|
- Save/Load from path: |
+ Save/Load from path: |
Rows: |
Cols: |
|
@@ -157,3 +160,7 @@ pre {
+
+
\ No newline at end of file
diff --git a/usr/local/www/exec.php b/usr/local/www/exec.php
index 8f47fc5974..03a9b2b609 100755
--- a/usr/local/www/exec.php
+++ b/usr/local/www/exec.php
@@ -5,9 +5,9 @@ if (($_POST['submit'] == "Download") && file_exists($_POST['dlPath'])) {
$fd = fopen($_POST['dlPath'], "rb");
header("Content-Type: application/octet-stream");
header("Content-Length: " . filesize($_POST['dlPath']));
- header("Content-Disposition: attachment; filename=\"" .
+ header("Content-Disposition: attachment; filename=\"" .
trim(htmlentities(basename($_POST['dlPath']))) . "\"");
-
+
fpassthru($fd);
exit;
} else if (($_POST['submit'] == "Upload") && is_uploaded_file($_FILES['ulfile']['tmp_name'])) {
@@ -24,7 +24,7 @@ if (($_POST['submit'] == "Download") && file_exists($_POST['dlPath'])) {
/*
Exec+ v1.02-000 - Copyright 2001-2003, All rights reserved
Created by technologEase (http://www.technologEase.com).
-
+
(modified for m0n0wall by Manuel Kasper )
*/
@@ -79,7 +79,7 @@ if (isBlank( $_POST['txtRecallBuffer'] )) {
// Functions to extend String class.
function str_encode() { return escape( this ) }
function str_decode() { return unescape( this ) }
-
+
// Extend string class to include encode() and decode() functions.
String.prototype.encode = str_encode
String.prototype.decode = str_decode
@@ -95,7 +95,7 @@ if (isBlank( $_POST['txtRecallBuffer'] )) {
if (!isBlank(form.txtCommand.value)) {
// If this command is repeat of last command, then do not store command.
if (form.txtCommand.value.encode() == arrRecallBuffer[arrRecallBuffer.length-1]) { return true }
-
+
// Stuff encoded command string into the recall buffer.
if (isBlank(form.txtRecallBuffer.value))
form.txtRecallBuffer.value = form.txtCommand.value.encode();
@@ -205,7 +205,7 @@ if (!isBlank($_POST['txtCommand'])) {
+
|