zoukankan
html css js c++ java
防止SQL注入ASP代码
<%
'
--------定义部份------------------
Dim
Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr
'
自定义需要过滤的字串,用 "枫" 分隔
Fy_In
=
"
'枫;枫and枫exec枫insert枫select枫delete枫update枫count枫*枫%枫chr枫mid枫master枫truncate枫char枫declare
"
Fy_Inf
=
split
(Fy_In,
"
枫
"
)
If
Request.Form
<>
""
Then
For
Each
Fy_Post In Request.Form
For
Fy_Xh
=
0
To
Ubound
(Fy_Inf)
If
Instr
(
LCase
(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))
<>
0
Then
Response.Write
"
<Script Language=JavaScript>alert('提示:您想通过SQL注入↓\n\n请您马上停止这种非法行为,您的IP已被我们的系统记录,查明以后我们将移交公安机关严肃处理!');</Script>
"
Response.Write
"
非法操作!系统做了如下记录↓<br>
"
Response.Write
"
操作IP:
"
&
Request.ServerVariables(
"
REMOTE_ADDR
"
)
&
"
<br>
"
Response.Write
"
操作时间:
"
&
Now
&
"
<br>
"
Response.Write
"
操作页面:
"
&
Request.ServerVariables(
"
URL
"
)
&
"
<br>
"
Response.Write
"
提交方式:POST<br>
"
Response.Write
"
提交参数:
"
&
Fy_Post
&
"
<br>
"
Response.Write
"
提交数据:
"
&
Request.Form(Fy_Post)
Response.End
End
If
Next
Next
End
If
If
Request.QueryString
<>
""
Then
For
Each
Fy_Get In Request.QueryString
For
Fy_Xh
=
0
To
Ubound
(Fy_Inf)
If
Instr
(
LCase
(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))
<>
0
Then
Response.Write
"
<Script Language=JavaScript>alert('提示:您想通过SQL注入↓\n\n请您马上停止这种非法行为,您的IP已被我们的系统记录,查明以后我们将移交公安机关严肃处理!');</Script>
"
Response.Write
"
非法操作!我们已经给你做了如下记录↓<br>
"
Response.Write
"
操作IP:
"
&
Request.ServerVariables(
"
REMOTE_ADDR
"
)
&
"
<br>
"
Response.Write
"
操作时间:
"
&
Now
&
"
<br>
"
Response.Write
"
操作页面:
"
&
Request.ServerVariables(
"
URL
"
)
&
"
<br>
"
Response.Write
"
提交方式:GET<br>
"
Response.Write
"
提交参数:
"
&
Fy_Get
&
"
<br>
"
Response.Write
"
提交数据:
"
&
Request.QueryString(Fy_Get)
Response.End
End
If
Next
Next
End
If
%>
查看全文
相关阅读:
angular转场动画
css常用单位
css3美化滚动条样式
grid布局
angular使用material组件库和tailwindcss样式
使用 BaGet 搭建 nuget 仓库
net core api 文件下载,断点续传
netcore 使用中间件响应文件下载请求
angular通知组件--angular2-toaster
angular图标组件--@visurel/iconify-angular
原文地址:https://www.cnblogs.com/ryb/p/357804.html
最新文章
string
rutime 理解
正则表达式
面试题
IOS 本地推送 IOS10.0以上 static的作用 const的作用
证书出现 由为知机构颁发 解决情况
IOS 代码提示有问题
IOS开发 Viewcontroller生命周期
IOS 支付、性能调试、IPv6兼容支持等
IOS git 的安装
热门文章
IOS 数据库
Linq表连接大全(INNER JOIN、LEFT OUTER JOIN、RIGHT OUTER JOIN、FULL OUTER JOIN、CROSS JOIN)
c# 转换成时间类型
SQL列转行用逗号隔开
string转数组, 数组转ist, list转数组, 数组转string
菜鸟webpack教程纠错
c# Excel 行高、列宽、合并单元格、单元格边框线、冻结
c# 后台处理获取的JSON 数据
利用ASP.NET加密和解密Web.config中连接字符串
转载 [c#] 虚函数(Virtual),抽象函数(abstract)和接口的区别
Copyright © 2011-2022 走看看