Salad UN

To Taste The Salad Of Life.

« kingcms后台中找出没生成的文件Kingcms列表页修改部分 »

修改FC编辑器 上传过滤

[ At 2008-9-1 By Ash   0 comments ]

重要修改FC编辑器 上传过滤

重要修改FC编辑器 上传过滤
修改文件 \Fckeditor\editor\filemanager\connectors\asp\config.asp

ConfigDeniedExtensions.Add "File", "asp|aspx|asa|asax|java|class|exe|php|pl|dll"
ConfigDeniedExtensions.Add "Image", "asp|aspx|asa|asax|java|class|exe|php|pl|dll"
ConfigDeniedExtensions.Add "Media", "asp|aspx|asa|asax|java|class|exe|php|pl|dll"
ConfigDeniedExtensions.Add "Flash", "asp|aspx|asa|asax|java|class|exe|php|pl|dll"

重要修改FC编辑器 上传过滤

修改文件 \Fckeditor\editor\filemanager\connectors\asp\class_upload.asp
       找到     sFileExt        = File(sItem).Ext
       下面加上
                sFileExt = filtfilename(sFileExt) '这里是对文件类型进行循环检查 修改1
Function filtfilename(filename)
If IsEmpty(filename) Then Exit Function
filename = Lcase(filename) '一定要用Lcase不要用Ucase
do '开始循环
dim A_len
A_len=len(filename) '得到字符串长度
filename = Replace(filename,Chr(0),"")
filename = Replace(filename,".","")
filename = Replace(filename,"asp","")
'filename = Replace(filename,"aaspsp","")
filename = Replace(filename,"asa","")
filename = Replace(filename,"aspx","")
filename = Replace(filename,"cer","")
filename = Replace(filename,"cdx","")
filename = Replace(filename,"htr","")
filename = Replace(filename,"asax","")
filename = Replace(filename,"ascx","")
filename = Replace(filename,"ashx","")
filename = Replace(filename,"asmx","")
filename = Replace(filename,"axd","")
filename = Replace(filename,"vsdiso","")
filename = Replace(filename,"rem","")
filename = Replace(filename,"soap","")
filename = Replace(filename,"config","")
filename = Replace(filename,"cs","")
filename = Replace(filename,"csproj","")
filename = Replace(filename,"vb","")
filename = Replace(filename,"vbproj","")
filename = Replace(filename,"webinfo","")
filename = Replace(filename,"licx","")
filename = Replace(filename,"resx","")
filename = Replace(filename,"resou","")
filename = Replace(filename,"jsp","")
filename = Replace(filename,"php","")
filename = Replace(filename,"cgi","")
loop until A_len=len(filename) '如果过滤前的长度等于过滤后的长度说明已经过滤得干干净净了,退出循环。
filtfilename=filename
End Function

发表评论:

◎欢迎参与讨论,请在这里发表您的看法、交流您的观点。

日历

最新评论及回复

最近发表

Powered By Z-Blog 1.8 Spirit Build 80722 Code detection by Codefense

Copyright 2008 www.s-un.cn. Some Rights Reserved.