水晶报表9.2+ASP,控件显示一个灰色的界面，数据无法正常显示

2006-08-30 02:05:46 308 阅读 AI 写同款 · GEO 优化AI 选题数据监测一键分发 ›

SSRF：服务端请求伪造攻击 SSRF（Server-Side Request Forgery）是一种网络安全攻击，攻击者利用受害服务器发起网络请求，通常是利用受害服务器的信任关系来获取敏感信息或者攻击内部系统。攻击者可以通过构造恶意的请求，使受害服务器发起对内部系统的请求，从而获取内部系统的信息或者执行未经授权的操作。 SSRF攻击通常利用受害服务器对外部资源的访问权限，比如对外部URL的访问或者对内部系统的访问权限，来发起攻击。攻击者可以通过构造恶意的URL，使受害服务器发起对内部系统的请求，从而获取敏感信息或者执行恶意操作。阅读详情

原码如下：


<%

DIM SQLstr
dim reportname
dim path
'dim conn
set session("oRs")=Server.CreateObject("ADODB.Recordset")
set oADORecordset=Server.CreateObject("ADODB.Recordset")
set xmldoc=Server.CreateObject("MSXML2.DOMDocument")

SQLstr = "select * from cust"

oADORecordset.Open SQLstr,conn,1,1
oADORecordset.Save xmldoc,1
oADORecordset.Close
session("oRs").Open xmldoc

'On Error Resume Next
reportname="SMR004R03.rpt"
Path=Request.ServerVariables("PATH_TRANSLATED")

If Not IsObject (session("oApp")) Then
Set session("oApp") = Server.CreateObject("CrystalRuntime.Application")
End If
f IsObject(session("oRpt")) then
Set session("oRpt") = nothing
End if

Set session("oRpt")=session("oApp").OpenReport(Server.MapPath(reportname),1)
session("oRpt").MorePrintEngineErrorMessages = False
session("oRpt").EnableParameterPrompting = False

Set oRptTable = session("oRpt").Database.Tables.Item(1)

oRptTable.SetDataSource session("oRs"), 3

session("oRpt").ReadRecords
If Err.Number <> 0 Then
Response.Write "<SCRIPT LANGUAGE=javascript>alert('An Error has occured on the server in attempting to access the data source " & Err.Description & "')</SCRIPT>"
Else
If IsObject(session("oPageEngine")) Then
set session("oPageEngine") = nothing
End If
set session("oPageEngine") = session("oRpt").PageEngine
End If

%>
<SCRIPT LANGUAGE="VBScript">

</SCRIPT>

<body topmargin="0" leftmargin="0" bottomMargin=0 scrolling="no" onload="Page_Initialize()">
<object classid=CLSID:2DEF4530-8CE6-41c9-84B6-A54536C90213 height="100%"
id=CRViewer width="100%" codebase="/viewer9/activeXViewer/activexviewer.cab#Version=9,2,0,442" align="top">
<param name="DisplayGroupTree" value="0" />
<param name="DisplayToolbar" value="-1" />
<param name="EnableGroupTree" value="0" />
<param name="EnableNavigationControls" value="-1" />
<param name="EnableStopButton" value="0" />
<param name="EnablePrintButton" value="-1" />
<param name="EnableZoomControl" value="-1" />
<param name="EnableCloseButton" value="0" />
<param name="EnableProgressControl" value="-1" />
<param name="EnableSearchControl" value="-1" />
<param name="EnableRefreshButton" value="0" />
<param name="EnableDrillDown" value="0" />
<param name="EnableAnimationControl" value="1" />
<param name="EnableSelectExpertButton" value="0" />
<param name="EnableToolbar" value="-1" />
<param name="DisplayBorder" value="0" />
<param name="DisplayTabs" value="0" />
<param name="DisplayBackgroundEdge" value="-1" />
<param name="SelectionFormula" value />
<param name="EnablePopupMenu" value="-1" />
<param name="EnableExportButton" value="-1" />
<param name="EnableSearchExpertButton" value="0" />
<param name="EnableHelpButton" value="0" />
</object>

...全文