asp-classic - XSS Shell 错误：未定义变量“fm_QNSTR”

Question

执行文件时的错误是：

变量 fm_QNSTR 未定义

这是代码的一部分。fm_QNSTR 仅在第 2 行。

'// Password protected pages
Sub protected()

'XSS Shell Proxy Check 
If fm_Qnstr("XSSSHELLPROXY") > 0 Then
    Response.Write 13
    Response.End
End If

Dim ThisPage
ThisPage = Server.HtmlEncode(Request.ServerVariables("SCRIPT_NAME"))

Dim Pass
Pass = Request.Form("pass")
If Len(Pass) = 0 Then Pass = Request.Querystring("pass")

'// Set Session + password is Case Sensitive
If Pass <> "" Then
    If Trim(Pass) = "w00t" Then Session("level") = "ok"
    'Response.Redirect ""
End If

'// Logout (xxx.asp?logout=ok)
If Request.Querystring("logout") <> "" Then Session("level") = ""

Answer 1

fm_Qnstr不是 vbscript 或内在函数。你必须定义它。谷歌一下，看来应该是

Function fm_QNStr(byVal Qstring)
    Qstring= Trim(Request.Querystring(Qstring))
    If NOT IsNumeric(Qstring) Then fm_QNStr = 0 Else fm_QNStr = Qstring
End Function