您所在位置：主题：求！谁帮我破解这代码
a5610
[专家分：0] 发布于 2008-05-11 20:33:00
首先看牛人写的代码:
<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?cid="&cid&"&ok=1""></script>
是一个引用JS文件的代码.被引用的页面是ASP的文件.这样的话就比较能灵活的控制输出的内容。不像JS文件.原始文件是怎样的可以直接查看到.
加密原理:
1、通过判断来路的地址和域名来判断是否经过授权。
2、CID没搞清楚是干什么的。但是似乎是用来传递到生成的JS文件的表单中的cid的。
整个文件的源码太多。。不能发出，，请大家下载观看
<!--#Include File="../cbfconn.asp"-->
<head>
<meta http-equiv="Content-Language" content="zh-cn">
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css">
body { MARGIN: 0px;
PADDING: 0px;
BACKGROUND: #FEFEFE url('http://www.cbf001.com/images2006/logo.jpg') no-repeat right bottom;
FONT-FAMILY: '宋体,新宋体,arial,Lucida Grande,Lucida Sans Unicode,verdana,sans-serif';
COLOR: #666;
FONT-SIZE:12px;
LINE-HEIGHT:150% }
a:link{font-weight : bold ;text-decoration : none ;color : #c00 ;}
a:visited {font-weight : bold ;text-decoration : none ;color : #c30 ;}
a:hover {font-weight : bold ;text-decoration : underline ;color : #f60 ;}
a:active {font-weight : bold ;text-decoration : none ;color : #F90 ;}
</style>
<link href="img/Style.Css" rel="stylesheet" type="text/css">
<%
ip = Request.ServerVariables("HTTP_X_FORWARDED_FOR" )
If ip = "" Then
ip = Request.ServerVariables("REMOTE_ADDR" )
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request("caijigo")<>"" then
cid=request("caijigo")
if isnumeric(cid)=false then
response.write"不要恶意攻击!"
response.end
end if
IF not isNumeric(cID) then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
IF cID="" then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
Set rsb=Server.CreateObject("Adodb.RecordSet")
sql="select * from caiji where cid="&cid
rsb.Open sql,conn,1,1
if rsb.eof and rsb.bof then
response.write "<script>alert('出错了，查看你的采集项目是否存在，ID为“"&cid&"”! ');window.close();</script>"
response.end
end if
response.write "</head><script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?cid="&cid&"&ok=1""></script><input type=text name=""t"" value="""
response.write rsb("weburl")
response.write""" size=""54""><input type=button value=""复制"" onclick='javascript:var tt = t.createTextRange();tt.execCommand(""Copy"");confirm(""CBF001温馨提示： \n\n复制后粘贴到地址栏,然后将[i]改为数字,比如“1”再浏览采集页！\n\n当备注提示从第2页开采时请输入“2”查看！"")'></span>"
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=2""></script>"
response.write "<input onkeyup=""if(event.keyCode !=37 && event.keyCode != 39) value=value.replace(/\D/g,'');""onbeforepaste=""clipboardData.setData('text',clipboardData.getData('text').replace(/\D/g,''))"" name=""go1"" type=""text"" class=""inputs"" id=""name"" style=""width:55;height:18"" size=""1"" value=""1""/></span><font style=""font-size: 9pt""> "
response.write "页开始采集至 -> 第 </font><span style=""font-size: 9pt"">"
response.write "<input onkeyup=""if(event.keyCode !=37 && event.keyCode != 39) value=value.replace(/\D/g,'');""onbeforepaste=""clipboardData.setData('text',clipboardData.getData('text').replace(/\D/g,''))"" name=""go2"" type=""text"" class=""inputs"" id=""name0"" style=""width:54;height:18"" size=""1"" value=""1"" /> "
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=3""></script>"
response.write rsb("caiconten")
response.write "</font></b></span></td> </tr> <tr>"
response.write "<td style=""border-left-color: #00A8FF; border-right-color: #00A8FF; border-top: 1px solid #00A8FF; border-bottom: 1px solid #00A8FF"" bgcolor=""#FFFFFF"" colspan=""4"" height=""63"">"
response.write "<p align=""center"">"
response.write "<span style=""font-size: 9pt"">"
response.write "<input onClick=""{if(confirm('CBF001温馨提示：你使用的是商业版采集工具\n\n一次不要采太多,可以分几次采集,如果对方的网站很慢采集就要发很长时间!')){this.document.forms.submit();return true;}return false;}"" type=""submit"" value=""开始采集"" name=""caiji""></span><p align=""center"">"
response.write "<font color=""#C0C0C0""><span style=""font-size: 9pt"">CBF001电影系统采集插件1.4版</span></font></td>"
response.write "</tr> </table><p align=""center""><span style=""font-size: 9pt""></span></form>"
response.write "<p align=""center"">"
response.write "</div>"
response.end
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request.form("caiji")<>"" then
cid=request.form("cid")
if isnumeric(cid)=false then
response.write"不要恶意攻击!"
response.end
end if
IF not isNumeric(cID) then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
IF cID="" then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
Set rsb=Server.CreateObject("Adodb.RecordSet")
sql="select * from caiji where cid="&cid
rsb.Open sql,conn,1,1
if rsb.eof and rsb.bof then
response.write "<script>alert('出错了，查看你的采集项目是否存在，ID为“"&cid&"”! ');window.close();</script>"
response.end
end if
go1=request.form("go1")
go2=request.form("go2")
i=go1
if request.form("CBF001C")="c3" then
if request.form("CBF001vvv")="" then
response.write "<script>alert('出错了，选中自定义编码时不能为空! ');window.close();</script>"
response.end
end if
end if
session("cbf001v")=""
if request.form("cbf001c")="a1" then
session("cbf001v")=request.form("cbf001v")
end if
if request.form("cbf001c")="b2" then
session("cbf001v")=request.form("cbf001vv")
end if
if request.form("cbf001c")="c3" then
session("cbf001v")=request.form("CBF001vvv")
end if
if session("cbf001v")="" then
response.write "<script>alert('编码记忆出错"&session("cbf001v")&request.form("CBF001v1")&"! ');</script>"
response.end
end if
uss=0
%>
<%for go=request.form("go1") to go2
uss=uss+1
if request.form("daoxi")=1 then
os=go2+1-uss
else
os=go
end if
if request.form("wangyei")<>"" then
if os+0=1 then
os=""
end if
end if
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=4""></script>"
weburl1=Replace(rsb("weburl"), "[i]", os)
response.write weburl1
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=5&cid="&cid&"&id="&os&"&imgs="&request.form("imgs")&"&caijinews="&request.form("caijinews")&"&newname="&request("newname")&"""></script>"
i=i+1
next
response.end
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request("caijif")<>"" then
if request("cid")="" then
response.write"出错啦!"
response.end
end if
cid=request("cid")
if isnumeric(cid)=false then
response.write"不要恶意攻击!"
response.end
end if
id=request("id")
%>
<script language="JavaScript">
<!--
var url = 'caijisave.asp?cid=<%=cid%>&caijifso=<%=cid%>&id=<%=id%>';
//这里就是要跳到的地方
//-->
</script>
<title>网站数据加载中……</title>
</head>
<body onLoad="location.href = url">
<div style='margin-top:40;margin-left:40;margin-right:0'>
<style><!--.proccess{border:0px solid; border-color:#009900; width:2;height:15;background:eeeeee;margin:0}--></style>
<div style='margin-top:-20;margin-left:0;margin-right:0' align="center">
<form method=post name=proccess>
<script language=javascript>
document.write("<div align=center style='font-size:9pt;color:#660000;'><img src='img/group.gif'></div>")
document.write("<table border=0 cellspacing=1 cellpadding=0 bgcolor=#C0C0C0 ><tr bgcolor=#ffffff><td style='font:9pt Verdana;'>")
for(i=0;i<200;i++)document.write("<input class=proccess >")
document.write("</td></tr></table><br>")
document.write("<div align=center style='font-size:9pt;color:#C0C0C0;'>正在采集中……请稍候!</div>")
</script>
</form>
</div>
<div align="center">
<script language=JavaScript><!--
var p=0,j=0;
var c=new Array("#666666","#ffffff")
setInterval('proccess();',100)
function proccess(){
document.forms.proccess.elements[p].style.background=c[j];
p+=1;
if(p==200){p=0;j=1-j;}}
--></script>
</div>
</div>
<div align="center">
<script>
<!--
if (document.layers)
document.write('<Layer src="' + url + ' " VISIBILITY="hide"> </Layer>');
else if (document.all || document.getElementById)
document.write('<iframe src="' + url + '" style="visibility: hidden;"></iframe>');
else location.href = url;
//-->
</script>
</div>
</body>
<%
response.end
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request("caijifso")<>"" then
%>
<script language=javascript>
<!--
document.write('<div id=loadDiv style="padding-top: 100; padding-left: 100">'+ '页面
<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?cid="&cid&"&ok=1""></script>
是一个引用JS文件的代码.被引用的页面是ASP的文件.这样的话就比较能灵活的控制输出的内容。不像JS文件.原始文件是怎样的可以直接查看到.
加密原理:
1、通过判断来路的地址和域名来判断是否经过授权。
2、CID没搞清楚是干什么的。但是似乎是用来传递到生成的JS文件的表单中的cid的。
整个文件的源码太多。。不能发出，，请大家下载观看
<!--#Include File="../cbfconn.asp"-->
<head>
<meta http-equiv="Content-Language" content="zh-cn">
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css">
body { MARGIN: 0px;
PADDING: 0px;
BACKGROUND: #FEFEFE url('http://www.cbf001.com/images2006/logo.jpg') no-repeat right bottom;
FONT-FAMILY: '宋体,新宋体,arial,Lucida Grande,Lucida Sans Unicode,verdana,sans-serif';
COLOR: #666;
FONT-SIZE:12px;
LINE-HEIGHT:150% }
a:link{font-weight : bold ;text-decoration : none ;color : #c00 ;}
a:visited {font-weight : bold ;text-decoration : none ;color : #c30 ;}
a:hover {font-weight : bold ;text-decoration : underline ;color : #f60 ;}
a:active {font-weight : bold ;text-decoration : none ;color : #F90 ;}
</style>
<link href="img/Style.Css" rel="stylesheet" type="text/css">
<%
ip = Request.ServerVariables("HTTP_X_FORWARDED_FOR" )
If ip = "" Then
ip = Request.ServerVariables("REMOTE_ADDR" )
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request("caijigo")<>"" then
cid=request("caijigo")
if isnumeric(cid)=false then
response.write"不要恶意攻击!"
response.end
end if
IF not isNumeric(cID) then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
IF cID="" then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
Set rsb=Server.CreateObject("Adodb.RecordSet")
sql="select * from caiji where cid="&cid
rsb.Open sql,conn,1,1
if rsb.eof and rsb.bof then
response.write "<script>alert('出错了，查看你的采集项目是否存在，ID为“"&cid&"”! ');window.close();</script>"
response.end
end if
response.write "</head><script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?cid="&cid&"&ok=1""></script><input type=text name=""t"" value="""
response.write rsb("weburl")
response.write""" size=""54""><input type=button value=""复制"" onclick='javascript:var tt = t.createTextRange();tt.execCommand(""Copy"");confirm(""CBF001温馨提示： \n\n复制后粘贴到地址栏,然后将[i]改为数字,比如“1”再浏览采集页！\n\n当备注提示从第2页开采时请输入“2”查看！"")'></span>"
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=2""></script>"
response.write "<input onkeyup=""if(event.keyCode !=37 && event.keyCode != 39) value=value.replace(/\D/g,'');""onbeforepaste=""clipboardData.setData('text',clipboardData.getData('text').replace(/\D/g,''))"" name=""go1"" type=""text"" class=""inputs"" id=""name"" style=""width:55;height:18"" size=""1"" value=""1""/></span><font style=""font-size: 9pt""> "
response.write "页开始采集至 -> 第 </font><span style=""font-size: 9pt"">"
response.write "<input onkeyup=""if(event.keyCode !=37 && event.keyCode != 39) value=value.replace(/\D/g,'');""onbeforepaste=""clipboardData.setData('text',clipboardData.getData('text').replace(/\D/g,''))"" name=""go2"" type=""text"" class=""inputs"" id=""name0"" style=""width:54;height:18"" size=""1"" value=""1"" /> "
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=3""></script>"
response.write rsb("caiconten")
response.write "</font></b></span></td> </tr> <tr>"
response.write "<td style=""border-left-color: #00A8FF; border-right-color: #00A8FF; border-top: 1px solid #00A8FF; border-bottom: 1px solid #00A8FF"" bgcolor=""#FFFFFF"" colspan=""4"" height=""63"">"
response.write "<p align=""center"">"
response.write "<span style=""font-size: 9pt"">"
response.write "<input onClick=""{if(confirm('CBF001温馨提示：你使用的是商业版采集工具\n\n一次不要采太多,可以分几次采集,如果对方的网站很慢采集就要发很长时间!')){this.document.forms.submit();return true;}return false;}"" type=""submit"" value=""开始采集"" name=""caiji""></span><p align=""center"">"
response.write "<font color=""#C0C0C0""><span style=""font-size: 9pt"">CBF001电影系统采集插件1.4版</span></font></td>"
response.write "</tr> </table><p align=""center""><span style=""font-size: 9pt""></span></form>"
response.write "<p align=""center"">"
response.write "</div>"
response.end
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request.form("caiji")<>"" then
cid=request.form("cid")
if isnumeric(cid)=false then
response.write"不要恶意攻击!"
response.end
end if
IF not isNumeric(cID) then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
IF cID="" then
response.write "<script>alert('出错了，你的来源地址有非正常字符!\n\n请联系管理员解决此问题!确定后自动关闭! ');window.close();</script>"
response.end
end if
Set rsb=Server.CreateObject("Adodb.RecordSet")
sql="select * from caiji where cid="&cid
rsb.Open sql,conn,1,1
if rsb.eof and rsb.bof then
response.write "<script>alert('出错了，查看你的采集项目是否存在，ID为“"&cid&"”! ');window.close();</script>"
response.end
end if
go1=request.form("go1")
go2=request.form("go2")
i=go1
if request.form("CBF001C")="c3" then
if request.form("CBF001vvv")="" then
response.write "<script>alert('出错了，选中自定义编码时不能为空! ');window.close();</script>"
response.end
end if
end if
session("cbf001v")=""
if request.form("cbf001c")="a1" then
session("cbf001v")=request.form("cbf001v")
end if
if request.form("cbf001c")="b2" then
session("cbf001v")=request.form("cbf001vv")
end if
if request.form("cbf001c")="c3" then
session("cbf001v")=request.form("CBF001vvv")
end if
if session("cbf001v")="" then
response.write "<script>alert('编码记忆出错"&session("cbf001v")&request.form("CBF001v1")&"! ');</script>"
response.end
end if
uss=0
%>
<%for go=request.form("go1") to go2
uss=uss+1
if request.form("daoxi")=1 then
os=go2+1-uss
else
os=go
end if
if request.form("wangyei")<>"" then
if os+0=1 then
os=""
end if
end if
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=4""></script>"
weburl1=Replace(rsb("weburl"), "[i]", os)
response.write weburl1
response.write "<script type=""text/javascript"" src=""http://cbf001.com/vod2008/caijijs.asp?ok=5&cid="&cid&"&id="&os&"&imgs="&request.form("imgs")&"&caijinews="&request.form("caijinews")&"&newname="&request("newname")&"""></script>"
i=i+1
next
response.end
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request("caijif")<>"" then
if request("cid")="" then
response.write"出错啦!"
response.end
end if
cid=request("cid")
if isnumeric(cid)=false then
response.write"不要恶意攻击!"
response.end
end if
id=request("id")
%>
<script language="JavaScript">
<!--
var url = 'caijisave.asp?cid=<%=cid%>&caijifso=<%=cid%>&id=<%=id%>';
//这里就是要跳到的地方
//-->
</script>
<title>网站数据加载中……</title>
</head>
<body onLoad="location.href = url">
<div style='margin-top:40;margin-left:40;margin-right:0'>
<style><!--.proccess{border:0px solid; border-color:#009900; width:2;height:15;background:eeeeee;margin:0}--></style>
<div style='margin-top:-20;margin-left:0;margin-right:0' align="center">
<form method=post name=proccess>
<script language=javascript>
document.write("<div align=center style='font-size:9pt;color:#660000;'><img src='img/group.gif'></div>")
document.write("<table border=0 cellspacing=1 cellpadding=0 bgcolor=#C0C0C0 ><tr bgcolor=#ffffff><td style='font:9pt Verdana;'>")
for(i=0;i<200;i++)document.write("<input class=proccess >")
document.write("</td></tr></table><br>")
document.write("<div align=center style='font-size:9pt;color:#C0C0C0;'>正在采集中……请稍候!</div>")
</script>
</form>
</div>
<div align="center">
<script language=JavaScript><!--
var p=0,j=0;
var c=new Array("#666666","#ffffff")
setInterval('proccess();',100)
function proccess(){
document.forms.proccess.elements[p].style.background=c[j];
p+=1;
if(p==200){p=0;j=1-j;}}
--></script>
</div>
</div>
<div align="center">
<script>
<!--
if (document.layers)
document.write('<Layer src="' + url + ' " VISIBILITY="hide"> </Layer>');
else if (document.all || document.getElementById)
document.write('<iframe src="' + url + '" style="visibility: hidden;"></iframe>');
else location.href = url;
//-->
</script>
</div>
</body>
<%
response.end
end if
if session("cbf001A_D_M_I_N")<>"" and session("cbfADM_n_id")<>"" and request("caijifso")<>"" then
%>
<script language=javascript>
<!--
document.write('<div id=loadDiv style="padding-top: 100; padding-left: 100">'+ '页面