服务器FileUpload病毒防护
我的 ASP.NET 应用程序有一个 FileUpload 控件。我的服务器没有任何防病毒程序。如果我在保存文件之前向文件的二进制内容添加一个字节，我的服务器是否会受到病毒影响？显示文件时，我将从内容中删除多余的字节。
感谢您的回复。
My ASP.NET Application has an FileUpload control. My server doesn't have any antivirus program. If I add a byte to binary content of the file before saving file, does my server affect from virus? When displaying file, I will remove extra byte from the content.
Thanks for replies.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
病毒只有在服务器上运行（即文件被打开）时才会给您带来问题。您可以通过使用
.resources扩展名重命名所有上传的文件来解决此问题。对此类型文件的所有请求均由 IIS 发送到 ASP.NET，而 ASP.NET 会拒绝这些请求。因此，文件实际上存储了数据，但根本无法打开/运行。然后，您仍然可以通过读取 ASP.NET 页面/模块中的内容并将数据作为具有正确扩展名的文件返回来提供服务。按照您的建议转换数据也将提供一定程度的保护，尽管我可能会做的不仅仅是在末尾添加一个字节。也许通过可逆算法（例如快速加密或其他算法）运行整个流。
当然，这并不能保护客户端免受任何病毒的侵害。
A virus will only cause you problems if it is run on the server (i.e. the file is opened). You can get around this by renaming all uploaded files with a
.resourcesextension. All requests for this type of file are sent by IIS to ASP.NET, which rejects them. So effectively, the files store the data but can't be opened/run at all. Then you can still serve them back by reading their content in an ASP.NET page/module, and returning the data as a file with the correct extension.Transforming the data as you suggest will also provide a level of protection, though I'd probably do more than add a byte to the end. Perhaps run the whole stream through a reversible algorithm (e.g. a fast encryption or something).
Of course, this doesn't protect the client from any virus.