SDCMS某处设计缺陷导致遍历任意文件内容及修复

case "edit"
dim filename:filename=sdcms.fget("filename",0)
if not(sdcms.checkstr(filename,"filename")) then
sdcms.echo "filename is wrong"
sdcms.die
end if
if not(sdcms.isfile("../theme/"&filename)) then
sdcms.echo "filename is wrong"
sdcms.die
end if
arr=split(filename,"/")
folder=arr(0)
for i=0 to ubound(arr)-1
if i=0 then
str=arr(i)
else
str=str&"/"&arr(i)
end if
position=position&" > <a href=""?act=list&folder="&str&""">"&arr(i)&"</a>"
next