<?php
$name = isset($_GET["name"]) ? $_GET["name"] : "running-config.xml";
// Strip anything but a safe filename (no path traversal).
$name = preg_replace('/[^A-Za-z0-9._-]/', '', $name);
if ($name === '') {
    $name = "running-config.xml";
}
$ts = date("Y-m-d\TH:i:s");
header("HTTP/1.1 200 OK");
header("Content-Type: application/xml");
header("Content-Disposition: attachment; filename=\"$name\"");
echo "<?xml version=\"1.0\"?>\n";
echo "<config version=\"11.0.0\" ts=\"$ts\">\n";
echo "  <devices>\n";
for ($i = 0; $i < 1500; $i += 1) {
    echo "    <entry name=\"rule-$i\">";
    echo "<from>trust</from><to>untrust</to><action>allow</action>";
    echo "</entry>\n";
}
echo "  </devices>\n";
echo "</config>\n";
?>
