|
|
 - G = Replace(Replace(Replace(Replace(Request(Str), "'", ""), """", ""),"%","％"),"*","＊")
- End Function
- Function DelSql(Str)
- Dim SplitSqlStr,SplitSqlArr,I
- SplitSqlStr="'|%|dbcc |alter|drop|*|and |exec|or |insert|select|delete|update|count |master|truncate|declare|char|mid|chr|set |where|xp_cmdshell"
- SplitSqlArr = Split(SplitSqlStr,"|")
- For I=LBound(SplitSqlArr) To Ubound(SplitSqlArr)
- If Instr(LCase(Str),SplitSqlArr(I))>0 Then
- Die "<script>alert('系统警告！\n\n1、您提交的数据有恶意字符" & SplitSqlArr(I) &";\n2、您的数据已经被记录;\n3、您的IP："&GetIP&";\n4、操作日期："&Now&";\n Powered By Kesion.Com!');window.close();</script>"
Kesion.CommonCls.asp
|
当前位置：
支持(0) | 
反对(0)
顶端 
底部
![电子邮件:[ wufeng@126.com ]](http://bbs.kesion.com/club/images/email.gif){kind=small}
![QQ号码:[ 592002940 ]](http://bbs.kesion.com/club/images/qq.gif){kind=small}
