safe.asp

. 缓存处理技术

<%

Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr,Kill_IP,WriteSql

Fy_In = "'|;|and|(|)|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
Kill_IP=True
WriteSql=True			



Fy_Inf = split(Fy_In,"|")

Function CheckBBRForm()
  If Request.Form<>"" Then
	For Each Fy_Post In Request.Form
		For Fy_Xh=0 To Ubound(Fy_Inf)
			If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then
				Response.Write "<Script Language=JavaScript>alert('非法字符！请勿尝试破解程序，谢谢你的合作！');location.href='Index.asp';</Script>"
				Response.End
			End If
		Next
	Next
  End If
ENd Function



If Request.QueryString<>"" Then
	For Each Fy_Get In Request.QueryString
		For Fy_Xh=0 To Ubound(Fy_Inf)
			If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then
				Response.Write "<Script Language=JavaScript>alert('非法字符');</Script>"
				Response.End
			End If
		Next
	Next
End If

function LockIP(sip)
    dim str1,str2,str3,str4
    dim num
    LockIP=false
    if isnumeric(left(sip,2)) then
        str1=left(sip,instr(sip,".")-1)
        sip=mid(sip,instr(sip,".")+1)
        str2=left(sip,instr(sip,".")-1)
        sip=mid(sip,instr(sip,".")+1)
        str3=left(sip,instr(sip,".")-1)
        str4=mid(sip,instr(sip,".")+1)
        if isNumeric(str1)=0 or isNumeric(str2)=0 or isNumeric(str3)=0 or isNumeric(str4)=0 then
	    response.write "非法的IP地址不允许进入该系统，请和管理员联系。"
	    response.end
        else
            num=cint(str1)*256*256*256+cint(str2)*256*256+cint(str3)*256+cint(str4)-1
            sql="select count(*) from cnbbr_KillIp where ip_Start <="&num&" and ip_End >="&num&""
            set rs=conn.execute(sql)
            if rs(0)>0 then 
                LockIP=true
            end if
            set rs=nothing
        end if
    end if
end function

%>