Ò»¸öasp·Å×¢È뺯Êý
sub aspsql()
SQL_injdata = "'|;|and|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
SQL_inj = split(SQL_Injdata,"|")
If Request.Form<>"" Then
For Each Sql_Post In Request.Form
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then
response.write "<mce:script language='javascript'><!--
"
response.write "alert('ÍøÕ¾°²È«Ìáʾ£ºÇë²»ÒªÔÚ²ÎÊýÖаüº¬·Ç·¨×Ö·û£¡');"
response.write "location.href='javascript:history.go(-1)';"
response.write "
// --></mce:script>"
response.end
end if
next
next
end if
If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then
response.write "<mce:script language='javascript'><!--
"
response.write "alert('ÍøÕ¾°²È«Ìáʾ£ºÇë²»ÒªÔÚ²ÎÊýÖаüº¬·Ç·¨×Ö·û£¡');"
response.write "location.href='javascript:history.go(-1)';"
response.write "
// --></mce:script>"
response.end
end if
next
Next
end If
end sub
Ïà¹ØÎĵµ£º
Ò³Ãæ×Ô¶¯Ë¢Ð´úÂë´óÈ«£¬»ù±¾ÉÏËùÓÐÒªÇó×Ô¶¯Ë¢ÐÂÒ³ÃæµÄ´úÂ붼ÓУ¬´ó¼Ò¿ÉÒÔ×ÔÓÉ·¢»Ó×ö³öÍêÃÀµÄÒ³Ãæ¡£
1)
10±íʾ¼ä¸ô10ÃëË¢ÐÂÒ»´Î
2)
<script>
window.location.reload(true);
</script>
Èç¹ûÊÇÄãҪˢÐÂijһ¸öiframe¾Í°Ñwindow¸ø»»³ÉframeµÄÃû×Ö»òIDºÅ
3)
<script>
window.navigate("±¾Ò³Ãæurl"); ......
Èç¹ûÄãÒѾÓн϶àµÄÃæÏò¶ÔÏ󿪷¢¾Ñ飬Ìø¹ýÒÔÏÂÕâÁ½²½£º
µÚÒ»²½¡¡ÕÆÎÕÒ»ÃÅ¡£NETÃæÏò¶ÔÏóÓïÑÔ£¬C#»òVB.NET ÎÒÇ¿ÁÒ·´¶ÔÔÚûϵͳѧ¹ýÒ»ÃÅÃæÏò¶ÔÏó£¨OO£©ÓïÑÔµÄÇ°ÌáÏÂȥѧASP.NET¡£ ASP.NETÊÇÒ»¸öÈ«ÃæÏò¶ÔÏóµÄ¼¼Êõ£¬²»¶®OO£¬ÄǾø¶Ôѧ²»ÏÂÈ¥£¡
µÚ¶þ²½¡¡¶Ô¡£NET FrameworkÀà¿âÓÐÒ»¶¨µÄÁ˽⠿ÉÒÔͨ¹ý¿ª·¢Windows FormÓ¦ÓóÌÐòÀ´Ñ ......
<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<%
if request("action")=1 then
Response.ContentType="application/ms-excel"
Response.AddHeader "content-disposition","attachment;filename=www.xls"
end if
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//E ......
×î½üºÜ¿àÄÕ£¬µ±Êý¾Ý·ÃÎÊʧ°Ü»òÕ߳ɹ¦µÄʱºò£¬ÒªÒ³ÃæµÄjs´¦ÀíһЩЧ¹û£¬Ö»ÊDz»ÖªµÀÔõôµ÷Ó㬷dz£ÓôÃÆ¡£ÖÕÓÚÕÒ
µ½ÁËÒ»¸öµØ·½£º
ScriptManager.RegisterStartupScript(ListUpdatePanel, typeof(UpdatePanel), "", "alert(1);", true);
ÔÚºǫ́µÄº¯ÊýÖе÷ÓÃÕâ¸ö¼´¿É¡££¨Õë¶Ôupdatepanel£©Ë¢ÐÂÊý¾Ýºó£¬¾Í»áµ÷ÓÃjs ......
<head runat="server">
<title></title>
<meta http-equiv="Expires" CONTENT="0">
<meta http-equiv="Cache-Control" CONTENT="no-cache">
<meta http-equiv="Pragma" CONTENT="no-cache">
<script language="JavaScript"> ......