hzhost·Àasp¹¥»÷º¯Êý
hzhost·Àasp¹¥»÷º¯Êý
Function SafeRequest(ParaName)
Dim ParaValue
ParaValue=Request(ParaName)
if IsNumeric(ParaValue) then
SafeRequest=ParaValue
exit Function
else
ParaValuetemp=lcase(ParaValue)
tempvalue="select
|insert |delete from|'|count(|drop table|update |truncate
|asc(|mid(|char(|xp_cmdshell|exec master|net localgroup
administrators|net user| or | and |%20from"
temps=split(tempvalue,"|")
for mycount=0 to ubound(temps)
if Instr(ParaValuetemp,temps(mycount)) > 0 then
call errorpage(-2,"·Ç·¨ÇëÇ󣡣¡£¡")
response.end
end if
next
SafeRequest=ParaValue
end if
End function
'=================
Ïà¹ØÎĵµ£º
±¾»úip[¿Í»§¶Ë]:
request.servervariables("remote_addr")
´ÓÄĸöÒ³Ãæ×ªµ½µ±Ç°Ò³ÃæµÄ£º
Request.ServerVariables("HTTP_REFERER")
µÃµ½±¾Ò³µØÖ·£º
<%="http://" + Request.ServerVariables("SERVER_NAME") + ":" + Request.ServerVariables("SERVER_PORT") + reques ......
ºÜ¶àʱºò,ÎÒÃDzÉÓÃÔʼµÄ·½·¨À´½â¾öÒ»ÐÐÄÚÑ»·3ÕÅͼƬ,Èç¹ûÉÏ´«ÕßÖ»ÉÏ´«ÁË2ÕÅͼƬ,ÄÇô2ÕÅͼƬ¼äµÄ¾àÀë»áºÜ´ó,ÒòΪȱÉÙÁËÒ»¸ö<td> </td>.
<table border="0" cellpadding="0" cellspacing="0">
<%
dim rs,sqltext
set rs = Server.CreateObject("adodb.recordset")
sqltext="sel ......
'---------------------------------------------------------------------------------------------------1.asp
<!--#include file="function.asp" -->
<%if Request.Cookies("venshop")("user_name")<>"" then%>'µ±Óû§µÇ¼ʱ¿ÉÒÔÖ´ÐÐthen
<script>
function checkAll(){
&nbs ......
'--------------------------------------------------------------------------------------1.asp
<!--#include file="function.asp" -->
<script>
function checkAll(){
for (i=0;i<document.forms[1].length;i++){
if (document.forms[1][i].tagName= ......
ºÜ¶àSOHOER¶¼Ï£ÍûÓиö×Ô¼ºµÄÍøÕ¾,¶ø¶ÔÍøÕ¾½¨ÉèÒ»ÎÞËùÖª,»òÕßÒ»Öª°ë½â.½ñÌìÎÒÏȽ²³ÌÐò·½ÃæµÄÇø±ð,ÏàÐźܶàÈËÅöµ½ÁËÓÐЩ¹«Ë¾Ëµphp±ÈAsp,Asp.Net¶¼ÒªºÃ,»òÕßAsp±ÈÆäËûÓïÑÔ¶¼ÒªºÃ¡£Æäʵ,³ÌÐòµÄÓÅÂÔÓëÍøÕ¾¿ª·¢ÈËÔ±µÄ¾Ñé\¼¼ÊõˮƽÏà¹Ø£¬¶øÓïÑÔ±¾Éí²¢Ã»ÓÐʲôÓÅÂÔÖ®·Ö.¾Ñé¶àµÄ³ÌÐòÔ±,²»¹ÜʹÓõÄÄ ......