@Ghazascanner
_2019runbot
Ghazascanner File Manager
server :Linux adweb87 2.6.32-754.el6.x86_64 #1 SMP Tue Jun 19 21:26:04 UTC 2018 x86_64
Current Path :
/
home
/
sanchung
/
public_html
/
board
/
Path :
Upload File :
New :
File
Dir
/home/sanchung/public_html/board/deal.php
<? include_once"$_SERVER[DOCUMENT_ROOT]/board/_setup.php"; switch($_GET[mode]){ // ÆÄÀÏ ´Ù¿î case"down": $row = $mysql->row("$_board[table]", "filename, filename_true", "where id='$_GET[id]'"); $file = explode(",", $row[filename]); $file_name = explode(",", $row[filename_true]); $full_path = "$_path[board]/data/$_GET[db]/".$file[$anum]; // ÆÄÀÏÀÌ ÀÖ´Â °÷ if($fp=@fopen( $full_path, "r" )){ Header("Content-type: file/unknown"); Header("Content-Disposition: attachment; filename=".$file_name[$anum]); Header("Content-Description: PHP3 Generated Data"); while( $data=fread( $fp,filesize($full_path) ) ){ print($data); } } else { $lib->alert_back("ÇØ´ç ÆÄÀÏÀÌ Á¸ÀçÇÏÁö ¾Ê½À´Ï´Ù."); } break; // È®ÀÎÄÚµå À̹ÌÁöÈ case"code": $im = imagecreate(46, 18); #### IMAGE SIZE $code = base64_decode($_GET[code]); #### COLOR START #### $bgcolor=imagecolorallocate($im, $_GET[br], $_GET[bg], $_GET[bb]); $black1 =imagecolorallocate($im, 130, 130, 130); $red =imagecolorallocate($im, 255, 0, 0); #### RED COLOR #### COLOR END #### imagestring($im, 5, 5, 1, $code, $red); #### TEXT header("content-type:image/png"); imagePNG($im); imagedestory($im); break; // °Ô½Ã¹° À̵¿Ã¢ case"move": if($_POST[motion] == "move"){ $row = $mysql->row("$_board[table]", "*", "where id='$_POST[id]'"); if($row[filename]){ $file = explode(",", $row[filename]); while(@list($key, $val) = @each($file)){ if(!trim($val)) continue; @rename("$_path[board]/data/$old_db/$val", "$_path[board]/data/$new_db/$val"); } } $_DAT[db] = $_POST[new_db]; $mysql->update("$_board[table]", $_DAT, "where id='$_POST[id]'"); echo" <script> alert('°Ô½Ã¹° À̵¿À» ¿Ï·á ÇÏ¿´½À´Ï´Ù. '); opener.location.replace('$_POST[parent]?page=$_POST[page]&db=$old_db'); self.close(); </script>"; exit; } $row = $mysql->row("$_board[table_manager]", "db, name", "where db='$db'"); echo" <html> <head> <title>°Ô½Ã¹° À̵¿</title> <style> body, table, tr, td, select {font-size:12px} </style> <script> function fchk(){ if(!form.new_db.value){ alert('°Ô½Ã¹°À» À̵¿ÇÏ½Ç °Ô½ÃÆÇÀ» ¼±ÅÃÇØÁÖ¼¼¿ä'); form.new_db.focus(); return false; } form.submit(); } </script> </head> <body topmargin='30' leftmargin='20'> <table width='100%' height='100%' cellpadding='0' cellspacing='0' border='0'> <tr> <td valign='top'> <table width='100%' cellpadding='0' cellspacing='0' border='0'> <form name='form' method='post' action='?mode=move'> <input type='hidden' name='page' value='$page'> <input type='hidden' name='parent' value='$parent'> <input type='hidden' name='motion' value='move'> <input type='hidden' name='id' value='$id'> <input type='hidden' name='old_db' value='$db'> <tr height='24'> <td>¡Ø ¼±ÅÃÇϽŠ°Ô½Ã¹°À» <font color='#0000FF'>$row[name]</font> ¿¡¼</td> </tr> <tr height='24'> <td><select name='new_db'> <option value=''>:: °Ô½ÃÆÇ ¼±Åà ::</option>"; $_res = $mysql->res("$_board[table_manager]", "db, name", "order by name asc"); while($_row = mysql_fetch_array($_res)){ echo"<option value='$_row[db]'>$_row[name]</option>"; } echo" </select>À¸·Î À̵¿ÇÕ´Ï´Ù.</td> </tr> <tr> <td> </td> </tr> <tr align='center'> <td> <input type='button' value=' È® ÀÎ ' onclick='fchk()' style='font-size:9pt'> <input type='button' value=' Ãë ¼Ò ' onclick='self.close()' style='font-size:9pt'> </td> </tr> </form> </table> </td> </tr> </table> <body> </html>"; break; } ?>