%
userid=getcookie("clubuser_id")
............
if Application("FTBBSMB")(7,0)="M" then
inFolder=year(date())&month(date())
else
inFolder=year(date())&month(date())&day(date())
end if
call makefolder(inFolder,fso)
myFolder = inFolder&"/"&userid
call makefolder(myFolder,fso)
...................
formPath=inFolder&"/"&userid
......上传过程省略.....
建立的文件夹读取的COOKIE里的userid
修改COOKLIE里userid的值为fuck.asp形式即可建立IIS 6.0缺陷文件夹导致可以上传JPG的小马
至于修改COOKIE各位大大应该都会吧~FTBBS貌似所有版本都有此问题吧