簡(jiǎn)單的asp防注入代碼
<%
'on error resume next
'dim sql_injdata
SQL_injdata = "document|script|.src|src|Src|SRC|srC|sRc|rcS|SrC|SRc|and|anD|aND|AND|aDn|And|ANd|AnD|exec|insert|select|delete|update|count|chr|mid|master|truncate|char|declare|or|"
SQL_inj = split(SQL_Injdata,"|")
If Request.Form<>"" Then
For Each Sql_Post In Request.Form
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then
Response.Write ""
Response.Write "非法操作！系統(tǒng)做了如下記錄↓
"
"
Response.Write "操作ＩＰ："&Request.ServerVariables("REMOTE_ADDR")&"
"
"
Response.Write "操作時(shí)間："&Now&"
"
"
Response.Write "操作頁(yè)面："&Request.ServerVariables("URL")&"
"
"
Response.Write "提交方式：ＰＯＳＴ
"
"
response.write ""
Response.End
end if
next
next
end if
If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then
Response.Write ""
Response.Write "非法操作！系統(tǒng)做了如下記錄↓
"
"
Response.Write "操作ＩＰ："&Request.ServerVariables("REMOTE_ADDR")&"
"
"
Response.Write "操作時(shí)間："&Now&"
"
"
Response.Write "操作頁(yè)面："&Request.ServerVariables("URL")&"
"
"
Response.Write "提交方式：ＧＥＴ
"
"
response.write ""
Response.End
end if
next
Next
End If
%>
如果您的問(wèn)題還未解決可以聯(lián)系站長(zhǎng)付費(fèi)協(xié)助。
有問(wèn)題可以加入技術(shù)QQ群一起交流學(xué)習(xí)
本站vip會(huì)員 請(qǐng)加入無(wú)憂模板網(wǎng) VIP群（50604020） PS:加入時(shí)備注用戶名或昵稱
普通注冊(cè)會(huì)員或訪客 請(qǐng)加入無(wú)憂模板網(wǎng) 技術(shù)交流群（50604130）
客服微信號(hào)：15898888535
聲明：本站所有文章資源內(nèi)容，如無(wú)特殊說(shuō)明或標(biāo)注，均為采集網(wǎng)絡(luò)資源。如若內(nèi)容侵犯了原著者的合法權(quán)益，可聯(lián)系站長(zhǎng)刪除。
