/usr/local/www/exec.php - Annotate - pfSense - pfSense bugtracker

| Branch: | Tag: | Revision:

root/usr/local/www/exec.php @ 7a01068a

-b237745
+<?php
-            b46bfcf5
+/* $Id$ */
-e518
+/*
 	Exec+ v1.02-000 - Copyright 2001-2003, All rights reserved
 	Created by technologEase (http://www.technologEase.com).
 	(modified for m0n0wall by Manuel Kasper <mk@neon1.net>)
 */
-b237745
+if (($_POST['submit'] == "Download") && file_exists($_POST['dlPath'])) {
 	session_cache_limiter('public');
 	$fd = fopen($_POST['dlPath'], "rb");
 	header("Content-Type: application/octet-stream");
 	header("Content-Length: " . filesize($_POST['dlPath']));
-            be4b8e72
+	header("Content-Disposition: attachment; filename=\"" .
-b237745
+		trim(htmlentities(basename($_POST['dlPath']))) . "\"");
-            be4b8e72
+            Scott Ullrich
-b237745
+	fpassthru($fd);
 	exit;
 } else if (($_POST['submit'] == "Upload") && is_uploaded_file($_FILES['ulfile']['tmp_name'])) {
 	move_uploaded_file($_FILES['ulfile']['tmp_name'], "/tmp/" . $_FILES['ulfile']['name']);
 	$ulmsg = "Uploaded file to /tmp/" . htmlentities($_FILES['ulfile']['name']);
 	unset($_POST['txtCommand']);
+}
-e518
+            Scott Ullrich
 require("guiconfig.inc");
-e13
+conf_mount_rw();
-b237745
+// Function: is Blank
 // Returns true or false depending on blankness of argument.
 function isBlank( $arg ) { return ereg( "^\s*$", $arg ); }
 // Function: Puts
 // Put string, Ruby-style.
 function puts( $arg ) { echo "$arg\n"; }
 // "Constants".
 $Version    = '';
 $ScriptName = $HTTP_SERVER_VARS['SCRIPT_NAME'];
 // Get year.
 $arrDT   = localtime();
 $intYear = $arrDT[5] + 1900;
-abf60
+$pgtitle = "Diagnostics: Execute command";
 include("head.inc");
-b237745
+?>
-abf60
+            Bill Marquette
-b237745
+<script language="javascript">
 <!--
    // Create recall buffer array (of encoded strings).
 <?php
 if (isBlank( $_POST['txtRecallBuffer'] )) {
    puts( "   var arrRecallBuffer = new Array;" );
 } else {
    puts( "   var arrRecallBuffer = new Array(" );
    $arrBuffer = explode( "&", $_POST['txtRecallBuffer'] );
    for ($i=0; $i < (count( $arrBuffer ) - 1); $i++) puts( "      '" . $arrBuffer[$i] . "'," );
    puts( "      '" . $arrBuffer[count( $arrBuffer ) - 1] . "'" );
    puts( "   );" );
+}
 ?>
    // Set pointer to end of recall buffer.
    var intRecallPtr = arrRecallBuffer.length-1;
    // Functions to extend String class.
    function str_encode() { return escape( this ) }
    function str_decode() { return unescape( this ) }
-            be4b8e72
+            Scott Ullrich
-b237745
+   // Extend string class to include encode() and decode() functions.
    String.prototype.encode = str_encode
    String.prototype.decode = str_decode
    // Function: is Blank
    // Returns boolean true or false if argument is blank.
    function isBlank( strArg ) { return strArg.match( /^\s*$/ ) }
    // Function: frmExecPlus onSubmit (event handler)
    // Builds the recall buffer from the command string on submit.
    function frmExecPlus_onSubmit( form ) {
       if (!isBlank(form.txtCommand.value)) {
 		  // If this command is repeat of last command, then do not store command.
 		  if (form.txtCommand.value.encode() == arrRecallBuffer[arrRecallBuffer.length-1]) { return true }
-            be4b8e72
+            Scott Ullrich
-b237745
+		  // Stuff encoded command string into the recall buffer.
 		  if (isBlank(form.txtRecallBuffer.value))
 			 form.txtRecallBuffer.value = form.txtCommand.value.encode();
 		  else
 			 form.txtRecallBuffer.value += '&' + form.txtCommand.value.encode();
+	  }
       return true;
+   }
    // Function: btnRecall onClick (event handler)
    // Recalls command buffer going either up or down.
    function btnRecall_onClick( form, n ) {
       // If nothing in recall buffer, then error.
       if (!arrRecallBuffer.length) {
          alert( 'Nothing to recall!' );
          form.txtCommand.focus();
          return;
+      }
       // Increment recall buffer pointer in positive or negative direction
       // according to <n>.
       intRecallPtr += n;
       // Make sure the buffer stays circular.
       if (intRecallPtr < 0) { intRecallPtr = arrRecallBuffer.length - 1 }
       if (intRecallPtr > (arrRecallBuffer.length - 1)) { intRecallPtr = 0 }
       // Recall the command.
       form.txtCommand.value = arrRecallBuffer[intRecallPtr].decode();
+   }
    // Function: Reset onClick (event handler)
    // Resets form on reset button click event.
    function Reset_onClick( form ) {
       // Reset recall buffer pointer.
       intRecallPtr = arrRecallBuffer.length;
       // Clear form (could have spaces in it) and return focus ready for cmd.
       form.txtCommand.value = '';
       form.txtCommand.focus();
       return true;
+   }
 //-->
 </script>
 <style>
 <!--
 input {
    font-family: courier new, courier;
    font-weight: normal;
    font-size: 9pt;
+}
 pre {
    border: 2px solid #435370;
    background: #F0F0F0;
    padding: 1em;
    font-family: courier new, courier;
    white-space: pre;
    line-height: 10pt;
    font-size: 10pt;
+}
 .label {
    font-family: tahoma, verdana, arial, helvetica;
    font-size: 11px;
    font-weight: bold;
+}
 .button {
    font-family: tahoma, verdana, arial, helvetica;
    font-weight: bold;
    font-size: 11px;
+}
 -->
 </style>
 </head>
-abf60
+<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
 <?php include("fbegin.inc"); ?>
 <p class="pgtitle"><?=$pgtitle?></p>
-b237745
+<?php if (isBlank($_POST['txtCommand'])): ?>
 <p class="red"><strong>Note: this function is unsupported. Use it
 on your own risk!</strong></p>
 <?php endif; ?>
 <?php if ($ulmsg) echo "<p><strong>" . $ulmsg . "</strong></p>\n"; ?>
 <?php
 if (!isBlank($_POST['txtCommand'])) {
    puts("<pre>");
    puts("\$ " . htmlspecialchars($_POST['txtCommand']));
    putenv("PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin");
    putenv("SCRIPT_FILENAME=" . strtok($_POST['txtCommand'], " "));	/* PHP scripts */
    $ph = popen($_POST['txtCommand'], "r" );
    while ($line = fgets($ph)) echo htmlspecialchars($line);
    pclose($ph);
    puts("</pre>");
+}
-            fbcf0037
+            Scott Ullrich
 if (!isBlank($_POST['txtPHPCommand'])) {
    puts("<pre>");
    require_once("config.inc");
    require_once("functions.inc");
    echo eval($_POST['txtPHPCommand']);
    puts("</pre>");
+}
-b237745
+?>
-            ca8e4ed2
+<div id="niftyOutter">
-            f6f48dde
+<form action="exec.php" method="POST" enctype="multipart/form-data" name="frmExecPlus" onSubmit="return frmExecPlus_onSubmit( this );">
-b237745
+  <table>
-            fbcf0037
+	<tr>
 	  <td colspan="2" valign="top" class="vnsepcell">Execute Shell command</td>
 	</tr>
-b237745
+    <tr>
       <td class="label" align="right">Command:</td>
-            be4b8e72
+      <td class="type"><input id="txtCommand" name="txtCommand" type="text" size="80" value="<?=htmlspecialchars($_POST['txtCommand']);?>"></td>
-b237745
+    </tr>
     <tr>
       <td valign="top">&nbsp;&nbsp;&nbsp;</td>
       <td valign="top" class="label">
          <input type="hidden" name="txtRecallBuffer" value="<?=$_POST['txtRecallBuffer'] ?>">
          <input type="button" class="button" name="btnRecallPrev" value="<" onClick="btnRecall_onClick( this.form, -1 );">
          <input type="submit" class="button" value="Execute">
          <input type="button" class="button" name="btnRecallNext" value=">" onClick="btnRecall_onClick( this.form,  1 );">
          <input type="button"  class="button" value="Clear" onClick="return Reset_onClick( this.form );">
       </td>
     </tr>
-            fbcf0037
+	<tr>
 	  <td colspan="2" valign="top" height="16"></td>
 	</tr>
 	<tr>
 	  <td colspan="2" valign="top" class="vnsepcell">Download</td>
 	</tr>
-b237745
+    <tr>
-            fbcf0037
+      <td align="right">File to download:</td>
-b237745
+      <td>
         <input name="dlPath" type="text" id="dlPath" size="50">
-            fbcf0037
+	</td></tr>
     <tr>
       <td valign="top">&nbsp;&nbsp;&nbsp;</td>
       <td valign="top" class="label">
-b237745
+        <input name="submit" type="submit"  class="button" id="download" value="Download">
         </td>
     </tr>
-            fbcf0037
+	<tr>
 	  <td colspan="2" valign="top" height="16"></td>
 	</tr>
 	<tr>
 	  <td colspan="2" valign="top" class="vnsepcell">Upload</td>
 	</tr>
-b237745
+    <tr>
-            fbcf0037
+      <td align="right">File to upload:</td>
-b237745
+      <td valign="top" class="label">
-            fbcf0037
+	<input name="ulfile" type="file" class="button" id="ulfile">
 	</td></tr>
     <tr>
       <td valign="top">&nbsp;&nbsp;&nbsp;</td>
       <td valign="top" class="label">
-b237745
+        <input name="submit" type="submit"  class="button" id="upload" value="Upload"></td>
     </tr>
-            fbcf0037
+	<tr>
 	  <td colspan="2" valign="top" height="16"></td>
 	</tr>
 	<tr>
 	  <td colspan="2" valign="top" class="vnsepcell">PHP Execute</td>
 	</tr>
 	<tr>
-fbe36f
+		<td align="right">Command:</td>
-ac32f
+		<td class="type"><textarea id="txtPHPCommand" name="txtPHPCommand" type="text" rows="3" cols="50"><?=htmlspecialchars($_POST['txtPHPCommand']);?></textarea></td>
-            fbcf0037
+	</tr>
     <tr>
       <td valign="top">&nbsp;&nbsp;&nbsp;</td>
       <td valign="top" class="label">
          <input type="submit" class="button" value="Execute">
 	 <p>
-            abe20b85
+	 <strong>Example:</strong>   interfaces_carp_bring_up_final();
-            fbcf0037
+      </td>
     </tr>
-b237745
+  </table>
-            ca8e4ed2
+</div>
-e518
+<?php include("fend.inc"); ?>
-b237745
+</form>
-            be4b8e72
+<script language="Javascript">
 document.forms[0].txtCommand.focus();
 </script>
-b237745
+</body>
 </html>
-e13
+            Scott Ullrich
 <?php
 conf_mount_ro();
-abf60
+?>

Project

General

Profile

pfSense