Question

执行文件时的错误是：

VARIABLE fm_QNSTR未定义

这是代码的一部分。 fm_QNSTR仅在第二行。

'// Password protected pages
Sub protected()

'XSS Shell Proxy Check 
If fm_Qnstr("XSSSHELLPROXY") > 0 Then
    Response.Write 13
    Response.End
End If

Dim ThisPage
ThisPage = Server.HtmlEncode(Request.ServerVariables("SCRIPT_NAME"))

Dim Pass
Pass = Request.Form("pass")
If Len(Pass) = 0 Then Pass = Request.Querystring("pass")

'// Set Session + password is Case Sensitive
If Pass <> "" Then
    If Trim(Pass) = "w00t" Then Session("level") = "ok"
    'Response.Redirect ""
End If

'// Logout (xxx.asp?logout=ok)
If Request.Querystring("logout") <> "" Then Session("level") = ""

Answer 1

fm_Qnstr不是vbscript或内部函数。你必须定义它。谷歌搜索它似乎需要

Function fm_QNStr(byVal Qstring)
    Qstring= Trim(Request.Querystring(Qstring))
    If NOT IsNumeric(Qstring) Then fm_QNStr = 0 Else fm_QNStr = Qstring
End Function

XSS Shell错误：未定义变量“fm_QNSTR”

1 个答案: