WooYun.org

public function doface2() {
        $ysw=$_POST[ 'ysw'];
        if ($ysw>460) {
            $zoom=intval($ysw)/460;
        } else {
            $zoom=1;
        }
        $x=$_POST[ 'x']*$zoom;
        $y=$_POST[ 'y']*$zoom;
        $w=$_POST[ 'w']*$zoom;
        $h=$_POST[ 'h']*$zoom;
        $imgpath=ET_ROOT.$_POST[ 'imgpath'];//与ET_ROOT连结成为imgpath
        $ext=strtolower( getExtensionName($imgpath));//提取后缀
        import( "@.ORG.IoHandler");
        $IoHandler = new IoHandler();
        if($ext!='jpg' && $ext!='jpeg' && $ext!= 'gif' && $ext!='png' ) {
            //若后缀是非法后缀，就删除刚上传的文件
            $IoHandler->DeleteFile($imgpath);
            Cookie:: set('setok','face2');
            header( 'location:'.SITE_URL.'/Setting/face' );
            exit;
        }
        ........
    }