EOF
if (@REMOVE_ERR && !$auto_remove) {
print "¡´§R°£ª¬ªp
|
¡³¨S¦³¥ô¦ó¯d¨¥
EOF } else { print "\n"; print "¦@ $in{'allhits'} ½g [ "; $buf = join('&',@Buf); $idx = join('+',@Index); foreach (0 .. $#Index) { $view_page = $_ + 1; if ($FF == $Index[$_] || ($in{'ff'} eq '' && $_ == 0)) { print " ¡õ"; $page_now = $view_page; } elsif ($view_page == 1) { print " $view_page"; } else { print " $view_page"; } } $FROM = $page_now * $page - ($page - 1); $LAST = $FROM + $count_new - 1; print <<"EOF"; ] [«·s¾ã²z] [$SETUP{'bye_name'}]
²Ä $page_now ¶($FROM¡ã$LAST)
EOF
if (@REMOVE_ERR && !$auto_remove) {
print "¡´§R°£ª¬ªp
|
|
¡÷'." $reload"); } } if ($in{'_edit'}) { if ($in{'_editc'} =~ /^\$1\$/) { $salt = 5; } else { $salt = 2; } if ($in{'passwd'} eq '') { push(@ERR,'½Ð¿é¤J¯d¨¥®É¿é¤Jªº±K½X'); } elsif ($MASTER) { ; } elsif (crypt($in{'passwd'},substr($in{'_editc'},0,$salt)) ne $in{'_editc'}) { push(@ERR,'±K½X¿ù»~¡AµLªk³B²z¡C'); } if ($in{'_remove'} && @ERR) { undef %in; return; } if ($in{'_remove'}) { &remove($in{'_remove'},0); undef %in; return; } } if ($in{'uname'} eq '') { push(@ERR,'½Ð¿é¤J±zªº¼ÊºÙ¡C'); } elsif (length($in{'uname'}) > 30) { push(@ERR,'¦W¦r½Ð±±¨î¦b 30 bytes¡]15 Ó¥þ«¬¦r¡^¥H¤º¡C'); } elsif ($in{'uname'} =~ /[;:,=]+/) { push(@ERR,'¦b¦W¦r¤¤¤£¯à¦³;:,=µ¥¦r¤¸'); } if ($in{'email'} ne '' && $in{'email'} !~ /\b[-\w.]+@[-\w.]+\.[-\w]+\b/) { push(@ERR,'¹q¤l¶l¥ó¦a§}½Ð¥Î¥b«¬¦r¥¿½T¦a¿é¤J¡C'); undef $in{'email'}; } elsif ($in{'email'} =~ /[;:,=\s]+/) { push(@ERR,"¹q¤l¶l¥ó¦a§}¤¤¤£¯à¦³;:,=µ¥¦r¤¸"); } if ($in{'tm'} && !$in{'email'}) { push(@ERR,"¹q¤l¶l¥ó¦a§}¤£¤½¶}¡A¦ý¬°¤Fn¯à°÷¦¬«H¡A½Ð¿é¤J±zªº¹q¤l¶l¥ó¦a§}¡C"); } if ($in{'resmail'} && !$in{'email'}) { push(@ERR,"¦pªGn¨Ï¥Î¦^À³³q³ø³oÓ¥\¯à¡A±z¥²¶·¿é¤J§Aªº¹q¤l¶l¥ó¦a§}¡C"); } if ((!$in{'_resp'} && $in{'_edit'} !~ /\./) && $in{'title'} eq '') { push(@ERR,"½Ð¿é¤J¼ÐÃD"); } elsif ((!$in{'_resp'} && $in{'_edit'} !~ /\./) && length($in{'title'}) > 50) { push(@ERR,"¼ÐÃD¤å¦r½Ð±±¨î¦b 50 bytes ¡]25 Ó¥þ«¬¤å¦r¡^¥H¤º¡C"); } if ($in{'_value'} eq '') { push(@ERR,"½Ð¿é¤J¯d¨¥¤º®e¡C"); } if ($in{'passwd'} eq '') { push(@ERR,"¬°¤Fn¯à°÷§R°£¤§«eªº¯d¨¥¡A½Ð¿é¤J±K½X¡C"); } elsif ($MASTER) { ; } elsif (length($in{'passwd'}) < 4 || length($in{'passwd'}) > 8) { push(@ERR,"±K½X½Ð¿é¤J 4 ¦Ü 8 ӼƦr¡C"); } elsif (!$in{'_edit'} && $in{'passwd'} =~ /\D/) { push(@ERR,"±K½XÄæ½Ð¿é¤J¥b«¬¼Æ¦r¡C"); } if ($in{'_attc'}) { &attc; } if ($check) { &form2; exit; } if (@ERR) { &form2; exit; } $pwd = &MakeCrypt($in{'passwd'}); if (@ERR) { &form2; exit; } umask(000); foreach $img_file (split("\0",$in{'attc'})) { push(@IMAGES,$img_file); } if ($in{'_edit'}) { $in{'_number'} = $in{'_edit'}; } elsif ($in{'_resp'}) { opendir(DIR,$base_path); @list = readdir(DIR); foreach $file (@list) { next if -d $file; if ($file =~ /^($in{'_resp'})\.(\d+)\.$ext$/) { push(@NEXT_NUM,$2); } } close(DIR); if (!@NEXT_NUM) { $next_num = 1; } else { @NEXT_NUM = sort { $b <=> $a; } @NEXT_NUM; $next_num = $NEXT_NUM[0] + 1; } $in{'_number'} = "$in{'_resp'}\.$next_num"; } else { $in{'_number'} = time; } if (open(DATA,"> $base_path$in{'_number'}\.$ext")) { print DATA "date\t$date_now\n"; if (!$in{'realtime'}) { $realtime = time; print DATA "realtime\t$realtime\n"; } else { print DATA "realtime\t$in{'realtime'}\n"; } print DATA "pwd\t$pwd\n"; if ($MASTER) { $HOST = "Edit by Super-User"; } # ¤å¦r¦C"Edit by"ÇV·N¨ýÇy«ùÇJÇMÆêÇeÇ@. else { if ($ENV{'REMOTE_USER'}) { $HOST = $host . " - $ENV{'REMOTE_USER'}"; } else { $HOST = $host; } } print DATA "host\t$HOST\n"; $w = 0; while (($key,$val) = each %in) { if ($key =~ /^_/ || $key eq "attc" || $key eq "passwd" || $key eq "realtime") { next; } foreach (split("\0",$val)) { print DATA "$key\t$_\n"; } } foreach (@IMAGES) { $w++; ($filename,$ext2) = split(/\./,$_,2); print DATA "attc\t$in{'_number'}\.$w\.$ext2\n"; } print DATA "\n"; print DATA "$in{'_value'}\n"; close(DATA); chmod(0666,"$base_path$in{'_number'}\.$ext"); } else { push(@ERR,"Åv³]©w¿ù»~¡AµLªk¼g¤J¡C"); } if (@ERR) { if ($in{'_edit'}) { $in{'_number'} = ""; } &form2; exit; } $w = 0; foreach $img_file (@IMAGES) { $w++; ($number,$ext2) = split(/\./,$img_file,2); if (open(IMG,"$tmp_dir$img_file")) { @data =
$board_name
EOF if ($check) { ✓ } if ($in{'_cookie'} eq '') { $in{'_cookie'} = 1; } &form; print <<"EOF";[©ñ±ó°õ¦æ¡A¦^¨ì«e¤@¶]
$center2 EOF }#form2 #--------------------------------------------------------------------------- # #--------------------------------------------------------------------------- sub edit { $head_end = 0; if (open(IN,"$base_path$in{'_edit'}\.$ext")) { while (½s¶°©Î«d°£½s¸¹$in{'_edit'}¸¹ªº¯d¨¥
EOF print <<"EOF"; EOF } else { if ($in{'host'} =~ /Edit by/i) { $msg = "¦¹½g¯d¨¥¤w³QºÞ²zªÌ½s¿è¹L¡A¬G¯d¨¥ªÌµLªk«d°£©Î½s¿è¦¹½g¯d¨¥¡C"; } else { $msg = "±K½X¿ù»~¡AµLªk³B²z¡C"; } if ($in{'_editc'} =~ /^\$1\$/) { $salt = 5; } else { $salt = 2; } if ($in{'passwd'} eq '') { push(@ERR,"§ë½Ð¿é¤J¯d¨¥®É¿é¤Jªº±K½X"); } elsif ($MASTER) { ; } elsif (crypt($in{'passwd'},substr($in{'_editc'},0,$salt)) ne $in{'_editc'}) { &error("»{µý¿ù»~",12,$msg); } $image_number = sprintf("%04d%02d%02d%02d%02d%02d",$year +1900,$mon +1,$mday,$hour,$min,$sec); $w = 0; foreach $img_file (split("\0",$in{'attc'})) { $w++; ($number,$num,$ext2) = split(/\./,$img_file,3); if (open(IMG,"$base_path$img_file")) { @data =½s¶°©Î«d°£½s¸¹$in{'_edit'}¸¹ªº¯d¨¥
EOF &form; } print <<"EOF";[©ñ±ó°õ¦æ¡A¦^¨ì«e¤@¶]
$center2 EOF }#edit #--------------------------------------------------------------------------- # #--------------------------------------------------------------------------- sub MakeStr { local($count) = @_; local($str); @char = ('0'..'9'); srand(time|$$); foreach (1..$count) { { local(@temp); push(@temp,splice(@char,rand(@char),1)) while @char; @char = @temp; } $str = $char[($_)] . $str; } $str; }#MakeStr #--------------------------------------------------------------------------- # #--------------------------------------------------------------------------- sub MakeCrypt { local($plain) = @_; # ¿é¤J:©ú½X local(@char,$f,$now,@saltset,$pert1,$pert2,$nsalt,$salt); local($retry) = 5; @saltset = ('a'..'z','A'..'Z','0'..'9','.','/'); # ·t¸¹Æòºc¦¨ÆûÇsÇr¤å¦r¸s $now = time; # ¡õÆùÇUÃäÇV³qºÙ¡uÇpÆõÇGÇU¥»¡vÇy°Ñ·Ó srand(time|$$); $f = splice(@saltset,rand(@saltset),1) . splice(@saltset,rand(@saltset),1); ($pert1,$pert2) = unpack("C2",$f); $week = $now / (60*60*24*7) + $pert1 + $pert2 - length($plain); $nsalt = $saltset[$week % 64] . $saltset[$now % 64]; if ($MD5) { $csalt = "\$1\$"; } else { $csalt = ""; } while (crypt($plain,substr($result,0,$salt)) ne $result || $result eq '') { $result = crypt($plain,"$csalt$nsalt"); if ($result =~ /^\$1\$/) { $salt = 5; } else { $salt = 2; } if (--$retry <= 0) { push(@ERR,"±K½X³B²z¿ù»~¡A½Ð¦A«ö¤@¦¸¯d¨¥¶s¡C"); return(); } if ($result eq '') { sleep(3); } } return $result; # ©ÑÈ:·t¸¹ }#MakeCrypt #--------------------------------------------------------------------------- # #--------------------------------------------------------------------------- sub jis { local($msg) = @_; $msg =~ s/<//g; # &jcode'convert(*msg,'jis'); return $msg; }#jis #--------------------------------------------------------------------------- # #--------------------------------------------------------------------------- sub tag { local($_) = $_[0]; s/\n/\f/g; s/"/"/g; #¤¹³\¨Ï¥Î 1 while s/(.*)(<(b)>(.*)<\/b>)/$1$4<\/b>/i; 1 while s/(.*)(<(i)>(.*)<\/i>)/$1$4<\/i>/i; 1 while s/(.*)(<(u)>(.*)<\/u>)/$1$4<\/u>/i; #¤¹³\¨Ï¥Î 1 while s/<a([\s\w\=\#\"\'\+\-\?\:\@\^\.\!\/]+?)>(.+?)<\/a>/¡÷ $reload"); } } local($path,$img) = @_; if ($img =~ /\/|\.\./) { exit; } if (open(IMAGE,"$path$img")) { @images =
µ¹ $FILE{'uname'} ªº¹q¤l¶l¥ó
|
¦pªG±z§Æ±æ±H«Hµ¹¯d¨¥½g¸¹²Ä$in{'mail'}¸¹ªº¯d¨¥ªÌ $FILE{'uname'} ªº¸Ü¡]¹q¤l¶l¥ó¦a§}¤£¤½¶}¡^¡A ½Ð§Q¥Î¤U¦Cªºªí³æ±H¥X±zªº«H¥ó¡C¦ý¬O¡A§Ų́䣫OÃÒ³o¨Ç°T®§¤@©w¯à°e¨ì¯d¨¥ªÌªº¤â¤W¡C |
$center2 EOF exit; }#if ($in{'_action'} eq "") ... elsif ($in{'_action'} eq "regist") { foreach (@in) { $image_number = sprintf("%04d%02d%02d%02d%02d%02d",$year +1900,$mon +1,$mday,$hour,$min,$sec); ($fname) = $_ =~ /\bfilename="([^"]*)"/i; ($fname) = $_ =~ /\bfilename=([^\s:;]+)/i unless defined $fname; if ($fname eq '') { next; } ($name) = $_ =~ /\bname="([^"]+)"/i; ($name) = $_ =~ /\bname=([^\s:;]+)/i unless defined $name; ($ctype) = $_ =~ /\s*Content-type:\s*"([^"]+)"/i; ($ctype) = $_ =~ /\s*Content-Type:\s*([^\s:;]+)/i unless defined $ctype; unless ($ctype =~ /^image/i) { &error("ªþ¥[¸ê®Æ¿ù»~",0,"ªþ¥[ªºÀɮפ£¬O¹ÏÀÉ¡C"); } if (length($in{'_attc'}) > $attc_image_max) { 1 while $attc_image_max =~ s/(.*\d)(\d\d\d)/$1,$2/g; &error("ªþ¥[¸ê®Æ¿ù»~",0,"¤@±i¹ÏÀɪº¤j¤p¤W¬°$attc_image_max bytes¡C"); } if ($name =~ /attc/) { $fname = reverse("$fname"); ($fname) = split(/\\|\/|\:/,$fname); $fname = reverse("$fname"); ($fname,$ext2) = split(/\./,$fname); if (!open(IMAGE,"> $tmp_dir$image_number\.$ext2")) { &error("³B²z¿ù»~",0,"¹Ï«¬¤¤³~ªº³B²z¥¢±Ñ¡C"); } print IMAGE $in{$name}; close(IMAGE); chmod(0666,"$tmp_dir$image_number\.$ext2"); } push(@ATTC,"$image_number\.$ext2\0$fname\.$ext2"); } ($boundary) = $ENV{'CONTENT_TYPE'} =~ m#multipart/form-data; boundary=(.*)#; if (!$boundary) { &error("Error"); } $bound = "--" . $boundary; $mail_value = $in{'Value'}; $mail_value =~ s/"/"/g; $mail_value =~ s/&/&/g; $mail_value =~ s/<//g; if ($in{'email'} ne '') { $Reply_To = $in{'email'}; } else { $Reply_To = $mailto; } if ($in{'uname'} ne '') { $SENDER = $in{'uname'}; } else { $SENDER = "µL°O¦W"; } if (open(OUT,"| $sendmail -t")) { print OUT &jis("X-Processed: $date_now\n"); print OUT "X-HTTP-REFERER: $ENV{'HTTP_REFERER'}\n"; print OUT "X-HOST_INFO: $host_mail\n"; print OUT "To: $FILE{'email'}\n"; print OUT "From: $mailto\n"; print OUT "Reply-To: $Reply_To\n"; print OUT &jis("Subject: \[FORWARD\] $in{'title'}\n"); print OUT "Content-Type: multipart/mixed; boundary=\"$bound\"\n\n"; print OUT 'This is multipart message.' . "\n\n"; print OUT "--$bound\n"; print OUT "Content-Transfer-Encoding: 7bit\n"; print OUT 'Content-Type: text/plain; charset=iso-2022-jp' . "\n\n"; print OUT &jis("¡mÂà°e¶l¥óªº»¡©ú¡n\n\n"); print OUT &jis("³o«Ê«H¬O¥Ñ¤U¦Cªº³oÓ¯d¨¥ªOµo°e¥X¨Óªº¡C\n"); print OUT &jis("¯d¨¥ªO¦W¡G$SETUP{'title'}\n"); print OUT &jis("$reload\n"); print OUT "\n"; print OUT &jis("µ¹¯d¨¥½s¸¹$in{'mail'}ªº¯d¨¥ªÌ $FILE{'uname'} ¥ý¥Í/¤p©jªº¶l¥ó\n"); print OUT &jis("¥Ñ $SENDER ±H¥X¡C\n\n"); if ($in{'email'}) { print OUT &jis("µo«HªÌ¡E$SENDER ªº¹q¤l¶l¥ó¦a§}¡G$in{'email'}\n"); } else { print OUT &jis("$SENDERªº¹q¤l¶l¥ó¦a§}¡G¥¼µn°O¡]³o«Ê¹q¤l¶l¥óµLªk¦^À³¡^\n"); } print OUT "\n"; print OUT &jis("---¥Ñ¦¹¶}©l----------------------------------------------------------\n\n"); print OUT &jis("$mail_value\n\n"); print OUT &jis("---¨ì¦¹µ²§ô----------------------------------------------------------\n"); print OUT "\n"; print OUT &jis("¡°³o«Ê¹q¤l¶l¥óªº¹w³]¦^ÂЦa§}¬° $Reply_To ¡C\n"); if (@ATTC) { print OUT &jis("¡°³o½g¯d¨¥¦³ªþ¥[¹ÏÀÉ¡C\n"); } print OUT "\n"; print OUT &jis($sign); print OUT "\n"; foreach $img_file (@ATTC) { ($img_file,$fname) = split(/\0/,$img_file); print OUT "--$bound\n"; print OUT "Content-Type: application/octet-stream; name=\"$fname\"\n"; print OUT "Content-Transfer-Encoding: X-uuencode\n"; print OUT "Content-Disposition: attachment; filename=\"$fname\"\n\n"; if (open(UU,"$UUENCODE $tmp_dir$img_file $img_file |")) { @UUFILE =
«H¥ó¤w±H¥X
¤è¤~±z¿é¤Jªº¤º®e¤w¸g¶Ç°eµ¹ $FILE{'uname'} ¤F¡C½Ð±N¥»µøµ¡Ãö³¬¡C
$center2