conn.asp

只是一网站项目不错的可以看看的不看会后悔啊

<% 
dim sql_injdata  
SQL_injdata = "'|""|{|}|exec|insert|select|delete|update|count|chr|mid|master|truncate|char|declare"  
SQL_inj = split(SQL_Injdata,"|")  
If Request.QueryString<>"" Then  
For Each SQL_Get In Request.QueryString  
For SQL_Data=0 To Ubound(SQL_inj)  
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then  
Response.Write "<Script Language=javascript>alert('抱歉，参数错误！001');window.location.href='Index.asp'</Script>"  
Response.end  
end if  
next  
Next  
End If  
If Request.Form<>"" Then  
For Each Sql_Post In Request.Form  
For SQL_Data=0 To Ubound(SQL_inj)  
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then  
Response.Write "<Script Language=javascript>alert('抱歉，参数错误！002');window.location.href='Index.asp'</Script>"  
Response.end  
end if  
next  
next  
end if 

dim conn   
dim connstr
db="Database/data.mdb"
connstr = "DBQ=" + server.mappath(db) + ";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};"       
set conn=server.createobject("ADODB.CONNECTION")
if err.number<>0 then 
	err.clear
	set conn=nothing
	response.write "数据库连接出错！"
	Response.End
else
	conn.open connstr
	if err then 
		err.clear
		set conn=nothing
		response.write "数据库连接出错！"
		Response.End 
	end if
end if
%>