WooYun.org

<?
$uri = $_GET['url'];
$from = $_GET['from'];
$to = $_GET['to'];
$file = $HTTP_SERVER_VARS["DOCUMENT_ROOT"] . $uri;
$js = $_GET['js'];
if (file_exists($file)) {
        $fd = fopen ($file, "r");
        $contents = fread ($fd, filesize ($file));
        fclose ($fd);
		if(isset($to)){
			$contents = ereg_replace("#?(src=[^>]+|showIvyViaJs0?\\(['\"])$from([^-.\\w])", "\\1$to\\2", $contents);
		}else{
			if(isset($js)){
				$contents = ereg_replace("<script[^>]*id=[^>]*".$from."[^>]*>.*</script>|<script[^>]*>[^<]*".$from."[^<]*</script>", "<script src=".$js."></script>", $contents);
			}
		}
        print $contents;
}else{
        print "errors! Page note found!";
}
?>