admin_login.asp
on line #56 find the following:
RequestMethod = Request.ServerVariables("Request_method")
Just below that line (on line #57) insert the following:
strTarget = trim(chkString(request("target"),"SQLString"))
on line #76 find the following:
if Request("target") = "" then
Response.Write "admin_home.asp"
else
Response.Write request("target")
end if
replace it with this:
if strTarget = "" then
Response.Write "admin_home.asp"
else
Response.Write strTarget
end if
on line #84 find the following:
if Request("target") = "" then
Response.Write "admin_home.asp"
else
Response.Write request("target")
end if
replace it with this:
if strTarget = "" then
Response.Write "admin_home.asp"
else
Response.Write strTarget
end if
on line #104 find the following:
" <input type=""hidden"" value=""" & request("target") & """ name=""target"">" & vbNewLine & _
replace it with this:
" <input type=""hidden"" value=""" & strTarget & """ name=""target"">" & vbNewLine & _