Upload Image 安全防范

Dim MyFile,MyText,sTextAll,sStr,snum,filedel Set MyFile = Server.CreateObject("Scripting.FileSystemObject") Set MyText = MyFile.OpenTextFile(Server.MapPath(filename)) '读取文本文件 sTextAll = LCase(MyText.ReadAll()) MyText.Close Set MyFile = Nothing sStr=".getfolder|.createfolder|.deletefolder|.createdirectory|.deletedirectory|" sStr=sStr&".saveas|wscript.shell|script.encode|server.|.createobject|execute|activexobject|language=" snum = Split(sStr,"|") For i=0 To UBound(snum) If InStr(sTextAll,snum(i)) Then set filedel = Server.CreateObject("Scripting.FileSystemObject") filedel.DeleteFile Server.MapPath(filename) Set filedel = Nothing Response.Write("上传失败!你想传木马文件呀!我BS你") Response.End() End If Next