Webshell Akmal archtte id

Directory: C:\MyData\WWW\asc365\ <table id="main_content" style="width:800px; border:0px;" bgcolor="#f2f2f2" cellpadding="1" cellspacing="0"> <tr> <td><div align="center"><strong>Date Created</strong></div></td> <td><div align="center"><strong>Tracking</strong></div></td> <td style="text-align:center"><strong>Subject</strong></td> <td><div align="center"><strong>Last update </strong></div></td> <td><div align="center"><strong>Status</strong></div></td> </tr> <% questionid = request.QueryString("questionid") trackingNum=request.QueryString("tracking") Thispage ="http://" & Request.ServerVariables("SERVER_NAME")& Request.ServerVariables("URL") UserEmail=session("UserEmail") Set Page = new Cls_Page '�������� Set Page.Conn = conn '�õ����ݿ����Ӷ��� With Page .PageSize = 5 'ÿҳ��¼���� .PageParm = "page" 'ҳ���� '.PageIndex = 10 '��ǰҳ����ѡ������һ�������ɾ�̬ʱ��Ҫ .Database = "ac" '���ݿ�����,ACΪaccess,MSSQLΪsqlserver2000�洢���̰�,MYSQLΪmysql,PGSQLΪPostGreSql .Pkey="id" '���� .Field="id,tracking,subject,content,creatdate,lastdate,status,userid,useremail" '�ֶ� .Table="Question" '���� .Condition="id="&questionid&"" '����,����Ҫwhere '.OrderBy="creatdate desc" '����,����Ҫorder by,��Ҫasc����desc .RecordCount = 0 '�ܼ�¼���������ⲿ��ֵ��0�����棨�ʺ���������-1��Ϊsession��-2��Ϊcookies��-3��Ϊapplacation .NumericJump = 5 '��������ҳ��������ѡ������Ĭ��Ϊ3������Ϊ��ת������0Ϊ��ʾ���� .Template = "<div class=""page_list""><div class=""list_info"">{$FirstPage}{$PreviousPage}{$NumericPage}{$NextPage}{$LastPage}</div></div>" '����ģ�壬��ѡ��������Ĭ��ֵ .FirstPage = "&nbsp;&lt;&lt;&nbsp;" '��ѡ��������Ĭ��ֵ '.FirstPage = "��ҳ" .PreviousPage = "&nbsp;&lt;&nbsp;" '��ѡ��������Ĭ��ֵ '.PreviousPage = "��һҳ" .NextPage = "&nbsp;&gt;&nbsp;" '��ѡ��������Ĭ��ֵ '.NextPage = "��һҳ" .LastPage = "&nbsp;&gt;&gt;&nbsp;" '��ѡ��������Ĭ��ֵ '.LastPage = "βҳ" .NumericPage = "{$PageNum}" '���ַ�ҳ����ģ�壬��ѡ��������Ĭ��ֵ End With rs = Page.ResultSet() '��¼�� 'rc = Page.RowCount() '��ѡ������ܼ�¼�� nav = Page.Nav() '��ҳ��ʽ %> <% If IsNull(rs) Then %> <tr> <td colspan="5" align="center" class="content_list">No Message</td> </tr> <% Else For i=0 To Ubound(rs,2) %> <tr> <td> <span style="background-color:#fff; width:100px; height:30px; display:inline-table;"><%=rs(4,i)%></span> </td> <td height="43"> <span style="background-color:#fff; width:100px; height:30px; display:inline-table;"><%=rs(1,i)%></span> </td> <td align="left"> <span style="background-color:#fff; width:170px; height:30px; display:inline-table;"> <a href="myaccount.asp?ID=MyAsc365Reply&questionid=<%=rs(0,i)%>" target="_blank"><%=rs(2,i)%></a> </span> </td> <td> <span style="background-color:#fff; width:100px; height:30px; display:inline-table;"><%=rs(5,i)%></span> </td> <% state1=rs(6,i) if state1=0 then %> <td> <span style="background-color:#fff; width:100px; height:30px; display:inline-table;">Need Reply</span> </td> <% else %> <td> <span style="background-color:#fff; width:100px; height:30px; display:inline-table;">Replied</span> </td> <% end if %> </tr> <% next end if %> </table> <h2 align="left"> <a href="#reply">Reply</a> </h2> <table style="width:800px; table-layout:fixed;" align="left"> <% set rsRep = server.CreateObject("adodb.recordset") sqlRep = "select * from Reply where tracking = '"&trackingNum&"' order by replytime desc" rsRep.open sqlRep,conn,1,1 if rsRep.eof and rsRep.bof then response.Write("No Message Replied") else do while not rsRep.eof if len(rsRep("useremail"))>0 then emailinfo=rsRep("useremail") else emailinfo="Admin" end if %> <tr bgcolor="#f2f2f2" style="width:800px; table-layout:fixed;" align="left"> <td style="width:800px; table-layout:fixed;" height="20"><span><%=emailinfo%></span><span style="float:right;"><%=rsRep("replytime")%></span></td> </tr> <tr style="width:800px; table-layout:fixed;" align="left"> <td style="table-layout:fixed; width:800px; clear:both; word-break:break-all; color:#666666"><%=rsRep("replycontent")%></td> </tr> <% rsRep.movenext loop end if rsRep.close set rsRep = nothing %> </table> <form action="?id=MyAsc365Reply&Action=ReplyQuestion&questionid=<%=questionid%>&tracking=<%=trackingNum%>" method="post"> <table style="width:500px;"> <tr> <td>UserEmail</td><td><input type="text" style="width:500px;" name="useremail" value="<%=session("UserEmail")%>" onFocus="this.blur()"/></td> </tr> <tr> <td>replycontent</td><td><textarea rows="5" style="width:500px;" cols="70" name="content"></textarea></td> </tr> <tr> <td colspan="2"><input type="submit" value="Reply"/> </tr> </table> </form> <a name="reply"></a> <% action = request.QueryString("Action") sqlreplyque = "select * from Reply" set rsreplyque = server.CreateObject("adodb.recordset") rsreplyque.open sqlreplyque,conn,1,3 if action = "ReplyQuestion" then rsreplyque.addnew rsreplyque("userid") = session("UserId") rsreplyque("useremail") = Request.Form("useremail") rsreplyque("tracking") = trackingNum rsreplyque("replycontent") = Request.Form("content") rsreplyque("replytime") = now rsreplyque.update response.Write("<script type=""text/javascript"">alert('Reply Success');top.location.href='myaccount.asp?id=MyAsc365Reply&questionid="&questionid&"&tracking="&trackingNum&"';</script>") end if rsreplyque.close set rsreplyque = nothing %>