温馨提示:代码在线浏览功能只能做为源码浏览参考,如果想更进一步了解该代码请下载:网博直销系统软件源码
当前文件:
WangBoDirect/admin/backdb.asp,打开代码结构图
WangBoDirect/admin/backdb.asp,打开代码结构图1<% 2
dim sql_injdata 3
SQL_injdata = "'|exec|=|>|<|;|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare" 4
SQL_inj = split(SQL_Injdata,"|") 5
6
If Request.QueryString<>"" Then 7
For Each SQL_Get In Request.QueryString 8
For SQL_Data=0 To Ubound(SQL_inj) 9
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then 10
Response.Write "<Script Language=JavaScript>alert('◆≡≡≡系 统 提 示≡≡≡◆\n\n您的输入含有非法字符!');history.back(-1)</Script>" 11
Response.end 12
end if 13
next 14
Next 15
End If 16
17
If Request.Form<>"" Then 18
For Each Sql_Post In Request.Form 19
For SQL_Data=0 To Ubound(SQL_inj) 20
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then 21
Response.Write "<Script Language=JavaScript>alert('◆≡≡≡系 统 提 示≡≡≡◆\n\n您的输入含有非法字符!');history.back(-1)</Script>" 22
Response.end 23
end if 24
next 25
next 26
end if 27
%> 28
<% 29
mm=month(now) 30
if mm<10 then 31
mm="0" & mm 32
end if 33
dd=day(now) 34
if dd<10 then 35
dd="0" & dd 36
end if 37
thistoday = year(now)&"-"& mm &"-"& dd 38
%> 39
<html> 40
<head> 41
<meta http-equiv="Content-Type" content="text/html; charset=gb2312"> 42
<link rel="stylesheet" href="../include/e1.css" type="text/css"> 43
<script language='javascript' src='../include/common.js'></script> 44
</head> 45
<BODY topMargin=0 leftmargin="0" > 46
<% 47
if Request.QueryString("action")="back" then 48
currf="../App_Data/webhww.mdb" 49
currf=server.mappath(currf) 50
backf=request.form("backf") 51
backf=server.mappath(backf) 52
backfy="webhww.mdb" 53
on error resume next 54
Set objfso = Server.CreateObject("Scripting.FileSystemObject") 55
if err then 56
err.clear 57
response.write "<script>alert(""不能建立fso对象,请确保你的空间支持fso:!"");history.back();</script>" 58
response.end 59
end if 60
if objfso.Folderexists(backf) then 61
else 62
Set fy=objfso.CreateFolder(backf) 63
end if 64
objfso.copyfile currf,backf& "\"& backfy 65
response.write "<script>alert(""备份数据库成功"");history.back();</script>" 66
end if 67
%> 68
<form name="form1" method="POST" action="backdb.asp?action=back"> 69
<div align="center"> 70
<center> 71
<br><br> 72
<table align="center" bgcolor="#AAAAAA" border="0" cellpadding="0" cellspacing="0" width="75%"><tr> 73
<td> <table border="0" cellpadding="5" style="border-collapse: collapse" width="100%" id="AutoNumber1" cellspacing="1"> 74
<tr class="tdTitle"> 75
<td height="40" colspan="2"><div align="center"><font color="#FFFFFF" size="3"><strong>备 76
份 数 据 库</strong></font></div></td> 77
</tr> 78
<tr width="100%" bgcolor="#FBFDFF" > 79
<td width="37%"> <p> </p> 80
<div align="right"> 81
<p><br> 82
备份数据目录:</p> 83
<p> </p> 84
</div></td> 85
<td width="63%"> <span style="background-color: #F7FFF7"> 86
<input type="text" name="backf" size="30" value="<%=thistoday%>"> 87
</span></td> 88
</tr> 89
<tr width="100%" bgcolor="#FBFDFF" > 90
<td height="30" colspan="2"> <div align="center"> 91
<input type="submit" name="Submit3" value="备 份" class="b02"> 92
</div></td> 93
</tr> 94
<tr> 95
<td colspan="2" bgcolor="#FBFDFF"><p><font color="#FF0000"><strong><br> 96
*</strong></font>你的空间只有支持fso才可以进行如下操作,否则你只能手动备份</p> 97
<p><font color="#FF0000"><strong>*</strong></font>为了保护您的会员和奖金数据的安全,请务必每天备份数据库一次。 98
</p> 99
</td> 100
</tr> 101
</table></td> 102
</tr> 103
</table> 104
</center> 105
</div> 106
</form> 107
</body></html>






