📄 edit_master.asp
字号:
<!--#include file="../conn/boardconn.asp"-->
<!--#include file="../style/sql.asp"-->
<!--#include file="../function.asp"-->
<!--#include file="../CHAR.INC"-->
<%
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%
fqys=request.servervariables("query_string")
dim nothis(18)
nothis(0)="net user"
nothis(1)="xp_cmdshell"
nothis(2)="/add"
nothis(3)="exec%20master.dbo.xp_cmdshell"
nothis(4)="net localgroup administrators"
nothis(5)="select"
nothis(6)="count"
nothis(7)="asc"
nothis(8)="char"
nothis(9)="mid"
nothis(10)="'"
nothis(11)=":"
nothis(12)=""""
nothis(13)="insert"
nothis(14)="delete"
nothis(15)="drop"
nothis(16)="truncate"
nothis(17)="from"
nothis(18)="%"
errc=false
for i= 0 to ubound(nothis)
if instr(FQYs,nothis(i))<>0 then
errc=true
end if
next
if errc then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%CheckAdmin1%>
<%
dim id
id=request.QueryString("NumID")
If id="" or not IsNumeric(id) Then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2>友情提示：服务器禁止非法操作...</font></center>"
response.write "</td></tr></table></center>"
Response.End
End If
%>
<html>
<head>
<title></title>
<meta http-equiv="Content-Type" content="text/html; charset=GB2312">
<link href="../style/style.css" rel="stylesheet" type="text/css">
</head>
<SCRIPT language=javascript>
function check_input()
{
if (form.username.value=="")
{ alert("友情提示!\n\n请填写管理员帐号...");
return false;
}
if (form.group.value=="")
{ alert("友情提示!\n\n请选择管理员权限...");
return false;
}
return true;
}
</SCRIPT>
<body topmargin="0" leftmargin="0">
<div align="center"><center>
<%
set rs=server.createobject("adodb.recordset")
sql="select * from [QiQiBoy_Admin_Disp] where id="&cint(id)
set rs=conn.execute(sql)
%>
<form name=form method="POST" action="edit_masterfox.asp?Action=Edit_Master&NumID=<%Response.Write(rs(0))%>" onSubmit="return check_input()">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td width="100%" height="20" bgcolor="#96C5DE" align=center colspan="2"><font color="white"><b>编辑管理员信息</b></font></td>
</tr>
<tr>
<td width="15%" height="25" align="right"></td>
<td width="85%"></td>
</tr>
<tr>
<td width="15%" height="25" align="right">管理员帐号：</td>
<td width="85%"><input class="input" type="text" name="username" size="50" value="<%Response.Write(rs(1))%>"></td>
</tr>
<tr>
<td width="15%" height="25" align="right">管理员密码：</td>
<td width="85%"><input class="input" type="password" name="password" size="50"></td>
</tr>
<tr>
<td width="15%" height="25" align="right">管理员权限：</td>
<td width="85%">
<SELECT name="group" size="1" class=input>
<OPTION value="super" <% if rs("group")="super" then response.Write("selected") end if%>>高级管理员</OPTION>
<OPTION value="standard" <% if rs("group")="standard" then response.Write("selected") end if%>>标准管理员</OPTION>
</SELECT></td>
</tr>
<tr>
<td width="15%" height="25" align="right">登陆ＩＰ：</td>
<td width="85%"><%Response.Write(rs(4))%></td>
</tr>
<tr>
<td width="15%" height="25" align="right">登陆时间：</td>
<td width="85%"><%Response.Write(rs(5))%></td>
</tr>
<tr>
<td width="15%" height="25" align="right">总登陆次数：</td>
<td width="85%"><%Response.Write(rs(6))%>/s</td>
</tr>
<tr>
<td width="15%" height="25" align="right"></td>
<td width="85%"><input class="input1" type="submit" value="提交编辑信息" name="Submit"> <input class="input1" type="reset" value="擦除重填" name="Submit2"></td>
</tr>
</table>
</form>
<%
rs.close
set rs=nothing
conn.Close
set conn=nothing
%>
</center>
</div>
</body>
</html>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -