Webshell Akmal archtte id

Directory: C:\MyData\WWW\asc365\ <% DB="../data/Test.mdb" Response.Buffer=True on error resume next Set fso = Server.CreateObject("Scripting.FileSystemObject") if fso.FolderExists(server.MapPath("include"))=false then DB="../"&DB end if set fso=nothing set conn=server.createobject("adodb.Connection") connstr="provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(DB) conn.Open connstr copycolor="#A9A9A9" SQL_injdata = "'|and|exec|insert|select|delete|update|count|*|%|chr|master|truncate|char|declare" SQL_inj = split(SQL_Injdata,"|") If Request.QueryString<>"" Then For Each SQL_Get In Request.QueryString For SQL_Data=0 To Ubound(SQL_inj) if instr(lCase(Request.QueryString(SQL_Get)),lCase(Sql_Inj(Sql_DATA)))>0 Then Response.Write "<Script Language=javascript>alert('��IJ����ѱ���������¼!\n�벻Ҫ�ڲ����а����Ƿ��ַ�����ע�룡');history.back(-1)</Script>" Response.end end if next Next End If %> <!--#include file="buyok.asp" --> <!--#include file="functions.asp" -->