sql.asp

来自「1.地址缩短」· ASP 代码 · 共 30 行

<%
Dim QiQiBoy_Get,QiQiBoy_Key,QiQiBoy_Inf,QiQiBoy_Bstr
QiQiBoy_Key = "'|;|and|exec|insert|select|update|count|*|%|chr|mid|master|truncate|char|declare|<|>|(|)|[|]|="
QiQiBoy_Case = 2
QiQiBoy_Page = "index.asp"
%>

<%
QiQiBoy_Inf = split(QiQiBoy_Key,"|")

If Request.QueryString<>"" Then
For Each QiQiBoy_Get In Request.QueryString

For QiQiBoy_Bstr=0 To Ubound(QiQiBoy_Inf)
If Instr(LCase(Request.QueryString(QiQiBoy_Get)),QiQiBoy_Inf(QiQiBoy_Bstr))<>0 Then

Select Case QiQiBoy_Case
  Case "1"
Response.Write "<Script Language=JavaScript>alert('');window.close();</Script>"
  Case "2"
Response.Write "<Script Language=JavaScript>location.href='"&QiQiBoy_Page&"'</Script>"
  Case "3"
Response.Write "<Script Language=JavaScript>alert('');location.href='"&QiQiBoy_Page&"';</Script>"
End Select
Response.End
End If
Next
Next
End If
%>