WooYun.org

if ( ACTION == "down" )
{
        set_time_limit( 0 );
        $file = gss( $_GET['file'] );
        $is_del = gss( $_GET['delete'] );
        if ( !$file )
        {
                $maildir = get_session( "maildir" );
                $mb_index = gss( $_GET['mailbox'] ) ? gss( $_GET['mailbox'] ) : 0;
                $mb_list = get_session( "['mb_info']['mailboxlist']" );
                $mb_info = $mb_list[$mb_index];
                $sys_folder_list = array( "inbox", "drafts", "sent items", "deleted items" );
                if ( $mb_info['name'] == "inbox" )
                {
                        pass;
                }
                else if ( in_array( $mb_info['name'], $sys_folder_list ) )
                {
                        $maildir .= $mb_info['name'].".IMAP".DIRECTORY_SEPARATOR;
                }
                else
                {
                        preg_match_all( "/([\\x{4e00}-\\x{9fa5}]+)/u", $mb_info['name'], $zh_match );
                        if ( $zh_match )
                        {
                                $folder_name = $mb_info['name'];
                                foreach ( $zh_match[1] as $zh )
                                {
                                        $conv_name = mb_convert_encoding( $zh, "UCS-2BE", "UTF-8" );
                                        $b64en_str = "&".base64_encode( $conv_name )."-";
                                        $b64en_str = str_replace( "=", "", $b64en_str );
                                        $folder_name = str_replace( $zh, $b64en_str, $folder_name );
                                }
                                $maildir .= $folder_name.".IMAP".DIRECTORY_SEPARATOR;
                        }
                        else
                        {
                                $maildir .= $mb_info['name'].".IMAP".DIRECTORY_SEPARATOR;
                        }
                }
                $file = getusercachepath( )."mailArchive.zip";
        }
        if ( file_exists( $file ) && is_file( $file ) )
        {
                header( "Content-type: application/octet-stream" );
                header( "Content-Disposition: attachment; filename=".basename( $file ) );
                header( "Cache-Control: must-revalidate, post-check=0, pre-check=0" );
                header( "Expires: 0" );
                header( "Pragma: public" );
                header( "Content-Length: ".filesize( $file ) );
                header( "X-Sendfile: ".$file );
                $handle = fopen( $file, "rb" );
                $buffer = "";
                while ( !feof( $handle ) )
                {
                        $buffer = fread( $handle, 4096 );
                        echo $buffer;
                        ob_flush( );
                        flush( );
                }
                fclose( $handle );
        }
        else
        {
                echo "file not exist or not a file";
                exit( );
        }
}