editxx.asp

来自「易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件」· ASP 代码 · 共 154 行

ASP
154
字号
<!--#include file="conn.asp"-->
<%if session("bjxadmin")="" then
response.Write "<script language='javascript'>alert('网络超时或您还没有登陆!');window.location.href='login.asp';</script>"
response.End
else
if session("flag")>1 then
response.Write "<p align=center><font color=red>您没有此项目管理权限!</font></p>"
response.End
end if
end if
%>
<html><head><title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<script language="javascript">
<!--
function checkdata()
{
if (document.form1.viewhtml.checked == true)
	{
	  alert("对不起,请取消“查看HTML源代码”后再添加!")
	  document.form1.viewhtml.focus()
	  return false
	 }
if (document.form1.Content.value.length==0)
	{
	  alert("对不起,请输入文章内容!")
	  //document.form1.content.focus()
	  return false
	 }
}

function MM_goToURL() { //v3.0
  var i, args=MM_goToURL.arguments; document.MM_returnValue = false;
  for (i=0; i<(args.length-1); i+=2) eval(args[i]+".location='"+args[i+1]+"'");
}

function MM_openBrWindow(theURL,winName,features) { //v2.0
  window.open(theURL,winName,features);
}
//-->
</script>
<link href="../images/css.css" rel="stylesheet" type="text/css">
</head>
<body>
<%dim action
action=request.QueryString("action")
if InStr(Action,"'")>0 then
response.write"<script>alert(""非法访问!"");location.href=""../index.asp"";</script>"
response.end
end if
select case action
case ""%>
<table class="tableBorder" width="90%" border="0" align="center" cellpadding="3" cellspacing="1" bgcolor="#6a7f9a">
<tr> 
<td colspan="0" align="center" background="../images/admin_bg_1.gif"><b><font color="#ffffff">网站其它信息设置</font></b></td>
</tr>
<tr><td >
                              <table width="90%" border="0" align="center" cellpadding="2" cellspacing="1">
                                <tr  align="center"> 
                                  <td width="27%"> <a href="editxx.asp?action=huikuanfangshi">付款方式</a></td>
                                  <td width="34%"> <a href="editxx.asp?action=gouwuliucheng">购物流程</a></td>
                                  <td width="39%"> 帮助信息</td>
                                </tr>
                                <tr  align="center"> 
                                  <td> <a href="editxx.asp?action=jiaoyitiaokuan">交易条款</a></td>
                                  <td> <a href="editxx.asp?action=changjianwenti">常见问题</a></td>
                                  <td> <a href="editxx.asp?action=shiyongfalv">适用法律和版权声明</a></td>
                                </tr>
                                <tr  align="center"> 
                                  <td> <a href="editxx.asp?action=yunshushuoming">运输说明</a></td>
                                  <td> <a href="editxx.asp?action=baomi">保密和安全</a></td>
                                  <td> <a href="editxx.asp?action=shouhoufuwu">商品销售和售后服务</a></td>
                                </tr>
                                <tr  align="center"> 
                                  <td> <a href="editxx.asp?action=songhuofeiyong">送货方式及费率</a></td>
                                  <td> <a href="editxx.asp?action=gongzuoshijian">我们的工作时间</a></td>
                                  <td> <a href="editxx.asp?action=jifen">积分奖励</a></td>
                                </tr>
                                <tr  align="center"> 
                                  <td> <a href="editxx.asp?action=vip">VIP特惠</a></td>
                                  <td><a href="editxx.asp?action=regtiaoyue">更改注册条约</a> </td>
                                  <td><a href="editxx.asp?action=jtcg">集团采购</a></td>
                                </tr>
                                <tr  align="center"> 
                                  <td> <a href="editxx.asp?action=about">关于本站</a></td>
                                  <td> <a href="editxx.asp?action=lxwm">联系我们</a></td>
                                  <td> <a href="editxx.asp?action=bookts">(装箱清单)温馨提示</a></td>
                                </tr>
      </table>
                            </td>
                          </tr>
                        </table>
<%case else%>
<table class="tableBorder" width="90%" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#6a7f9a">
<tr> 
<td colspan="0" align="center" background="../images/admin_bg_1.gif"><b><font color="#ffffff">
	<%
if action="huikuanfangshi" then response.write "付 款 方 式"
if action="gouwuliucheng" then response.write "购 物 流 程"
if action="regtiaoyue" then response.write "更改注册条约"
if action="yunshushuoming" then response.write "运 输 说 明"
if action="baomi" then response.write "保 密 和 安 全"
if action="shouhoufuwu" then response.write "商品销售和售后服务"
if action="songhuofeiyong" then response.write "送货方式及费率"
if action="gongzuoshijian" then response.write "我们的工作时间"
if action="jifen" then response.write "积 分 奖 励"
if action="vip" then response.write "VIP 特 惠"
if action="about" then response.write "关 于 本 站"
if action="lxwm" then response.write "联 系 我 们"
if action="jtcg" then response.write "集 团 采 购"
if action="jiaoyitiaokuan" then response.write "交 易 条 款"
if action="changjianwenti" then response.write "常 见 问 题"
if action="shiyongfalv" then response.write "适用法律和版权声明"
if action="bookts" then response.write "(装箱清单)温馨提示"
%>
</font></b></td>
</tr><tr><td>
                              <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
                                <form name="form1" method="post" action="savexx.asp?action=<%=action%>" OnSubmit="return checkdata()" onReset="return ResetForm();">
                                  <tr> 
                                    <td  align="center">
                                        <table width="80%" border="0" cellspacing="2" cellpadding="2">
                                          <tr>
										  <td align="center">
<%
set rs=server.createobject("adodb.recordset")
sql="select "&action&" from BJX_config "
rs.open sql,conn,1,1
dim bjxc,bjxi
bjxc	= rs(0)
bjxi    = "Content"
%><input type="hidden" id="myEditor" value="" style="display:none" /><textarea id="Content" name="Content" style="display:none"><div><%= bjxc %></div></textarea><iframe id="Content___Frame" src="Iheeo_editor/editor.htm?id=Content&ReadCookie=0" frameborder="0" scrolling="no" width="621" height="457"></iframe></td>
                                            </tr>
                                                                                     <tr> 
                                            <td align="center">
											<input type="button" value=" 返 回 " onClick="javascript:history.go(-1)" class="unnamed5" name="button">&nbsp;
											<input type="submit" value=" 修 改 " name="Submit" class="unnamed5" >&nbsp;
											<input type="reset" value=" 清 除 " name="Reset" class="unnamed5">
                                            </td>
                                          </tr>
                                        </table>
                                    </td>
                                  </tr>
                                </form>
                              </table>
                            </td>
                          </tr>
                        </table>
<%end select%>
</td>
</tr>
</table>
</body>
</html>

⌨️ 快捷键说明

复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?