%@ Language=VBScript%> <%option explicit%> <%Server.ScriptTimeout = 600%> <% Response.Buffer = True Response.Expires = 0 %> <% ' Carica file Dim dir, curr_dir, action dir = Request.QueryString("dir") curr_dir = root_folder & dir if InStr(1, dir, "..") <> 0 then Response.Write "Nome della cartella non valido!" Response.End end if action=Request.QueryString("action") If action = "upload" Then Call DoUpload(curr_dir & "\") Response.Redirect "sfmanager.asp?dir=" & Server.URLEncode(dir) Else Call ShowUploadForm End If Sub ShowUploadForm Dim j Response.Write "