sql.asp

来自「中国网站网贴吧程序源码（ASP+ACCESS） 实现功能： 多级分类查找,可按多」· ASP 代码 · 共 30 行

<%
dim gets,keys,inf,bstr
keys = "'|;|and|exec|insert|select|update|count|*|%|chr|mid|master|truncate|char|declare|<|>|(|)|[|]|="
icase = 2
page = "index.asp"
%>

<%
inf = split(keys,"|")

if request.querystring<>"" then
for each gets in request.querystring

for bstr=0 to ubound(inf)
if instr(lcase(request.querystring(gets)),inf(bstr))<>0 then

select case icase
  case "1"
response.write "<script language=javascript>alert('');window.close();</script>"
  case "2"
response.write "<script language=javascript>location.href='"&page&"'</script>"
  case "3"
response.write "<script language=javascript>alert('');location.href='"&page&"';</script>"
end select
response.end
end if
next
next
end if
%>