Million enterprise Internet site program through the kill oday and repair programme-vulnerability warning-the black bar safety net

1, vulnerability analysis Vulnerability exists page: newsdisp. asp Obviously the injection vulnerability is! Some stations do anti-Note You! （cookie injection can be done. Generally the table name: admin Field name: username password Some STATION Table for wqadmin field Ibid. There is a more awso...

Anti-injection program to get a shell and fix-vulnerability warning-the black bar safety net

When you use single quotes“’”to test a website there may be injection vulnerability in the address, assuming the URL is“www.xxxx/news.asp?id=6”pop“your operation has been recorded!” Such information, and we can't go to bypass anti-injection system, you can try to submit http://www. xxxx/sqlin. as...