quote:

---

<% Server.ScriptTimeout = 3600 ' 1 hour timeout %>

---

<% @Page Language="C#" %>
<% @Import Namespace="System.Net.Sockets" %>
<% @Import Namespace="System.Text" %>
<% @Import Namespace="System.IO" %>
<%
TcpClient tcpc = new TcpClient();
try
{
  tcpc.Connect("whois.networksolutions.com", 43);
}
catch(SocketException ex)
{
  Response.Write(ex.ToString());
  Response.End();
}

String strDomain = "gotdotnet.com\r\n";
Byte[] arrDomain = Encoding.ASCII.GetBytes(strDomain.ToCharArray());
  
Stream s = tcpc.GetStream();
s.Write(arrDomain, 0, strDomain.Length);

StreamReader sr = new StreamReader(tcpc.GetStream(), Encoding.ASCII);
string strLine = null;

while (null != (strLine = sr.ReadLine()))
{
   Response.Write(strLine + "<br>");
}

tcpc.Close();
%>

extension = LCase(Mid(filename,InStrRev(filename,".")))
If _
	extension <> ".asp" And _
	extension <> ".cgi" And _
	extension <> ".pl" And _
	extension <> ".php" And _
	extension <> ".vbs" And _
	extension <> ".vbx" And _
	extension <> ".scr" And _
	extension <> ".js" And _
	extension <> ".com" And _
	extension <> ".bat" And _
	byteCount <= 50000000 _
Then

select case extension
	case ".jpg", ".jpeg", ".gif", ".png", ".zip", ".mp3"	
            allowFile=true
	case else
            allowFile=false
end select

  If allowFile and byteCount <= 50000000 Then

quote:

---

woops forgot about .aspx thanks Dayve!

I have updated the outputFile.asp in the download to accomodate this.

know of any other commonly executable file types? please let me know.

Mike

---

why not just change the script like I did to have allowable files? this is the same concept when setting up a firewall, close everything and punch holes. I excluded all files except the ones I want.


http://www.nineinchnailz.com

quote:

---

woops forgot about .aspx thanks Dayve!

I have updated the outputFile.asp in the download to accomodate this.

know of any other commonly executable file types? please let me know.

Mike

---

if right(extension,4) <> "." then
 response.write "sorry, only 3 letter extensions allowed"
else
 ' continue with script...

quote:

---

one way could be...

if right(extension,4) <> "." then
 response.write "sorry, only 3 letter extensions allowed"
else
 ' continue with script...

---

Thanks, dayve!

Does the

if right(extension,4)

also end it for 5,6,7, etc?

Just making sure.

Thanks for your help!

Etymon

If Len(extension) > 4 Then
	Response.Write("sorry, extension too long")
Else
	...
End If

quote:

---

Right(extension,4) will always return 4 characters (or maybe an error) and then never = ".", i think. I think the easiest way to do what you want is with using Len().

If Len(extension) > 4 Then
	Response.Write("sorry, extension too long")
Else
	...
End If

---

considering filenames have a minimum of 2 characters for an extension
and a period that is 3. since you cannot name a file with a leading
period you are forced to a minimum of 4 characters (workable filenames
that is, ie. a.gif) so the check I have shown will work 99% of
the time (maybe even 100% ) but the think I think you are missing
is my earlier thread where I mentioned you should filter what files
are ALLOWED and not what files are DISALLOWED. I believe this is a
better routine:

select case extension	
   case ".jpg", ".jpeg", ".gif", ".png", ".zip", ".mp3"	          
      allowFile=true	
   case else            
      allowFile=false
end select  

If allowFile and byteCount <= 50000000 Then

someone correct me if I am wrong though... thanks.


http://www.nineinchnailz.com

Edited by - dayve on 13 July 2002 00:44:46

Edited by - dayve on 13 July 2002 00:45:59