<commit_before>﻿<%@ CODEPAGE=65001 %>
<%
'///////////////////////////////////////////////////////////////////////////////
'// 插件应用:    Z-Blog 1.8 spirit 其它版本未知
'// 插件制作:    狼的旋律(http://www.wilf.cn) / winds(http://www.lijian.net)
'// 备    注:    WindsPhoto
'// 最后修改：   2011.8.22
'// 最后版本:    2.7.3
'///////////////////////////////////////////////////////////////////////////////
%>
<%' Option Explicit %>
<% 'On Error Resume Next %>
<% Response.Charset="UTF-8" %>
<% Response.Buffer=True %>
<!-- #include file="../../c_option.asp" -->
<!-- #include file="../../../zb_system/function/c_function.asp" -->
<!-- #include file="../../../zb_system/function/c_system_lib.asp" -->
<!-- #include file="../../../zb_system/function/c_system_base.asp" -->
<!-- #include file="../../../zb_system/function/c_system_event.asp" -->
<!-- #include file="../../../zb_system/function/c_system_plugin.asp" -->
<!-- #include file="../../plugin/p_config.asp" -->
<!-- #include file="function.asp" -->
<%Call System_Initialize
Call WindsPhoto_Initialize%><%

Dim TypeName, hot, data, data1, js, p
If IsNumeric(Request.QueryString("typeid")) = FALSE Then
    response.Write "<script>alert('对不起,参数错误!');history.back();</script>"
Else
    typeid = CInt(Request.QueryString("typeid"))
End If
If Request.QueryString("mo") <>"" And IsNumeric(Request.QueryString("mo")) = FALSE Then
    response.Write "<script>alert('对不起,参数错误!');history.back();</script>"
Else
    If Request.QueryString("mo") <>"" Then
        mo = CInt(Request.QueryString("mo"))
    End If
End If

Set temprs = objConn.Execute("select name,hot,data,time1,js,pass,[view] FROM WindsPhoto_zhuanti where id="&typeid)
If temprs.EOF Or temprs.bof Then
    response.Write "<script>alert('对不起,该相册不存在');history.back();</script>"
    response.End
End If

If temprs(6) = 1 And mo = 0 Then
    Response.Redirect "album.asp?typeid="&typeid&"&mo=1"
End If
TypeName = temprs(0)
hot = temprs(1)
data = temprs(2)
data1 = temprs(3)
js = temprs(4)
p = temprs(5)
Set temprs = Nothing

Set rs = Server.CreateObject("ADODB.RecordSet")
sql = "select * FROM WindsPhoto_zhuanti where id="&typeid
Set rs = Server.CreateObject("ADODB.Recordset")
rs.Open sql, objConn, 1, 3<commit_msg>疑似SQL注入漏洞<commit_after>﻿<%@ CODEPAGE=65001 %>
<%
'///////////////////////////////////////////////////////////////////////////////
'// 插件应用:    Z-Blog 1.8 spirit 其它版本未知
'// 插件制作:    狼的旋律(http://www.wilf.cn) / winds(http://www.lijian.net)
'// 备    注:    WindsPhoto
'// 最后修改：   2011.8.22
'// 最后版本:    2.7.3
'///////////////////////////////////////////////////////////////////////////////
%>
<%' Option Explicit %>
<% 'On Error Resume Next %>
<% Response.Charset="UTF-8" %>
<% Response.Buffer=True %>
<!-- #include file="../../c_option.asp" -->
<!-- #include file="../../../zb_system/function/c_function.asp" -->
<!-- #include file="../../../zb_system/function/c_system_lib.asp" -->
<!-- #include file="../../../zb_system/function/c_system_base.asp" -->
<!-- #include file="../../../zb_system/function/c_system_event.asp" -->
<!-- #include file="../../../zb_system/function/c_system_plugin.asp" -->
<!-- #include file="../../plugin/p_config.asp" -->
<!-- #include file="function.asp" -->
<%Call System_Initialize
Call WindsPhoto_Initialize%><%

Dim TypeName, hot, data, data1, js, p
If IsNumeric(Request.QueryString("typeid")) = FALSE Then
    response.Write "<script>alert('对不起,参数错误!');history.back();</script>"
	Response.End
Else
    typeid = CInt(Request.QueryString("typeid"))
End If
If Request.QueryString("mo") <>"" And IsNumeric(Request.QueryString("mo")) = FALSE Then
    response.Write "<script>alert('对不起,参数错误!');history.back();</script>"
	Response.End
Else
    If Request.QueryString("mo") <>"" Then
        mo = CInt(Request.QueryString("mo"))
    End If
End If

Set temprs = objConn.Execute("select name,hot,data,time1,js,pass,[view] FROM WindsPhoto_zhuanti where id="&typeid)
If temprs.EOF Or temprs.bof Then
    response.Write "<script>alert('对不起,该相册不存在');history.back();</script>"
    response.End
End If

If temprs(6) = 1 And mo = 0 Then
    Response.Redirect "album.asp?typeid="&typeid&"&mo=1"
End If
TypeName = temprs(0)
hot = temprs(1)
data = temprs(2)
data1 = temprs(3)
js = temprs(4)
p = temprs(5)
Set temprs = Nothing

Set rs = Server.CreateObject("ADODB.RecordSet")
sql = "select * FROM WindsPhoto_zhuanti where id="&typeid
Set rs = Server.CreateObject("ADODB.Recordset")
rs.Open sql, objConn, 1, 3
{'fraction_non_alphanumeric': 0.271985494106981, 'fraction_numerical': 0.014959202175883953, 'mean_word_length': 2.801033591731266, 'pattern_counts': {'":': 0, '<': 51, '<?xml version=': 0, '>': 49, 'https://': 0, 'lorem ipsum': 0, 'www.': 4, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4905538', 'n_tokens_mistral': 1615, 'n_tokens_neox': 1572, 'n_words': 285}