软件教程

asp防止上传非法图片的原理解析

来源: 本站    类别: 软件教程    日期: 2016/3/1

 

首先判断文件大小:

if file.filesize<10 then
  Response.Write("<script>alert('您没有选择上传文件')</script>")
  Response.Write("<script>history.go(-1)</script>")
  Response.End()
end if

将文件上传到服务器后,判断用户文件中的危险操作字符:

set MyFile = server.CreateObject("Scripting.FileSystemObject")
set MyText = MyFile.OpenTextFile(FilePath, 1) '读取文本文件
sTextAll = lcase(MyText.ReadAll)
MyText.close
set MyFile = nothing
sStr=".getfolder|.createfolder|.deletefolder|.createdirectory|.deletedirectory|.saveas
|wscript.shell|script.encode|server.|.createobject|execute|activexobject|language="
sNoString = split(sStr,"|") 
for i=0 to ubound(sNoString)
  if instr(sTextAll,sNoString(i)) then
   set filedel = server.CreateObject("Scripting.FileSystemObject")
   filedel.deletefile FilePath
   set filedel = nothing
   Response.Write("<script>alert('您上传的文件有问题,上传失败');window.close();</script>")
   Response.End()
  end if
next

相关文章


Copyright © 2004 - 2024 CNHWW Inc. All Rights Reserved
石家庄市征红网络科技有限公司版权所有 邮政编码:050051
服务电话:0311-85315152 13931185013 在线客服QQ:81447932 / 81447933 邮箱: cnhww@163.com