st0p blogs

  Darboties ar GetList ()
	 Dim s_List, s_Url
	 s_List = ""
	 Dim oFSO, oUploadFolder, oUploadFiles, oUploadFile, sFileName
	 "Response.Write sCurrDir
	 "On Error Resume Next, lai
	 Server . CreateObject ( "Scripting.FileSystemObject" ) Komplekts oFSO = Serveris CreateObject ("Scripting.FileSystemObject").	
	 oFSO. GetFolder ( Server . MapPath ( sCurrDir ) ) Noteikt oUploadFolder = oFSO. GetFolder panta Server. MapPath (sCurrDir)) 
	 "Uzmanību sCurrDir mainīgos, mēs varam izmantot šo vērtību
	 > 0 Then Ja Err skaits> 0 Tad
		 s_List = ""
		 Iziet funkcija
	 Beigas Ja

	 "" Then Ja sDir <> "" Tad
		 sDir, "/" ) > 1 Then Ja InstrRev (sDir, "/")> 1 Tad
			 sDir, InstrRev ( sDir, "/" ) - 1 ) s_Url = Pa kreisi (sDir, InstrRev (sDir, "/") - 1)
		 Cits
			 s_Url = ""
		 Beigas Ja

		 "<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' isdir='true' path='" & s_Url & "'>" & _ s_List = s_List & "<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' isdir='true' path='" & s_Url & "'>" & _
			 _ <td> <img Border=0 src='../sysimage/file/parentfolder.gif'> </ td> "& _
			 _ <td> .. </ td> "& _
			 _ "<td> </ Td>" & _
			 "</ Tr>
	 Beigas Ja
	 "Response.Write sDir &"! "& S_List

	 Dim oSubFolder
	 oUploadFolder. SubFolders Katram oSubFolder In oUploadFolder. Apakšmapes
		 Beigsit Response.Write oUploadFolder.SubFolders
		 "" Then Ja sDir = "" Tad
			 s_Url = oSubFolder. Vārds
		 Cits
			 "/" & oSubFolder. Name s_Url = sDir & "/" & oSubFolder. Vārds
		 Beigas Ja
		 "<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' isdir='true' path='" & s_Url & "'>" & _ s_List = s_List & "<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' isdir='true' path='" & s_Url & "'>" & _
			 _ <td> <img Border=0 src='../sysimage/file/closedfolder.gif'> </ td> "& _
			 oSubFolder. Name & "</td>" & _ "<td NoWrap>" & oSubFolder Vārds &. "</ Td>" & _
			 _ "<td> </ Td>" & _
			 "</ Tr>
	 Nākamais
	 "Response.Write s_List

	 oUploadFolder. Files Komplekts oUploadFiles = oUploadFolder. Faili

	 oUploadFiles Katram oUploadFile In oUploadFiles
		 "Response.Write oUploadFile.Name
		 sFileName = oUploadFile. Vārds
		 sFileName ) = True Then Ja CheckValidExt (sFileName) = True Tad 
		 "Šī pozīcija bija nedaudz nomākts, testējot visu atļauto faila paplašinājums, piemēram, nav atļauta, nevar tikt uzskaitītas vai nav uzskaitītas tikai direktoriju nosaukums un attēlu faili
			 "" Then Ja sDir = "" Tad
				 sFileName s_Url = sContentPath & sFileName
			 Cits
				 sDir & "/" & sFileName s_Url = sContentPath & sDir & "/" & sFileName
			 Beigas Ja

			 "<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' url='" & s_Url & "'>" & _ s_List = s_List & "<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' url='" & s_Url & "'>" & _
					 FileName2Pic ( sFileName ) & "</td>" & _ "<td>" & FileName2Pic (sFileName) & "</ td>" & _
					 sFileName & "</td>" & _ "<td NoWrap>" & sFileName & "</ td>" & _
					 GetSizeUnit ( oUploadFile. size ) & "</td>" & _ "<td Align=right>" & GetSizeUnit (oUploadFile. izmērs) un "</ td>" & _
					 "</ Tr>
		 Beigas Ja
	 Nākamais
	 Nothing Noteikt oUploadFolder = nekas
	 Nothing Noteikti oUploadFiles = Nekas
	 "Response.Write Server.HTMLEncode (s_List) &"! "& S_Url

	 "" Then Ja sDir = "" Tad
		 s_Url = ""
		 'S_Url = "/"
	 Cits
		 & sDir & "" s_Url = "/" & sDir & ""
		 'S_Url = "/" & sDir & "/"
	 Beigas Ja

	 "</table>" s_List = s_List & "</ table>"
	 s_List ) s_List = HTML2JS (s_List)
	 "Response.Write Server.HTMLEncode (s_List) &"! "& S_Url
	 & s_List & "" ", " "" & s_Url & "" ")" s_List = "parent.setDirList (" "" & s_List & "" "," "" & s_Url & "" ")"
	 GetList = s_List
 End Function
 "Ja jums nav solis atklāšanu, jābūt iespējai uzskaitīt visus failus direktorijā, un nedaudz nomākts .. tagad tikai uzskaitīti nosaukumi failiem un direktorijām, lai sufiksu
 s_FileName ) Funkcija CheckValidExt (s_FileName)
	 "" Then Ja sAllowExt = "" Tad
		 CheckValidExt = True
		 Iziet funkcija
	 Beigas Ja

	 Dim Es, aExt, sExt
	 ( Mid ( s_FileName, InStrRev ( s_FileName, "." ) + 1 ) ) sExt = LCase (Mid (s_FileName, InStrRev (s_FileName, ".") + 1))
	 CheckValidExt = False
	 LCase ( sAllowExt ) , "|" ) aExt = Split (LCase (sAllowExt), "|")
	 0 To UBound ( aExt ) Kur i = 0 Lai UBound (aExt)
		 i ) = sExt Then Ja aExt (i) = sExt tam
			 CheckValidExt = True
			 Iziet funkcija
		 Beigas Ja
	 Nākamais
 End Function
 "Mēs atrast noteikts kods, konstatēja sCurrDir vērtība ir vērts šādu
 Sub InitParam ()
	 ( Trim ( Request . QueryString ( "type" ) ) ) sType = UCase (Trim (pieprasījums. QueryString ("tips")))
	 ( Request . QueryString ( "style" ) ) sStyleName = Trim (Request. QueryString ("stils"))

	 Dim Es, aStyleConfig, bValidStyle
	 bValidStyle = False
	 1 To Ubound ( aStyle ) Kur i = 1 Lai UBound (aStyle)
		 aStyle ( i ) , "|||" ) aStyleConfig = Split (aStyle (i) "| | |")
		 ( sStyleName ) = Lcase ( aStyleConfig ( 0 ) ) Then Ja Lcase (sStyleName) = Lcase (aStyleConfig (0)) Pēc tam
			 bValidStyle = True
			 Iziet uz
		 Beigas Ja
	 Nākamais

	 False Then Ja bValidStyle = False Tad
		 ) OutScript ("alert (" Nederīga stils. ")")
	 Beigas Ja

	 19 ) sBaseUrl = aStyleConfig (19)
	 "NAllowBrowse = CLng (aStyleConfig (43))
	 nAllowBrowse = 1

	 1 Then Ja nAllowBrowse <> 1 Tad
		 ) OutScript ("alert ('Neatļaut pārlūkot!')")
	 Beigas Ja

	 3 ) sUploadDir = aStyleConfig (3)
	 sUploadDir, 1 ) <> "/" Then Ja kreiso (sUploadDir, 1) <> "/" Tad
		 Izvēlieties lietā sType
		 Gadījums "tālvadības"
			 & sUploadDir & "Image/" sUploadDir = ".. / .. /" & sUploadDir & "Image /"
		 Gadījums "FILE"
			 & sUploadDir & "Other/" sUploadDir = ".. / .. /" & sUploadDir & "Citi /"
		 Gadījums "MEDIA"
			 & sUploadDir & "Media/" sUploadDir = ".. / .. /" & sUploadDir & "Mediji /"
		 Gadījums "FLASH"
			 & sUploadDir & "Flash/" sUploadDir = ".. / .. /" & sUploadDir & "Flash /"
		 Lieta Else
			 & sUploadDir & "Image/" sUploadDir = ".. / .. /" & sUploadDir & "Image /"
		 Beigt Izvēlieties
	 Beigas Ja
	 "SUploadDir = sUploadDir &" / "

	 Izvēlieties lietā sBaseUrl
	 Gadījums "0"
		 "SContentPath = aStyleConfig (23)
		 Izvēlieties lietā sType
		 Gadījums "tālvadības"
			 & aStyleConfig ( 3 ) & "Image/" sContentPath = ".. /" & aStyleConfig (3) un "Image /"
		 Gadījums "FILE"
			 & aStyleConfig ( 3 ) & "Other/" sContentPath = ".. /" & aStyleConfig (3) un "Citi /"
		 Gadījums "MEDIA"
			 & aStyleConfig ( 3 ) & "Media/" sContentPath = ".. /" & aStyleConfig (3) un "Media /"
		 Gadījums "FLASH"
			 & aStyleConfig ( 3 ) & "Flash/" sContentPath = ".. /" & aStyleConfig (3) un "Flash /"
		 Lieta Else
			 & aStyleConfig ( 3 ) & "Image/" sContentPath = ".. /" & aStyleConfig (3) un "Image /"
		 Beigt Izvēlieties
	 Gadījums "1"
		 sUploadDir ) sContentPath = RelativePath2RootPath (sUploadDir)
	 Lieta "2"
		 RelativePath2RootPath ( sUploadDir ) ) sContentPath = RootPath2DomainPath (RelativePath2RootPath (sUploadDir))
	 Beigt Izvēlieties

	 Izvēlieties lietā sType
	 Gadījums "tālvadības"
		 10 ) sAllowExt = aStyleConfig (10)
	 Gadījums "FILE"
		 6 ) sAllowExt = aStyleConfig (6)
	 Gadījums "MEDIA"
		 9 ) sAllowExt = aStyleConfig (9)
	 Gadījums "FLASH"
		 7 ) sAllowExt = aStyleConfig (7)
	 Lieta Else
		 8 ) sAllowExt = aStyleConfig (8)
	 Beigt Izvēlieties

	 sCurrDir = sUploadDir 'Piezīme ka tas ir konfigurēts ceļu adreses norādīšana
	 ( Request ( "dir" ) ) '得到dir变量 sDir = Trim (Pieprasījums ("dir")) "dir mainīgs
	 ( sDir, "\" , "/" ) '对dir变量进行过滤 sDir no sDir = Aizvietot ("\", "/") "dir mainīgs filtrēt
	 ( sDir, "../" , "" ) sDir = Aizvietot (sDir, ".. /", "")
	 ( sDir, "./" , "" ) sDir = Aizvietot (sDir. "/", "")
	 "" Then Ja sDir <> "" Tad
		 Server . Mappath ( sUploadDir & sDir ) ) = True Then Ja CheckValidDir (Server. Mappath (sUploadDir & sDir)) = True Tad
			 sDir & "/" sCurrDir = sUploadDir & sDir & "/" 
			 "Koncentrējieties uz šeit, sk nepastāvēja, kad sUploadDir & sDir, sCurrDir par sUploadDir & sDir vērtības
                         "Lai gan uz sejas sDir filtrēšanas, taču mēs varam izlaist īpašo izmantojumu st0p tiks sniegta, izmantojot šādu
		 Cits
			 sDir = ""
		 Beigas Ja
	 Beigas Ja

 End Sub 

  <HTML> <HEAD> <meta Http-equiv='Content-Type' content='text/html; charset=utf-8'> <TITLE> eWebEditor </ TITLE> </ head> <body> <script language = javascript> parent.setDirList ("<tr onclick='doRowClick(this)' onmouseover='doRowOver(this)' onmouseout='doRowOut(this)' isdir='true' path='../..'> <td > <img border=0 src='../sysimage/file/parentfolder.gif'> </ td> <td> .. </ td> <td> </ td> </ tr> <tr onclick = 'doRowClick (šis)' onMouseOver = 'doRowOver (šis)' onMouseOut = 'doRowOut (šis)' isdir = 'patiesība' ceļš = '.. / .. / .. / žurnālfailus'> <td> <img border = 0 src = ".. / sysimage / failu / closedfolder.gif"> </ td> <td noWrap> žurnālfailus </ td> <td> </ td> </ tr> <tr onclick = 'doRowClick (šis ) 'onMouseOver =' doRowOver (šis) 'onMouseOut =' doRowOut (šis) 'isdir =' patiesība 'ceļš =' .. / .. / .. / www '> <td> <img border = 0 src = ". . / sysimage / failu / closedfolder.gif "> </ td> <td noWrap> www </ td> <td> </ td> </ tr> </ table>", "/ .. / .. / .. ") </ script> </ body> </ html>