WooYun.org

/sysform/003/editflow_manager.jsp?option=2&GUID=1111
/sysform/003/share_select.jsp?type=2&fid=111
/sysform/004/addPlugin.jsp?ContainerId=111&flag=1
/sysform/017/cardContent.jsp
/sysform/994/464-1.jsp?oldtypeCur=11&SYS_CODE_KEY=1

<%@page import="fe.dao.FieldSet"%>
<%@page import="fe.dao.DataTable"%>
<%@page import="fe.util.StringUtil"%>
<%@page import="fe.dao.Dao"%>
<%@ page language="java" contentType="text/html; charset=utf-8" pageEncoding="utf-8"%>
<%@page import="fe.res.ResourceManage"%>
<%@page import="fe.workflow.cooperation.CflowworkService"%>
<%
	//Zero.lu 2012/08/03 修复已发协同/已发事项中，点击查看协同，加签后页面显示空白的BUG.  将原来的SUBMIT方式改为AJAX调用，并将删除节点从WF_INFOR表删除  begin
	String option = request.getParameter("option");
	if ("1".equals(option)) {						
		CflowworkService service = (CflowworkService)ResourceManage.getContext("cflowworkService");
		String inforId = request.getParameter("inforId");
		service.editFlow(inforId);
	} else if ("2".equals(option)) {
	    String GUID = request.getParameter("GUID");//获取参数GUID
		Dao dao = (Dao)ResourceManage.getContext("basicDao");
		//String sql = "select WI13 from " + dao.getTableName("WF_INFOR") + " where WI62=?";		
		String sql = "select WI13 from " + dao.getTableName("WF_INFOR") + " where WI62='"+ GUID +"'";//带入了SQL查询		
		String procType = dao.getStringData(sql);
		out.print(procType);
	}
%>

<%
   String type=request.getParameter("type");
   if("2".equals(type)){
   String fid=request.getParameter("fid");//接收参数
   Dao dao=(Dao)ResourceManage.getContext("dao");
   String userId=dao.getStringData("SELECT COL_MDL_USERID FROM SYS_COLLABORATIVE_MOUDLE WHERE ID="+fid);//带入了SQL语句
   User user=(User)ResourceManage.getRequest().getSession().getAttribute("User");
   String userID="";
   if(user!=null)userID=user.getUserID();
   if(!userID.equals(userId))
     out.print("<script>alert(\"该模板不允许被共享\");window.close();</script>");
   }
 %>

http://oa.kaili.net.cn:9090//sysform/003/editflow_manager.jsp?option=2&GUID=1111