Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

<html>

<title>ASC国际公司</title>
<style>
table{
 border: solid 1px #000000;
 }
table tr td{
 border-Bottom: dotted 1px #000000;
 border-top: dotted 1px #000000;
 border-right: dotted 1px #000000;
 border-left-width:1px;
 border-left-color:#000000;
 }
 .box{
 border-left-width:3px;
 border-left-color:#FF0000;
 border-Bottom: dotted 1px #000000;
 border-top: dotted 1px #000000;
 border-right: dotted 1px #000000;
 }
</style>
</head>
<body style="text-align:center; margin:0 auto;">
<%
    flgRead = Request.Querystring("arg")
    if flgRead <> "Asc365NewSys" then response.end
	
    zubie = Request.Querystring("org")
	response.write(zubie)
	response.end
    set conn = server.createObject("adodb.connection")
    conn.open "driver={SQL Server};server=173.248.132.52,1533;uid=sa;pwd=77a%sc77;database=CBECDB1"

fromdate = DateAdd("m",-1,date())
    todate = DateAdd("d",-1,date())
    '获取组别和仓库
    dim cangku(50,2)
   ' dim zu(100,2)
    zuname = "" '用于在图表中显示
    '两个都用sqlall
    cangku(0,0) = ""
    cangku(0,1) = "All"
    zu(0,0) = ""
    zu(0,1) = "All"
    id_cangku = 1
    set rscangku=server.CreateObject("adodb.recordset")
    'sqlcangku = "select storcode,storname from (select storcode,storname from ba_stordf union select 'YT' as storcode ,'烟台仓库' as storname union select 'HW' as storcode ,'海外仓库' as storname) a order by len(storcode)"
    sqlcangku = "select storcode,storname from (select storcode,storname from ba_stordf union select 'LS2' ,'洛杉矶ALL' union select 'YTCK' ,'烟台仓库' union select 'HWCK','海外仓库' union select 'DLDFGS', '多伦多分公司' union select 'JJSFGS', '旧金山分公司' union select 'TPPFGS', '坦帕分公司' union select 'LSJFGS', '洛杉矶分公司' union select 'YTTFGS','烟台分公司') a order by len(storcode) desc,storcode"
    rscangku.open sqlcangku,conn,1,1
    do while not rscangku.eof
        cangku(id_cangku,0) = rscangku(0)
        cangku(id_cangku,1) = rscangku(1)
        id_cangku = id_cangku + 1
        rscangku.movenext
    loop
    rscangku.close

set rszu = server.CreateObject("adodb.recordset")
   ' sqlzu = "select zu,zu+ '组' as zuname  from (select distinct(right(orgcode,2)) as zu from AA_STORERIJIE where opdt = dateadd(d,-2, cast(getdate() as date))) a union select TREECODE,TREENAME from om_orgtree where TREECODE in ('0004','0005','0006','0007')"
    sqlzu = "select orgcode from om_employee where empcode = '" + App.pubs.userNo + "'"
    rszu.open sqlzu,conn,1,1
    'do while not rszu.eof
    '    zu(id_zu,0) = rszu(0)
    '    zu(id_zu,1) = rszu(1)
    '    id_zu = id_zu + 1
    '    rszu.movenext
    'loop
    zubie = trim(rszu(0))
    rszu.close
    response.write(zubie)
    response.end
    storcode = ""
    'sql = "exec s70602885 '2018-11-01','2018-11-01','',''"
    typ = "1"
    sql = "exec s70602885 '" & fromdate & "','" & todate & "','','','1'"
    if request.Form("submit")="submit" then
        fromdate = request.Form("fromdate")
        todate = request.Form("todate")
        if datediff("d",fromdate,"2016-06-26") >0 then fromdate = "2016-06-26"
        if datediff("d",todate,DateAdd("d",-1,date())) <0 then todate = DateAdd("d",-1,date())
        storcode = request.Form("storcode")
        typ = request.Form("typ")
    sql = "exec s70602885 '" & fromdate & "','" & todate & "','" & zubie &"','" & storcode &"','" & typ & "'"
    end if
    echartsName = ""
    if typ = "1" then echartsName = "'货值（海外实际成本）$'"
    if typ = "2" then echartsName = "'体积（m3）'"
    if typ = "3" then echartsName = "'采购金额（￥）'"
    fuhao = ""
    if typ = "1" then fuhao = "'$'"
    if typ = "2" then fuhao = "'m3'"
    if typ = "3" then fuhao = "'￥'"

dim mydata(10000,20)
    dim line_max
    line_max = 0

set rs=server.CreateObject("adodb.recordset")
    rs.open sql,conn,1,1
    do while not rs.eof
        mydata(line_max,0) = rs(0)
        for i = 1 to 19
            mydata(line_max,i) = Round(rs(i),2)
        next
        line_max = line_max + 1
    rs.movenext
    loop
    rs.close
'日期,总库存,非在途总库存,在途总库存,正品库,非正品库,正品可用,正品占用,正品在途,二手可用,二手占用,二手在途,OpenBox可用,OpenBox占用,OpenBox在途,待修库，待修在途,报废库,在修库,待核查库
    datedt = "["
    dtzong = "["
    dtfeizaitu = "["
    dtzaitu = "["
    dtzhengpinku = "["
    dtfeizhengpin = "["
    dtzpky = "["
    dtzpzy = "["
    dtzpzt = "["
    dtesky = "["
    dteszy = "["
    dteszt = "["
    dtobky = "["
    dtopzy = "["
    dtopzt = "["
    dtdxkc = "["
    dtdxzt = "["
    dttbfkc = "["
    dtzxkc = "["
    dtdhck = "["
    for i = 0 to line_max -1
        datedt = datedt & "'" & mydata(i,0) & "',"
        dtzong = dtzong & mydata(i,1) & ","
        dtfeizaitu = dtfeizaitu & mydata(i,2) & ","
        dtzaitu = dtzaitu & mydata(i,3) & ","
        dtzhengpinku = dtzhengpinku & mydata(i,4) & ","
        dtfeizhengpin = dtfeizhengpin & mydata(i,5) & ","
        dtzpky = dtzpky & mydata(i,6) & ","
        dtzpzy = dtzpzy & mydata(i,7) & ","
        dtzpzt = dtzpzt & mydata(i,8) & ","
        dtesky = dtesky & mydata(i,9) & ","
        dteszy = dteszy & mydata(i,10) & ","
        dteszt = dteszt & mydata(i,11) & ","
        dtobky = dtobky & mydata(i,12) & ","
        dtopzy = dtopzy & mydata(i,13) & ","
        dtopzt = dtopzt & mydata(i,14) & ","
        dtdxkc = dtdxkc & mydata(i,15) & ","
        dtdxzt = dtdxzt & mydata(i,16) & ","
        dttbfkc = dttbfkc & mydata(i,17) & ","
        dtzxkc = dtzxkc & mydata(i,18) & ","
        dtdhck = dtdhck & mydata(i,19) & ","
    next
    datedt = left(datedt,len(datedt) -1) & "]"
    dtzong = left(dtzong,len(dtzong) -1) & "]"
    dtfeizaitu = left(dtfeizaitu,len(dtfeizaitu) -1) & "]"
    dtzaitu = left(dtzaitu,len(dtzaitu) -1) & "]"
    dtzhengpinku = left(dtzhengpinku,len(dtzhengpinku) -1) & "]"
    dtfeizhengpin = left(dtfeizhengpin,len(dtfeizhengpin) -1) & "]"
    dtzpky = left(dtzpky,len(dtzpky) -1) & "]"
    dtzpzy = left(dtzpzy,len(dtzpzy) -1) & "]"
    dtzpzt = left(dtzpzt,len(dtzpzt) -1) & "]"
    dtesky = left(dtesky,len(dtesky) -1) & "]"
    dteszy = left(dteszy,len(dteszy) -1) & "]"
    dteszt = left(dteszt,len(dteszt) -1) & "]"
    dtobky = left(dtobky,len(dtobky) -1) & "]"
    dtopzy = left(dtopzy,len(dtopzy) -1) & "]"
    dtopzt = left(dtopzt,len(dtopzt) -1) & "]"
    dtdxkc = left(dtdxkc,len(dtdxkc) -1) & "]"
    dtdxzt = left(dtdxzt,len(dtdxzt) -1) & "]"
    dttbfkc = left(dttbfkc,len(dttbfkc) -1) & "]"
    dtzxkc = left(dtzxkc,len(dtzxkc) -1) & "]"
    dtdhck = left(dtdhck,len(dtdhck) -1) & "]"

'获取当前组织在各个仓库货值 起始时间和结束时间的
    '参数： 时间，机构。 返回值：各个仓库、货值
    dtcangku1 = "["
    dtcangku2 = "["
    sql = "exec s70602885_1 '" & fromdate & "', '" & zubie & "','" & typ & "'"
    set rs1=server.CreateObject("adodb.recordset")
    rs1.open sql,conn,1,1
    do while not rs1.eof
        dtcangku1 = dtcangku1 &"{value:" & rs1(1) & ",name:'" & rs1(0) & "'},"
        rs1.movenext
    loop
    rs1.close
    dtcangku1 = left(dtcangku1,len(dtcangku1) -1) & "]"
    sql = "exec s70602885_1 '" & todate & "', '" & zubie & "','" & typ & "'"
    cangkustring = "["
    set rs2=server.CreateObject("adodb.recordset")
    rs2.open sql,conn,1,1
    do while not rs2.eof
        dtcangku2 = dtcangku2 &"{value:" & rs2(1) & ",name:'" & rs2(0) & "'},"
        cangkustring = cangkustring & "'" & rs2(0) & "',"
        rs2.movenext
    loop
    rs2.close
    dtcangku2 = left(dtcangku2,len(dtcangku2) -1) & "]"
    cangkustring = left(cangkustring,len(cangkustring) - 1) & "]"
    conn.close
    sfromdate = "'" & fromdate & "'"
    stodate = "'" & todate & "'"

zuname = zubie + "组"
    if zuname = "All" then zuname = "全公司"
    zuname = "'" & zuname & "'"
    %>
    <div style="margin:0 auto; text-align:center">
    <form method="post" action="" align="center">

<td nowrap>仓库：
                    <select name="storcode">
                        <%for i = 0 to id_cangku-1%>
                            <option value="<%=cangku(i,0)%>"<%if cangku(i,0) = storcode then%>selected="selected" <%end if%>><%=cangku(i,1)%></option>
                        <%next%>
                    </select>
                </td>
                <td nowrap>查询内容：
                    <select name="typ">
                        <option value="1" <%if typ = "1" then%>selected="selected"<%end if%>>海外实际成本</option>
                        <option value="2" <%if typ = "2" then%>selected="selected"<%end if%>>体积（m3）</option>
                        <option value="3" <%if typ = "3" then%>selected="selected"<%end if%>>采购金额（￥）</option>
                    </select>
                </td>
                <td nowrap><input type="submit" name="submit" value="submit"></td>
            </tr>
            <tr>
                <td colspan="5">注：当前功能数据最大时间范围是：2016-06-26 至 昨天。“烟台分公司”包含烟台三个仓库和英国FBA仓库、第三方海外仓（及束）、FBA亚逊,日本FBA，“烟台仓库”包含烟台三个仓库和FBA亚逊。洛杉矶ALL包含：洛杉矶仓库、旧金山（洛杉矶仓库）和坦帕（洛杉矶仓库）</td>
            </tr>
        </table>
    </form>
    </div>
    <div id="container" style="text-align:center; height:93%" >Loading...</div>
    <div id="cangkupie" style="text-align:center; height:54%" >Loading...</div>

</div>
</body>
</html>
<script type="text/javascript">

var mydd = [<%=dtzong%>,<%=dtfeizaitu%>,<%=dtzaitu%>,<%=dtzhengpinku%>,<%=dtfeizhengpin%>,<%=dtzpky%>,<%=dtzpzy%>,<%=dtzpzt%>,<%=dtesky%>,<%=dteszy%>,<%=dteszt%>,<%=dtobky%>,<%=dtopzy%>,<%=dtopzt%>,<%=dtdxkc%>,<%=dtdxzt%>,<%=dttbfkc%>,<%=dtzxkc%>,<%=dtdhck%>];
var dataX = <%=datedt%>