asp³ÌÐòÉÏ´«µ½·þÎñÆ÷Êý¾Ý¿âÁ¬½Ó³¬Ê±ÎÊÌâ
ÎÒдÁ˸ö³ÌÐò£¬±¾µØÔËÐÐÍêÈ«Õý³££¬ÉÏ´«µ½·þÎñÆ÷ÔÚ·þÎñÆ÷ÉϲÙ×÷ÓÐʱºòÄÜÕý³£²Ù×÷£¬µ«ÊÇÔËÐÐÒ»»á¶ù¾Í·þÎñÆ÷Á¬½Ó³¬Ê±£¬È»ºó¾Í²»ÄÜÕý³£²Ù×÷ÁË£¬¹Ø±ÕÍøÒ³£¬´ò¿ª»¹ÊDz»ÄÜÁ¬½ÓÊý¾Ý¿â²Ù×÷£¬µÈ°ëСʱºó»òÕ߸ü¾ÃÓÖÄÜÕý³£ÁË£¬ÇëÎÊÕâ¸öÊÇÔõô»ØÊ£¿±¾µØËæʱ¶¼ÄÜÕý³£ÔËÐÐÇÐÕÒ²»³öÈκÎÎÊÌâ¡£¸ßÊÖ°ï°ïæ°¡£¡
Ïà¹ØÎĵµ£º
Active Server Pages ÌṩÄÚ½¨¶ÔÏó£¬ÕâЩ¶ÔÏóʹÓû§¸üÈÝÒ×ÊÕ¼¯Í¨¹ýä¯ÀÀÆ÷ÇëÇó·¢Ë͵ÄÐÅÏ¢¡¢ÏìÓ¦ä¯ÀÀÆ÷ÒÔ¼°´æ´¢Óû§ÐÅÏ¢£¨ÈçÓû§Ê×Ñ¡Ï¡£±¾ÎļòҪ˵Ã÷ÿһ¸ö¶ÔÏó¡£
Application ¶ÔÏó
¿ÉÒÔʹÓà Application ¶ÔÏóʹ¸ø¶¨Ó¦ÓóÌÐòµÄËùÓÐÓû§¹²ÏíÐÅÏ¢¡£
Request ¶ÔÏó
¿ÉÒÔʹÓà Request ¶ÔÏó·ÃÎÊÈκÎÓà HTTP Çë ......
1£ºSQL ×¢È룺
½â¾ö·½°¸£º
a. Õâ¸öÎÊÌâÖ÷ÒªÊÇÓÉÓÚ´«ÈëÌØÊâ×Ö·ûÒýÆðµÄÎÒÃÇ¿ÉÒÔÔÚ¶ÔÊäÈëµÄÓû§ÃûÃÜÂë½øÈë¹ýÂËÌØÊâ×Ö·û´¦Àí¡£
b. ʹÓô洢¹ý³Ìͨ¹ý´«Èë²ÎÊýµÄ·½·¨¿É½â¾ö´ËÀàÎÊÌ⣨עÒ⣺ÔÚ´æ´¢¹ý³ÌÖв»¿ÉʹÓÃÆ´½ÓʵÏÖ£¬²»È»ºÍûÓô洢¹ýºÍÊÇÒ»ÑùµÄ£©¡£
2. XSS£¨¿çÕ¾½Å±¾¹¥»÷£©£º
½â¾ö·½°¸£º
¡¡¡¡a. ͨ¹ýÔÚ Page Ö¸Áî»ò Å ......
¹¦ÄÜ×÷ÓãºASP²úÉú²»Öظ´µÄËæ»úÊý£¨Ä£ÄâÓÎÏ·Ï´ÅÆ£©
<%
function GetRnd(lowerNum,upperNum)
Dim unit,RndNum,Fun_X
unit = upperNum - lowerNum
Redim MyArray(unit)
For Fun_I=0 To unit
myArray(Fun_I)= lowerNum + Fun_I
Next
For Fun_I=0 To round(unit)
RndNum ......
×î¼òµ¥ÓÃVB°Ñasp·â×°³ÉdllµÄÈëÃųÌÐò
µ±IIS±»ÇëÇóÖ´ÐÐÒ»¸öASP³ÌÐò,ËüÊ×ÏÈ»áÔÚASPÎļþÖÐÕÒµ½<%%>±êÇ©Ö®¼äµÄ´úÂë,²¢ÇÒÖ´ÐÐËü(Ò²¿ÉÒÔÊÇ<scri ptrunat=server></script....>Ö®¼äµÄ´úÂë).Èç¹ûÕâ¸öASP³ÌÐòÔÚÏÈÇ°±»µ÷Óùý,ÄÇôËü¾Í»áÓÃÄÚ´æÖеıàÒë¹ýµÄ³ÌÐòÀ´ÏòÓû§·µ»ØHTML´úÂë,Èç¹ûûÓÐ,ÄÇôËü¾ÍÖØбàÒë.Õ ......
'º¯ÊýÃû£ºCodeCookie
'×÷ ÓãºCookie·ÀÂÒÂëдÈëʱÓÃ
'²Î Êý£ºstr ---- ×Ö·û´®
'·µ»ØÖµ£ºÕûÀíºóµÄ×Ö·û´®
'ʾ Àý£º
'**************************************************
Public Function CodeCookie(str)
If is ......