A glimpse of the technology of deception HTML file

Many of the site's suffixes are HTML files, and even some sites unexpectedly have such a file suffix html?url=asp888.net, some
Friends may be very confused, can HTML files also be programmed to ASP files? Well, everyone's been cheated.
I am here to tell you how this deception technology is achieved?
First we need to do some preparatory work:
Create a test directory: and set him up as a virtual directory in IIS, our custom Errors tab in the IIS Admin tool
, we found 404 errors, we chose to edit the error, we will 404 insinuate to/test/404.asp
Let's take a look at why we did it. We know that when we visit a file that doesn't exist, IIS gives
We return a 404 error and we are now going to access a file similar to http://localhost/test/20001204001.htm,
You know, this file doesn't exist,!!!!. But we passed the previous setup, this error was intercepted by us, we will be wrong
To the 404.asp file, we do some processing in the 404.asp file, we can deal with this so-called 20001204001.htm
File.
The 404.asp code is as follows:
<%
Dim Strerrpage ()
Strerrpage=split (Request. ServerVariables ("Query_string"), ";"
Response.Write Strerrpage (1)
%>
The output of this program is: http://localhost/test/20001204001.htm, we can further get 20001204001 of this parameter
Then we can implement programming like an ASP program through this keyword
Similarly, for the so-called http://localhost/test/gotohost.htm?url=asp888.net we can understand and explain?
What do you think? So everything is simple? But it's just a little trick!!
/*
Tofu production is a boutique
Http://www.asp888.net Tofu Technology Station
If reproduced please retain the copyright information
*/