Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<%Response.Charset="gb2312"%>

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta name="robots" content="noindex,nofollow">
<script type="text/javascript" src="js/echarts.min.js" charset="utf-8"></script>
<script type="text/javascript" src="http://code.jquery.com/jquery-1.12.2.js"></script>

<title>ASC���ʹ�˾</title>
<style>
table{
 border: solid 1px #000000;
 }
table tr td{
 border-Bottom: dotted 1px #000000;
 border-top: dotted 1px #000000;
 border-right: dotted 1px #000000;
 border-left-width:1px;
 border-left-color:#000000;
 }
 .box{
 border-left-width:3px;
 border-left-color:#FF0000;
 border-Bottom: dotted 1px #000000;
 border-top: dotted 1px #000000;
 border-right: dotted 1px #000000;
 }
</style>
</head>
<body style="text-align:center; margin:0 auto;">
<%
    flgRead = Request.Querystring("arg")
    if flgRead <> "Asc365NewSys" then response.end

fromdate = DateAdd("m",-1,date())
        todate = DateAdd("d",-1,date())
    
    '��ȡ�ֿ�
    dim StoreMsg(100,2)
    StoreMsg(0,0) = "%"
    StoreMsg(0,1) = "ALL"
    id_store = 1
    set rs = server.CreateObject("adodb.recordset")
    sql = "Select storcode,storname from BA_STORDF where COUNTRY = '�й�' and STORTYP = '���Ҳֿ�' order by ID"
    rs.open sql,conn,1,1
    do while not rs.eof
        StoreMsg(id_store,0) = rs(0)
        StoreMsg(id_store,1) = rs(1)
        id_store = id_store + 1
        rs.movenext
    loop
    rs.close 
    set rs = nothing
    '������˾
    dim HDGS(100,2)
    HDGS(0,0) = "%"
    HDGS(0,1) = "ALL"
    id_hdgs = 1
    set rs = server.CreateObject("adodb.recordset")
    sql = "Select PARMVALUE,DISPVALUE  from OM_COMMPARM where FLDNAME = 'HDGS' and parmvalue in (select   hdgs from CBEJIESUAN.dbo.Changjia_StoreRijie) order by SORTID"
    rs.open sql,conn,1,1
    do while not rs.eof
        HDGS(id_hdgs,0) = rs(0)
        HDGS(id_hdgs,1) = rs(1)
        id_hdgs = id_hdgs + 1
        rs.movenext
    loop
    rs.close 
    set rs = nothing
    'װ����ַ
    dim Addr_Zhuangche(100,2)
    Addr_Zhuangche(0,0) = "%"
    Addr_Zhuangche(0,1) = "ALL"
    id_addr = 1
    set rs = server.CreateObject("adodb.recordset")
    'sql = "select distinct Address_Zhuangche,Address_Zhuangche as disp from TR_SEAINTRANSITMSG2 where Address_Zhuangche not like '��̨%' and Address_Zhuangche <> ''"
    sql = "select distinct Address_Zhuangche,Address_Zhuangche as disp from CBEJIESUAN.dbo.Changjia_StoreRijie"
    rs.open sql,conn,1,1
    do while not rs.eof
        Addr_Zhuangche(id_addr,0) = rs(0)
        Addr_Zhuangche(id_addr,1) = rs(1)
        id_addr = id_addr + 1
        rs.movenext
    loop
    rs.close 
    set rs = nothing

typ = "1"
    store = "%"
    hdgscur = "%"
    addr = "%"
    if request.Form("submit")="submit" then
        fromdate = request.Form("fromdate")
        todate = request.Form("todate")
        'if datediff("d",fromdate,"2016-06-26") >-1*MAX_DAYS then fromdate = DateAdd("d",MAX_DAYS,"2016-06-26")
        if datediff("d",todate,DateAdd("d",-1,date())) <0 then todate = DateAdd("d",-1,date())
        typ = request.Form("typ")
        
        store = request.Form("store")
        hdgscur = request.Form("hdgs")
        addr = request.Form("addr")
    end if
    'sql = "select opdt,sum(ZPKY_KC+ZPZT_KC) as sumkc,sum(ZPKY_KC) as ZPKY_KC,sum(ZPZT_KC) as ZPZT_KC from CBEJIESUAN.dbo.Changjia_StoreRijie where opdt between '2023-11-03' and '2023-11-05' and storcode = 'YCT' and Address_Zhuangche = '���ݰ�����' and HDGS = '001' group by opdt order by opdt"
    sql = "select opdt,sum(ZPKY_KC+ZPZT_KC) as sumkc,sum(ZPKY_KC) as ZPKY_KC,sum(ZPZT_KC) as ZPZT_KC from CBEJIESUAN.dbo.Changjia_StoreRijie where opdt between '" & fromdate &"' and '" & todate & "' and storcode like '" & store & "%' and Address_Zhuangche like '" & addr & "%' and HDGS like '" & hdgscur & "' group by opdt order by opdt"
    echartsName = ""
    fuhao = ""
    if typ = "1" then 
        echartsName = "'��ֵ������ʵ�ʳɱ���$'"
        fuhao = "'$'"
        sql = replace(sql,"_KC","_FORACTPRICE")
    end if
    if typ = "2" then 
        echartsName = "'�����m3��'"
        fuhao = "'m3'"
        sql = replace(sql,"_KC","_BULK")
    end if
    if typ = "3" then 
        echartsName = "'�ɹ�������'"
        fuhao = "'��'"
        sql = replace(sql,"_KC","_AVGPRICE")
    end if
    if typ = "4" then 
        echartsName = "'��Ʒ����'"    
        fuhao = "'��'"
        sql = replace(sql,"_KC","_KC")
    end if
  
'response.write sql & "</br>"
    dim mydata(10000,22)
    dim line_max
    line_max = 0
    set rs=server.CreateObject("adodb.recordset")
    rs.open sql,conn,1,1
    do while not rs.eof
        mydata(line_max,0) = rs(0)
        for i = 1 to 3
            mydata(line_max,i) = Round(rs(i),2)
        next
        line_max = line_max + 1
    rs.movenext
    loop
    rs.close
    set rs = nothing
'����,�ܿ��,����;�ܿ��,��;�ܿ��,��Ʒ��,����Ʒ��,��Ʒ����,��Ʒռ��,��Ʒ��;,���ֿ���,����ռ��,������;,OpenBox����,OpenBoxռ��,OpenBox��;,���޿⣬������;,���Ͽ�,���޿�,���˲��
    datedt = "["
    dtzong = "["
    dtzpky = "["
    dtzpzt = "["
    if datediff("d",fromdate,mydata(0,0)) <> 0 then
        for i =0 to datediff("d",fromdate,mydata(0,0))-1
        datedt = datedt & "'" & DateAdd("d",i,fromdate) & "',"
        dtzong = dtzong & "0,"
        dtzpky = dtzpky & "0,"
        dtzpzt = dtzpzt & "0,"

next
    end if
    for i = 0 to line_max -1
        datedt = datedt & "'" & mydata(i,0) & "',"
        dtzong = dtzong & mydata(i,1) & ","
        dtzpky = dtzpky & mydata(i,2) & ","
        dtzpzt = dtzpzt & mydata(i,3) & ","
    next
    datedt = left(datedt,len(datedt) -1) & "]"
    dtzong = left(dtzong,len(dtzong) -1) & "]"
    dtzpky = left(dtzpky,len(dtzpky) -1) & "]"
    dtzpzt = left(dtzpzt,len(dtzpzt) -1) & "]"

conn.close
    set conn = nothing

%>
    <div style="margin:0 auto; text-align:center">
    <form method="post" action="" align="center" name="prdmsg">

<td nowrap>�ֿ⣺
                    <select name="store">
                        <%for i= 0 to id_store-1%>
                        <option value="<%=StoreMsg(i,0)%>" <%if store = StoreMsg(i,0) then%> selected <%end if%>><%=StoreMsg(i,1)%></option>
                        <%next%>
                    </select>
                    ������˾��
                    <select name="hdgs">
                        <%for i= 0 to id_hdgs-1%>
                        <option value="<%=HDGS(i,0)%>" <%if hdgscur = HDGS(i,0) then%> selected <%end if%>><%=HDGS(i,1)%></option>
                        <%next%>
                    </select>
                    װ���ص㣺
                    <select name="addr">
                        <%for i= 0 to id_addr-1%>
                        <option value="<%=Addr_Zhuangche(i,0)%>" <%if addr = Addr_Zhuangche(i,0) then%> selected <%end if%>><%=Addr_Zhuangche(i,1)%></option>
                        <%next%>
                    </select>
                </td>
                <td nowrap>��ѯ���ݣ�
                    <select name="typ">
                        <option value="1" <%if typ = "1" then%>selected="selected"<%end if%>>����ʵ�ʳɱ�</option>
                        <option value="2" <%if typ = "2" then%>selected="selected"<%end if%>>�����m3��</option>
                        <option value="3" <%if typ = "3" then%>selected="selected"<%end if%>>�ɹ�������</option>
                        <option value="4" <%if typ = "4" then%>selected="selected"<%end if%>>����</option>                        
                    </select>
                    <input type="text" style="display:none" name="backtime" value="<%=backtimes%>"/>
                </td>
                <td nowrap><input type="submit" name="submit" value="submit"></td>
            </tr>
            <tr>
                <td colspan="7">ע����ǰ�����������ʱ�䷶Χ�ǣ�2023-11-03 �� ���졣ѡ�����ʱ����ʾ��װ����������ÿ����װ��58�����׼��㡣</br>
                �ֿ⣺���Ҳֿ⡣������˾���й��ս����ݵĻ�����˾��װ���ص㣺�й��ս����ݵ�װ���ص㡣��2023-11-08��
                </td>
            </tr>
        </table>
    </form>
    </div>
    <div id="container" style="text-align:center; height:93%" >Loading...</div>

</div>
</body>
</html>
<script type="text/javascript">

var mydd = [<%=dtzong%>,<%=dtzpky%>,<%=dtzpzt%>];
var dataX = <%=datedt%>