hzhost·Àasp¹¥»÷º¯Êý
hzhost·Àasp¹¥»÷º¯Êý
Function SafeRequest(ParaName)
Dim ParaValue
ParaValue=Request(ParaName)
if IsNumeric(ParaValue) then
SafeRequest=ParaValue
exit Function
else
ParaValuetemp=lcase(ParaValue)
tempvalue="select
|insert |delete from|'|count(|drop table|update |truncate
|asc(|mid(|char(|xp_cmdshell|exec master|net localgroup
administrators|net user| or | and |%20from"
temps=split(tempvalue,"|")
for mycount=0 to ubound(temps)
if Instr(ParaValuetemp,temps(mycount)) > 0 then
call errorpage(-2,"·Ç·¨ÇëÇ󣡣¡£¡")
response.end
end if
next
SafeRequest=ParaValue
end if
End function
'=================
Ïà¹ØÎĵµ£º
'--------------------------------------------------------------------------------------1.asp
<!--#include file="function.asp" -->
<script>
function checkAll(){
for (i=0;i<document.forms[1].length;i++){
if (document.forms[1][i].tagName= ......
ASPÖÐÈçºÎÓÃJS´Ó×Ó´°¿Ú´«µÝÖµ±äÁ¿µ½¸¸´°¿Ú±íµ¥ÖÐ?
ÐüÉÍ·Ö£º15 - ½â¾öʱ¼ä£º2008-6-10 00:06
¸¸´°¿ÚÖÐÓÐÒ»±íµ¥,ÏÖÔÚÊǵã±íµ¥ºóµÄÉÏ´«´ò¿ª×Ó´°¿Ú,¾¹ýÎÞ×é¼þÉÏ´«Îļþ³É¹¦ºó×Ó´°¿ÚÌáʾ³É¹¦,²¢ÓÃresponse.write(FileName) Êä³ö·¾¶³É¹¦.µ«ÈçºÎ´«µÝµ½¸¸´°¿ÚÎı¾ÓòÄÚÌá½»Êý¾Ý¿âÄØ?²é×ÊÁÏÊÇÓÃJS»Ø´«Ð´³É: resp ......
1.ÔÚ½â¾ö·½°¸ÖÐÌí¼ÓÐÂÏîÄ¿Êý¾Ý¼¯-mydbDataSet.xsd£¬ÔÚÊý¾Ý¼¯ÀïÌí¼ÓËùÒªÓõ½µÄ±í»ò¸ù¾ÝÐèÒªÖÆ×÷ÐÂ±í¡£
2.ÔÚÉè¼ÆÒ³ÃæÖÐÀÈëÒ»¸öMicrosoftReportViewer£¬Éè¼ÆÐ±¨±í£¬°´ÕÕ±¨±íÏòµ¼¸ù¾Ý×Ô¼ºµÄÐèҪѡÔñ±¨±íµÄÊý¾ÝÔ´ºÍÊý¾ÝÏÍê³Éб¨±íreport1.rdlcµÄÖÆ×÷¡£ÔÚÔ´ÂëÖÐÈçÏ£¨“¿¼ºË³É¼¨”ΪÊý¾Ý¼¯ÖеÄÒ»¸ö±í£©
<rsw ......
ºÜ¶àSOHOER¶¼Ï£ÍûÓиö×Ô¼ºµÄÍøÕ¾,¶ø¶ÔÍøÕ¾½¨ÉèÒ»ÎÞËùÖª,»òÕßÒ»Öª°ë½â.½ñÌìÎÒÏȽ²³ÌÐò·½ÃæµÄÇø±ð,ÏàÐźܶàÈËÅöµ½ÁËÓÐЩ¹«Ë¾Ëµphp±ÈAsp,Asp.Net¶¼ÒªºÃ,»òÕßAsp±ÈÆäËûÓïÑÔ¶¼ÒªºÃ¡£Æäʵ,³ÌÐòµÄÓÅÂÔÓëÍøÕ¾¿ª·¢ÈËÔ±µÄ¾Ñé\¼¼ÊõˮƽÏà¹Ø£¬¶øÓïÑÔ±¾Éí²¢Ã»ÓÐʲôÓÅÂÔÖ®·Ö.¾Ñé¶àµÄ³ÌÐòÔ±,²»¹ÜʹÓõÄÄ ......