<%
'程序名称：千纸鹤网站管理系统
'程序作者：千纸鹤
'作者邮箱：qzhxxw@sina.com
'作者 Q Q：138999501
'作者电话：0000000000
'官方主页：http://www.qqzzhh.com/
'官方论坛：http://www.qqzzhh.com/bbs
%>
<!--#include file="inc/conn.asp"-->
<!--#include file="inc/set.asp"-->
<%call hacker()
if session("superlogin")<>yecao then
response.Write "<script>alert('您还没有登陆！');this.location.href='index.asp';</script>"
Response.End
elseif session("superadmin")<>"admin" then
response.Write "<script>alert('\n错误提示：您的权限不足！\n\n您不是超级管理员！');this.location.href='index.asp';</script>"
Response.End
end if
sub main()%>
<html><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="STYLESHEET" type="text/css" href="img/admin.css"><script src=img/adminjs.js></script>
</head><body>
<table width="100%" align=center border="0" cellpadding="0" cellspacing="0" rules=none class=3d>
<tr class="title"  height="22"><td colspan=9><b>&nbsp;<img src=img/ie.gif border=0 width=15 height=15 align=absMiddle>&nbsp;SQL注入管理
</b></td></tr>
<form  method="post" name="form" id="form" action="del.asp" onsubmit="return downdel();">
<tr align=center class=bg> 
 <td width="5%" height=20>编号</td>
 <td width="10%"><font color=red>操作ＩＰ</font></td>
 <td width="20%">操作页面</td>
 <td width="10%">操作时间</td>
 <td width="10%">提交方式</td>
 <td width="10%">提交参数</td>
 <td width="10%">提交数据</td>
 <td width="10%">操作</td>
</tr><td class="hr" colspan=9></td></tr>
<%
sql="select * from [YC_sql] order by id desc"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
if not rs.bof and not rs.eof then
rs.pagesize=cint(adminpage)
i=1
mypage=request("page")
if mypage="" then
mypage=1
else
mypage=cint(mypage)
end if
pages=rs.pagecount
rs.absolutepage=mypage
do while not rs.eof%>
<tr align=center height=22>
<td><input name='SoftID' type='checkbox' onclick="unselectall()" id="SoftID" value='<%=rs("id")%>'></td><td><%=rs("SqlIn_IP")%></td>
 <td><%=rs("SqlIn_WEB")%></td>
 <td><a href="" title="详细时间：<%=rs("SqlIn_TIME")%>"><%=left(rs("SqlIn_TIME"),9)%></a></td>
 <td><%=rs("SqlIn_FS")%></td>
 <td><%=rs("SqlIn_CS")%></td>
 <td><%=rs("SqlIn_SJ")%></td>
 <td><a href=admin_sqlin.asp?action=del&id=<%=rs("id")%>>删除</a>&nbsp;</td></tr><tr><td class="hr" colspan=9></td></tr>
<%
if i=rs.pagesize then exit do end if
i=i+1
rs.movenext
loop
%>
<tr class=bg><td  height=25 colspan=6>
<table width=100% border=0><tr><td width=200>
&nbsp;<input name="chkAll" type="checkbox" id="chkAll" onclick=CheckAll(this.form) value="checkbox">
<input name="submit" type="submit" onClick="document.form.Action.value='Del'" value="删 除" class=adminbutton>
<input name="Action" type="hidden" id="Action" value="Del">
<input name="tab" type="hidden" id="tab" value="YC_sql">
<input name="url" type="hidden" id="url" value="admin_sqlin.asp">
</td><td>
&emsp;&emsp;共有记录<font color=red><%=rs.recordcount%></font>条，每页<font color=red><%=rs.pagesize%></font>条，分<font color=red><%=mypage%></font>/<%=rs.pagecount%>页&emsp;&emsp;&emsp;
<script language="javascript">
function showPageLink(sUrl,iPage,iCount){
var i;
i=Math.max(1,iPage-1);
document.write("<a href=\""+sUrl+"1\"><FONT face=Webdings>9</FONT></a> ");
document.write("<a href=\""+sUrl+i+"\"><FONT face=Webdings>7</FONT></a> <b>");
for(i=Math.max(1,iPage-5);i<iPage;i++){
document.write("<a href=\""+sUrl+i+"\">"+i+"</a> ");}
document.write("<font color='#ff3333'>"+iPage+"</font> ");
for(i=iPage+1;i<=Math.min(iCount,iPage+5);i++){
document.write("<a href=\""+sUrl+i+"\">"+i+"</a> ");}
i=Math.min(iCount,iPage+1);
document.write("</b><a href=\""+sUrl+i+"\"><FONT face=Webdings>8</FONT></a> ");
document.write("<a href=\""+sUrl+iCount+"\"><FONT face=Webdings>:</FONT></a> ");}
showPageLink("?action=list&page=",<%=mypage%>,<%=pages%>);
</script>
</td></tr></table>
</td></tr>
</form></table>
<%
rs.close
set rs=nothing
end if
end sub
if request("action")="del" Then
conn.execute("delete from YC_sql where id="&request("id"))
response.Write "<script>location.href='admin_sqlin.asp';</script>"
Elseif request("action")="" then
Call main()
End If
call dataclose()%>
