eweb上传漏洞修补

来源：互联网发布：js基础教程编辑：程序博客网时间：2024/06/11 17:19

在upload.asp页面找到' 任何情况下都不允许上传asp脚本文件

修改为

' 任何情况下都不允许上传asp脚本文件
sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
'-----------------------
' 任何情况下都不允许上传asp,cer,asa,cdx,htr脚本文件
    sAllowExt = UCase(sAllowExt)
'sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
Do While InStr(sAllowExt, "ASP") Or InStr(sAllowExt, "CER") Or InStr(sAllowExt, "ASA") Or InStr(sAllowExt, "CDX") Or InStr(sAllowExt, "HTR")
   sAllowExt = Replace(sAllowExt, "ASP", "")
   sAllowExt = Replace(sAllowExt, "CER", "")
   sAllowExt = Replace(sAllowExt, "ASA", "")
   sAllowExt = Replace(sAllowExt, "CDX", "")
   sAllowExt = Replace(sAllowExt, "HTR", "")
   sAllowExt = Replace(sAllowExt, "CGI", "")
   sAllowExt = Replace(sAllowExt, "ASPX", "")'
'   sAllowExt = Replace(sAllowExt, "ASP .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CER .JPG", "")
'   sAllowExt = Replace(sAllowExt, "ASA .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CDX .JPG", "")
'   sAllowExt = Replace(sAllowExt, "HTR .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CGI .JPG", "")
'   sAllowExt = Replace(sAllowExt, "ASPX .JPG", "")
Loop
'-----------------------