_size,$d_mime,$d_org); + if($set{'disp_comment'}){ $d_com = "$comment"; } if($set{'disp_size'}){ $d_size = "$size"; } if($set{'disp_date'}){ $d_date= "$date"; } + if($set{'disp_mime'}){ $d_mime = "$mime"; } if($set{'disp_orgname'}){ $d_org = "$orgname"; } + if(-e "$set{'src_dir'}$filepre$no.$ext.html"){$buff = "$filepre$no.$ext$d_com$d_size$d_date$d_mime$d_org\n";} + elsif($dlpath){$buff = "$filepre$no.$ext$d_com$d_size$d_date$d_mime$d_org\n";} + else{ $buff = "$filepre$no.$ext$d_com$d_size$d_date$d_mime$d_org\n";} + } + return $buff; +} + +sub makedummyhtml{ + my ($filename,$com,$file,$orgdlpath,$date,$mime,$orgname,$no) = @_; + my $buff; + + if(!$no){ + $buff = "$filename"; + $buff .= qq|Download $filename|; + $buff .= ''; + }else{ + $buff = cryptfiledl($com,$file,$orgdlpath,$date,$mime,$orgname,$no); + } + + open(OUT,">$set{'src_dir'}$filename.html")||&error(307,"$set{'src_dir'}$filename.html"); + print OUT $buff; + close(OUT); + chmod($set{'per_upfile'},"$set{'src_dir'}$filename.html"); + return 1; +} + +sub logwrite{ + my @log = @_; + open(OUT,"+>$set{'log_file'}")||&error(304); + eval{ flock(OUT, 2);}; + eval{ truncate(OUT, 0);}; + seek(OUT, 0, 0); + print OUT @log; + eval{ flock(OUT, 8);}; + close(OUT); + chmod($set{'per_upfile'},$set{'log_file'}); + return 1; +} + +sub binarycmp{ + my ($src,$dst) = @_; + return 0 if (-s $src != -s $dst); + open(SRC,$src)||return 0; open(DST,$dst)||return 0; + my ($buff,$buff2); + binmode(SRC); binmode(DST); seek(SRC,0,0); seek(DST,0,0); + while(read(SRC,$buff,8192)){ read(DST,$buff2,8192); if($buff ne $buff2){ close(SRC); close(DST); return 0; } } + close(SRC); close(DST); + return 1; +} + +sub init{ + my $buff; + if(open(OUT,">$set{'log_file'}")){ + print OUT "0<>0<>0<>1\n"; + close(OUT); + chmod($set{'per_logfile'},$set{'log_file'}); + }else{ + $buff = "ƒƒCƒ“ƒƒO‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½"; + } + + unless (-d "$set{'src_dir'}"){ + if(mkdir("$set{'src_dir'}",$set{'per_dir'})){ + chmod($set{'per_dir'},"$set{'src_dir'}"); + open(OUT,">$set{'src_dir'}index.html"); + close(OUT); + chmod($set{'per_upfile'},"$set{'src_dir'}index.html"); + }else{ + $buff .= "Source•Û‘¶ƒfƒBƒŒƒNƒgƒŠ‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½"; + } + } + + unless (-d "$set{'html_dir'}"){ + if(mkdir("$set{'html_dir'}",$set{'per_dir'})){ + chmod($set{'per_dir'},"$set{'html_dir'}"); + }else{ + $buff .= "HTML•Û‘¶ƒfƒBƒŒƒNƒgƒŠ‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½"; + } + } + + if($buff){ + $buff .= "ƒfƒBƒŒƒNƒgƒŠ‚ɏ‘‚«ž‚ÝŒ ŒÀ‚ª‚ ‚é‚©Šm”F‚µ‚Ä‚­‚¾‚³‚¢"; + &error_disp($buff,'init'); + } +} + +sub check_postkey{ + my $inputkey = @_[0]; + my @key = split(/,/,$set{'post_key'}); + foreach my $key (@key){ if($inputkey eq $key){ return 1; } } + return 0; +} + +sub leaddisp{ + my @src = @_; + my ($str,$count); + foreach my $value (@src){ + my ($mark,$name,$link); $count++; + if($count == 1){ $name = 'Upload Info'; $link = 'up'; } + elsif($count == 2){ $name = 'Error Info'; $link = 'error'; next if(!$set{'error_level'}); } + elsif($count == 3){ $name = 'Setting Info'; $link = 'set'; } + if($value){ if($value > 0){ $mark = '¥'; }else{ $mark = '£'; } $str .= qq|${mark}${name} |; } + else{ $str .= qq|[$name] |; } + } + return $str; +} + +sub errorclear{ + open(OUT,">$set{'error_log'}")||return 0; + eval{ flock(OUT, 2);}; eval{ truncate(OUT, 0);}; seek(OUT, 0, 0); eval{ flock(OUT, 8);}; close(OUT); + chmod($set{'per_upfile'},$set{'log_file'}); + return 1; +} + +sub tablestr{ + my ($value1,$value2) = @_; + return ("$value1$value2\n"); +} + +sub globfile{ + my ($src_dir,$filename) = @_; + opendir(DIR,$src_dir)||return 0; my @dir = readdir(DIR); closedir(DIR); + my @new = (); foreach my $value (@dir){ push(@new,"$src_dir$value") if($value =~ /$filename/ && !(-d "$src_dir$value")); } + return @new; +} + +sub globdir{ + my ($src_dir,$dir) = @_; + opendir(DIR,$src_dir)||return 0; my @dir = readdir(DIR); closedir(DIR); + my @new = (); foreach my $value (@dir){ if($value eq '.' ||$value eq '..' ){ next; } push(@new,"$src_dir$value") if($value =~ /$dir/ && (-d "$src_dir$value")); } + return @new; +} + +sub error_disp{ + my ($message,$mode) = @_; + my $url; + if($mode eq 'init'){ $url = qq|[ƒŠƒ[ƒh]|; }else{ $url = qq|[–ß‚é]|; } + my $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + +
+ +$message + + +
$url
+

+ + + + + +
DATE$in{'date'}
ADDR$in{'addr'}
HOST$in{'host'}
+
+ +EOM + print "Content-type: text/html\n\n"; + print $buff; + exit; +} + +sub error{ + my ($no,$note) = @_; + if (length($note) > 64) { $note = substr($note,0,64).'...'; } + $note =~ s/&/&/g; $note =~ s/\"/"/g; $note =~ s//>/g; $note =~ s/\r//g; $note =~ s/\n//g; $note =~ s/\t//g; $note =~ s/\0//g; + my ($message,$dispmsg,$flag); + if($no == 98){ $message = ""; } + elsif($no == 99){ $message = "UpFile‚È‚µ"; } + elsif($no == 101){ $message = "“Še‹ÖŽ~HOST"; } + elsif($no == 106){ $flag = 1; $message = "POSTƒTƒCƒY’´‰ß"; $note = dispsize($note); $dispmsg= 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ƒAƒbƒvƒ[ƒhƒtƒ@ƒCƒ‹('.$note.')‚Í Å‘å—e—ʐݒè('.dispsize($set{'max_size'}*1024).')‚ð‰z‚¦‚Ä‚¢‚Ü‚·';} + elsif($no == 107){ $flag = 1; $message = "POSTƒTƒCƒY‰ß¬"; $note = dispsize($note); $dispmsg= 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ƒAƒbƒvƒ[ƒhƒtƒ@ƒCƒ‹('.$note.')‚Í Å¬—e—ʐݒè('.dispsize($set{'min_size'}*1024).')–¢–ž‚Å‚·';} +# elsif($no == 108){ $flag = 1; $message = "POSTƒf[ƒ^•sŠ®‘S"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½POSTƒf[ƒ^‚ª•sŠ®‘S‚Å‚·';} + elsif($no == 109){ $flag = 1; $message = "POSTKey•sˆê’v"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½POSTKey‚ªˆê’v‚µ‚Ü‚¹‚ñ';} + elsif($no == 202){ $flag = 1; $message = "Šg’£Žq‡‚킸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½“Še‚Å‚«‚éŠg’£Žq‚Í'.$set{'up_ext'}.'‚Å‚·';} + elsif($no == 203){ $flag = 1; $message = "“Še‘‚·‚¬"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½“¯ˆêIPƒAƒhƒŒƒX‚©‚ç'.$set{'interval'}.'•bˆÈ“à‚ɍēŠe‚Å‚«‚Ü‚¹‚ñ';} + elsif($no == 204){ $flag = 1; $message = "ˆêŽžƒtƒ@ƒCƒ‹‘‚«ž‚ß‚¸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ˆêŽžƒtƒ@ƒCƒ‹‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½';} + elsif($no == 205){ $flag = 1; $message = "“¯ˆêƒtƒ@ƒCƒ‹‘¶Ý"; $note =~ /([^\/]+)$/; my $filename = $1; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½“¯ˆêƒtƒ@ƒCƒ‹‚ª '.$filename.' ‚É‘¶Ý‚µ‚Ü‚·';} + elsif($no == 206){ $flag = 1; $message = "‹ÖŽ~Šg’£Žq"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½Šg’£Žq '.$note.' ‚̓Aƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ';} + elsif($no == 303){ $flag = 1; $message = "ƒƒOƒtƒ@ƒCƒ‹‚ɓǂݍž‚ß‚¸"; $dispmsg = 'ƒƒCƒ“ƒƒO‚̓ǂݍž‚Ý‚ÉŽ¸”s‚µ‚Ü‚µ‚½';} + elsif($no == 304){ $flag = 1; $message = "ƒƒOƒtƒ@ƒCƒ‹‚ɏ‘‚«ž‚ß‚¸"; $dispmsg = 'ƒƒCƒ“ƒƒO‚̏‘‚«ž‚Ý‚ÉŽ¸”s‚µ‚Ü‚µ‚½';} + elsif($no == 306){ $message = "ƒtƒ@ƒCƒ‹ƒŠƒXƒgHTML‘‚«ž‚ß‚¸";} + elsif($no == 307){ $message = "ƒtƒ@ƒCƒ‹HTMLƒtƒ@ƒCƒ‹‘‚«ž‚ß‚¸";} + elsif($no == 401){ $flag = 1; $message = "íœNo.ŒŸo‚Å‚«‚¸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$note.' ‚©‚çíœNo.‚ðŒŸo‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$set{'file_pre'}.'0774.zip‚̏ꍇ No.‚É‚Í 774 ‚ð“ü—Í‚µ‚Ü‚·';} + elsif($no == 402){ $flag = 1; $note = sprintf("%04d",int($note)); $message = "íœNo.‘¶Ý‚¹‚¸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$set{'file_pre'}.$note.'.*** ‚̓ƒCƒ“ƒƒO‚É‘¶Ý‚µ‚Ü‚¹‚ñ';} + elsif($no == 403){ $flag = 1; $message = "íœƒAƒNƒZƒX‹‘”Û"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ƒtƒ@ƒCƒ‹íœðŒ‚Í–ž‚½‚µ‚Ä‚¢‚Ü‚·‚ª '.$note.' ‚̃tƒ@ƒCƒ‹‚̍폜‚ª‹‘”Û‚³‚ê‚Ü‚µ‚½ƒAƒNƒZƒX‚ª‰ßè‚ȏꍇ“™‚ÍŽžŠÔ‚ð’u‚¢‚čđ€ì‚·‚é‚ƍ폜‚Å‚«‚邱‚Æ‚ª‚ ‚è‚Ü‚·';} + elsif($no == 404){ $flag = 1; $message = "íœKey•sˆê’v"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$note.' íœKey‚ªˆê’v‚µ‚Ü‚¹‚ñ‚Å‚µ‚½';} + + elsif($no == 51){ $flag = 1; $message = "[DLMode] No.Œ©‚‚©‚炸"; $dispmsg = '[DLMode] ƒtƒ@ƒCƒ‹‚ªŒ©‚‚©‚è‚Ü‚¹‚ñ‚Å‚µ‚½'.$note.' ‚©‚çƒtƒ@ƒCƒ‹No.‚ðŒŸo‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'; } + elsif($no == 52){ $flag = 1; $message = "[DLMode] FileŒ©‚‚©‚炸"; $dispmsg = '[DLMode] ƒtƒ@ƒCƒ‹‚ªŒ©‚‚©‚è‚Ü‚¹‚ñ‚Å‚µ‚½'.$set{'file_pre'}.$note.'.*** ‚̓ƒCƒ“ƒƒO‚É‘¶Ý‚µ‚Ü‚¹‚ñ'; } + elsif($no == 53){ $flag = 1; $message = "[DLMode] DLkey–¢Ý’è"; $dispmsg = '[DLMode] orgDLkeyError'.$note.' DLKey‚ª–¢Ý’è‚Å‚·'; } + elsif($no == 54){ $flag = 1; $message = "[DLMode] DLkey•sˆê’v"; $dispmsg = '[DLMode] orgDLkeyError'.$note.' DLKey‚ªˆê’v‚µ‚Ü‚¹‚ñ‚Å‚µ‚½'; } + elsif($no == 55){ $flag = 1; $message = "[DLMode] File Oepn Error"; $dispmsg = '[DLMode] Open Error'.$note.' ƒtƒ@ƒCƒ‹‚̓ǂݍž‚Ý‚ÉŽ¸”s‚µ‚Ü‚µ‚½'; } + elsif($no == 56){ $flag = 1; $message = "[DLMode] File Not Found"; $dispmsg = '[DLMode] Not Found'.$note.' ƒtƒ@ƒCƒ‹‚ª‘¶Ý‚µ‚Ü‚¹‚ñ'; } + + elsif($no == 61){ $flag = 1; $message = "DLkey–¢Ý’è"; $dispmsg = 'DLKey‚ª–¢Ý’è‚Å‚·'; } + + if($note){$message .= ' ';} + eval { close($in{'upfile'}); }; + unlink($in{'tmpfile'}); + if($set{'error_level'} && $no > 100){ + unless(-e $set{'error_log'}){ + open(OUT,">$set{'error_log'}"); + close(OUT); + chmod($set{'per_logfile'},$set{'error_log'}); + } + if($set{'error_size'} && ((-s $set{'error_log'}) > $set{'error_size'} * 1024)){ + my $err_bkup = "$set{'error_log'}.bak.cgi"; + unlink($err_bkup); + rename($set{'error_log'},$err_bkup); + open(OUT,">$set{'error_log'}"); + close(OUT); + chmod($set{'per_logfile'},$set{'error_log'}); + } + open(OUT,">>$set{'error_log'}"); + print OUT "$in{'date'}<>$no<>$message$note<>$in{'addr'}<>$in{'host'}<>1\n"; + close(OUT); + } + &error_disp($dispmsg) if($flag && $set{'disp_error'}); + &quit(); +} + +sub dlfile{ + my $msg; + my ($orgdlkey,$orgdlpath); + my ($dlext,$dlfilepre); + my ($dl_date,$dl_comment,$dl_size,$dl_mime,,$dl_orgname); + my $dlno = 0; + my $findflag; + + open(IN,$set{'log_file'})||&error(303); + my @log = ; + close(IN); + shift(@log); + + if($in{'file'} =~ /(\d+)/){ $dlno = $1; } + if($dlno == 0) { &error(51,$in{'file'}); } + + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value); + my @note = split(/,/,$note); + if(int($dlno) == $no){ + $dl_comment = $comment; + $dl_mime = $mime; + $dl_date = $date; + $dl_orgname = $orgname; + $dlext = $ext; + $dlfilepre = $filepre; + foreach my $tmpnote (@note){ + if($tmpnote =~ /\!--\sDLKey:(.+)\s--.*\!--\sDLpath:(.+)\s--/){ + $orgdlkey = $1; + $orgdlpath = $2; + last; + } + } + $findflag = 1; + last; + } + } + + my $dlfile = $dlfilepre.sprintf("%04d",int($dlno)).'.'.$dlext; + if(!(-e "$set{'src_dir'}${dlfile}_$orgdlpath/$dlfile")){ &error(56,"$dlfile----$set{'src_dir'}${dlfile}_$orgdlpath/$dlfile"); } + + if($in{'dlkey'}){ + my $dlsalt = substr($orgdlkey,0,2); + my $dlkey = crypt($in{'dlkey'},$dlsalt); + + if($findflag == 0){ &error(52,$dlfile); } + elsif(!$orgdlkey){ &error(53,$dlfile); } + elsif($orgdlkey ne $dlkey && $set{'admin_pass'} ne $in{'dlkey'}){ &error(54,$dlfile); } + #print "Location: $set{'http_src_path'}${dlfile}_$orgdlpath/$dlfile\n\n"; + my $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + + + +
+
+ + +
”ò‚΂Ȃ¢ê‡‚Í ‚±‚¿‚ç ‚©‚ç
+
+ +EOM + print "Content-type: text/html\n\n"; + print $buff; + }else{ + my $buff = cryptfiledl($dl_comment,$dlfile,$orgdlpath,$dl_date,$dl_mime,$dl_orgname,$dlno); + print "Content-type: text/html\n\n"; + print $buff; + } + exit; +} + +sub cryptfiledl{ + my($com,$file,$orgdlpath,$date,$mime,$orgname,$no) = @_; + my($d_com,$d_date,$d_size,$d_mime,$d_org); + + if($set{'disp_comment'}){ $d_com = "COMMENT$com"; } if($set{'disp_size'}){ $d_size = "SIZE".dispsize(-s "$set{'src_dir'}${file}_$orgdlpath/$file")." (".(-s "$set{'src_dir'}${file}_$orgdlpath/$file")."bytes)".""; } if($set{'disp_date'}){ $d_date= "DATE$date"; } + if($set{'disp_mime'}){ $d_mime = "ORGMIME$mime"; } if($set{'disp_orgname'}){ $d_org = "ORGNAME$orgname"; } + + my $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + +
+
+$file ‚É‚ÍDLKey‚ªÝ’肳‚ê‚Ä‚¢‚Ü‚· + + + + +$d_com$d_date$d_size$d_mime$d_org + + + +
+ + +
DLKey:
+
+ +EOM + + return $buff; +} \ No newline at end of file diff --git a/SnUploader/snup_051010e/uploader/upload.cgi b/SnUploader/snup_051010e/uploader/upload.cgi new file mode 100644 index 0000000..aa2993e --- /dev/null +++ b/SnUploader/snup_051010e/uploader/upload.cgi @@ -0,0 +1,1078 @@ +#!/usr/bin/perl +use vars qw(%set %in); +use strict; +$set{'log_file'} = './log.cgi'; #ƒƒOƒtƒ@ƒCƒ‹–¼ +$set{'max_log'} = 30; #•ÛŽŒ” +$set{'max_size'} = 1*1024; #Å‘å“Še—e—Ê(KB) +$set{'min_flag'} = 0; #Å¬—e—ʐ§ŒÀ‚ðŽg—p‚·‚é=1 +$set{'min_size'} = 100; #Å¬“Še—e—Ê(KB) +$set{'max_all_flag'} = 0; #‘—e—ʐ§ŒÀ‚ðŽg—p‚·‚é=1 +$set{'max_all_size'} = 20*1024; #‘§ŒÀ—e—Ê(KB) +$set{'file_pre'} = 'up'; #ƒtƒ@ƒCƒ‹Ú“ªŽ« +$set{'pagelog'} = 10; #1ƒy[ƒW‚É•\Ž¦‚·‚éƒtƒ@ƒCƒ‹” +$set{'base_html'} = 'upload.html'; #1ƒy[ƒW–ڂ̃tƒ@ƒCƒ‹–¼ +$set{'interval'} = 0; #“¯ˆêIP“ŠeŠÔŠu•b” +$set{'deny_host'} = ''; #“Še‹ÖŽ~IP/HOST ,‚Å‹æØ‚é ex.(bbtec.net,219.119.66,ac.jp) +$set{'admin_name'} = 'admin'; #ŠÇ—ŽÒƒƒOƒCƒ“ID +$set{'admin_pass'} = '1234'; #ŠÇ—ŽÒƒpƒXƒ[ƒh + +# ˆÈ‰º5€–Ú‚ðÄÝ’è‚·‚éÛ‚É‚ÍPATHCƒfƒBƒŒƒNƒgƒŠ‚Í / ‚ŏI‚í‚邱‚Æ +# $set{'html_dir'},$set{'base_cgi'}‚ð ./ ˆÈŠO‚ɐݒ肷‚éê‡, +# ‚Ü‚½‚ÍDLkey‚ðŽg—p‚µ ‚È‚¨‚©‚ÂHTMLƒLƒƒƒbƒVƒ…($set{'dummy_html'} = 2 or 3)‚ðŽg—p‚·‚éê‡‚Í +# $set{'base_cgi'} , $set{'http_html_path'} , $set{'http_src_path'} ‚ðƒtƒ‹ƒpƒX(http://`` or /``)‚Å‹Lq‚·‚é +$set{'html_dir'} = './'; # “à•”HTML•Û‘¶ƒfƒBƒŒƒNƒgƒŠ +$set{'src_dir'} = './src/'; # “à•”ƒtƒ@ƒCƒ‹•Û‘¶ƒfƒBƒŒƒNƒgƒŠ +$set{'base_cgi'} = './upload.cgi'; # ‚±‚̃XƒNƒŠƒvƒg–¼ http://`‚ÌŽw’è‰Â”\ +$set{'http_html_path'} = './'; # htmlŽQÆ httpPATH http://`‚ÌŽw’è‰Â”\ +$set{'http_src_path'} = './src/'; # fileŽQÆ httpPATH http://`‚ÌŽw’è‰Â”\ + +$set{'dlkey'} = 0; # DLKey‚ðŽg—p‚·‚é=1,DLkey•K{=2 +$set{'up_ext'} = 'txt,lzh,zip,rar,gca,mpg,mp3,avi,swf,bmp,jpg,gif,png'; #ƒAƒbƒvƒ[ƒh‚Å‚«‚éŠî–{Šg’£Žq ”¼Šp‰p”¬•¶Žš ,‚Å‹æØ‚é +$set{'up_all'} = 0; #“o˜^ˆÈŠO‚Ì‚à‚Ì‚àUP‚³‚¹‚ç‚ê‚é‚悤‚É‚·‚é=1 +$set{'ext_org'} = 0; #$set{'up_all'}‚ª1‚ÌŽžƒIƒŠƒWƒiƒ‹‚ÌŠg’£Žq‚É‚·‚é=1 +$set{'deny_ext'} = 'php,php3,phtml,rb,sh,bat,dll'; #“Še‹ÖŽ~‚ÌŠg’£Žq ”¼Šp‰p”¬•¶Žš ,‚Å‹æØ‚é +$set{'change_ext'} = 'cgi->txt,pl->txt,log->txt,jpeg->jpg,mpeg->mpg'; #Šg’£Žq•ÏŠ· ‘O->Œã ”¼Šp‰p”¬•¶Žš ,‚Å‹æØ‚é + +$set{'home_url'} = ''; #[HOME]‚̃Šƒ“ƒNæ ‘Š‘΃pƒX–”‚Í http://‚©‚çŽn‚Ü‚éâ‘΃pƒX +$set{'html_all'} = 1; #[ALL]‚ðo‚·=1 +$set{'dummy_html'} = 0; #ƒtƒ@ƒCƒ‹ŒÂ•ÊHTML‚ðì¬‚·‚é ’Êíƒtƒ@ƒCƒ‹‚Ì‚Ý=1,DLKeyÝ’èƒtƒ@ƒCƒ‹‚Ì‚Ý=2,‚·‚ׂÄ=3 +$set{'find_crypt'} = 1; #ˆÃ†‰»ZIP‚ðŒŸo‚·‚é=1 +$set{'binary_compare'} = 0; #Šù‘¶ƒtƒ@ƒCƒ‹‚ƃoƒCƒiƒŠ”äŠr‚·‚é=1 +$set{'post_flag'} = 0; #PostKey‚ðŽg—p‚·‚é=1 +$set{'post_key'} = 'postkey'; #PostKey ,‚Å‹æØ‚é‚Æ•¡”Žw’è ex.(postkey1,postkey2) +$set{'disp_error'} = 1; #ƒ†[ƒU[‚ɃGƒ‰[‚ð•\Ž¦‚·‚é=1 +$set{'error_level'} = 1; #ƒGƒ‰[ƒƒO‚ð‹L˜^‚·‚é=1 +$set{'error_log'} = './error.cgi'; #ƒGƒ‰[ƒƒOƒtƒ@ƒCƒ‹–¼ +$set{'error_size'} = 1024; # ƒGƒ‰[ƒƒOÅ‘å—e—Ê(KB) §ŒÀ‚È‚µ=0 +$set{'zero_clear'} = 1; #ƒtƒ@ƒCƒ‹‚ªŒ©‚‚©‚ç‚È‚¢ê‡ƒƒO‚©‚çíœ‚·‚é=1 + +$set{'disp_comment'} = 1; #ƒRƒƒ“ƒg‚ð•\Ž¦‚·‚é=1 +$set{'disp_date'} = 1; #“ú•t‚ð•\Ž¦‚·‚é=1 +$set{'disp_size'} = 1; #ƒTƒCƒY‚ð•\Ž¦‚·‚é=1 +$set{'disp_mime'} = 1; #MIMETYPE‚ð•\Ž¦‚·‚é=1 +$set{'disp_orgname'} = 1; #ƒIƒŠƒWƒiƒ‹ƒtƒ@ƒCƒ‹–¼‚ð•\Ž¦‚·‚é=1 + +$set{'per_upfile'} = 0666; #ƒAƒbƒvƒ[ƒhƒtƒ@ƒCƒ‹‚̃p[ƒ~ƒbƒVƒ‡ƒ“ suexec=0604,other=0666 +$set{'per_dir'} = 0777; #ƒ\[ƒXƒAƒbƒvƒfƒBƒŒƒNƒgƒŠ‚̃p[ƒ~ƒbƒVƒ‡ƒ“ suexec=0701,other=0777 +$set{'per_logfile'} = 0666; #ƒƒOƒtƒ@ƒCƒ‹‚̃p[ƒ~ƒbƒVƒ‡ƒ“@suexec=0600,other=0666 +$set{'link_target'} = ''; #target‘®« + +#------ +$set{'ver'} = '2005/10/10e'; +$set{'char_delname'} = 'D'; + +$in{'time'} = time(); $in{'date'} = conv_date($in{'time'}); +$in{'addr'} = $ENV{'REMOTE_ADDR'}; +$in{'host'} = gethostbyaddr(pack('C4',split(/\./, $in{'addr'})), 2) || $ENV{'REMOTE_HOST'} || '(none)'; + +if($in{'addr'} eq $in{'host'}){ $in{'host'} = '(none)'; } + +$set{'html_head'} =<<"EOM"; + + + + + + + + + +Uploader +EOM + +$set{'html_css'} =<<"EOM"; + + +EOM + +unless(-e $set{'log_file'}){ &init; } +unless(-e $set{'base_html'}){ &makehtml; } +{ #ƒfƒR[ƒh + my $readbuffsize = 1024*8; + if ($ENV{'REQUEST_METHOD'} eq "POST" && $ENV{'CONTENT_TYPE'} =~ /multipart\/form-data/i){ + if ($ENV{'CONTENT_LENGTH'} > ($set{'max_size'} * 1024 + 1024)){ if($ENV{'SERVER_SOFTWARE'} =~ /IIS/){ while(read(STDIN,my $buff,$readbuffsize)){} } &error(106,$ENV{'CONTENT_LENGTH'});} + }else{ + if ($ENV{'CONTENT_LENGTH'} > 1024*100){ error(98); } + } + my %ck; foreach(split(/;/,$ENV{'HTTP_COOKIE'})){ my($key,$val) = split(/=/); $key =~ s/\s//g; $ck{$key} = $val;} + my @ck = split(/<>/,$ck{'SN_USER'}); + if(length($ck[0]) < 5){ + my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); srand; + my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))]; + $in{'user'} = crypt($in{'addr'}.$in{'time'}, $salt); + }else{ $in{'user'} = $ck[0]; } + + if($ENV{'REQUEST_METHOD'} eq "POST" && $ENV{'CONTENT_TYPE'} =~ /multipart\/form-data/i){ + my %FORM; my $subbuff; my $filename; my $valuename; + my $upflag; my $valueflag; my $bound; my $mime; + my $readlength = 0; + my $random = int(rand(900000)) + 100000; + my $endflag = 0; + binmode(STDIN); + while(){ $readlength += length($_); if(/(--.*)\r\n$/){ $bound = $1; last; }} + if(-e "$set{'src_dir'}$random.temporary"){ $random++; } + if(-e "$set{'src_dir'}$random.temporary"){ $random++; } + if(-e "$set{'src_dir'}$random.temporary"){ &error(204); } + + open(OUT,">$set{'src_dir'}$random.temporary"); + binmode(OUT); + my $formbuff; + while(my $buff = ){ + $readlength += length($buff); + if($upflag == 1){ if($buff =~ /Content-Type:\s(.*)\r\n$/i){ $mime = $1; } $upflag++; next;} + if($upflag == 2){ + while(1){ + my $readblen; my $filebuff; + if($ENV{'CONTENT_LENGTH'} - $readlength < $readbuffsize){ $readblen = $ENV{'CONTENT_LENGTH'} - $readlength; } + else{ $readblen = $readbuffsize; } + if(!read(STDIN,$filebuff,$readblen)){ last }; + $readlength += length($filebuff); + if($ENV{'CONTENT_LENGTH'} - $readlength < $readbuffsize){ + my $readblen = $ENV{'CONTENT_LENGTH'} - $readlength; + read(STDIN,my $subbuff,$readblen); + $readlength += length($subbuff); + $filebuff .= $subbuff; + $endflag = 1; + } + my $offset = index($filebuff,$bound); + if($offset >= 0){ + $buff = substr($filebuff,0,$offset-2); my $subbuff = substr($filebuff,$offset); + print OUT $buff; $upflag = 0; $formbuff .= $subbuff; last; + }else{ print OUT $filebuff; } + } + if($endflag){ last; } + next; + } + if($buff =~ /^Content-Disposition:\sform-data;\sname=\"upfile\";\sfilename=\"(.*)\"\r\n$/i){ + $filename = $1; $upflag = 1; next; + } + $formbuff .= $buff; + } + close(OUT); + chmod($set{'per_upfile'},"$set{'src_dir'}$random.temporary"); + { my $value; + foreach my $buff(split(/\r\n/,$formbuff)){ + $buff .= "\r\n"; + if($buff =~ /^$bound\-\-/){ $FORM{$value} =~ s/\r\n$//; $valueflag = 0; last;} + if($buff =~ /^$bound/){ $FORM{$value} =~ s/\r\n$//; $valueflag = 0; next;} + if($valueflag == 1){ $valueflag++; next; } + if($valueflag == 2){ $FORM{$value} .= $buff; } + if($buff =~ /^Content-Disposition: form-data; name=\"(.+)\"\r\n$/){ $value = $1; $valueflag++; } + } + } + if($upflag || $valueflag){ unlink("$set{'src_dir'}$random.temporary"); &error(108);} + + $in{'org_pass'} = $in{'pass'} = $FORM{'pass'}; + $in{'dlkey'} = $FORM{'dlkey'}; + $in{'comment'} = $FORM{'comment'}; + $in{'jcode'} = $FORM{'jcode'}; + $in{'postkey'} = $FORM{'postkey'}; + $in{'upfile'} = $filename; + $in{'type'} = $mime; + $in{'tmpfile'} = "$set{'src_dir'}$random.temporary"; + $in{'orgname'} = $in{'upfile'}; + if(-s "$in{'tmpfile'}" == 0){ unlink("$in{'tmpfile'}"); &error(99) } + if($set{'min_flag'} && ((-s "$in{'tmpfile'}") < $set{'min_size'} * 1024)){ &error(107,(-s "$in{'tmpfile'}"));} + if((-s "$in{'tmpfile'}") > $set{'max_size'} * 1024){ &error(106,(-s "$in{'tmpfile'}"));} + if($set{'post_flag'} && !check_postkey($in{'postkey'})){ &error(109); } + if($set{'dlkey'} == 2 && !$in{'dlkey'}){ unlink("$in{'tmpfile'}"); &error(61); } + }else{ + my ($buffer,%FORM,@admin_delno); + if ($ENV{'REQUEST_METHOD'} eq "POST") { read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});} + else { $buffer = $ENV{'QUERY_STRING'}; } + my @pairs = split(/&/,$buffer); + foreach my $pair (@pairs) { + my ($name, $value) = split(/=/, $pair); + $value =~ tr/+/ /; + $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; + if($name eq 'admin_delno'){ + push(@admin_delno,$value); + }else{ + $FORM{$name} = $value; + } + } + $in{'delpass'} = $FORM{'delpass'}; + $in{'delno'} = $FORM{'delno'}; + $in{'file'} = $FORM{'file'}; + $in{'dlkey'} = $FORM{'dlkey'}; + $in{'mode'} = $FORM{'mode'}; + $in{'checkmode'} = $FORM{'checkmode'}; + $in{'admin_delno'} = join(',',@admin_delno); + if($in{'delno'} eq $set{'admin_name'} && $in{'delpass'} eq $set{'admin_pass'}){ &admin_mode(); } + if(!$in{'delno'} && $in{'delpass'} eq $set{'admin_pass'}){ &makehtml; &quit; } + } + + my @denyhost = split(/,/,$set{'deny_host'}); + foreach my $value (@denyhost){ + if ($in{'addr'} =~ /$value/ || $in{'host'} =~ /$value/){ &error(101);} + } + + my @form = ($in{'comment'},$in{'orgname'},$in{'type'},$in{'dlkey'}); + foreach my $value (@form) { + if (length($value) > 128) { $value = substr($value,0,128).'...'; } +# $value =~ s/&/&/g; + $value =~ s/"/"/g; + $value =~ s//>/g; + $value =~ s/\r//g; + $value =~ s/\n//g; + $value =~ s/\t//g; + $value =~ s/\0//g; + } + ($in{'comment'},$in{'orgname'},$in{'type'},$in{'dlkey'}) = @form; +} + + +if($in{'mode'} eq 'delete'){ &delete(); &quit(); } +if($in{'mode'} eq 'dl'){ &dlfile;} #DL +if(!$in{'upfile'}){ &error(99); } + +{#ƒƒCƒ“ˆ— + + open(IN,$set{'log_file'})||&error(303); + my @log = ; + close(IN); + my ($no,$lastip,$lasttime) = split(/<>/,$log[0]); + + if($set{'interval'} && $in{'time'} <= ($lasttime + $set{'interval'}) && $in{'addr'} eq $lastip){ &error(203);} + $in{'ext'} = extfind($in{'orgname'}); if(!$in{'ext'}){ &error(202); } + + my $orgname; + if(split(/\//,$in{'orgname'}) > split(/\\/,$in{'orgname'})){ my @name = split(/\//,$in{'orgname'}); $orgname = $name[$#name]; } + else{ my @name = split(/\\/,$in{'orgname'}); $orgname = $name[$#name];} + + my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); + srand; + my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))]; + $in{'pass'} = crypt($in{'pass'}, $salt); + + if($set{'binary_compare'}){ + my @files = globfile("$set{'src_dir'}",".*"); + my @dir = globdir("$set{'src_dir'}",".*"); + foreach my $dir (@dir){ push(@files,globfile($dir."/",".*")); } + foreach my $value (@files){ + next if($value =~ /\.temporary$/); + if(binarycmp($in{'tmpfile'},$value)){ unlink($in{'tmpfile'}); &error(205,$value);} + } + } + + if($set{'find_crypt'}){ + open(FILE,$in{'tmpfile'}); binmode(FILE); seek(FILE,0,0); read(FILE,my $buff,4); my $crypt_flag = 0; + if($buff =~ /^\x50\x4b\x03\x04$/){ seek(FILE,6,0); read(FILE,my $buff,1); $crypt_flag = 1 if(($buff & "\x01") eq "\x01"); } + close(FILE); + $in{'comment'} = '*'.$in{'comment'} if($crypt_flag); + } + + open(IN,$set{'log_file'})||&error(303); + @log = ; + close(IN); + ($no,$lastip,$lasttime) = split(/<>/,$log[0]); + shift(@log); + $no++; + my $tmpno = sprintf("%04d",$no); + + my $dlsalt; + my $filedir; + my $allsize = (-s $in{'tmpfile'}); + + if($set{'dlkey'} && $in{'dlkey'}){ + my @salt = ('a'..'z', 'A'..'Z', '0'..'9'); srand; + for (my $c = 1; $c <= 20; ++$c) { $dlsalt .= $salt[int(rand(@salt))]; } + $filedir = "$set{'src_dir'}$set{'file_pre'}${tmpno}.$in{'ext'}_$dlsalt/"; + mkdir($filedir,$set{'per_dir'}); + rename("$in{'tmpfile'}","$filedir$set{'file_pre'}$tmpno.$in{'ext'}"); + open(OUT,">${filedir}index.html"); + close(OUT); + chmod($set{'per_upfile'},"${filedir}index.html"); + $in{'comment'} = '[DLKey] '.$in{'comment'}; + }else{ + undef $in{'dlkey'}; + rename("$in{'tmpfile'}","$set{'src_dir'}$set{'file_pre'}$tmpno.$in{'ext'}"); + } + + if (length($orgname) > 128) { $orgname = substr($orgname,0,128).'...'; } + + my @note; + if($set{'post_flag'} && $set{'post_key'}){ + push(@note,'PostKey:'.$in{'postkey'}); + } + if($ENV{'SERVER_SOFTWARE'} =~ /Apache|IIS/){ + my $disptime; + my $time = time() - $in{'time'}; + my @str = ('Upload:','•b'); + my $disptime = $time.$str[1]; + push(@note,$str[0].$disptime); + } + if($in{'dlkey'}){ + my @salt = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/'); srand; + my $salt = $salt[int(rand(@salt))] . $salt[int(rand(@salt))]; + my $crypt_dlkey = crypt($in{'dlkey'}, $salt); + push(@note,"DLKey"); + } + my $note = join(',',@note); + my $usersalt = substr($in{'user'},0,2); + my $userid = crypt($in{'user'},$usersalt); + $in{'time'} = time(); +# $in{'date'} = conv_date(time()); + my @new; + $new[0] = "$no<>$in{'addr'}<>$in{'time'}<>1\n"; + my $addlog = "$no<>$in{'ext'}<>$in{'date'}<>$in{'comment'}<>$in{'type'}<>$orgname<>$in{'addr'}<>$in{'host'}<>$in{'pass'},$userid<>$set{'file_pre'}<>$note<>1\n"; + $new[1] = $addlog; + +# open(OUT,">>./alllog.cgi"); print OUT $addlog; close(OUT); + + my $i = 2; + + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value); + if(!$dummy){ $filepre = $set{'file_pre'};} + $no = sprintf("%04d",$no); + + my $filename; + my $filedir; + if($note =~ /DLpath:(.+)\s/){ + my $dlpath = $1; + $filename = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext"; + $filedir = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/"; + }else{ + $filename = "$set{'src_dir'}$filepre$no.$ext"; + } + $allsize += (-s $filename); + + if($i <= $set{'max_log'} && !($set{'max_all_flag'} && $set{'max_all_size'}*1024 < $allsize)){ + if((-e $filename)||!$set{'zero_clear'}){ push(@new,$value); $i++; } + }else{ + if(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir); + }elsif(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir); + }elsif(-e $filename){ + push(@new,$value); + }else{ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } } rmdir($filedir); + } + } + } + logwrite(@new); + if($in{'dlkey'} && ( $set{'dummy_html'} == 2 || $set{'dummy_html'} == 3)){ + &makedummyhtml("$set{'file_pre'}$tmpno.$in{'ext'}",$in{'comment'},"$set{'file_pre'}$tmpno.$in{'ext'}",$dlsalt,$in{'date'},$in{'type'},$orgname,$no); + }elsif(!$in{'dlkey'} && ($set{'dummy_html'} == 1 || $set{'dummy_html'} == 3)){ + &makedummyhtml("$set{'file_pre'}$tmpno.$in{'ext'}"); + } + &makehtml(); &quit(); +} + +sub makehtml{ + + my ($buff,$init,$postval,$dlkey); + my $page = 0; my $i = 1; + + open(IN,$set{'log_file'})||&error(303); + my $log = my @log = ; + close(IN); + + if($log == 1){ $log++; $init++;} + my $lastpage = int(($log - 2)/$set{'pagelog'}) + 1; + $postval = ' obj.postkey.value = unescape(p[1]);' if($set{'post_flag'}); + my $header =<<"EOM"; +$set{'html_head'} + +$set{'html_css'} + +
Uploader
+

+Now.. Testing.. +

+EOM + my $maxsize = 'Max '.dispsize($set{'max_size'}*1024); + my ($minsize,$total); + if($set{'min_flag'}){ $minsize = 'Min '.dispsize($set{'min_size'}*1024).' - '; } + if($set{'max_all_flag'}){ $total .= ' Total '.dispsize($set{'max_all_size'}*1024);} + $header .= qq|
FILE $minsize$maxsize (*$set{'max_log'}Files$total)
|; + $header .=''; + $header .= ' DLKey: ' if($set{'dlkey'}); + $header .= ' +DELKey:
+COMMENT
+ + +
+'; + if($set{'post_flag'}){ $header .= 'PostKey
'; } + $header .= '
'; + + my $allsize = 0; + my @files = globfile("$set{'src_dir'}",".*"); + my @dir = globdir("$set{'src_dir'}",".*"); + foreach my $dir (@dir){ push(@files,globfile($dir."/",".*")); } + foreach my $value (@files){ $allsize += (-s "$value"); } + + $allsize = dispsize($allsize); + + my $footer = "
Used ${allsize}\n
"; + if($set{'up_all'} && !$set{'ext_org'}){ $footer .= $set{'up_ext'}.' +'; } + elsif(!$set{'up_all'}){ $footer .= $set{'up_ext'}; } + $footer .= "\n
No. key
\n"; + $footer .= "
\n\n"; + + my $info_title = "\n"; + if($set{'disp_comment'}){ $info_title .= ""; } if($set{'disp_size'}){ $info_title .= ""; } if($set{'disp_date'}){ $info_title .= ""; } + if($set{'disp_mime'}){ $info_title .= ""; } if($set{'disp_orgname'}){ $info_title .= ""; } + $info_title .= "\n"; + + my $home_url_link; + if($set{'home_url'}){ $home_url_link = qq|[HOME] |;} + if($set{'html_all'}){ + my $buff; my $no = 1; my $time = time; my $subheader; + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$dummy) = split(/<>/,$value); + if(!$dummy){ next; } + $buff .= makeitem($value); + } + $subheader .= "[ALL] "; + while($no <= $lastpage){ + if($no == $page) { $subheader .= "\[$no\] ";} + else{ if($no == 1){ $subheader .= "\[$no\] "} + else{$subheader .= "\[$no\] ";} } + $no++; + } + $subheader .= $info_title; + open(OUT,">$set{'html_dir'}all.html")||&error(306,"$set{'html_dir'}all.html"); + print OUT $header."
".$home_url_link.$subheader."
".$buff.$footer; + close(OUT); + chmod($set{'per_upfile'},"$set{'html_dir'}all.html"); + }else{ unlink("$set{'html_dir'}all.html"); } + + while($log > $i){ + $buff .= makeitem($log[$i]) unless($init); + if(($i % $set{'pagelog'}) == 0||$i == $log -1){ + $page++; my $subheader; my $no = 1; my $time = time; + if($set{'html_all'}){ $subheader .= "[ALL] "; } + while($no <= $lastpage){ + if($no == $page) { $subheader .= "\[$no\] ";} + else{ if($no == 1){ $subheader .= "\[$no\] "} + else{$subheader .= "\[$no\] ";} + } + $no++; + } + $subheader .= $info_title; + my $loghtml; + if($page == 1){ $loghtml = "$set{'html_dir'}$set{'base_html'}"; } + else{ $loghtml = "$set{'html_dir'}$page.html"; } + + open(OUT,">$loghtml") || &error(306,"$loghtml"); + print OUT $header."
".$home_url_link.$subheader."
".$buff.$footer; + close(OUT); + chmod($set{'per_upfile'},$loghtml); + undef $buff; + } + $i++; + } + + while($page < 1000){ + $page ++; + if(-e "$set{'html_dir'}$page.html"){ unlink("$set{'html_dir'}$page.html"); }else{ last; } + } +} + +sub delete{ + my $mode = $_[0]; + my @delno = split(/,/,$_[1]); + my $delno; my $flag = 0; my $tmpaddr; + my $delnote; + + if($in{'delno'} =~ /(\d+)/){ $delno = $1; } + if($mode ne 'admin' && !$in{'delno'}){ return; } + elsif($mode ne 'admin' && !$delno){ &error(401,$in{'delno'}); } + + open(IN,$set{'log_file'})|| &error(303); + my @log = ; + close(IN); + + if($in{'addr'} =~ /(\d+).(\d+).(\d+).(\d+)/){ $tmpaddr = "$1.$2.$3."; } + my $findflag = 0; + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value); + $delnote = $note; + my $delflag = 0; + if(!$addr){ next; } + if($mode eq 'admin'){ + foreach my $delno (@delno){ if($no == $delno){ $delflag = 1; last; } } + }elsif($no == $delno){ + $findflag = 1; + unless ($addr =~ /^$tmpaddr/){ + my ($pass,$id) = split(/,/,$pass); + my $delpass = $in{'delpass'} || $in{'addr'}.time(); + my $salt = substr($pass, 0, 2); $delpass = crypt($delpass,$salt); + my $usersalt = substr($in{'user'},0,2); my $userid = crypt($in{'user'},$usersalt); + if ($in{'delpass'} ne $set{'admin_pass'} && $delpass ne $pass && $userid ne $id){ + if($mode ne 'admin'){ if(!$dummy){ $filepre = $set{'file_pre'};} $no = sprintf("%04d",$no); &error(404,"$filepre$no.$ext");} + } + } + $delflag = 1; + } + if($delflag){ +# open(OUT,">>./del.cgi"); print OUT $value; close(OUT); + $flag = 1; + if(!$dummy){ $filepre = $set{'file_pre'};} + $no = sprintf("%04d",$no); + my $filename; + my ($dlpath,$filedir); + if($delnote =~ /DLpath:(.+)\s/){ + $dlpath = $1; + $filename = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext"; + $filedir = "$set{'src_dir'}$filepre$no.${ext}_$dlpath/"; + }else{ + $filename = "$set{'src_dir'}$filepre$no.$ext"; + } + + if(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value; + }elsif(unlink($filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value; + }elsif(!(-e $filename)){ + unlink("$set{'src_dir'}$filepre$no.$ext.html"); if($filedir){ foreach(globfile($filedir,".*")){ unlink; } rmdir($filedir);} undef $value; + }else{ + if($mode ne 'admin'){ &error(403,"$filepre$no.$ext");} + } + } + } + if($mode ne 'admin' && !$findflag){ &error(402,$delno); } + if($flag){ + logwrite(@log); + &makehtml(); + } +} + + +sub quit{ + my ($cookiename,$buff); + my $flag = 0; + my @tmpfiles = globfile("$set{'src_dir'}","\.temporary"); + foreach my $value (@tmpfiles){ if((stat($value))[10] < time - 60*60){ unlink("$value"); $flag++; } } + &makehtml() if($flag); + $buff =<<"EOM"; +$set{'html_head'} +EOM + if($in{'jcode'} || $in{'mode'} eq 'delete'){ + $buff .=<<"EOM"; + + +\n|; + } + $buff .=<<"EOM"; + +

+ +EOM + print "Content-type: text/html\n\n"; + print $buff; + exit; +} + +sub admin_mode{ + &errorclear() if($in{'mode'} eq 'errorclear'); + &delete('admin',$in{'admin_delno'}) if($in{'mode'} eq 'delete'); + + open(IN,$set{'log_file'})||error(303); + my @log = ; + close(IN); + + my ($header,$buff,$footer,$value); + $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + +EOM + + $buff .= leaddisp(0,1,1).'
NAMECOMMENTSIZEDATEMIMEORIG
Upload Info
'; + $buff .= qq|
\n

\n|."\n\n"; + shift(@log); + foreach (@log){ $buff .= makeitem($_,'admin'); } + $buff .= '
DELNAMECOMMENTSIZEADDRHOSTDATENOTEMIMEORIG


'; + + if($set{'error_level'}){ + $buff .= leaddisp(-1,0,1).'
Error Info
'; + $buff .= qq|
|; + $buff .= "\n\n"; + if(open(IN,$set{'error_log'})){ @log = reverse(); close(IN); foreach (@log){ my ($date,$no,$note,$addr,$host) = split(/<>/); $buff .= "\n"; }} + $buff .= "
DATEADDRHOSTNOTE
$date$addr$host$note


\n"; + } + + $buff .= leaddisp(-1,-1,0); + $buff .= '
Setting Info
'."\n\n"; + $buff .= tablestr('ƒXƒNƒŠƒvƒgVer',$set{'ver'}); + $buff .= tablestr('ƒƒCƒ“ƒƒOƒtƒ@ƒCƒ‹',$set{'log_file'}); + if($set{'error_level'}){ + $buff .= tablestr('ƒGƒ‰[ƒƒOƒtƒ@ƒCƒ‹',$set{'error_log'}); + if($set{'error_size'}){ $buff .= tablestr('ƒGƒ‰[ƒƒOÅ‘å—e—Ê',dispsize($set{'error_size'}*1024).' '.($set{'error_size'}*1024).'Bytes'); } + else{ $buff .= tablestr('ƒGƒ‰[ƒƒOÅ‘å—e—ʐ§ŒÀ','–³'); } + }else{ $buff .= tablestr('ƒGƒ‰[ƒƒO‹L˜^','–³'); } + $buff .= tablestr('•ÛŽŒ”',$set{'max_log'}); + $buff .= tablestr('Å‘å“Še—e—Ê',dispsize($set{'max_size'}*1024).' '.($set{'max_size'}*1024).'Bytes'); + + if($set{'min_flag'}){ $buff .= tablestr('Å¬§ŒÀ—e—Ê',dispsize($set{'min_size'}*1024).' '.($set{'min_size'}*1024).'Bytes'); } + else{ $buff .= tablestr('Å¬§ŒÀ—e—Ê',"–³"); } + if($set{'max_all_flag'}){ $buff .= tablestr('‘—e—ʐ§ŒÀ',dispsize($set{'max_all_size'}*1024).' '.($set{'max_all_size'}*1024).'Bytes'); } + else{ $buff .= tablestr('‘—e—ʐ§ŒÀ',"–³"); } + + $buff .= tablestr("ƒtƒ@ƒCƒ‹Ú“ªŽ«",$set{'file_pre'}); + $buff .= tablestr("HTML•Û‘¶ƒfƒBƒŒƒNƒgƒŠ",$set{'html_dir'}); + $buff .= tablestr("ƒtƒ@ƒCƒ‹•Û‘¶ƒfƒBƒŒƒNƒgƒŠ",$set{'src_dir'}); + if($set{'http_html_path'} && $set{'html_dir'} ne $set{'http_html_path'}){ $buff .= "\n";} + if($set{'http_src_path'} && $set{'src_dir'} ne $set{'http_src_path'}){ $buff .= "\n";} + $buff .= tablestr('1ƒy[ƒW‚É•\Ž¦‚·‚éƒtƒ@ƒCƒ‹”',$set{'pagelog'}); + if($set{'interval'} > 0){ $value = $set{'interval'}.'•b'; }else{ $value = '–³'; } + $buff .= tablestr('“¯ˆêIP“ŠeŠÔŠu•b”§ŒÀ',$value); + if($set{'up_ext'}){ $set{'up_ext'} =~ s/,/ /g; $buff .= tablestr('“Še‰Â”\Šî–{Šg’£Žq',$set{'up_ext'}); } + if($set{'deny_ext'}){ $set{'deny_ext'} =~ s/,/ /g; $buff .= tablestr('“Še‹ÖŽ~Šg’£Žq',$set{'deny_ext'}); } + if($set{'change_ext'}){ $set{'change_ext'} =~ s/,/ /g; $set{'change_ext'} =~ s/>/>/g; $buff .= tablestr('Šg’£Žq•ÏŠ·',$set{'change_ext'}); } + + if($set{'up_all'}){ $buff .= tablestr('Žw’èŠOŠg’£ŽqƒAƒbƒvƒ[ƒh‹–‰Â','—L'); if($set{'ext_org'}){ $buff .= tablestr('Žw’èŠOƒtƒ@ƒCƒ‹Šg’£Žq','ƒIƒŠƒWƒiƒ‹'); }else{ $buff .= tablestr('Žw’èŠOƒtƒ@ƒCƒ‹Šg’£Žq','bin'); }} + else{$buff .= tablestr('Žw’èŠOŠg’£ŽqƒAƒbƒvƒ[ƒh‹–‰Â','–³');} + + if($set{'find_crypt'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('ˆÃ†‰»ƒA[ƒJƒCƒuŒŸo(ZIP)',$value); + if($set{'binary_compare'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('ƒoƒCƒiƒŠ”äŠr',$value); + if($set{'post_flag'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('PostKey“Še§ŒÀ',$value); + if($set{'dlkey'}){ if($set{'dlkey'} == 2){$value = '•K{'}else{$value = '”CˆÓ';}}else{ $value = '–³';} + $buff .= tablestr('DLkey',$value); + if($set{'dummy_html'}){ if($set{'dummy_html'} == 3){$value = 'ALL'}elsif($set{'dummy_html'} == 2){$value = 'DLKey‚Ì‚Ý';}else{$value = '’ʏíƒtƒ@ƒCƒ‹‚Ì‚Ý';}}else{ $value = '–³';} + $buff .= tablestr('ŒÂ•ÊHTMLƒLƒƒƒbƒVƒ…',$value); + if($set{'disp_error'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('ƒ†[ƒUƒGƒ‰[•\Ž¦',$value); + if($set{'zero_clear'}){ $value = '—L'; }else{ $value = '–³';} + $buff .= tablestr('íœÏƒtƒ@ƒCƒ‹ƒŠƒXƒgŽ©“®Á‹Ž',$value); + if($set{'home_url'}){ $buff .= "\n";} + + $buff .= '
HTTP_HTML_PATH$set{'http_html_path'}
HTTP_SRC_PATH$set{'http_src_path'}
HOMEURL$set{'home_url'}
'; + + print "Content-type: text/html\n\n"; + print $buff; + exit; +} + +sub extfind{ + my $orgname = @_[0]; + my @filename = split(/\./,$orgname); + my $ext = $filename[$#filename]; + $ext =~ tr/[A-Z]/[a-z]/; + foreach my $value (split(/,/,$set{'change_ext'})){ my ($src,$dst) = split(/->/,$value); if($ext eq $src){ $ext = $dst; last; }} + foreach my $value (split(/,/,$set{'deny_ext'})){ if($ext eq $value){ &error(206,$ext); }} + foreach my $value (split(/,/,$set{'up_ext'})){ if ($ext eq $value) { return $value; } } + if(length($ext) >= 5 || length($ext) == 0){ $ext = 'bin'; } + unless ($ext =~ /^[A-Za-z0-9]+$/){ $ext = 'bin'; } + if($set{'up_all'} && $set{'ext_org'}){ return $ext;} + elsif($set{'up_all'}){ return 'bin'; } + return 0; +} + + +sub conv_date{ + my @date = gmtime($_[0] + 9*60*60); + $date[5] -= 100; $date[4]++; + if ($date[5] < 10) { $date[5] = "0$date[5]" ; } if ($date[4] < 10) { $date[4] = "0$date[4]" ; } + if ($date[3] < 10) { $date[3] = "0$date[3]" ; } if ($date[2] < 10) { $date[2] = "0$date[2]" ; } + if ($date[1] < 10) { $date[1] = "0$date[1]" ; } if ($date[0] < 10) { $date[0] = "0$date[0]" ; } + my @w = ('Sun','Mon','Tue','Wed','Thu','Fri','Sat'); + return ("$date[5]/$date[4]/$date[3]($w[$date[6]]),$date[2]:$date[1]:$date[0]"); +} + +sub dispsize{ + my $size = $_[0]; + if($size >= 1024*1024*1024*100){ $size = int($size/1024/1024/1024).'GB';} + elsif($size >= 1024*1024*1024*10){ $size = sprintf("%.1fGB",$size/1024/1024/1024);} + elsif($size > 1024*1024*1024){ $size = sprintf("%.2fGB",$size/1024/1024/1024);} + elsif($size >= 1024*1024*100){ $size = int($size/1024/1024).'MB'; } + elsif($size > 1024*1024){ $size = sprintf("%.1fMB",$size/1024/1024); } + elsif($size > 1024){ $size = int($size/1024).'KB'; } + else{ $size = int($size).'B';} + return $size; +} + +sub makeitem{ + my ($src,$mode) = @_; my ($buff,$check,$target); + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$src); + if(!$dummy){ $filepre = $set{'file_pre'}; } + my $orgno = $no; + $no = sprintf("%04d",$no); + my $size = 0; + my $dlpath = 0; + + if($note =~ /DLpath:(.+)\s/){ + $dlpath = $1; + $size = dispsize(-s "$set{'src_dir'}$filepre$no.${ext}_$dlpath/$filepre$no.$ext"); + }else{ + $size = dispsize(-s "$set{'src_dir'}$filepre$no.$ext"); + } + + my $path = $set{'http_src_path'} || $set{'src_dir'}; + if($set{'link_target'}){ $target = qq| target="$set{'link_target'}"|; } + if($mode eq 'admin'){ + if($dlpath){ $path .= "$filepre$no.${ext}_$dlpath/"; } + if($addr eq $host){ undef $host; } + if($in{'checkmode'} eq 'allcheck'){$check = ' checked';} + $buff = "$filepre$no.$ext$comment$size$addr$host$date$note$mime$orgname\n"; + }else{ + my($d_com,$d_date,$d_size,$d_mime,$d_org); + if($set{'disp_comment'}){ $d_com = "$comment"; } if($set{'disp_size'}){ $d_size = "$size"; } if($set{'disp_date'}){ $d_date= "$date"; } + if($set{'disp_mime'}){ $d_mime = "$mime"; } if($set{'disp_orgname'}){ $d_org = "$orgname"; } + if(-e "$set{'src_dir'}$filepre$no.$ext.html"){$buff = "$filepre$no.$ext$d_com$d_size$d_date$d_mime$d_org\n";} + elsif($dlpath){$buff = "$filepre$no.$ext$d_com$d_size$d_date$d_mime$d_org\n";} + else{ $buff = "$filepre$no.$ext$d_com$d_size$d_date$d_mime$d_org\n";} + } + return $buff; +} + +sub makedummyhtml{ + my ($filename,$com,$file,$orgdlpath,$date,$mime,$orgname,$no) = @_; + my $buff; + + if(!$no){ + $buff = "$filename"; + $buff .= qq|Download $filename|; + $buff .= ''; + }else{ + $buff = cryptfiledl($com,$file,$orgdlpath,$date,$mime,$orgname,$no); + } + + open(OUT,">$set{'src_dir'}$filename.html")||&error(307,"$set{'src_dir'}$filename.html"); + print OUT $buff; + close(OUT); + chmod($set{'per_upfile'},"$set{'src_dir'}$filename.html"); + return 1; +} + + +sub logwrite{ + my @log = @_; + open(OUT,"+>$set{'log_file'}")||&error(304); + eval{ flock(OUT, 2);}; + eval{ truncate(OUT, 0);}; + seek(OUT, 0, 0); + print OUT @log; + eval{ flock(OUT, 8);}; + close(OUT); + chmod($set{'per_upfile'},$set{'log_file'}); + return 1; +} + +sub binarycmp{ + my ($src,$dst) = @_; + return 0 if (-s $src != -s $dst); + open(SRC,$src)||return 0; open(DST,$dst)||return 0; + my ($buff,$buff2); + binmode(SRC); binmode(DST); seek(SRC,0,0); seek(DST,0,0); + while(read(SRC,$buff,8192)){ read(DST,$buff2,8192); if($buff ne $buff2){ close(SRC); close(DST); return 0; } } + close(SRC); close(DST); + return 1; +} + +sub init{ + my $buff; + if(open(OUT,">$set{'log_file'}")){ + print OUT "0<>0<>0<>1\n"; + close(OUT); + chmod($set{'per_logfile'},$set{'log_file'}); + }else{ + $buff = "ƒƒCƒ“ƒƒO‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½"; + } + + unless (-d "$set{'src_dir'}"){ + if(mkdir("$set{'src_dir'}",$set{'per_dir'})){ + chmod($set{'per_dir'},"$set{'src_dir'}"); + open(OUT,">$set{'src_dir'}index.html"); + close(OUT); + chmod($set{'per_upfile'},"$set{'src_dir'}index.html"); + }else{ + $buff .= "Source•Û‘¶ƒfƒBƒŒƒNƒgƒŠ‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½"; + } + } + + unless (-d "$set{'html_dir'}"){ + if(mkdir("$set{'html_dir'}",$set{'per_dir'})){ + chmod($set{'per_dir'},"$set{'html_dir'}"); + }else{ + $buff .= "HTML•Û‘¶ƒfƒBƒŒƒNƒgƒŠ‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½"; + } + } + + if($buff){ + $buff .= "ƒfƒBƒŒƒNƒgƒŠ‚ɏ‘‚«ž‚ÝŒ ŒÀ‚ª‚ ‚é‚©Šm”F‚µ‚Ä‚­‚¾‚³‚¢"; + &error_disp($buff,'init'); + } +} + +sub check_postkey{ + my $inputkey = @_[0]; + my @key = split(/,/,$set{'post_key'}); + foreach my $key (@key){ if($inputkey eq $key){ return 1; } } + return 0; +} + +sub leaddisp{ + my @src = @_; + my ($str,$count); + foreach my $value (@src){ + my ($mark,$name,$link); $count++; + if($count == 1){ $name = 'Upload Info'; $link = 'up'; } + elsif($count == 2){ $name = 'Error Info'; $link = 'error'; next if(!$set{'error_level'}); } + elsif($count == 3){ $name = 'Setting Info'; $link = 'set'; } + if($value){ if($value > 0){ $mark = '¥'; }else{ $mark = '£'; } $str .= qq|${mark}${name} |; } + else{ $str .= qq|[$name] |; } + } + return $str; +} + +sub errorclear{ + open(OUT,">$set{'error_log'}")||return 0; + eval{ flock(OUT, 2);}; eval{ truncate(OUT, 0);}; seek(OUT, 0, 0); eval{ flock(OUT, 8);}; close(OUT); + chmod($set{'per_upfile'},$set{'log_file'}); + return 1; +} + +sub tablestr{ + my ($value1,$value2) = @_; + return ("$value1$value2\n"); +} + +sub globfile{ + my ($src_dir,$filename) = @_; + opendir(DIR,$src_dir)||return 0; my @dir = readdir(DIR); closedir(DIR); + my @new = (); foreach my $value (@dir){ push(@new,"$src_dir$value") if($value =~ /$filename/ && !(-d "$src_dir$value")); } + return @new; +} + +sub globdir{ + my ($src_dir,$dir) = @_; + opendir(DIR,$src_dir)||return 0; my @dir = readdir(DIR); closedir(DIR); + my @new = (); foreach my $value (@dir){ if($value eq '.' ||$value eq '..' ){ next; } push(@new,"$src_dir$value") if($value =~ /$dir/ && (-d "$src_dir$value")); } + return @new; +} + +sub error_disp{ + my ($message,$mode) = @_; + my $url; + if($mode eq 'init'){ $url = qq|[ƒŠƒ[ƒh]|; }else{ $url = qq|[–ß‚é]|; } + my $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + +
+ +$message + + +
$url
+

+ + + + + +
DATE$in{'date'}
ADDR$in{'addr'}
HOST$in{'host'}
+
+ +EOM + print "Content-type: text/html\n\n"; + print $buff; + exit; +} + +sub error{ + my ($no,$note) = @_; + if (length($note) > 64) { $note = substr($note,0,64).'...'; } + $note =~ s/&/&/g; $note =~ s/\"/"/g; $note =~ s//>/g; $note =~ s/\r//g; $note =~ s/\n//g; $note =~ s/\t//g; $note =~ s/\0//g; + my ($message,$dispmsg,$flag); + + if($no == 98){ $message = ""; } + elsif($no == 99){ $message = "UpFile‚È‚µ"; } + elsif($no == 101){ $message = "“Še‹ÖŽ~HOST"; } + elsif($no == 106){ $flag = 1; $message = "POSTƒTƒCƒY’´‰ß"; $note = dispsize($note); $dispmsg= 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ƒAƒbƒvƒ[ƒhƒtƒ@ƒCƒ‹('.$note.')‚Í Å‘å—e—ʐݒè('.dispsize($set{'max_size'}*1024).')‚ð‰z‚¦‚Ä‚¢‚Ü‚·';} + elsif($no == 107){ $flag = 1; $message = "POSTƒTƒCƒY‰ß¬"; $note = dispsize($note); $dispmsg= 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ƒAƒbƒvƒ[ƒhƒtƒ@ƒCƒ‹('.$note.')‚Í Å¬—e—ʐݒè('.dispsize($set{'min_size'}*1024).')–¢–ž‚Å‚·';} + elsif($no == 108){ $flag = 1; $message = "POSTƒf[ƒ^•sŠ®‘S"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½POSTƒf[ƒ^‚ª•sŠ®‘S‚Å‚·';} + elsif($no == 109){ $flag = 1; $message = "POSTKey•sˆê’v"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½POSTKey‚ªˆê’v‚µ‚Ü‚¹‚ñ';} + elsif($no == 202){ $flag = 1; $message = "Šg’£Žq‡‚킸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½“Še‚Å‚«‚éŠg’£Žq‚Í'.$set{'up_ext'}.'‚Å‚·';} + elsif($no == 203){ $flag = 1; $message = "“Še‘‚·‚¬"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½“¯ˆêIPƒAƒhƒŒƒX‚©‚ç'.$set{'interval'}.'•bˆÈ“à‚ɍēŠe‚Å‚«‚Ü‚¹‚ñ';} + elsif($no == 204){ $flag = 1; $message = "ˆêŽžƒtƒ@ƒCƒ‹‘‚«ž‚ß‚¸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ˆêŽžƒtƒ@ƒCƒ‹‚̍쐬‚ÉŽ¸”s‚µ‚Ü‚µ‚½';} + elsif($no == 205){ $flag = 1; $message = "“¯ˆêƒtƒ@ƒCƒ‹‘¶Ý"; $note =~ /([^\/]+)$/; my $filename = $1; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½“¯ˆêƒtƒ@ƒCƒ‹‚ª '.$filename.' ‚É‘¶Ý‚µ‚Ü‚·';} + elsif($no == 206){ $flag = 1; $message = "‹ÖŽ~Šg’£Žq"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðƒAƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½Šg’£Žq '.$note.' ‚̓Aƒbƒvƒ[ƒh‚Å‚«‚Ü‚¹‚ñ';} + elsif($no == 303){ $flag = 1; $message = "ƒƒOƒtƒ@ƒCƒ‹‚ɓǂݍž‚ß‚¸"; $dispmsg = 'ƒƒCƒ“ƒƒO‚̓ǂݍž‚Ý‚ÉŽ¸”s‚µ‚Ü‚µ‚½';} + elsif($no == 304){ $flag = 1; $message = "ƒƒOƒtƒ@ƒCƒ‹‚ɏ‘‚«ž‚ß‚¸"; $dispmsg = 'ƒƒCƒ“ƒƒO‚̏‘‚«ž‚Ý‚ÉŽ¸”s‚µ‚Ü‚µ‚½';} + elsif($no == 306){ $message = "ƒtƒ@ƒCƒ‹ƒŠƒXƒgHTML‘‚«ž‚ß‚¸";} + elsif($no == 307){ $message = "ƒtƒ@ƒCƒ‹HTMLƒtƒ@ƒCƒ‹‘‚«ž‚ß‚¸";} + elsif($no == 401){ $flag = 1; $message = "íœNo.ŒŸo‚Å‚«‚¸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$note.' ‚©‚çíœNo.‚ðŒŸo‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$set{'file_pre'}.'0774.zip‚̏ꍇ No.‚É‚Í 774 ‚ð“ü—Í‚µ‚Ü‚·';} + elsif($no == 402){ $flag = 1; $note = sprintf("%04d",int($note)); $message = "íœNo.‘¶Ý‚¹‚¸"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$set{'file_pre'}.$note.'.*** ‚̓ƒCƒ“ƒƒO‚É‘¶Ý‚µ‚Ü‚¹‚ñ';} + elsif($no == 403){ $flag = 1; $message = "íœƒAƒNƒZƒX‹‘”Û"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½ƒtƒ@ƒCƒ‹íœðŒ‚Í–ž‚½‚µ‚Ä‚¢‚Ü‚·‚ª '.$note.' ‚̃tƒ@ƒCƒ‹‚̍폜‚ª‹‘”Û‚³‚ê‚Ü‚µ‚½ƒAƒNƒZƒX‚ª‰ßè‚ȏꍇ“™‚ÍŽžŠÔ‚ð’u‚¢‚čđ€ì‚·‚é‚ƍ폜‚Å‚«‚邱‚Æ‚ª‚ ‚è‚Ü‚·';} + elsif($no == 404){ $flag = 1; $message = "íœKey•sˆê’v"; $dispmsg = 'ƒtƒ@ƒCƒ‹‚ðíœ‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'.$note.' íœKey‚ªˆê’v‚µ‚Ü‚¹‚ñ‚Å‚µ‚½';} + + elsif($no == 51){ $flag = 1; $message = "[DLMode] No.Œ©‚‚©‚炸"; $dispmsg = '[DLMode] ƒtƒ@ƒCƒ‹‚ªŒ©‚‚©‚è‚Ü‚¹‚ñ‚Å‚µ‚½'.$note.' ‚©‚çƒtƒ@ƒCƒ‹No.‚ðŒŸo‚Å‚«‚Ü‚¹‚ñ‚Å‚µ‚½'; } + elsif($no == 52){ $flag = 1; $message = "[DLMode] FileŒ©‚‚©‚炸"; $dispmsg = '[DLMode] ƒtƒ@ƒCƒ‹‚ªŒ©‚‚©‚è‚Ü‚¹‚ñ‚Å‚µ‚½'.$set{'file_pre'}.$note.'.*** ‚̓ƒCƒ“ƒƒO‚É‘¶Ý‚µ‚Ü‚¹‚ñ'; } + elsif($no == 53){ $flag = 1; $message = "[DLMode] DLkey–¢Ý’è"; $dispmsg = '[DLMode] orgDLkeyError'.$note.' DLKey‚ª–¢Ý’è‚Å‚·'; } + elsif($no == 54){ $flag = 1; $message = "[DLMode] DLkey•sˆê’v"; $dispmsg = '[DLMode] orgDLkeyError'.$note.' DLKey‚ªˆê’v‚µ‚Ü‚¹‚ñ‚Å‚µ‚½'; } + elsif($no == 55){ $flag = 1; $message = "[DLMode] File Oepn Error"; $dispmsg = '[DLMode] Open Error'.$note.' ƒtƒ@ƒCƒ‹‚̓ǂݍž‚Ý‚ÉŽ¸”s‚µ‚Ü‚µ‚½'; } + elsif($no == 56){ $flag = 1; $message = "[DLMode] File Not Found"; $dispmsg = '[DLMode] Not Found'.$note.' ƒtƒ@ƒCƒ‹‚ª‘¶Ý‚µ‚Ü‚¹‚ñ'; } + + elsif($no == 61){ $flag = 1; $message = "DLkey–¢Ý’è"; $dispmsg = 'DLKey‚ª–¢Ý’è‚Å‚·'; } + + unlink($in{'tmpfile'}); + if($note){$message .= ' ';} + if($set{'error_level'} && $no > 100){ + unless(-e $set{'error_log'}){ + open(OUT,">$set{'error_log'}"); + close(OUT); + chmod($set{'per_logfile'},$set{'error_log'}); + } + if($set{'error_size'} && ((-s $set{'error_log'}) > $set{'error_size'} * 1024)){ + my $err_bkup = "$set{'error_log'}.bak.cgi"; + unlink($err_bkup); + rename($set{'error_log'},$err_bkup); + open(OUT,">$set{'error_log'}"); + close(OUT); + chmod($set{'per_logfile'},$set{'error_log'}); + } + open(OUT,">>$set{'error_log'}"); + print OUT "$in{'date'}<>$no<>$message$note<>$in{'addr'}<>$in{'host'}<>1\n"; + close(OUT); + } + &error_disp($dispmsg) if($flag && $set{'disp_error'}); + &quit(); +} + +sub dlfile{ + my $msg; + my ($orgdlkey,$orgdlpath); + my ($dlext,$dlfilepre); + my ($dl_date,$dl_comment,$dl_size,$dl_mime,,$dl_orgname); + my $dlno = 0; + my $findflag; + + open(IN,$set{'log_file'})||&error(303); + my @log = ; + close(IN); + shift(@log); + + if($in{'file'} =~ /(\d+)/){ $dlno = $1; } + if($dlno == 0) { &error(51,$in{'file'}); } + + foreach my $value (@log){ + my ($no,$ext,$date,$comment,$mime,$orgname,$addr,$host,$pass,$filepre,$note,$dummy) = split(/<>/,$value); + my @note = split(/,/,$note); + if(int($dlno) == $no){ + $dl_comment = $comment; + $dl_mime = $mime; + $dl_date = $date; + $dl_orgname = $orgname; + $dlext = $ext; + $dlfilepre = $filepre; + foreach my $tmpnote (@note){ + if($tmpnote =~ /\!--\sDLKey:(.+)\s--.*\!--\sDLpath:(.+)\s--/){ + $orgdlkey = $1; + $orgdlpath = $2; + last; + } + } + $findflag = 1; + last; + } + } + + my $dlfile = $dlfilepre.sprintf("%04d",int($dlno)).'.'.$dlext; + if(!(-e "$set{'src_dir'}${dlfile}_$orgdlpath/$dlfile")){ &error(56,"$dlfile----$set{'src_dir'}${dlfile}_$orgdlpath/$dlfile"); } + + if($in{'dlkey'}){ + my $dlsalt = substr($orgdlkey,0,2); + my $dlkey = crypt($in{'dlkey'},$dlsalt); + + if($findflag == 0){ &error(52,$dlfile); } + elsif(!$orgdlkey){ &error(53,$dlfile); } + elsif($orgdlkey ne $dlkey && $set{'admin_pass'} ne $in{'dlkey'}){ &error(54,$dlfile); } + #print "Location: $set{'http_src_path'}${dlfile}_$orgdlpath/$dlfile\n\n"; + my $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + + + +
+
+ + +
”ò‚΂Ȃ¢ê‡‚Í ‚±‚¿‚ç ‚©‚ç
+
+ +EOM + print "Content-type: text/html\n\n"; + print $buff; + }else{ + my $buff = cryptfiledl($dl_comment,$dlfile,$orgdlpath,$dl_date,$dl_mime,$dl_orgname,$dlno); + print "Content-type: text/html\n\n"; + print $buff; + } + exit; +} + +sub cryptfiledl{ + my($com,$file,$orgdlpath,$date,$mime,$orgname,$no) = @_; + my($d_com,$d_date,$d_size,$d_mime,$d_org); + + if($set{'disp_comment'}){ $d_com = "COMMENT$com"; } if($set{'disp_size'}){ $d_size = "SIZE".dispsize(-s "$set{'src_dir'}${file}_$orgdlpath/$file")." (".(-s "$set{'src_dir'}${file}_$orgdlpath/$file")."bytes)".""; } if($set{'disp_date'}){ $d_date= "DATE$date"; } + if($set{'disp_mime'}){ $d_mime = "ORGMIME$mime"; } if($set{'disp_orgname'}){ $d_org = "ORGNAME$orgname"; } + + my $buff =<<"EOM"; +$set{'html_head'}$set{'html_css'} + +
+
+$file ‚É‚ÍDLKey‚ªÝ’肳‚ê‚Ä‚¢‚Ü‚· + + + + +$d_com$d_date$d_size$d_mime$d_org + + + +
+ + +
DLKey:
+
+ +EOM + + return $buff; +} \ No newline at end of file