21:05 2005/10/10
suga@snpn.net

Sn Uploader

ʂ(
ėpt@CAbv[_ł
v悤Ȃ̂̂
̍ۍĂ݂܂

XNvg{̂
/uploader/          NoCGI.pm
/uploader+cgipm/    CGI.pm
̃fBNgɊi[Ă܂

KɍȂ̂
^Cg̐ݒ荀ڂȂǂ͂܂
fUCςꍇ͂قǓȂƎv܂̂
\[X̂܂܂Ă

{IȓCGI.pm/NoCGI.pmŋɕς܂
NoCGI.pmł̕ptH[}X悢v܂
TCY܂eʂ傫Ȃꍇ͂ǂł܂Ȃ
ȂIISł̓Abv[hłȂƂȂƎv܂
삪sRɂȂX̂ŏoΔ悳ł

A[JCuɓYtĂXNvg
R[hShift-JIS/sR[hCRLFɂȂĂ܂


̃XNvg̒쌠͍҂ɋA܂
p҂̐ӔCɂĎRɉ,^p邱Ƃł܂
܂pƂɂĔQɑ΂
҂͈؂̐Ӗ𕉂Ȃ̂Ƃ܂

//////
ݒu@
1. ݒufBNg쐬܂
   Ȃ̃fBNgCGIsŏ߂悤
 @suEXECȂ701 ̑Ȃ 777̂悤Ƀp[~bVݒ肷
   suEXEC 777ȂǂɂꍇXNvgɃANZX 500 Internal Server Error o邱Ƃ܂
2. upload.cgiGfB^ŊJ͂߂̃̕p[^ݒ肷
@ {Iɂ$set{'admin_pass'}̕ύXPerlPATH̊mFłƎv܂
3. T[oɃAbv[hKxɃp[~bVex.(suEXEC:700 other:755)ݒ肷
4. uEU upload.cgiɒڃANZXƃOt@C/fBNgIɍ쐬܂
   Abv[_ւ̃Nupload.cgił͂Ȃ upload.html(1y[Wڂ̃AhX)ɂĂ
   upload.cgiɃANZXꂽꍇ͖ʂɃvZXNupload.htmlɓ]邾ł

   * ߂ăANZXۂɁuCO̍쐬Ɏs܂vȂǂ̕\oꍇ
     1.̃fBNg̃p[~bVݒĂ

Ƃ͓KɐݒƂςĂ݂Ă
Ȃ1y[Wڂindex.htmlɂURLƒZȂ邩܂
ݒufBNgɂindex.html쐬Ȃ̂
  CfbNXXg\̕͏L̂悤ɐݒ肷邩
  index.htmlłAbv[hĂ

suEXEC̍\
-- upload [701] / upload.cgi [700]
@@|             log.cgi    [600] --- 쐬
@@|             upload.html[604] --- 쐬
    |
@@+-- src [701] --- 쐬

̑ʓIȍ\
-- upload [777] / upload.cgi [755]
@@|             log.cgi    [666] --- 쐬
@@|             upload.html[666] --- 쐬
    |
@@+-- src [777] --- 쐬
//////

t@C̍폜@
  1.t@CNo̗No܂
    up0001.jpg -> 1, 0001 , up0001 , up0001.jpg  loł(hoge001.pngł)OKł
    JavaScriptLȏꍇ "D" ƌt@C̍ɏoĂ܂̂łNbNĂ\ł
  2.폜L[KvȂƂ͓͂
    ǗPASSƑSẴt@C폜\ł
    ܂폜IPAhXeIPAhX̑3INebg(192.168.0.9  192.168.0.)܂
    vꍇ̓[U[ŗLIDvꍇɌĂ͍폜L[͕Kvł͂܂
  3.del
  ,Ǘ҂SUSS(Sn Uploader Support Script)ɃOC邱ƂɂI/ꊇ폜ł܂

HTMLXVꍇ
  XNvg/POSTKeyLŃtH[fUCςčXVꍇ
  폜tH[NoꂸKey̗ɊǗPASS($set{'admin_pass'})̒ldelĂ
  SUSS(Sn Uploader Support Script)ɃOCčƂĂ

SUSS(Sn Uploader Support Script)
  vɊǗʂł XʃXNvgł܂
  SUSSɃOC邽߂ɂ 폜tH[ Delɐݒ肵Ǘ҃OCID
  KeyɊǗ҃pX[h ͂del܂
  OCƊǗ҉ʂɐ؂ւ Öꊇ폜/G[O\/ݒ\Ȃǂ邱Ƃł܂

Cookieɂ
  ̃XNvgłCookiegpĂ܂ ɍ폜⏕ƂĎg܂
  SN_UPLOAD(JavaScript) etH[DelKey/PostKeyL܂
  SN_DEL   (JavaScript) 폜tH[KeyL܂ lȂꍇSN_UPLOADDelKeyRs[܂
  SN_USER  (HTML_META)  [U[ŗLIDL܂
  Cookie̕ۑ̊Ƃ͓ɐĂȂ̂ŋCɐHȂYCĂ
  Ǘ҂͂܂폜tH[ɊǗPASS[del]L
  t@C폜SUSSɓ肷ۂɂ炩yɂȂƎv܂

oOc
  ۏ؂͂܂񂪌fɕ񍐂炦PƎv܂

܂債Ƃł͂Ȃ
  HɐݒuꂽAbv[_ɂt@C̍폜˗Ȃǂ̃NH
  ɗ邱Ƃ̂ ftHgł͏ȗĂ܂
  ł $set{'home_url'}([HOME]̃N̒l) ͖߂Ăق܂
  Ȃ̒l ../  http://example.org/~user/ ȂǑ΃pXł΃pXł\܂

ɑ債Ƃł͂Ȃ
  zzA[JCu̒ɂXNvgt@C͕WIȃGfB^ł
  ҏW₷悤ɕR[hShift-JISgpĂ܂
  ̂߃oOƂShift-JIS̈ꕔ̕R[h\ƏdȂĂe
  t@C"\,\,\,["Ȃǂ܂܂Ăƃt@CrŐ؂܂
  fUCύXŕǉ}ꍇ ꏊɂĂ500G[ł邱Ƃ܂
  ʂɃoCi肷킯ł͂Ȃ̂łCɂȂl
  GfB^ŃXNvgŜEUCɕϊ̂悢Ǝv܂
  ݒ荀ڂ̏I̕ $set{'html_head'} Ƃڂ̂charset euc-jp ɂ
  roHTMLMETA^O͏܂
  rEUCɐ؂ւƂ̓Ot@C̕ϊYꂸ...

{ɑ債Ƃł͂Ȃ
  ̃XNvg̃ftHgł͐HTML̉Eɔzzy[Wւ̃NĂ܂
  fUC̕ύXs폜ꍇ(cĒΊ̂ł)
  Nyѕ\폜ĒĂɍ\܂
  A̓XNvg̒쌠ƂƂł͂܂


⑫
  XNvg̐ŏXȂƂ낪邩܂̂ŕ⑫Ă܂

$set{'interval'}
  IP̘Aew肵b̊ԋۂ܂
  ftHg0bɂȂĂ܂ Ⴆ10Ȃ 60*10 ƕ\LĂ肠܂
  ȂŏIeIP/ԂłfĂȂ̂ŏL̗ł
  10ȓɑ̐lAbv[hꍇ͉Ă܂܂

$set{'max_all_flag'}
  ̒lLɂƓeȊOɃt@C̗eʂłO𔻒肷悤ɂȂ܂
  ^T[oȂǗeʂĂꍇɗ̂ł͂Ȃł傤H
  ӂƂĂ Ⴆ 1t@C̍őeʂ10MB($set{'max_size'} = 10*1024),
  e50MB($set{'max_all_size'}= 50*1024) ɐݒ肵ꍇ
  T[oɊ50MBԂ  10MB̃t@CAbv[h
  ꎞI 50MB+10MB = 60MB ܂ ܂Abv[hɂl̂Ƃ܂̂
  ]T(T[oʂ͏Ȃ߂)ݒ肵ق悳ł
  ܂ێł p[~bVݒ,ANZXȂǂ̊֌W
  t@C폜łȂꍇ(t@CۂɎcĂ̂)CO͍폜Ă܂
  Đݒ胍O/eʂۂ̃O/eʂȂ邱Ƃ܂

$set{'up_all'}
  ̒lLɂ$set{'up_ext'}ɓo^Ă̈ȊOłAbv[h󂯕t܂
  $set{'ext_org'}ɂȂĂꍇ(=0)͊gq'.bin'œo^܂
  $set{'ext_org'}LɂȂĂꍇ(=1)͓e̊gqɂȂ܂
  $set{'ext_org'}Lɂꍇ(=1)
  XNvgȂǗ\ʓꍇ܂̂
  ZLeB[ɂ͏\Cĉ

$set{'find_crypt'}
  ̒lLɂȂĂƃAbv[hꂽA[JCuÍĂ邩ׂ܂(ZIP̂)
  ÍĂꍇCOMMENT̍ŏɐԂ"*"t܂
  ̌ooĂi Ǝvꍇɂ͔roHTML̂ǂ*PASSt ƏĂ
  _E[h鑤ɂ̓bg!?邩ȂƎv܂

$set{'binary_compare'}
  ̒lLɂȂĂƊɃAbv[hĂt@CƃoCir܂
  vt@CAbv[h܂

$set{'post_key'}
  $set{'post_flag'}LɂȂĂꍇ(=1)͂̒ltH[ɓ͂Ȃ
  Abv[hłȂȂ܂ PostKey,ŋ؂邱Ƃŕs邱Ƃł
  COɂ͔lƂēeꂽۂPostKeyL^܂
  rPostKeyLɂꍇ͓etH[PostKey̍ڂ܂̂
  XNvgݒ肵ĹuHTMLXVꍇvQlHTMLXVĂ

$set{'dlkey'}
  DLKey̎gp̗L
  Abv[hꂽt@C ./src/up****.***  ./src/up****.***_[a-zA-Z0-9]{20}/up****.***
  Ƀl[邱Ƃɂč쐬t@CXg̃NHȂ܂
  URL͓eݒ肵DLKeyɂĔF؂邱ƂɂĎQƂł܂
  perl𖳑ʂɋNȂꍇ $set{'dummy_html'} ̒l 2ȏɂƁA
  F؎HTMLÓIHTMLœfo悤ɂȂ܂B
  ʂCGI̋N܂̂Ŗ肪ȂΐÓIHTMLfo悤ɂ邱Ƃ߂܂B

$set{'zero_clear'}
  FTPȂCGIȊȎŃt@C폜ꍇ
  COɂ͏񂪎cĂ邪Ñt@CȂƂƂ܂
  ̒lLȏꍇt@CAbv[hɊYt@CCO폜܂
  LɂȂꍇ͎XV0oCg̃t@CƂHTMLt@CXgɋLڂ܂

$set{'http_src_path'}
  HɃt@CXg̃NɑPATHgȂP[X܂̂
  ̂悤ȏꍇ͂̒lݒ肷鎖ɂĖIɃt@C̈ʒuwł܂
  w肵ꍇ t@CۑfBNg $set{'src_dir'} ɂ 
  /home/user/public_html/upload/src/ Ȃǂ̃T[oPATHgp邱Ƃł܂
  PATH(ftHg)ŖȂꍇ͓ɐݒ肵Ȃč\܂

$set{'link_target'}
  t@CɒĂ郊Ntargetł
  VK̃EBhEŊJꍇ _blank Ɠ͂܂

Sn Uploader (c) 2003-2005 SUGA All rights reserved.
