sql.asp

中国网站网贴吧程序源码（ASP+ACCESS） 实现功能： 多级分类查找,可按多级分类查找贴吧,多用户申请,任何人都可以申请自己的贴吧, 用户三种权限管理,1,普通会员,2,普通版主(只有管理自己的贴

<%
dim gets,keys,inf,bstr
keys = "'|;|and|exec|insert|select|update|count|*|%|chr|mid|truncate|char|declare|<|>|(|)|[|]|="
icase = 2
page = "../index.asp"
%>

<%
inf = split(keys,"|")

if request.querystring<>"" then
for each gets in request.querystring

for bstr=0 to ubound(inf)
if instr(lcase(request.querystring(gets)),inf(bstr))<>0 then

select case icase
  case "1"
response.write "<script language=javascript>alert('');window.close();</script>"
  case "2"
response.write "<script language=javascript>location.href='"&page&"'</script>"
  case "3"
response.write "<script language=javascript>alert('');location.href='"&page&"';</script>"
end select
response.end
end if
next
next
end if
%>