Online visible, the Submitted query is valid for the ASP of the 2-level path, but the test is not 100% success. For example: http://www.xxx.com/bbs/news.asp? Id = 1 to http://www.xxx.com/bbs\news.asp?id=1 即 "/" change " % 5C "The physical path of the database is exposed, I don't know why
Author Blog:
http://blog.9cbs.net/txd159/