eweb上傳漏洞修補

在upload.asp頁面找到' 任何情況下都不允許上傳asp腳本文件

修改爲

 

' 任何情況下都不允許上傳asp腳本文件
 sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
 '-----------------------
 ' 任何情況下都不允許上傳asp,cer,asa,cdx,htr腳本文件 
    sAllowExt = UCase(sAllowExt)
 'sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
 Do While InStr(sAllowExt, "ASP") Or InStr(sAllowExt, "CER") Or InStr(sAllowExt, "ASA") Or InStr(sAllowExt, "CDX") Or InStr(sAllowExt, "HTR")
   sAllowExt = Replace(sAllowExt, "ASP", "")
   sAllowExt = Replace(sAllowExt, "CER", "")
   sAllowExt = Replace(sAllowExt, "ASA", "")
   sAllowExt = Replace(sAllowExt, "CDX", "")
   sAllowExt = Replace(sAllowExt, "HTR", "")
   sAllowExt = Replace(sAllowExt, "CGI", "")
   sAllowExt = Replace(sAllowExt, "ASPX", "")'
'   sAllowExt = Replace(sAllowExt, "ASP .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CER .JPG", "")
'   sAllowExt = Replace(sAllowExt, "ASA .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CDX .JPG", "")
'   sAllowExt = Replace(sAllowExt, "HTR .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CGI .JPG", "")
'   sAllowExt = Replace(sAllowExt, "ASPX .JPG", "")  
 Loop
 '-----------------------