<% 'dBlog 2.0 CMS Open Source 'Versione file 2.0.0 %> <% Dim FSO If Request.QueryString("f") <> "" AND Request.QueryString("a") = "conferma" AND NOT InStr(Request.QueryString("f"), "..") AND NOT InStr(Request.QueryString("f"), "\") AND NOT InStr(Request.QueryString("f"), "/") Then Set FSO = CreateObject("Scripting.FileSystemObject") If FSO.FileExists(Server.MapPath(Path_DirPublic & Request.QueryString("f"))) Then FSO.DeleteFile(Server.MapPath(Path_DirPublic & Request.QueryString("f"))) End If Response.Redirect "elencofile.asp" End If %>

\\ <%=Testo_Path_Pannello%> : <%=Testo_Sezione_FileCancella%>

<%=Testo_FiltroFile_IntroduzioneCancellazione%>

<%=Server.HTMLEncode(Request.QueryString("f"))%>

&a=conferma"><%=Testo_FiltroFile_ConfermaCancellazione%> - <%=Testo_FiltroFile_NonConfermaCancellazione%>

<%=Testo_LinkChiudi%>

<% Conn.Close Set Conn = Nothing %>