最明显的地方是在一个配置文件里 config.asp

代码是这样的

ConfigAllowedExtensions.Add    "File", ""
ConfigDeniedExtensions.Add    "File", "php|php3|php5|phtml|asp|asa|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|dll|reg|cgi"

ConfigAllowedExtensions.Add    "Image", "jpg|gif|jpeg|png|bmp"
ConfigDeniedExtensions.Add    "Image", ""

ConfigAllowedExtensions.Add    "Flash", "swf|fla"
ConfigDeniedExtensions.Add    "Flash", ""