一段防注入的通用脚本

2005-10-25 01:16 471 0

摘要: 放在conn.asp里就行了。'屏蔽通过地址栏攻击url=Request.ServerVariables("QUERY_STRING")if instr(url,";")>=1&nbs...

关键词： nbsp stritem instr Request url Response 攻击 item ServerVariables 表单

放在conn.asp里就行了。'屏蔽通过地址栏攻击url=Request.ServerVariables("QUERY_STRING")if instr(url,";")>=1 thenurl=Replace(url,";","；") : Response.Redirect("?" & url)end if'屏蔽通过表单攻击for each item in request.formstritem=lcase(server.HTMLEncode(Request.form(item)))if instr(stritem,"select ")>=1 or instr(stritem,"insert ")>=1 or instr(stritem,"update ")>=1 or instr(stritem,"delete ")>=1 or instr(stritem,"exec ")>=1 or instr(stritem,"declare ")>=1 thenresponse.write ("对不起,请不要输入非法字符!")response.endend ifnext

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除