Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

using System;
using System.Collections.Generic;

using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using wzLib;
using System.Security.Cryptography;
using System.Text;
using System.Data;

namespace App.prog
{
    public partial class money : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {

}

protected void Button1_Click(object sender, EventArgs e)
        {
            string year = TextBox1.Text.ToString();
            string month = TextBox2.Text.ToString();
            string date = year + "-" + month + "-01";
            string str = "delete from CW_YEJI where YUEFEN='"+date+"'";
            SQLHelper.ExecuteNonQuery(str);
            string str2 = " select BMDM,FGS,sum(sold_je) as money FROM CW_UPDATA where YF='"+date+"' group by FGS,BMDM  ";
            DataTable dt = SQLHelper.getDataTable(str2);
            try
            {
                for (int i = 0; i < dt.Rows.Count; i++)
                {
                    string zubie = dt.Rows[i][0].ToString();
                    string fengongsi = dt.Rows[i][1].ToString();
                    decimal money = decimal.Parse(dt.Rows[i][2].ToString());
                    string str3 = "insert into CW_YEJI values('" + date + "','" + zubie + "','" + fengongsi + "',''," + money + ")";
                    SQLHelper.ExecuteNonQuery(str3);
                }
            }
            catch (Exception ex)
            {
                Response.Write("<script>alert('发生错误，请重新执行！')</script>");
            }
            finally
            {
                Response.Write("<script>alert('处理完成')</script>");
            }
        }
    }
}