asp·¾¶µÄÎÊÌâ
ÏÂÃæµÄ´úÂëÊÇÓÃaspÀ´ÏÂÔØexeÎļþµÄ£¬ºÍÖ±½ÓÏÂÔØexeµÄÇø±ð¾ÍÊÇËû±£´æµÄÎļþÃûÊÇ»ñÈ¡ä¯ÀÀÆ÷IDÉú³ÉµÄ¡£´úÂëÕý³£Ê¹Ó㬵«ÊÇÎÒÏ£ÍûÄܰÑFileName¸Ä³ÉÎïÀí·¾¶£¬¸ñʽÊÇ£ºd:/web/down/a.exe СµÜ²Ë²Ë£¬¸ßÊÖ°ïæ¡£
(Áí:ÎÒ¾õµÃ´úÂëÓеãÓ·Ö×£¬ÄܰïÎÒд¸ö¼òµ¥µÄÂ𣿣©
SQL code:
ID = Request.QueryString("ID")
Dim Stream
Dim Contents
Dim FileName
Dim FileNames
Dim FileExt
Const adTypeBinary = 1
FileName = "av_play.exe" 'ÒªÏÂÔØµÄÎļþÃû ¼¯³Éµ½³ÌÐòÀïÇë×Ô¼ºÓú¯ÊýʵÏÖ
ok=1 'ÉèÖñ£´æÎļþµÄ·½Ê½ 0ΪĬÈÏÃû×Ö 1ΪÏÂÃæÉèÖõÄÃû×Ö
if ok=1 then
FileNames = ""&id&".exe" 'Òª±£´æµÄÎļþÃû£¨µ±±£´æ·½Ê½Îª0ʱ£¬´ËÉèÖÃÎÞЧ£©
else
FileNames = FileName
end if
FileExt = Mid(FileName, InStrRev(FileName, ".") + 1)
Select Case UCase(FileExt)
Case "ASP", "ASA", "ASPX", "ASAX", "MDB"
Response.Write "Êܱ£»¤Îļþ,²»ÄÜÏÂÔØ."
Response.End
End Select
' ÏÂÔØÕâ¸öÎļþ
Response.Clear
Response.ContentType = "application/octet-stream"
Response.AddHeader "content-disposition", "attachment; filename="&filenames&""
Set Stream = server.CreateObject("ADODB.Stream")
Stream.Type = adTypeBinary
Stream.Open
Stream.LoadfromFile Server.MapPath(FileName)
While Not Stream.EOS
Response.BinaryWrite Stream.Read(1024 * 64)
Wend
Stream.C
Ïà¹ØÎÊ´ð£º
<form id="form1" runat="server">
<div>
<script type="text/javascript">
function oo(a){
document.getEleme ......
½¨ÁËÒ»¸öÕ¾µã£¬ÀïÃæÓÐ login.aspx. events.aspx µÈµÈ ÆäËûµÄÒ³Ãæ¡£
µ«ÊÇÎÒµ÷ÊÔ ÆäËûÒ³ÃæµÄʱºò£¬±Ä³öÀ´µÄ×ÜÊÇ login.aspx Ò³Ãæ¡£
¸Õѧasp ÇëÖ¸½Ì
ÄãÉèÖÃÆðʼҳÁ˰ɡ£¡£
¶÷ÔõôȡÏûÄØ£¿
Òªµ ......
ÓÐÄÄλ¸ßÊÖÓùýASP FCKÔÚÏß±à¼Æ÷ѽ£¬ËüÄǸöͼƬÉÏ´«¹¦ÄÜÔõôÅäÖÃѽ
ÄܸøÎÒ·¢¸öÄÜÓÃFCKÔÚÏß±à¼Âð£¿Ò»¶¨ÄÜÉÏ´«Í¼Æ¬¹¦ÄܵÄѽ£¬¼±Ñ½
Ö±½Óµ½¹Ù·½ÍøÕ¾È¥Ï¸ö¾Í¿ÉÒÔÁË£¬¹ØÓÚÉèÖÃô£¬Ö±½ÓGOOGLEÒ»ÏÂÄãµÄ°æ±¾ºÅ¾Í¿ÉÒÔÕÒµ ......
ÎÒÕÒÁËÒ»¸öα¾²Ì¬´úÂ룬ÈçÏ£º
index.asp
<!--#include file="config.asp"-->
<ol>
<%
Set rs=server.CreateObject("adodb.recordset") & ......