WooYun.org

http://ittools.lhspzx.com/teacher/weboffice/GetExtname.ashx?id=1
http://fzpt.hyxyxx.com/teacher/weboffice/GetExtname.ashx?id=1
http://it.qzgjzx.cn/teacher/weboffice/GetExtname.ashx?id=1
http://61.175.224.187:888/teacher/weboffice/GetExtname.ashx?id=1
http://wsyj.dg6z.net:81/teacher/weboffice/GetExtname.ashx?id=1

<%@ WebHandler Language="VB" Class="GenericHandler2" %>
Imports System.IO
Imports System
Imports System.Web
Imports System.Data
Imports System.Data.SqlClient
Imports System.Web.Configuration
Public Class GenericHandler2 : Implements IHttpHandler
    Dim cndata As New SqlConnection
    Dim cmdSQL As New SqlCommand
    Dim rd As SqlDataReader
    Dim context As HttpContext
    Public Sub ProcessRequest(ByVal context As HttpContext) Implements IHttpHandler.ProcessRequest
        context.Response.ContentType = "text/plain"
        Dim fileid As String = context.Request.QueryString("id") //这里取得参数ID
        Dim fileurl As String = ""
        cndata.ConnectionString = WebConfigurationManager.ConnectionStrings("chenbin").ConnectionString
        cmdSQL.Connection = cndata
        cndata.Open()
        cmdSQL.CommandText = "SELECT [url],course,list  FROM it_stuupfile  WHERE id=" & fileid
        '                              0      1     2    //这里直接带入查询了
        rd = cmdSQL.ExecuteReader
        If rd.Read Then
            fileurl = "~/uploadfile/stufile/course/" & rd.GetValue(1) & "/" & rd.GetValue(2) & "/" & rd.GetValue(0)
        End If
        rd.Close()
        cndata.Close()
        fileurl = HttpContext.Current.Server.MapPath(fileurl)
        fileurl = Mid(System.IO.Path.GetExtension(fileurl), 2)
        context.Response.Write(fileurl)
        context.Response.End()
        
    End Sub
 
    
    Public ReadOnly Property IsReusable() As Boolean Implements IHttpHandler.IsReusable
        Get
            Return False
        End Get
    End Property
End Class