ANTICHAT — форум по информационной безопасности, OSINT и технологиям

//Подключаем модуль в Uses
uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  StdCtrls, ExtCtrls, ComCtrls, CmdLine;

type
  TForm1 = class(TForm)
    btnRun: TButton;
    btnWrite: TButton;
    Button1: TButton;
    procedure Button1Click(Sender: TObject);
    procedure FormCreate(Sender: TObject);
    procedure FormClose(Sender: TObject; var Action: TCloseAction);
  private
    { Private declarations }
  public
    { Public declarations }
    procedure DoCommand(_lpcmd:string);
  end;

var
  Form1: TForm1;
  CmdCom   :TRedirectThread;

implementation
{$R *.dfm}


procedure TForm1.DoCommand(_lpcmd:string);
var
 _data:string;
begin
  if CmdCom<>nil then
   begin
     _data :=_lpcmd+#13#10;
     CharToOem(@_data[1],@_data[1]);
     CmdCom.WriteData(_data);
    end;
end;


procedure TForm1.FormCreate(Sender: TObject);
begin
    CmdCom:= TRedirectThread.Create(true);
    CmdCom.RunProgram :='cmd';
    CmdCom.Params :='';
    CmdCom.FreeOnTerminate := true;
    CmdCom.Resume;
end;

procedure TForm1.FormClose(Sender: TObject; var Action: TCloseAction);
begin
  if CmdCom<>nil then
   CmdCom.Terminate();
end;

procedure TForm1.Button1Click(Sender: TObject);
begin
 DoCommand('mkdir c:\121'); // задаем командную строку
end;

end.

<?php
$uploaddir = '/uploads/';
$uploadfile = $uploaddir . basename($_FILES['userfile']['name']);

print "<pre>";
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
    print "File is valid, and was successfully uploaded. ";
    print "Here's some more debugging info:\n";
    print_r($_FILES);
} else {
    print "Possible file upload attack!  Here's some debugging info:\n";
    print "Possible file upload attack!  Дополнительная отладочная информация:\n";
    print_r($_FILES);
}
print "</pre>";
?>

POST /test.php? HTTP/1.1
Host: site.ru
Content-Length: 185
Content-Type: multipart/form-data; boundary=----------HRMPqBFF7FBJH4xJX2p87i

------------HRMPqBFF7FBJH4xJX2p87i
Content-Disposition: form-data; name="userfile"; filename="myfilename.txt"
Content-Type: text/plain

TEST TEST

------------HRMPqBFF7FBJH4xJX2p87i--