Ò׽ؽØͼÈí¼þ¡¢µ¥Îļþ¡¢Ãâ°²×°¡¢´¿ÂÌÉ«¡¢½ö160KB

aspºǫ́µÇ½ҳÃæ²»Ìøת - Web ¿ª·¢ / ASP

<%
admin=trim(request.form("admin"))
password=trim(request.form("password"))
set rs1=server.CreateObject("adodb.recordset")

if admin<>"" and password<>"" then
rs1.open "select * from yonghu where username='"&admin&"' and password='"&password&"'",conn,1,3
  if not (rs1.bof and rs1.eof) then
session("password")=rs1("password")
response.Redirect("bdxhsdlogin.asp")
  else
response.Redirect("index.asp")
end if
else
  response.Redirect("index.asp")
end if 
%>

Õâ¶Î´úÂëûÓдí°É£¡

ÕâÊÇcheck.asp£¡¿ÉΪʲôµÇ½ÕýÈ·ÁËÒ³Ãæ²»Ìøת°¡£¿¶øÇÒlogin.aspÖеÄactionÁ´½Ócheck.aspÊǾͳöÏÖ500´íÎó Ôõô»ØÊ°¡£¿
Óõ¯³ö´°¿Ú²âÊÔÏ°ɣ¬Õâ¸öÎÊÌâÓ¦¸ÃºÜÈÝÒ×½â¾ö

Ôõô¸öÒâ˼

ÓÃresponse.write("<script>alert('****')</script>")¼ÓÔÚÿһ¸öÅжϵĺóÃæ²âÊÔÏÂÁ÷³Ì£¬¿´´úÂëÊÇÔõôִÐеģ¬Ó¦¸ÃºÜ¿ì¾ÍÄÜÕÒµ½Ô­ÒòµÄ¡£

admin=trim(request.form("admin"))
password=trim(request.form("password"))
set rs1=server.CreateObject("adodb.recordset")

if admin<>"" and password<>"" then
'ÏÈ檢²é¿´¿´sql commandµÄ語¾äÊÇ·ñ¶¼ÓÐ齊È«ÁË
str = "select * from yonghu where username='


Ïà¹ØÎÊ´ð£º

asp.netµ¼³öEXCELÎÊÌ⣡ - .NET¼¼Êõ / ASP.NET

C# code:

SqlConnection conn = CsDB.sqlcon();
SqlDataAdapter da = new SqlDataAdapter("select fwCoding from bjmuma_fwCoding where OrderNumber='" + Order + & ......

ASP¡£netÖÐÔõôµ÷ÓÃCom+×齨 - .NET¼¼Êõ / ASP.NET

C# code:

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Runtime.InteropServices;
nam ......

ASPÍøÒ³Êý×éËæ»úÅÅÁÐÊä³ö - Web ¿ª·¢ / ASP

ÏÖÓÐÒ»¸ö±í¸ñ£¬ÓкܶàÐÐÊý×é¡£
ÏëÒªÒ»¸ö½Å±¾£¬¶ÁÈ¡ËùÓÐÐеÄÊý×éºóÊä³ö¡£
Êä³öÇ°²»ÏÔʾÕý³£Ë³ÐòµÄ±í¸ñÊý×飬¶øÖ±½ÓÏÔʾ³ö¶ÁÈ¡ºóµÄÊý×é¡£
Â¥Ö÷µÄ±í´ïʵÔÚ³ÉÎÊÌ⣡£¡
ÊDz»ÊÇÕâ¸öÒâ˼£¿
<%
Dim ArrDNA£¨10£¬10£ ......
© 2009 ej38.com All Rights Reserved. ¹ØÓÚE½¡ÍøÁªÏµÎÒÃÇ | Õ¾µãµØͼ | ¸ÓICP±¸09004571ºÅ