防盗链接ASP函数

193 阅读 0 评论 128 点赞

我是靠谱客的博主优雅小鸭子，最近开发中收集的这篇文章主要介绍防盗链接ASP函数，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

简单介绍下功能吧：使用了ASP的一个对象ServerVariables（服务器环境变量），通过这个环境变量可以获取到真正的下载地址再通过一些简单的VBS内置函数破坏其真正地址的完整性。达到欺骗下载软件的功能。现附上源码提供大家学习。

复制代码代码如下:

<% FunctIon DownloadFIle(StrFIle) 
StrFIlename=StrFIle 
Response.Buffer=True 
Response.Clear 
Set S=Server.CreateObJect("ADODB.Stream") 
S.Open 
S.Type=1 
on Error Resume Next 
Set Fso=Server.CreateObJect("ScrIptIng.FIleSystemObJect") 
If Not Fso.FIleExists(StrFIleName) Then 
From_Url=Cstr(Request.ServerVarIables("HTTP_REFERER")) 
Serv_Url=Cstr(Request.ServerVarIables("SERVER_NAME")) 
If MId(From_Url,8,len(Serv_Url)) <> Serv_Url Then 
Response.WrIte "该文件不存在或者已经删除." 
Response.End 
End If 
Response.RedIrect Request.ServerVarIables("HTTP_REFERER") 
Response.End 
End If 
FileExt=MId(StrFIlename,InStrRev(StrFIleName, ".")+1) 
Select Case UCase(FIleExt) 
Case "ASP", "ASA", "ASPX", "ASAX", "MDB", "PHP", "JSP", "SHTML", "HTML", "HTM", "TV", "DATA" 
From_Url=Cstr(Request.ServerVarIables("HTTP_REFERER")) 
Serv_Url=Cstr(Request.ServerVarIables("SERVER_NAME")) 
If MId(From_Url,8,len(Serv_Url)) <> Serv_Url Then 
Response.WrIte "该文件不存在或者已经删除." 
Response.End 
End If 
Response.RedIrect Request.ServerVarIables("HTTP_REFERER") 
Response.End 
End Select 
Set F=Fso.GetFIle(StrFIlename) 
IntFIlelength=F.SIze 
s.LoadFromFIle(StrFIlename) 
If Err Then 
From_Url=Cstr(Request.ServerVarIables("HTTP_REFERER")) 
Serv_Url=Cstr(Request.ServerVarIables("SERVER_NAME")) 
If MId(From_Url,8,len(Serv_Url)) <> Serv_Url Then 
Response.WrIte "该文件数据不完整或许已损坏." 
Response.End 
End If 
Response.RedIrect Request.ServerVarIables("HTTP_REFERER") 
Response.End 
End If 
Set Upload=Server.CreateObJect("PersIts.Upload") 
If Upload Is Nothing Then 
Response.AddHeader "Content-DIsposItIon","attachment; FIlename="&F.Name 
Response.AddHeader "Content-Length",IntFilelength 
Response.CharSet="UTF-8" 
Response.ContentType="application/x-download" 
Response.BinaryWrite S.Read 
Response.Flush 
S.Close 
Set s=NothIng 
Else 
Upload.SendBinary StrFIlename,True,"application/x-download",False 
End If 
End FunctIon 
%>