½â³ýASPÉÏ´«200KBµÄÏÞÖÆ
Ò»¡¢ÐÞ¸ÄIISÉèÖã¬ÔÊÐíÖ±½Ó±à¼ÅäÖÃÊý¾Ý¿â
¶þ¡¢ÏÈÔÚ·þÎñÀï¹Ø±Õiis admin service·þÎñ
ÕÒµ½windows\system32\inetsrv\ϵÄmetabase.xml,
´ò¿ª£¬ÕÒµ½ASPMaxRequestEntityAllowed °ÑËûÐÞ¸ÄΪÐèÒªµÄÖµ£¬Ä¬ÈÏΪ204800£¬¼´200K °ÑËüÐÞ¸ÄΪÄãËùÐèµÄ´óС¼´¿É¡£È磺512000£¨500k£©
È»ºóÖØÆôiis admin service·þÎñ¡£
Ïà¹ØÎĵµ£º
ºÜ¶àSOHOER¶¼Ï£ÍûÓиö×Ô¼ºµÄÍøÕ¾,¶ø¶ÔÍøÕ¾½¨ÉèÒ»ÎÞËùÖª,»òÕßÒ»Öª°ë½â.½ñÌìÎÒÏȽ²³ÌÐò·½ÃæµÄÇø±ð,ÏàÐźܶàÈËÅöµ½ÁËÓÐЩ¹«Ë¾Ëµphp±ÈAsp,Asp.Net¶¼ÒªºÃ,»òÕßAsp±ÈÆäËûÓïÑÔ¶¼ÒªºÃ¡£Æäʵ,³ÌÐòµÄÓÅÂÔÓëÍøÕ¾¿ª·¢ÈËÔ±µÄ¾Ñé\¼¼ÊõˮƽÏà¹Ø£¬¶øÓïÑÔ±¾Éí²¢Ã»ÓÐʲôÓÅÂÔÖ®·Ö.¾Ñé¶àµÄ³ÌÐòÔ±,²»¹ÜʹÓõÄÄ ......
hzhost·Àasp¹¥»÷º¯Êý
Function SafeRequest(ParaName)
Dim ParaValue
ParaValue=Request(ParaName)
if IsNumeric(ParaValue) then
SafeRequest=ParaValue
exit Function
else
ParaValuetemp=lcase(ParaValue)
tempvalue="select
|insert |delete from|'|count(|dr ......
asp.netÖдò¿ªÐ´°¿ÚµÄ¶àÖÖ·½·¨(×ªÔØ)
1.Response.Redirect("XXX.aspx",true)——Ö±½ÓתÏòеÄÒ³Ãæ£¬Ô´°¿Ú±»´úÌæ;
2. Response.Write("
")——´ò¿ªÐµÄÒ³Ãæ£¬Ô´°¿Ú±»´úÌæ;
4.Server.Transfer("XXX.aspx")——´ò¿ªÐµÄÒ³Ãæ;
5.Response.Write("
......
1. oncontextmenu="window.event.returnvalue=false" ½«³¹µ×ÆÁ±ÎÊó±êÓÒ¼ü
<table border oncontextmenu=return(false)><td>no</table> ¿ÉÓÃÓÚTable
2. <body onselectstart="return false"> È¡Ïûѡȡ¡¢·ÀÖ¹¸´ÖÆ
3. onpaste="return false" ²»×¼Õ³Ìù
4. oncopy="return false;" oncut="return f ......