conn.asp

个性网名转换-繁体字转换-qq强制聊天-qq秀查看-空间留言代码编辑器-等其他常用工具

<!-- #include file="../config.asp"-->
<!-- #include file="Function.asp"-->
<%
squery=lcase(Request.ServerVariables("QUERY_STRING")) 
sURL=lcase(Request.ServerVariables("HTTP_HOST")) 

SQL_injdata =":|;|>|<|--|sp_|xp_|\|dir|cmd|^|(|)|+|$|'|copy|format|and|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare" 

SQL_inj = split(SQL_Injdata,"|") 

For SQL_Data=0 To Ubound(SQL_inj) 
if instr(squery&sURL,Sql_Inj(Sql_DATA))>0 Then 
Response.Write "SQL通用防注入系统" 
Response.end 
end if 
next
on error resume next 
'字符串连接数据库方法
set conn=Server.CreateObject("ADODB.Connection")
conn.open "DRIVER=Driver do Microsoft Access (*.mdb);UID=admin;PWD=;DBQ="&Server.MapPath("../"&mdbpath&"")
set rs12=Server.CreateObject("ADODB.RecordSet")
sql="select * from admin"
rs12.open sql,conn,1,1
sitetitle=rs12("sitetitle")
sitemeta=rs12("sitemeta")
sitekey=rs12("sitekey")
sitehead=rs12("sitehead")
sitefoot=rs12("sitefoot")
rs12.close
set rs12=nothing
%>