Recommended: Insert the ASP code to make the website database an ASP Trojan Many times, we can insert a short ASP code into the registration form or user information modification form, so that the website ASP database becomes an ASP Trojan, and then further intrude into the control server. However, during the upload process, many web programs do not allow packages
| The following is the quoted content: <% Class aspxsky_page Private Sub class_initialize End Sub Public Function Alert(message,gourl) message = replace(message,',/') If gourl=-1 then Response.Write (<script language=javascript>alert(' & message & ');history.go(-1)</script>) Else Response.Write (<script language=javascript>alert(' & message & ');location=' & gourl &'</script>) End If Response.End() End Function Public Sub showpage(str,page,url) if not isnumeric(page) then alert prompt: Incorrect parameter!,-1 end if if page= or page=0 or isnull(page) or isempty(page) then page=1 else page=cint(page) end if str=split(str,{nextpage}) abspage=page pcount=ubund(str) 1 if page>cint(ubund(str) 1) or page<1 then alert prompt: Incorrect parameter!,-1 else response.write str(page-1)&<br><br><center> is divided into &pcount& pages end if for p=0 to ubund(str) response.write <a href=&url&p=&p 1&>[&p 1&]</a> next response.write Current &abspage&/&pcount& page</center> End Sub End Class '----------------------------------------------------------------------------------------------------------------------------- p=request.QueryString(p) str=Page 1: Here is the content of the first page {nextpage}Page 2: Here is the content of the second page url=shownews.asp?id=&id&& set newpage=new aspxsky_page newpage.showpage str,p,url %> |
Share: Domestic ASP applications are not optimistic The new ASP concept does not refer to development tool ASP (ActiveX Server Pages), but to a new IT business model of application service providers. In layman's terms, the company does not purchase application software, but rents the software in the form of leasing.