Fckeditor 2.6.3 ASP版增加检测上传文件是否为木马功能

Function CheckFileSafe(sFilePath)
'使用文本方式打开文件，检测文本中有无危险代码
Dim CheckFso,ObjReadFile,sFileTextAll,IsFileSafe,sNotSafe,NotSafeList,ListLoop
'危险字符串
sNotSafe=".getfolder|.createfolder|.deletefolder|.createdirectory|.deletedirectory|.saveas|wscript.shell|script.encode|server.|.createobject|execute|activexobject|language="
NotSafeList=Split(sNotSafe,"|")
IsFileSafe=True
Set CheckFso=Server.CreateObject( "Scripting.FileSystemObject" )
'判断文件是否存在
If CheckFso.FileExists(sFilePath) then
'以文本方式读取文件，并转换为小写
Set ObjReadFile = CheckFso.OpenTextFile(sFilePath, 1)
sFileTextAll=Lcase(ObjReadFile.ReadAll)
ObjReadFile.Close
'校验文本中是否存在危险字符
For ListLoop=0 to Ubound(NotSafeList)
If Instr(sFileTextAll,NotSafeList(ListLoop))>0 then
IsFileSafe=False
Exit For
End If
Next 
End If
Set CheckFso=Nothing
CheckFileSafe=IsFileSafe
End Function

oUploader.SaveAs "NewFile", sFilePath
If oUploader.ErrNum > 0 Then sErrorNumber = "202" 

if Not CheckFileSafe(sFilePath) then 
sErrorNumber = "205"
oFSO.DeleteFile sFilePath 
End If 

case 205:
alert( '上传文件可能为木马，不允许上传！' ) ;
return ;