WooYun.org

Warning: filesize() [function.filesize]: stat failed for /var/backup/../..a/etc/passwd in /var/www/html/maint/backupdownload.php on line 5
Warning: fopen(/var/backup/../..a/etc/passwd) [function.fopen]: failed to open stream: No such file or directory in /var/www/html/maint/backupdownload.php on line 8

switch ( $display )
    {
        case "1" :
            echo "<h2>网络配置</h2>";
            include( "dns.php" );
            break;
        case "2" :
            if ( $_SESSION['adminlogin'] == 1 )
            {
                echo "<h2>管理员设置</h2>";
                include( "maintuser.php" );
                break;
            }
        case "3" :
            echo "<h2>修改控制台口令</h2>";
            include( "panelpass.php" );
            break;
        case "4" :
            echo "<h2>修改系统时间</h2>";
            include( "mdtime.php" );
            break;
        case "5" :
            echo "<h2>修改记录保存时间</h2>";
            include( "mkrecord.php" );
            break;
        case "6" :
            echo "<h2>修改系统端口</h2>";
            include( "changeport.php" );
            break;
        case "7" :
            include( "backupnew.php" );
            break;
        case "8" :
            echo "<h2>邮件设置</h2>";
            include( "setmail.php" );
    }

switch ( $action )
{
    case "addednew" :
        echo "<script>javascript:alert('请耐心等待网页刷新');</script>";
        if ( $backuptype == "all" )
        {
            exec( "/var/backup/fullbackup.sh" );
        }
        else if ( $backuptype == "daily" )
        {
            exec( "/var/backup/dailybackup.sh" );
        }
        $action = "restore";
        break;
    case "delete" :
        $dstr = "";
        if ( $backupvalue )
        {
            exec( "/bin/rm -rf /var/backup/".$backupvalue."*" );
            $dstr = "<font color='red'>".$backupvalue2."己删除</font>";
        }
        $action = "restore";
        break;
    case "restored" :
        $dstr = "";
        echo "<script>javascript:alert('请耐心等待网页刷新');</script>";
        if ( $backupvalue2 == "full" )
        {
            exec( "/var/backup/fullrestore.sh ".$backupvalue );
            $dstr = "<font color='red'>".$backupvalue."全备份己恢复，需要重启机器才能生效</font>";
        }
        else
        {
            exec( "/var/backup/dailyrestore.sh ".$backupvalue );
            $dstr = "<font color='red'>".$backupvalue."日备份己恢复，需要重启机器才能生效</font>";
        }
        $action = "restore";
        break;
    case "uploadnew" :
        $dstr = "";
        if ( is_uploaded_file( $_FILES['backupfile']['tmp_name'] ) )
        {
            move_uploaded_file( $_FILES['backupfile']['tmp_name'], "/var/backup/".$_FILES['backupfile']['name'] );
            $dstr = "<font color='red'>成功上传".$_FILES['backupfile']['name']."</font>";
        }
        $action = "upload";
}

case "delete" :
        $dstr = "";
        if ( $backupvalue )
        {
            exec( "/bin/rm -rf /var/backup/".$backupvalue."*" );
            $dstr = "<font color='red'>".$backupvalue2."己删除</font>";
        }
        $action = "restore";
        break;