悲伤—Asp(527532113) 16:49:45
。。。 无语。。
GreySky(49906760) 16:49:46
'on error resume next
Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr
'自定义需要过滤的字串,用 "防" 分隔
Fy_In = """""防'防;防and防exec防insert防select防delete防update防count防*防%防chr防mid防master防truncate防char防declare防<防>防="
Fy_Inf = split(Fy_In,"防")
Sub SqlFrom()
If Request.Form<>"" Then
For Each Fy_Post In Request.Form
For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then
Response.Write "网长友情提示黑客大侠↓
"&_
"请不要在参数中包含非法字符尝试注入攻击本站,
本站做起来很不容易的.俺是菜鸟,好怕怕,放俺一马吧！
"&_
"E-mail:fga2@163.com QQ:34220128
有话好话,请发个QQ信息给俺留言或发个邮件 ^_^< >
"
Response.Write "非法操作！本站已经给大侠您做了如下记录↓
"
Response.Write "操作ＩＰ："&Request.ServerVariables("REMOTE_ADDR")&"
"
Response.Write "操作时间："&Now&"
"
Response.Write "操作页面："&Request.ServerVariables("URL")&"
"
Response.Write "提交方式：ＰＯＳＴ
"
Response.Write "提交参数："&Fy_Post&"
"
Response.Write "提交数据："&Request.Form(Fy_Post)
Response.End
End If
Next
Next
End If
End Sub
If lcase(Request.ServerVariables("REQUEST_METHOD"))="post" then
dim serverName,httpName
serverName=lcase(Request.ServerVariables("SERVER_NAME"))
httpName=lcase("防"&Request.ServerVariables("HTTP_REFERER"))
if instr(httpName,serverName)<=0 then
Response.Write "非法操作！本站拒绝外部提交< >
"
Response.Write "本站已经给大侠您做了如下记录↓
"
Response.Write "操作ＩＰ："&Request.ServerVariables("REMOTE_ADDR")&"
"
Response.Write "操作时间："&Now&"
"
Response.Write "操作页面："&Request.ServerVariables("URL")&"
"
Response.Write "提交方式：ＰＯＳＴ
"
Response.End
end if
end if
If Request.QueryString<>"" Then
For Each Fy_Get In Request.QueryString
For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then
Response.Write "网长友情提示黑客大侠↓
"&_
"请不要在参数中包含非法字符尝试注入攻击本站,
本站做起来很不容易的.俺是菜鸟,好怕怕,放俺一马吧！
"&_
"E-mail:fga2@163.com QQ:34220128
有话好话,请发个QQ信息给俺留言或发个邮件 ^_^< >
"
Response.Write "非法操作！本站已经给大侠您做了如下记录↓
"
Response.Write "操作ＩＰ："&Request.ServerVariables("REMOTE_ADDR")&"
"
Response.Write "操作时间："&Now&"
"
Response.Write "操作页面："&Request.ServerVariables("URL")&"
"
Response.Write "提交方式：ＧＥＴ
"
Response.Write "提交参数："&Fy_Get&"
"
Response.Write "提交数据："&Request.QueryString(Fy_Get)
Response.End
End If
Next
Next
End If
GreySky(49906760) 16:49:49
看我这个
GreySky(49906760) 16:50:27
我这个看起来是不是条理更清晰点啊
北京(鸟巢)-ASP<niao_chao@tom.com> 16:50:38
是的
吉林_HTML<zy_pioneer@yahoo.com> 16:52:06123
|
