senddata.asp

来自「心里在线咨询系统 怎么还有字数限制」· ASP 代码 · 共 41 行

<%
'--------定义部份------------------
'自定义需要过滤的字串,用 "枫" 分隔
Fy_In = "'枫;枫and枫exec枫insert枫select枫delete枫update枫count枫*枫%枫chr枫mid枫master枫truncate枫char枫declare"
'----------------------------------
%>

<%
Fy_Inf = split(Fy_In,"枫")
'--------POST部份------------------
If Request.Form<>"" Then
For Each Fy_Post In Request.Form

For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then
response.Redirect url&"error.asp" 	
End If
Next
Next
End If
'----------------------------------

'--------GET部份-------------------
If Request.QueryString<>"" Then
For Each Fy_Get In Request.QueryString

For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then
response.Redirect url&"error.asp" 	
End If
Next
Next
End If
if stopip<>"" then 
	serchIP=Split(stopip,",")
	for i=0 to ubound(serchIP)
		if IPinfo=serchIP(i) then response.Redirect url&"error.asp?msg=系统已经禁止了你访问本系统！"
	next
end if
%>