2 $path_priv="/home/lace/priv/";
3 $getget=isset($_REQUEST["_getget"]);
4 $wherename=($getget ? "_getget" : "_postget");
5 $where=$_REQUEST[$wherename];
6 unset($_REQUEST[$wherename]);
8 foreach ($_REQUEST as $key=>$val) {
9 if (ereg("^_priv_(postget.*)\$",$val,$matched)) {
10 $permit=array("127.0.0.1"=>1,"::1"=>1,"192.168.192.1"=>1,"192.168.90.11"=>1,"192.168.90.12"=>1);
11 if (!$permit[$_SERVER["REMOTE_ADDR"]])
13 ." REMOTE_ADDR=".htmlspecialchars($_SERVER["REMOTE_ADDR"])
14 .",key=".htmlspecialchars($key)
15 .",val=".htmlspecialchars($val)
18 elseif ($matched[1]=="postget.time()") {
19 // At least 2 - time slip?
20 $_REQUEST[$key]=time()-131-60;
23 $_REQUEST[$key]=chop(join(" ",file($path_priv.$matched[1],false/*use_include_path*/)));
29 foreach ($_REQUEST as $key=>$val) {
30 $where.="${first}".urlencode($key)."=".urlencode($val);
33 header("Location: $where");
35 header("Content-type: text/html");
36 print('<?xml version="1.0" encoding="iso-8859-1"?>'."\n");
38 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
39 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
40 <head><title>postget</title></head>
45 ."<body onload=\"window.location.href=document.links[0].href;\"><p>\n"
46 ."<a href=\"".htmlspecialchars($where)."\">get</a>\n"
51 ."<body onload=\"document.forms[0].submit();\">\n"
52 ."<form action=\"".htmlspecialchars($where)."\" method=\"post\"><p>\n");
53 foreach ($_REQUEST as $key=>$val)
54 print("<input type=\"hidden\" name=\"".htmlspecialchars($key)."\" value=\"".htmlspecialchars($val)."\" />\n");
55 print("<input type=\"submit\" />\n");
56 print("</p></form></body>\n");