栏目导航
热点推荐
- ASP下批量删除数据的两种方法
- 关于二级域名共享cookies
- ASP错误代码大全
- ASP代码实现show.asp?id=26变成s
- ASP错误信息解决:IIS启用父路径
- 一些常用的正则表达式大全
- ASP超级链接和HTML函数正则表达
- ASP隐藏下载地址及防盗代码
- 最常用的正则表达式示例
- ASP程序数据库被挂马的处理方法
- ASP生成html的新方法
- 精通ASP错误提示大全
阅览排行
ASP ASPX PHP 构造注入页面的代码
www.jz123.cn 2011-05-24 来源: 站长家园 责任编辑(袁袁) 我要投递新闻
Mssql:
<!–#include file=”conn.asp”–>
<%
hid=request.QueryString(“id”)
sql=”select * from admin where id=”&hid
set rs=conn.execute (sql)
%>
Access:
<%
db=”aspzhuru.mdb”‘这里修改数据库路径或名称
Set conn = Server.CreateObject(“ADODB.Connection”)
dbpath=”Provider=Microsoft.Jet.OLEDB.4.0;Data Source=” & Server.MapPath(db)
conn.Open dbpath
%>
Php:
<?
$mysql_server_name = “localhost”;
$mysql_username = “root”;
$mysql_password = “password”;
$mysql_database = “phpzr”;
$conn=mysql_connect( $mysql_server_name, $mysql_username, $mysql_password );
mysql_select_db($mysql_database,$conn);
$id=$_GET['id'];
$sql = “select username,password from admin where id=$id”;
$result=mysql_db_query( $mysql_database, $sql,$conn );
$row=mysql_fetch_row($result);
?>
.net (放到代码文件.cs里面):
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
public partial class Default2 : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
SqlConnection conn = new SqlConnection();
conn.ConnectionString = ConfigurationManager.ConnectionStrings["StudyConnectionString"].ToString();
conn.Open();
SqlCommand cmd = new SqlCommand(“select * from [table] where id= ” + this.Page.Request.Params["getid"], conn);
cmd.ExecuteNonQuery();
this.Page.RegisterClientScriptBlock(“script”, “<script>alert(‘注射成功’)</script>”);
}
}
上一篇:做了CDN加速的ASP网站获取用户真实IP代码 下一篇:IIS6和IIS7对静态文件gzip压缩方式