Generally in the ASP application files are mostly used <!--#include virtual= "/file.asp"--><!--#include file= "file.asp"--> two Ways
Through the STM file, you can directly export the ASP file source code directly to the customer browser.
Requirements:
1, server side to have shtml script mapping
2, you can write to the server. stm/.shtm/.shtml suffix file
3, know want to see the file name and relative position
Example:
Write test.stm file to server directory
<!--#include virtual= "/news/index.asp"-->
Or
<!--#include file= "index.asp"-->
Note: When using "virtual=", you specify the relative position of the file to the root, and when you use "file=", you need to specify the relative position of the file for the upload directory, that is, test.stm.
in the browser input http://www.xxx.com/news/test.stm, view the source code, that is, you can see the source code of the index.asp file. Of course, we can also write multiple files to see the source code of multiple files at once.
Also have a lot of friends to use this method on the attack, use to view the content of the file such as Conn, obtain the database location, all the same! The main is its own flexible application!