[求助-软件问题]伪造sql注入点的完整文件 [复制链接]

数据库服务器 1.0.5.195
帐户 sa
密码 accountbase
数据库名 gameaccount_server
<%
strSQLServerName = "1.0.5.195" '服务器名称或地址
strSQLDBUserName = "sa" '数据库帐号
strSQLDBPassword = "accountbase" '数据库密码
strSQLDBName = "gameaccount_server" '数据库名称
Set conn = Server.CreateObject("ADODB.Connection")
strCon = "Provider=SQLOLEDB.1;Persist Security Info=False;Server=" & strSQLServerName &

";User ID=" & strSQLDBUserName & ";Password=" & strSQLDBPassword & ";Database=" &

strSQLDBName & ";"
conn.open strCon
dim rs,strSQL,id
set rs=server.createobject("ADODB.recordset")
id = request("id")
strSQL = "select * from ACTLIST where worldid=" & idrs.open strSQL,conn,1,3
rs.close