eWebEditor文件上传漏洞的修补方法

<%
sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
%>

<%
sAllowExt = UCase(sAllowExt)
Do While InStr(sAllowExt, "ASP") or InStr(sAllowExt, "CER") or InStr(sAllowExt, "ASA") or InStr(sAllowExt, "CDX") or InStr(sAllowExt, "HTR")
sAllowExt = Replace(sAllowExt, "ASP", "")
sAllowExt = Replace(sAllowExt, "CER", "")
sAllowExt = Replace(sAllowExt, "ASA", "")
sAllowExt = Replace(sAllowExt, "CDX", "")
sAllowExt = Replace(sAllowExt, "HTR", "")
sAllowExt = Replace(sAllowExt, "AAS", "")
sAllowExt = Replace(sAllowExt, "PSP", "")
Loop
%>

dim sFileType,Un_FileType,FileType
sFileType= "asp|cer|asa|cdx|htr"
Un_FileType = split(sFileType,"|")
For FileType=0 To Ubound(Un_FileType)
if instr(ucase(sAllowExt),ucase(Un_FileType(FileType)))>0 Then
Response.Write ""
Response.end
end if
next