WooYun.org

private ICollection CreateSource()
        {
            string strQuery = "select * ,iif(IsNull(Reply)=True,'否','是') as Reply1 from QH_MessageMember where Name='" + ((string) this.ViewState["UserName"]) + "' order by id desc"; //此处使用UserName，注入点
            DataTable table = this.Bll1.GetDataTablePage(this.CurrentPage * this.PageSize, this.PageSize, strQuery);
            if (table == null)
            {
                return null;
            }
            if (table.Rows.Count == 0)
            {
                return null;
            }
            table.Columns.Add("AddDate1");
            foreach (DataRow row in table.Rows)
            {
                if (row["AddDate"].ToString() != string.Empty)
                {
                    row["AddDate1"] = ((DateTime) row["AddDate"]).ToString("yyyy-MM-dd HH:mm:ss");
                }
            }
            return table.DefaultView;
        }

public static string GetAndTestUserName()
        {
            string str = "";
            HttpContext.Current.Response.CacheControl = "no-cache";
            if (HttpContext.Current.Request.Cookies["CmsUserName"] != null)
            {
                //从cookie当中获得CmsUserName的值
                str = HttpUtility.UrlDecode(HttpContext.Current.Request.Cookies["CmsUserName"].Value);
            }
            if (string.IsNullOrEmpty(str))
            {
                HttpContext.Current.Response.Write("<script>alert('请先登陆！');location='Landing.aspx';</script>");
            }
            return str;
        }