diff --git a/Python b/Python new file mode 100644 index 0000000..7556c53 --- /dev/null +++ b/Python @@ -0,0 +1,24 @@ +#!/usr/bin/python +import cgi, os +import cgitb; cgitb.enable() +form = cgi.FieldStorage() +# Get filename here. +fileitem = form['filename'] +# Test if the file was uploaded +if fileitem.filename: + # strip leading path from file name to avoid + # directory traversal attacks + fn = os.path.basename(fileitem.filename) + open('/tmp/' + fn, 'wb').write(fileitem.file.read()) + message = 'The file "' + fn + '" was uploaded successfully' +else: + message = 'No file was uploaded' +print """\ +Content-Type: text/html\n + + +

%s

+ + +""" % (message,) +