sqlin.asp

1、采用4.5修改而成。 2、添加了求片区

<%
MQ_NoSqlHack_AllStr="'|;| and |chr(|exec |insert |select |delete from|update |mid(|master."
MQ_NoSqlHack_ComeUrlGet   = Request.QueryString
MQ_NoSqlHack_ComeUrlPost  = Request.Form
MQ_NoSqlHack_Str = Split(MQ_NoSqlHack_AllStr,"|")
'Post
If MQ_NoSqlHack_ComeUrlPost<>"" then
	For Each MQ_NoSqlHack_Post In Request.Form
		For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str)
			If Instr(LCase(Request.Form(MQ_NoSqlHack_Post)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then
				Response.Write("<script>alert('不要这样嘛！');javascript:history.go(-1);</script>")
				Response.End
			End if
		Next
	Next
End if
'Get
If MQ_NoSqlHack_ComeUrlGet<>"" then 
	For Each MQ_NoSqlHack_Get In Request.QueryString
		For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str)
			If Instr(LCase(Request.QueryString(MQ_NoSqlHack_Get)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then
				Response.Write("<script>alert('不要这样嘛！');javascript:history.go(-1);</script>")
				Response.End
			End if
		Next
	Next
End if
%>