声音文件 MP3RMRAMWMVASFWMA 无限目录读取下载系统.docVIP

大家测试看看代码安全不？？:(:(:(:(:( [url]/mp3/[/url] 以下代码可以随便改任意*.asp名字！ ========================================= %@ LANGUAGE = VBScript % %Server.ScriptTimeout=5000% HTML HEAD TITLE声音文件 MP3.RM.RAM.WMV.ASF.WMA 无限目录读取下载系统!/TITLE style type=text/css body,table {font-size: 12px; font-family: Tahoma, Verdana } /style/HEAD BODY topmargin=0 % okdir=E:\music\kevan\mp3 =============== 默 认 读 取 路 径 开 始 ===================== _______________________{Power by kevanTM All Rights Reserved.}_________________________ bys=17 =====安全路径保护字节限制,例如:[ E:\music\kevan\mp3 ]中共有18-1个字节============= thisdir=Request(Path) if thisdir= or len(thisdir)bys then thisdir=okdir end if % % k=5 e=0 v=0 a=2 n=1 t=3 e=8 l=8 Response.Write!-- vbCrLf Response.WriteGenerator: 风之轩 [url][/url] vbCrLf Response.WriteThis Page Start Data: now vbCrLf Response.WriteOriginal Author: kevanTM vbCrLf Response.WriteContact Email: [email]VAVA@TOM.COM[/email] vbCrLf Response.WriteContact OICQ: kevantel vbCrLf Response.Write风之轩([url]WWW.7765.COM)[/url]版权所有,KevanTM出品！ vbCrLf Response.Write-- vbCrLf if Request.QueryString(mp3) then FileName = Request.QueryString(mp3) strFile=FileName if FileName= or len(FileName)17 Then Response.Write(h1错误：/h1无效文件名！请您不要乱提交参数路径！p) Response.End End if FileExt = Mid(FileName, InStrRev(FileName, .) + 1) Select Case UCase(FileExt) Case ASP, ASA, ASPX, ASAX, MDB Response.Write(h1错误：/h1 FileName KevanTM系统强行禁止您不许下载这个文件！p) Response.End End Select strFilename = strFile Response.Buffer = True Response.Clear Set s = Server.CreateObject(ADODB.Stream) s.Open s.Type = 1 on error resume next Set fso = Server.CreateObject(Scripting.FileSystemObject) if not fso.FileExists(strFilename) then Response.Write(h1错误：/h1 strFilename 该文件不存在于服务器里面！p) Response.End end if Set f = fso.GetFile(strFilename) intFilelength = f.size s.LoadFromFile(strFilename) if err then Response.Write(h1错误：/h1 err.Description 无数据流！p) Response.End end if Response.AddHeader Content-Disposition, attachment; filename= Response