ASP.NET·ÀSQL×¢Èë½Å±¾³ÌÐò v2.0
public class SqlCheck
{
public SqlCheck()
{
//
// TODO: ÔÚ´Ë´¦Ìí¼Ó¹¹Ô캯ÊýÂß¼
//
}
public SqlConnection oconn()
{
SqlConnection conn = new SqlConnection();
conn.ConnectionString = ConfigurationManager.ConnectionStrings["StudyConnectionString"].ToString();
//µÚ1ÖÖµ÷Óõķ½·¨ JK1986_CheckSql();
JK1986_CheckSql();
if ( conn.State == ConnectionState.Closed )
{
conn.Open();
}
return conn;
}
public DataTable getsource(string getds)
{
SqlConnection conn = oconn();
SqlDataAdapter da = new SqlDataAdapter(getds, conn);
DataSet ds = new DataSet();
da.Fill(ds,"news" );
return ds.Tables["news"];
}
public static void JK1986_CheckSql()
{
string jk1986_sql = "exec↓select↓drop↓alter↓exists↓union↓and↓or↓xor↓order↓mid↓asc↓execute↓xp_cmdshell↓insert↓update↓delete↓join↓declare↓char↓sp_oacreate↓wscript.shell↓xp_regwrite↓'↓;↓--";
string[] jk_sql = jk1986_sql.Split('↓');
foreach (string jk in jk_sql)
{
// -----------------------·À Post ×¢Èë-----------------------
if ( System.Web.HttpContext.Current.Request.Form != null)
{
for (int k = 0; k < System.Web.HttpContext.Current.Request.Form.Count; k++)
{
string getsqlkey = System.Web.HttpContext.Current.Request.Form.Keys[k];
string getip;
if (System.Web.HttpContext.Current.Request.Form[getsqlkey].ToLower().Contains(jk) == true)
{
System.Web.HttpContext.Current.Response.Write("<script Language=JavaScript>alert('ASP.NET( C#°æ±¾ )·À×¢Èë³ÌÐòÌáʾÄú£¬ÇëÎðÌá½»·Ç·¨×Ö·û£¡↓\\n\\nBlog:http://hi.
Ïà¹ØÎĵµ£º
ÔÚWeb±à³Ì¹ý³ÌÖУ¬´æÔÚןܶలȫÒþ»¼¡£±ÈÈçÔÚÒÔǰµÄASP°æ±¾ÖУ¬CookieΪ·ÃÎÊÕߺͱà³ÌÕß¶¼ÌṩÁË·½±ã£¬²¢Ã»ÓÐÌṩ¼ÓÃܵŦÄÜ¡£´ò¿ªIEä¯ÀÀÆ÷£¬Ñ¡Ôñ“¹¤¾ß”²Ëµ¥ÀïµÄ“InternetÑ¡Ï¬È»ºóÔÚµ¯³öµÄ¶Ô»°¿òÀïµ¥»÷“ÉèÖÔ°´Å¥£¬Ñ¡Ôñ“²é¿´Îļþ”°´Å¥£¬ÔÚµ¯³öµÄ´°¿ÚÖУ¬¾Í»áÏÔʾӲÅÌÀï ......
XmlDataSource ¿Ø¼þÖ÷ÒªÓÃÓÚ½«·Ö²ãµÄ XML Êý¾Ý¹«¿ª¸øÖîÈç TreeView »ò Menu ¿Ø¼þµÈ°ó¶¨¿Ø¼þ¡£»¹¿ÉÒÔ½« GridView »ò DataList ¿Ø¼þµÈ±í¸ñÊý¾Ý°ó¶¨¿Ø¼þ°ó¶¨µ½ XmlDataSource ¿Ø¼þ¡£
Ò»¡¢°ó¶¨µ½ XML Êý¾ÝÖеÄ×Ö¶Î
ÔÚ½«±í¸ñÊý¾Ý°ó¶¨¿Ø¼þ°ó¶¨µ½ XmlDataSource ¿Ø¼þʱ£¬¸Ã¿Ø¼þ½ö³ÊÏÖ ......
/// <summary>
/// »ñÈ¡QQµ±Ç°×´Ì¬£¨1£ºÔÚÏߣ¬0£º²»ÔÚÏߣ¬-1£º²»´æÔÚ£©
/// </summary>
/// <param name="qq">qqºÅ</param>
/// <returns></returns>
public static int GetQQS ......
0¡¢ÒýÑÔ
Web Ò³ÃæÊÇÎÞ״̬µÄ£¬ ·þÎñÆ÷¶Ôÿһ´ÎÇëÇó¶¼ÈÏΪÀ´×Ô²»Í¬Óû§£¬Òò´Ë£¬±äÁ¿µÄ״̬ÔÚÁ¬Ðø¶ÔÍ¬Ò»Ò³ÃæµÄ¶à´ÎÇëÇóÖ®¼ä»òÔÚÒ³ÃæÌø×ªÊ±²»»á±»±£Áô¡£ÔÚÓÃAsp.NET Éè¼Æ¿ª·¢Ò»¸öWebϵͳʱ£¬ Óöµ½Ò»¸öÖØÒªµÄÎÊÌâÊÇÈçºÎ±£Ö¤Êý¾ÝÔÚÒ³Ãæ¼ä½øÐÐÕýÈ·¡¢°²È«ºÍ¸ßЧµØ´«ËÍ£¬Asp.net ÌṩÁË״̬¹ÜÀíµÈ¶àÖÖ¼¼ÊõÀ´½â¾ ......
(1) ASP.NET µÄÊý¾ÝÑéÖ¤¿Õ¼þRegularExpressionValidator ʵÏÖÑéÖ¤FileUpLoadÉÏ´«ÎļþµÄÀàÐÍ
<asp:RegularExpressionValidator ID="RegularExpressionValidator1" runat="server" ControlToValidate="FileUpload1"
ErrorMessage="¸ñʽ²»×¼È·£¬Ö»ÄÜ(.jpg|.JPG|.gif|.G ......