conn.asp

二月小说 看小说必备工具 默认的管理路径为:admin/index.asp 用户名：admin 密码：admin

<%
db="/laos_date/#laos_book.mdb"'这里是数据库路径，如果放在二级目录就修改成/二级目录名/laos_date/#laos_book.mdb
dim conn,db 
dim connstr
on error resume next 
connstr="DBQ="+server.mappath(""&db&"")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};" 
set conn=server.createobject("ADODB.CONNECTION") 
if err then 
err.clear 
else 
conn.open connstr 
end if 
sub CloseConn() 
conn.close 
set conn=nothing 
end sub
Response.Buffer=True 
Server.ScriptTimeOut=90 
Session.CodePage=65001
dim qs,errc,iii
qs=request.servervariables("query_string")
dim deStr(21)
deStr(0)="net user"
deStr(1)="xp_cmdshell"
deStr(2)="/add"
deStr(3)="exec%20master.dbo.xp_cmdshell"
deStr(4)="net localgroup administrators"
deStr(5)="select"
deStr(6)="count"
deStr(7)="asc"
deStr(8)="char"
deStr(9)="mid"
deStr(10)="'"
deStr(11)=":"
deStr(12)=""""
deStr(13)="insert"
deStr(14)="delete"
deStr(15)="drop"
deStr(16)="truncate"
deStr(17)="from"
deStr(18)="update"
deStr(19)="master"
deStr(20)="declare"
deStr(21)="exec"
errc=false
for iii= 0 to ubound(deStr)
if instr(qs,deStr(iii))<>0 then
errc=true
end if
next
if errc then
Response.Write("出错了!")
response.end
end if
'======================================================================
'=              Copyright (c) 2008-2010 ,老四(QQ7280091)开发          =
'=                      All rights reserved.                          =
'=--------------------------------------------------------------------=
'=                    　　　　 二月小说 v_1.0   　                    =
'=                    　　　　                  　                    =
'=                     演示网址：www.2yue.com.cn                      =
'=                     官方网址：vip.2yue.com.cn =
'=                     官方QQ群：7500701                              =
'=--------------------------------------------------------------------=
'=                     用   途：小说、小说连载                        =
'=                     最后更新：2008-11-1                            =
'======================================================================
set res=server.CreateObject("adodb.recordset")
sql="select * from laos_system"
res.open sql,conn,1,1
if not res.eof then
dim webname,webname2,description,Keywords,url,qq,mail,link,foot,foot2,wztj,yingying,adminby
webname=res("webname")
webname2=res("webname2")
description=res("description")
Keywords=res("keywords")
url=res("url")
laos_url=right(url,len(url)-7) 
qq=res("qq")
mail=res("mail")
beian=res("beian")
link=res("link")
laos_link=replace(link,vbcrlf,"")
foot=res("foot")
foot2=res("foot2")
wztj=res("wztj")
laos_wztj=replace(wztj,vbcrlf,"")
yingying=res("yingying")
adminby=res("adminby")
end if
res.close
%><!--#include file="fso.asp"-->