admintool.asp

7k书城小偷程序。。。。。。。。。。。。。。。。。。。。。

<%
	if Session("union")="" Then
		Response.Write "非法访问！"
		response.end
	End If

	set conn=Createobject("ADODB.Connection")
	conn.ConnectionString="DBQ="&server.mappath("/data/sitesdata.asp")&";DRIVER={Microsoft Access Driver (*.mdb)}"
	conn.open

	sqlstr = Trim(Request.Form("sqlstr"))
	If sqlstr="" Then
		Response.Write "请输入sql语句：<br>"
	Else	
		conn.Execute sqlstr
		Response.Write "操作成功！请输入新的sql语句：<br>"
	End If
	conn.Close
	Set conn = Nothing
%>
<form action="admintool.asp" method="post">
<textarea cols="50" rows="5" name="sqlstr"><%=sqlstr%></textarea>
<br>
<br>
<input type="submit" value="提交">
</form>
<br>
Example:
<p>
update sites set siteurl='/index.asp?a=1&amp;amp;b=2' where id=229
</p>