asp.netºǫ́Óëǰ̨µÄ»¥Ïàµ÷ÓÃ
Ò».ºǫ́µ÷ÓÃǰ̨
1.Page.ClientScript.RegisterStartupScript(type,"",script);
Àý:
string script = string.Format("<script>alert('Wrong');</script>");
Page.ClientScript.RegisterStartupScript(GetType(), "Load", script);
2.¶ÔÏó.Attributes.Add("ʼþ","script")
Àý:
e.Row.Attributes.Add("onmouseover", "c=this.style.backgroundColor;this.style.backgroundColor='#ECECFF'");
¶þ.ǰ̨µ÷Óúǫ́
1.Ò»°ãûÓбØÒªÔÚhtmlÎļþÀïµ÷ÓÃcsÎļþ.
Ïà¹ØÎĵµ£º
test.xml
<?xml version="1.0" encoding="utf-8" ?>
<root>
<R SecuCode="601600" Glossary="ѧITÍø²âÊÔ»ñÈ¡XML½á¹ûÏÔʾÕý³££¬¡£¡£¡£¡£¡£¡£¡£¹þ¹þ" />
<R SecuCode="600056" Glossary="²âÊÔµÚ¶þ¸ö£¬¡£¡£¡£¡£¡£¡£¡£¹þ¹þ" />
</root>
ÏÂÃæxml½âÎö ......
ÔÚ×¢²á±í System->CurrentControlSet->Services->Eventlog ´¦Ñ¡ÔñÌí¼ÓϵͳÖÐ AspNet Õâ¸öÕË»§×¢ÒâÊÇÔÚÓÒ¼üµÄ °²È«->ȨÏÞ->Ìí¼Ó
дÈÕÖ¾
public static void Log(string sourceName, string message)
{
EventLog eventLog = null;
......
//postÇëÇó
string name = Request["name"].toString();
string name =Request.Form.Get("name").toString();
//getÇëÇó
string name = Request.QueryString["name"].toString();
µ«ÎÒ·¢ÏÖ ÎÞÂÛÊÇ·ñÊÇpostÓëget´«Öµ
¶¼¿ÉÓÃstring name = Request["name"].toString();
±íµ¥Ìá½»ÖÐgetºÍpost·½Ê½µ ......
ÎÒÃÇÔÚ.NET³ÌÐòµÄ¿ª·¢¹ý³ÌÖУ¬³£³£ÐèÒªºÍÓû§½øÐÐÐÅÏ¢½»»¥£¬±ÈÈçÖ´ÐÐijÏî²Ù×÷ÊÇ·ñ³É¹¦£¬“È·¶¨”»¹ÊǓȡÏû”£¬ÒÔ¼°Ñ¡Ôñ“È·¶¨”»ò“È¡Ïû”ºóÊÇ·ñÐèÒªÌø×ªµ½Ä³¸öÒ³ÃæµÈ£¬ÏÂÃæÊDZ¾È˶Գ£ÓöԻ°¿òʹÓõÄС½á£¬Ï£Íû¶Ô´ó¼ÒÓÐËù°ïÖú£¬Í¬Ê±Ò²»¶Ó´ó¼Ò²¹³ä¡£
  ......
µÚÒ»£¬ н¨ÍøÕ¾£¬Ñ¡ÔñÀàÐÍΪasp.net web ·þÎñ¡£
ϵͳ×Ô¶¯ÎªÄ㽨Á¢Á˸öÎļþservice.asmx.Õâ¾ÍÊÇÒ»¸ö×î¼òµ¥µÄweb service·þÎñ¡£Äã¿ÉÒÔÖ±½ÓÔËÐв鿴Ч¹û¡£
µÚ¶þ£¬ÎÒÃÇÐèÒªµÄÊÇÐÞ¸Äservice.csÖеĴúÂ룬À´Âú×ãÎÒÃǵÄÒªÇó¡£
Ð޸ĺóµÄService.csÖеĴúÂëΪ£º
using System;
using System.Web;
using System.Web.Services;
......