"print<<"END";

File to Upload:

#### "#!D:\PROGRA~1\INTERW~2\TeamSite/iw-perl/bin/iwperl #----------------------------------------------------------------------------- # #----------------------------------------------------------------------------- =head1 NAME =cut use TeamSite::CGI_lite; use CGI; use CGI::Carp qw ( fatalsToBrowser ); use File::Basename; $|=1; $cgi = TeamSite::CGI_lite->new(); $cgi->parse_data(); print<<"END"; Content-type: text/html; charset=utf-8 END my $iwmnt = "y:" ; $main=$cgi->escape_html_data($cgi->{form}{'vpath'}); print $main; my $safe_filename_characters = "a-zA-Z0-9_.-"; $import_target_path = $iwmnt . $main; my $query = new CGI; my $filename = $query->param("file"); $filename =~ s/.*[\/\\](.*)/$1/; my ( $name, $path, $extension ) = fileparse ( $filename, '\..*' ); $filename = $name . $extension; $filename =~ tr/ /_/; $filename =~ s/[^$safe_filename_characters]//g; if ( $filename =~ /^([$safe_filename_characters]+)$/ ) { $filename = $1; } else { die "Filename contains invalid characters"; } my $upload_filehandle = $query->upload("file"); open ( UPLOADFILE, ">$import_target_path/$filename" ) or die "$!"; binmode UPLOADFILE; while ( <$upload_filehandle> ) { print UPLOADFILE; } close UPLOADFILE; print<<"END";

Thanks for uploading

$filename

END "