��վѧϰ_��ƪ_��©��(3)

�� վԭ��ߣ�ITlearner ��ʱ�䣺2004-05-07 | ��壺�� С��

[��]�ҹ�˾��Ѷ��б��˸Ĺ��ų��ԭ��᲻��ǳ��©��أ��⻯�˵�ʱ��о�Դ�� ˳��ԭ��Ѷ��ϵͳ��Ķ��ɵģ�ʲô�汾��ˡ��û��޸��...

�ҹ�˾��Ѷ��б��˸Ĺ��ų��ԭ��᲻��ǳ��©��أ��⻯�˵�ʱ��о�Դ��

�˳��ԭ��Ѷ��ϵͳ��Ķ��ɵģ�ʲô�汾��ˡ��û��޸��ʱ��session�жϣ��ôӦ�þͲ��ͨ��Cookies��ƭ��޸ĵģ��ô�ã��ڻ�ûѧ��أ��򿪸��û��change.asp��ҳ��üһ��½��жϡ��޸ġ��޸�ȫ��һҳʵ�֡�

��û��ύ��
username=Request.Form ("username")
password=Request.Form ("password")
domainname=Request.Form ("domainname")

û�м��ύ�Ĳ��ύһ��'��ʾ"��ڷǷ��ַ��룡"��ԣ�

��¿��룺

ԭ��ж��䣬��û��"��"��"��"��" "��"��"��","��"'"��ж��ˣ��ĵĵ��ʾ��

��Ҳ�в�ͨ��

��һ��ִ�е�sql�ɣ�"select * from [user] where [name]='"&username&"' and seldomain='"&domainname&"' and pass='"&password&"'"��ͻȻ��֣��û�ж�domainname��жϣ�Ҳ��пɳ�֮��Ŷ��

��ǹ��һ��<input type="text" name="domainname" size="12" value="xxxx.com' or '1'='1">��ύ��ȥ�ˣ��

��ʱ�ύ��sqlΪ��"select * from [user] where [name]='"&username&"' and seldomain='xxxx.com' or '1'='1' and pass='"&password&"'"

��ҿ��𣿹ֲ��Щ�˿��վ�û��ϣ�ԭ��ˡ�

�˳��Ƿ��©��ʱ��û��ȥ�飬��ֻ��©��͹��ˡ�

�ص��ȥ��Խ��Խ��ԣ��д��жϻ��ǹ��µĺ��أ��Ҳ��޸ĺ��ύ�Ĵ��룬�ж�domain��жϰ��Ҳ��ܿ϶��ž��ˡ�

��ṩ��Ѷ��վ�ɣ��һ��ѳ��ľ��"��Ѷ��ϵͳ"��°汾��V2.03��Ҫ��أ��õ��ص�ַ��ѹ��change.asp��һ��©��ڡ��ͨ��˷��ܷ��ǵ�ϵͳ��ύ��ʧ�ܣ��޸ĵ�½ҳ��У��ģ��ִ��һ��Ƶ��վ��ύ��ɹ��޸��û��ϡ�

ԭ��ٷ��͸��վ�ṩ��V2.03�涼��к��ŵģ��

�ڴ��ر��
1.��ʹ�û��Ѷ��ϵͳ��Ѷ��ϵͳ(��һ��Ҳ�д�©��)��ѣ��Ͻ��һ�´��룬�Ƿ��ᵽ��У��Ͻ��ɣ�
2.�벻Ҫʹ�ô��ַ��޸Ĵ��ڴ�©��վ��Ը��

ת��ע��Դ��ITѧϰ�� ַ��http://www.t086.com/ ��Ƽ��
�ر�� վ��ر��ֹת�ص�ר��¿��ת�أ��ע��ԭʼ��ߡ��°�Ȩ��ԭʼ��С��ڱ��վת��µĸ��˺��վ��Ǳ�ʾ��л�⡣��վת�ص��а�Ȩ��ϵ��ǣ��ǻᾡ��Ը��

�˽��Щ�֣�� վ ѧ ϰ �� ƪ ��

��

Enjoy��²��

��
��
��
��
��
��
��
��
��

������վѧϰ_����ƪ_��������©��(3)

��վѧϰ_��ƪ_��©��(3)