conn.asp

紫碟轩留言本V2.0的简单原代码请 查阅

<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<%
dim conn,connstr,time1,time2
time1=timer   
on error resume next
Connstr="DRIVER=Microsoft Access Driver (*.mdb);DBQ="+server.mappath("data/zdbook.mdb")
Set Conn=Server.CreateObject("ADODB.Connection") 
conn.Open connstr
If Err Then
err.Clear
Set Conn = Nothing
Response.Write "数据库连接出错，请检查连接字串。"
Response.End
End If
set rsw=server.createobject("adodb.recordset")
rsw.open "select * from zdw",conn,1,1
webname=rsw("w_name")
websh=rsw("w_sh")
webnum=rsw("w_num")
webReNum=rsw("w_renum")
webResh=rsw("w_resh")
webad=rsw("w_ad")
rsw.close
set rsw=nothing
'防注入+过滤字符
dim sql_injdata 
SQL_injdata = "and|exec|insert|select|delete|update|count|*|chr|mid|master|truncate|char|declare|六合彩" 
SQL_inj = split(SQL_Injdata,"|") 

If Request.QueryString<>"" Then 
For Each SQL_Get In Request.QueryString 
For SQL_Data=0 To Ubound(SQL_inj) 
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then 
mgbox"紫蝶轩系统提示↓\n你在留言本输入了敏感字符，请重新输入，如有问题请联系管理员" 
Response.end 
end if 
next 
Next 
End If 
If Request.Form<>"" Then 
For Each Sql_Post In Request.Form 
For SQL_Data=0 To Ubound(SQL_inj) 
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then 
mgbox"紫蝶轩系统提示↓\n你在留言本输入了敏感字符，请重新输入，如有问题请联系管理员" 
Response.end 
end if 
next 
next 
end if %>