酷雅论坛-黑客经验与技巧-一个登陆的简单ＡＳＰ漏洞（破网站可以先试试！）.htm

ASP漏洞全接触——入门篇 ASP数据库问题安全之我见 如何解决登陆漏洞问题

<option value="Wide Latin">Wide Latin
<option value="Wingdings">Wingdings</option>
</select>
</td><td width=1>
<select language="javascript" class="Dvbbs_TBGen" id="FontSize" onchange="FormatText('fontsize',this[this.selectedIndex].value);">
<option class="heading" selected>字号
<option value="1">1
<option value="2">2
<option value="3">3
<option value="4">4
<option value="5">5
<option value="6">6
<option value="7">7</option>
</select>
</td>
<td width=1><img src="images/post/separator.gif"></td>
<td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Dvbbs_foreColor();this.className='IcoOnClick';">
<img src="images/post/fgcolor.gif" alt="字体颜色" >
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Dvbbs_backColor();this.className='IcoOnClick';">
<img src="images/post/fbcolor.gif" alt="字体背景颜色" >
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="FormatText('RemoveFormat', '');this.className='IcoOnClick';">
<img src="images/post/removeformat.gif" alt="格式取消">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="FormatText('bold', '');this.className='IcoOnClick';">
<img src="images/post/bold.gif" alt="粗体" border="0">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="FormatText('italic', '');this.className='IcoOnClick';">
<img src="images/post/italic.gif" alt="斜体">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="FormatText('underline', '');this.className='IcoOnClick';">
<img src="images/post/underline.gif" alt="下划线">
</td>
<td width=1><img src="images/post/separator.gif"></td>
<td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Curl();this.className='IcoOnClick';">
<img src="images/post/wlink.gif" alt="超级连接" border="0">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Dv_Signal('IMG');this.className='IcoOnClick';">
<img src="images/post/img.gif" alt="插入图片" border="0">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Cswf();this.className='IcoOnClick';">
<img src="images/post/swf.gif" alt="Flash图片" border="0">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Crm();this.className='IcoOnClick';">
<img src="images/post/rm.gif" alt="realplay视频文件" border="0">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Cwmv();this.className='IcoOnClick';">
<img src="images/post/wmv.gif" alt="Media Player视频文件" border="0">
</td>
<td width=1><img src="images/post/separator.gif"></td>
<td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Dv_ubb('QUOTE');this.className='IcoOnClick';">
<img src="images/post/quote.gif" alt="引用" border="0">
</td><td class="IcoOver" onmouseover=this.className='IcoOverMouseOver'; onmouseout=this.className='IcoOver'; onclick="Dvbbs_CleanCode();this.className='IcoOnClick';">
<img src="images/post/cleancode.gif" alt="清理代码">
<td>
</td><td width="*"></tr></table>
<!--post.asp##ubb部分-->
</td>
</tr>
<tr>
<td class=tablebody1 height="100%" valign=middle>
<table border=0 width="100%" height="100%"><tr height="*"><td height=150>
<iframe class="Dvbbs_Reply" ID="Dvbbs_Composition" MARGINHEIGHT="5" MARGINWIDTH="5" width="100%" height="100%" onBlur="CheckCount('Body','total');"></iframe>
</td></tr>
<tr><td height=10>

</td></tr>
<tr><td height=10 id="emot" class="Dvbbs_Reply">
读取心情图片...</td></tr></table>
</td></tr>
<tr>
<td class=tablebody2><INPUT type=checkbox CHECKED value=yes name=signflag>
显示签名
</td>
<td class=tablebody2>

<input type=Submit value="OK!发表回复" name=Submit>
&nbsp;<input type=button value="预 览" name=Button onclick="Gopreview()">&nbsp;<input type=reset name=Clear value="清空内容！" onclick="ClearReset()">
内容限制：<INPUT class="Dvbbs_Reply" disabled maxLength=6 size=8 value="16240" name=total>字节.
</td>
</tr>
</form>
</table>
<table width="100%" height="1"  border="0" cellpadding="0" cellspacing="0" background="Skins/kuya/line_01.gif">
   <tr>
     <td></td>
   </tr>
</table>


<form name=preview action="preview.asp?boardid=31" method=post target=preview_page>
<input type=hidden name=Dvtitle value=""><input type=hidden name=theBody value=""></form></div>
<SCRIPT LANGUAGE="JavaScript">
<!--
var Dvbbs_bIsIE5=document.all;
var Dvbbs_Mode = 0;
if (Dvbbs_bIsIE5)
{var IframeID=frames["Dvbbs_Composition"];}
else
{
var IframeID=document.getElementById("Dvbbs_Composition").contentWindow;
}

function show_post_face(n){
	var CountLength=Forum_PostFace.length-2;
	var j=1;
	var page_size=18;//每页个数
	var br=3;	//换行个数
	var post_face='';
	var ShowFacePage=document.getElementById("ShowFacePage");
	var thispage=(Math.floor(ShowFacePage.value)+n);
	document.getElementById("ShowBack").style.display="";
	document.getElementById("ShowNext").style.display="";
	if (thispage==1){
	document.getElementById("ShowBack").style.display="none";
	}
	for (i=thispage*page_size-page_size+1;i<=thispage*page_size;i++)
	{
		post_face=post_face+'<input type="radio" value="'+Forum_PostFace[i]+'" name="Expression" ';
		if (i==1)
		{
			post_face=post_face+'checked';
		}
			post_face=post_face+'><img src="'+Forum_PostFace[0]+Forum_PostFace[i]+'" align=absmiddle>&nbsp;&nbsp;';
		if (j==br)
		{
			j=1
			post_face=post_face+'<br>';
		}
		else
		{
			j++
		}
		if (i>=CountLength){
		document.getElementById("ShowNext").style.display="none";
		break;
		}
	}
	if (document.getElementById("ShowFace")&&document.getElementById("ShowFacePage"))
	{
	document.getElementById("ShowFace").innerHTML=post_face;
	ShowFacePage.value=thispage;
	}
}

function Gopreview()
{
document.preview.theBody.value=IframeID.document.body.innerHTML; 
var popupWin = window.open('', 'preview_page', 'scrollbars=yes,width=750,height=450');
document.preview.submit()
}
Dvbbs_InitDocument('Body','gb2312');
show_post_face(1);
ShowForum_Emot(1);
//-->
</SCRIPT><!--公共MENU菜单-->
<!--用户控制面板-->
<div class="Menu_popup" id="Menu_MemberTools">
<div class=menuitems>
<a href="JavaScript:openScript('messanger.asp?action=new',600,450)">发短信</a>
<BR><a href="UserPay.asp"><font class=redfont>购买论坛点券</font></a>
<br><a href="BoardPermission.asp?boardid=31&action=Myinfo">我能做什么</a>
<br><a href="query.asp?stype=5&s=2&pSearch=0&nSearch=0">我发表的主题</a>
<br><a href="query.asp?stype=5&s=1&pSearch=0&nSearch=0">我参与的主题</a>
<br><a href="mymodify.asp">基本资料修改</a>
<br><a href=modifyadd.asp?t=1>用户密码修改</a>
<br><a href="modifyadd.asp">联系资料修改</a>
<br><a href="usersms.asp">用户短信服务</a>
<br><a href="friendlist.asp">编辑好友列表</a>
<br><a href="favlist.asp">用户收藏管理</a>
<br><a href="myfile.asp">个人文件管理</a>
</div>
</div>
<!--论坛状态-->
<div class="Menu_popup" id="Menu_BoardStats">
<div class=menuitems>
<a href=boardstat.asp?boardid=31 >今日贴数图例</a>
<br><a href="boardstat.asp?action=lasttopicnum&boardid=31">主题数图例</a>
<br><a href="boardstat.asp?action=lastbbsnum&boardid=31">总帖数图例</a>
<br><a href="boardstat.asp?reaction=online&boardid=31">在线图例</a>
<br><a href="boardstat.asp?reaction=onlineinfo&boardid=31">在线情况</a>
<br><a href="boardstat.asp?reaction=onlineUserinfo&boardid=31">用户组在线图例</a>
</div>
</div>
<!--论坛展区-->
<div class="Menu_popup" id="Menu_Show">
<div class=menuitems>
<a href="show.asp?filetype=0&boardid=31">文件集浏览</a>
<br><a href="show.asp?filetype=1&boardid=31">图片集浏览</a>
<br><a href="show.asp?filetype=2&boardid=31">Flash浏览</a>
<br><a href="show.asp?filetype=3&boardid=31">音乐集浏览</a>
<br><a href="show.asp?filetype=4&boardid=31">电影集浏览</a>
<br><a href="show.asp">贺卡发送</a>
</div>
</div><!--页面结束部分--> 
</td>
    <td width="5" background="Skins/kuya/right_bg.gif">&nbsp;</td>
  </tr>
</table>
<table border="0" cellpadding="0" cellspacing="0" class="table">
  <tr>
    <td width="5" background="Skins/kuya/left_bg.gif">&nbsp;</td>
    <td align="center">
	<table border="0" cellspacing="0" cellpadding="5">
      <tr>
        <td></td>
      </tr>
    </table>
	</td>
    <td width="5" background="Skins/kuya/right_bg.gif">&nbsp;</td>
  </tr>
</table>
<table  border="0" cellpadding="0" cellspacing="0" background="Skins/kuya/bottom_bg.gif" class="table">
  <tr>
    <td width="29"><img src="Skins/kuya/bottom_left.gif" width="29" height="91"></td>
    <td valign="top"><table width="100%"  border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td width="157"><a href="http://www.kuya.cn" target="_blank"><img src="Skins/kuya/0.gif" border="0" class="bottom"></a></td>
        <td width="1"><img src="Skins/kuya/bottom_vline.gif" width="1" height="55"></td>
        <td align="center"><a href="http://www.kuya.cn" target="_blank">酷雅论坛</a>/<a href="http://www.cnMini.com" target="_blank">中国迷你</a>   版权所有<br>Copyright &copy;2005  <a href="http://www.kuya.cn"><font color=#FF6633 face=Verdana, Arial, Helvetica, sans-serif><b>kuya<font color=#CC0000>.cn</font></b></font></a>
        <a href = "http://www.miibeian.gov.cn/Search/WW_ICP_WhetherRecord_Search.jsp?selectid=2&textfield=www.kuya.cn" title = "本论坛已成功备案！" target=_blank>备案序号:闽ICP备05021457号</a><BR>Powered By <a href = "http://www.dvbbs.net/" target = "_blank">Dvbbs</a>  <a href = "http://www.dvbbs.net/download.asp" target = "_blank">Version 7.1.0</a></td>
        <td width="1"><img src="Skins/kuya/bottom_vline.gif" width="1" height="55"></td>
        <td width="157">&nbsp;</td>
      </tr>
    </table></td>
    <td width="29" align="right"><img src="Skins/kuya/bottom_right.gif" width="29" height="91"></td>
  </tr>
</table>
<iframe id="stylecss" border="0" style="width:0;height:0;"></iframe>
</body></html>