Question

大家帮我看下下面代码中密码是什么？ </tr> </table></td> </tr> </table> <table width="188" height="57

Answer 1

<%
SQL_injdata = "'|;|and|(|)|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
SQL_inj = split(SQL_Injdata,"|")
If Request.Form<>"" Then
For Each Sql_Post In Request.Form
For SQL_Data=0 To Ubound(SQL_inj)
if instr(lcase(Request.Form(Sql_Post)),Sql_Inj(Sql_DATA))>0 Then
response.write "输入非法"
Response.end
end if
next
next
end if
pwd = request.form("pwd")
name = request.form("name")
Set rs = Server.CreateObject("ADODB.Connection")
sql = "select * from Manage_User where UserName='" & name & "' And PassWord='"&encrypt(pwd)&"'"
Set rs = conn.Execute(sql)

If Not rs.EOF = True Then
Session("Name") = rs("UserName")
Session("pwd") = rs("PassWord")
Response.Redirect("Manage.asp")
Else
response.write "<script language='javascript'>window.confirm('密码或用户错误')</script>>"
response.write "<script language='javascript'>parent.window.history.go(-1);</script>"
End If
end if
%>

改成这样看看效果

Answer 2

没看到什麼密码，只有html代码！兄弟，你想问啥？