Ò׽ؽØÍ¼Èí¼þ¡¢µ¥Îļþ¡¢Ãâ°²×°¡¢´¿ÂÌÉ«¡¢½ö160KB

hzhost·Àasp¹¥»÷º¯Êý

 



hzhost·Àasp¹¥»÷º¯Êý
Function SafeRequest(ParaName)
Dim ParaValue
ParaValue=Request(ParaName)
if IsNumeric(ParaValue)  then
SafeRequest=ParaValue
exit Function
else
ParaValuetemp=lcase(ParaValue)
tempvalue="select
|insert |delete from|'|count(|drop table|update |truncate 
|asc(|mid(|char(|xp_cmdshell|exec master|net localgroup
administrators|net user| or | and |%20from"
temps=split(tempvalue,"|")
for mycount=0 to ubound(temps)
if  Instr(ParaValuetemp,temps(mycount)) > 0 then
        call errorpage(-2,"·Ç·¨ÇëÇ󣡣¡£¡")
        response.end
end if
next
SafeRequest=ParaValue
end if
End function
'=================


Ïà¹ØÎĵµ£º

¹ØÓÚASPÑ­»·±í¸ñµÄÎÊÌâÖ®½â´ð


ºÜ¶àʱºò,ÎÒÃDzÉÓÃԭʼµÄ·½·¨À´½â¾öÒ»ÐÐÄÚÑ­»·3ÕÅͼƬ,Èç¹ûÉÏ´«ÕßÖ»ÉÏ´«ÁË2ÕÅͼƬ,ÄÇô2ÕÅͼƬ¼äµÄ¾àÀë»áºÜ´ó,ÒòΪȱÉÙÁËÒ»¸ö<td>&nbsp;</td>.
<table border="0" cellpadding="0" cellspacing="0">
<%
dim rs,sqltext
set rs = Server.CreateObject("adodb.recordset")
sqltext="sel ......

asp²Ù×÷Êý¾Ý¿â´úÂë

 set conn=server.createobject("adodb.connection")
 conn.open "driver={microsoft access driver (*.mdb)};dbq=F:\\ajaxpro\\App_Data\\server.mdb"
 
 Dim StrSQL,RS
 StrSQL="SELECT*from Manager WHERE ID='"&username&"'"
 StrSQL=StrSQL&"AND Pin='"&passwor ......

jsp,ASP,PHPµÄ±È½Ï

      ºÜ¶àSOHOER¶¼Ï£ÍûÓиö×Ô¼ºµÄÍøÕ¾,¶ø¶ÔÍøÕ¾½¨ÉèÒ»ÎÞËùÖª,»òÕßÒ»Öª°ë½â.½ñÌìÎÒÏȽ²³ÌÐò·½ÃæµÄÇø±ð,ÏàÐźܶàÈËÅöµ½ÁËÓÐЩ¹«Ë¾Ëµphp±ÈAsp,Asp.Net¶¼ÒªºÃ,»òÕßAsp±ÈÆäËûÓïÑÔ¶¼ÒªºÃ¡£Æäʵ,³ÌÐòµÄÓÅÂÔÓëÍøÕ¾¿ª·¢ÈËÔ±µÄ¾­Ñé\¼¼ÊõˮƽÏà¹Ø£¬¶øÓïÑÔ±¾Éí²¢Ã»ÓÐʲôÓÅÂÔÖ®·Ö.¾­Ñé¶àµÄ³ÌÐòÔ±,²»¹ÜʹÓõÄÄ ......
© 2009 ej38.com All Rights Reserved. ¹ØÓÚE½¡ÍøÁªÏµÎÒÃÇ | Õ¾µãµØÍ¼ | ¸ÓICP±¸09004571ºÅ