conn.asp

来自「统架构：ASP+ACCESS 版本系列：个人版 开发时间：2005年12月2」· ASP 代码 · 共 33 行

<%
dim SQL_injdata,SQL_inj,SQL_Post,Sql_Data,SQL_Get
SQL_injdata = "'|and|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
SQL_inj = split(SQL_injdata,"|")
If Request.QueryString<>"" Then
 For Each SQL_Get In Request.QueryString
  For Sql_Data=0 To Ubound(SQL_inj)
   if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_Data))>0 Then
    Response.Write "<Script Language='Javascript'>alert('搏天网络安全系统提示您：\n请不要在参数中包含非法字符尝试注入！');history.back(-1)</Script>"
    Response.end
   end if
  next
 Next
End If 

If Request.Form<>"" Then
 For Each Sql_Post In Request.Form
  For Sql_Data=0 To Ubound(SQL_inj)
   if instr(Request.Form(Sql_Post),Sql_Inj(Sql_Data))>0 Then
    Response.Write "<Script Language='Javascript'>alert('搏天网络安全系统提示您：\n请不要在参数中包含非法字符尝试注入！');history.back(-1)</Script>"
    Response.end
   end if
  next
 next
end if

Dim objConn
Set objConn=Server.CreateObject("ADODB.Connection")
objConn.ConnectionString="Provider=Microsoft.Jet.OLEDB.4.0;"&"Data Source="&Server.MapPath("customer.asp")
objConn.Open

%>