防盗链接ASP函数

小马哥

简单介绍下功能吧：使用了ASP的一个对象ServerVariables（服务器环境变量），通过这个环境变量可以获取到真正的下载地址再通过一些简单的VBS内置函数破坏其真正地址的完整性。达到欺骗下载软件的功能。现附上源码提供大家学习。

代码如下:

1. <% FunctIon DownloadFIle(StrFIle)
   
2. 
   
3. StrFIlename=StrFIle
   
4. 
   
5. Response.Buffer=True
   
6. 
   
7. Response.Clear
   
8. 
   
9. Set S=Server.CreateObJect("ADODB.Stream")
   
10. 
    
11. S.Open
    
12. 
    
13. S.Type=1
    
14. 
    
15. on Error Resume Next
    
16. 
    
17. Set Fso=Server.CreateObJect("ScrIptIng.FIleSystemObJect")
    
18. 
    
19. If Not Fso.FIleExists(StrFIleName) Then
    
20. 
    
21. From_Url=Cstr(Request.ServerVarIables("HTTP_REFERER"))
    
22. 
    
23. Serv_Url=Cstr(Request.ServerVarIables("SERVER_NAME"))
    
24. 
    
25. If MId(From_Url,8,len(Serv_Url)) <> Serv_Url Then
    
26. 
    
27. Response.WrIte "该文件不存在或者已经删除."
    
28. 
    
29. Response.End
    
30. 
    
31. End If
    
32. 
    
33. Response.RedIrect Request.ServerVarIables("HTTP_REFERER")
    
34. 
    
35. Response.End
    
36. 
    
37. End If
    
38. 
    
39. FileExt=MId(StrFIlename,InStrRev(StrFIleName, ".")+1)
    
40. 
    
41. Select Case UCase(FIleExt)
    
42. 
    
43. Case "ASP", "ASA", "ASPX", "ASAX", "MDB", "PHP", "JSP", "SHTML", "HTML", "HTM", "TV", "DATA"
    
44. 
    
45. From_Url=Cstr(Request.ServerVarIables("HTTP_REFERER"))
    
46. 
    
47. Serv_Url=Cstr(Request.ServerVarIables("SERVER_NAME"))
    
48. 
    
49. If MId(From_Url,8,len(Serv_Url)) <> Serv_Url Then
    
50. 
    
51. Response.WrIte "该文件不存在或者已经删除."
    
52. 
    
53. Response.End
    
54. 
    
55. End If
    
56. 
    
57. Response.RedIrect Request.ServerVarIables("HTTP_REFERER")
    
58. 
    
59. Response.End
    
60. 
    
61. End Select
    
62. 
    
63. Set F=Fso.GetFIle(StrFIlename)
    
64. 
    
65. IntFIlelength=F.SIze
    
66. 
    
67. s.LoadFromFIle(StrFIlename)
    
68. 
    
69. If Err Then
    
70. 
    
71. From_Url=Cstr(Request.ServerVarIables("HTTP_REFERER"))
    
72. 
    
73. Serv_Url=Cstr(Request.ServerVarIables("SERVER_NAME"))
    
74. 
    
75. If MId(From_Url,8,len(Serv_Url)) <> Serv_Url Then
    
76. 
    
77. Response.WrIte "该文件数据不完整或许已损坏."
    
78. 
    
79. Response.End
    
80. 
    
81. End If
    
82. 
    
83. Response.RedIrect Request.ServerVarIables("HTTP_REFERER")
    
84. 
    
85. Response.End
    
86. 
    
87. End If
    
88. 
    
89. Set Upload=Server.CreateObJect("PersIts.Upload")
    
90. 
    
91. If Upload Is Nothing Then
    
92. 
    
93. Response.AddHeader "Content-DIsposItIon","attachment; FIlename="&F.Name
    
94. 
    
95. Response.AddHeader "Content-Length",IntFilelength
    
96. 
    
97. Response.CharSet="UTF-8"
    
98. 
    
99. Response.ContentType="application/x-download"
    
100. 
     
101. Response.BinaryWrite S.Read
     
102. 
     
103. Response.Flush
     
104. 
     
105. S.Close
     
106. 
     
107. Set s=NothIng
     
108. 
     
109. Else
     
110. 
     
111. Upload.SendBinary StrFIlename,True,"application/x-download",False
     
112. 
     
113. End If
     
114. 
     
115. End FunctIon
     
116. 
     
117. %>

复制代码

使用：

1. <%Call DownloadFIle("DownloadFIle")%>

复制代码