Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>Product</title>
<%
'ID=Request.Querystring("FirstTypeID")
Response.Cookies("FirstTypeID")=0
%>
</head>
<body>
<%
Set rs1=Server.CreateObject("ADODB.Recordset")
set fs=Server.CreateObject("Scripting.FileSystemObject")
sql1="select id,CName from menu where Cid=0"
rs1.Open sql1,conn,1,1
do while not rs1.eof
%>
<div>
  <div style="text-align:left; margin-left:30px; margin-top:10px">
  <%=rs1("CName")%>
  </div>
  <div>
  <img  style="width:799px; height:5px; background-color:#0066CC" />
  </div>
  <div style="margin-top:10px;">
  <table style="width:799px; border:0; text-align:left;">
  <tr>
  
<%
Set rs2=Server.CreateObject("ADODB.Recordset")
'sql2="select  [ProductNum] from [productlist] where [TypeID] in(select [id] from [menu] where [Cid] in(select [id] from [menu] where [Cid]=2))" 
sql2="select top 4 ProductNum from productlist  where FirstType ="&rs1("id")&" order by rnd(-rnd(ID))"
rs2.Open sql2,conn,1,1
  do while not rs2.eof
  LL=left(rs2("ProductNum"),3)
  RR=right(rs2("ProductNum"),3)

'product=product+rs2("ProductNum")

'response.Write(product)

'Temp=split(product,",")
'i=ubound(Temp)

'for a=0 to 3
'LL=left(Temp(a),3)
'RR=right(Temp(a),3)

'ͼƬ����
ImgUrl="Admin/" & LL & "/" & RR &"/" & "0000.gif"
'�۸�
GGprice=Server.MapPath("Admin/"& LL & "/"& RR &"/GGPrice.inc")
                If (fs.FileExists(GGPrice))=true then
                Set f=fs.OpenTextFile(GGprice, 1)  
                P0=trim(f.ReadLine) 'code
				P1=trim(f.ReadLine) '������
				P2=trim(f.ReadLine) '��С������
				P3=trim(f.ReadLine) '����
				P4=trim(f.ReadLine) '����US$
				P5=trim(f.ReadLine) '����------------------
				P6=trim(f.ReadLine) '���------------------
				P7=trim(f.ReadLine) '��λ
				P8=trim(f.ReadLine) '��վ����---------------
				P9=trim(f.ReadLine) '����RMB
				P10=trim(f.ReadLine) '����ע
				P11=trim(f.ReadLine) '��ע--------------------
				f.Close: Set f=Nothing
				if len(p5)=0 then p5=0

if isnumeric(p5)=true and isnumeric(p4)=true then  CKJ= Round(p5 * p4,2)
				end if 
				
'����
Tech=Server.MapPath("Admin/"& LL & "/"& RR &"/Tech.inc")
		If (fs.FileExists(Tech))=true then
			Set f=fs.OpenTextFile(Tech, 1)
			T0=trim(f.ReadLine)
			T1=trim(f.ReadLine)
			T2=trim(f.ReadLine)
			f.Close: Set f=Nothing
		end if 
		
%>
<td style="width:180px; text-align:left">
<tr>
    <td><a href=""><img border="0" src="<%=ImgUrl%>" width="150px" height="100px" align="middle"></a></td>
  </tr>
  <tr>
    <td> <p style="font:Verdana, Arial, Helvetica, sans-serif; font-size:10px"><%=T2%></p></td>
  </tr>
  <tr>
    <td><p style=" font:Verdana, Arial, Helvetica, sans-serif; font-size:12px" >Proce($):<%=p6%></p></td>
  </tr>
  
      <div>
      <p><a href=""><img border="0" src="<%=ImgUrl%>" width="150px" height="100px" align="middle"></a></p>
      </div>
      <div style="text-align:center; width:180px">
        <p style="font:Verdana, Arial, Helvetica, sans-serif; font-size:10px"><%=T2%></p>
      </div>
      <div style="text-align:center; width:180px">
        <p style=" font:Verdana, Arial, Helvetica, sans-serif; font-size:12px" >Proce($):<%=p6%></p>
      </div>

</td>
  <%
  a=0
  LL=""
  RR="" 
  product=""
  i=0
  rs2.movenext
loop
rs2.Close
set rs2=Nothing
  %>
  
  </tr>
  </table>
  </div>
  <%
  rs1.movenext
  loop
  rs1.Close
  set rs1=nothing
  conn.Close
  set conn=nothing
  %>

</body>
</html>