|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有帐号?立即注册
x
ASP脚本是采用明文(plain text)方式来编写的。 asp若何获得access数据库的字段申明代码以下:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>提取access字段的申明信息</title>
</head>
<%
dim table
table = trim(request("t1"))
database=trim(request("d1"))
%>
<body>
<form method="POST" action="">
数据文件名:<input type="text" name="D1" size="40" value=<%response.write(database)%> >同目次下数据文件称号 如:database.mdb<br>
表......名:<input type="text" name="T1" size="40" value=<%response.write(table)%> >database.mdb中的表名<br>
<input type="submit" value="提交" name="B1"><input type="reset" value="重置" name="B2">
</form>
<%
if table = "" then
response.write("post nothing")
else%><%
dim conn
dim connstr
on error resume next
connstr="PROVIDER=Microsoft.Jet.OLEDB.4.0;Data Source="+server.mappath(database)+";"
set conn=server.createobject("ADODB.CONNECTION")
conn.open connstr
response.write(connstr+"<br>")
dim sql
dim rs
sql="select * from "+table+""
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,3,2
response.write(sql+"<br>")
If rs.State = adStateOpen Then
cnnState = "open"
Else
cnnState = "closed"
End If
response.write(cnnState +"<br>")
response.write("列数:"+cstr(rs.fields.count)+"<br>")
For i=0 to rs.fields.count-1
Response.Write "<TH>"+ rs(i).Name +"</TH>;<br>"
Next
Dim MyTableName
Dim MyFieldName
Dim MyDB
set mydb=server.createobject("adox.catalog")
Dim MyTable
set mytable=server.createobject("adox.table")
Dim MyField
set myfield =server.createobject("adox.column")
Dim pro
On Error resume next
MyDB.ActiveConnection =conn
For Each MyTable In MyDB.Tables
For Each MyField In MyTable.Columns
'response.write "FieldName:" & FieldType(MyField.Type) & " FieldSize:" & MyField.DefinedSize 'FieldType(pro.Type)
'response.write table & "." & MyField.name &":" '呵呵这里有变化,之前的有误
response.write MyTable.name & "." & MyField.name &":" '呵呵这里有变化,之前的有误
For Each pro In MyField.Properties
if pro.name="Description" and pro.Value <> "" then response.write pro.Value & " <br> " 'MyTable.Name & " : " & MyField.Name & " : " & pro.Name & " : " & pro.Value
Next
Next
Next
rs.close()
conn.close()
end if
%>
</body>
</html>
ASP由于使用了COM组件所以它会变的十分强大,但是这样的强大由于Windows NT系统最初的设计问题而会引发大量的安全问题。只要在这样的组件或是操作中一不注意,哪么外部攻击就可以取得相当高的权限而导致网站瘫痪或者数据丢失; |
|