char.asp

WEB2.0圈子交友平台,以用户影音创意和分享为主导, 为用户提供:圈子,个人空间,博客,话题,相册,分类信息,短信,交友等免费服务,致力打造中国第一套 WEB2.0交友系统开源网站.

<%
'安全
'UserAgent=Trim(Request.Servervariables("HTTP_USER_AGENT"))
'If not (Instr(UserAgent,"MSIE")>0 or Instr(UserAgent,"NetCaptor")>0) Then
'  call msgbox("非法操作，不要使用\nTeleport、WebZip、FlashGet、Offline、GoogleBot、WebCrawler、Scooter、MyIe或下载本站。",1)
'End If

'过滤文字
Function ChkBadWords(fString)
  bwords = split(BadWords, "|")
  For i = 0 to ubound(bwords)
    fString = Replace(fString, bwords(i), string(len(bwords(i)),"*"), 1,-1,1) 
  Next
  ChkBadWords = fString
  'strContent=ChkBadWords(strContent)
End Function

'过滤HTML代码
function HTMLEncode(fString)
if not isnull(fString) then
    fString = replace(fString, ">", "&gt;")
    fString = replace(fString, "<", "&lt;")
    fString = Replace(fString, CHR(32), "&nbsp;")
    fString = Replace(fString, CHR(9), "&nbsp;")
    fString = Replace(fString, CHR(34), "&quot;")
    fString = Replace(fString, CHR(39), "&#39;")
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P>")
    fString = Replace(fString, CHR(10), "<BR> ")
    HTMLEncode = fString
end if
end function

'////////////////////////////////
function RN_HTMLEncode(fString)
if not isnull(fString) then
    fString = replace(fString, "&gt;",">")
    fString = replace(fString, "&lt;","<")
    fString = Replace(fString, "&nbsp;",CHR(32))
    fString = Replace(fString, "&nbsp;",CHR(9))
    fString = Replace(fString,  "&quot;",CHR(34))
    fString = Replace(fString,  "&#39;",CHR(39))
    fString = Replace(fString,  "",CHR(13))
    fString = Replace(fString, "</P><P>",CHR(10) & CHR(10))
    fString = Replace(fString, "<BR> ",CHR(10))
    rn_HTMLEncode = fString
end if
end function

'过滤表单字符
function HTMLcode(fString)
if not isnull(fString) then
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P>")
    fString = Replace(fString, CHR(10), "<BR>")
    HTMLcode = fString
end if
end function



'****************************************
'功能：过滤危险字符及返回标准内容
'说明：
'函数名					功能
'CheckStr				过滤非法字符
'CheckInt				过滤ID类参数，可以用下面的也是一样，不过该函数已经封闭错误的可能，所以如果使用该函数，黑客应该很明白了，会主动放弃脚本攻击
'MyRequest				和CheckInt任意选一种，这个函数是诱导黑客的，给他假信息，让他摸不到头脑。
'****************************************
Function CheckStr(Str)
	Resultstr = Replace(Trim(Str), "'", "")
	'Resultstr = Replace(Resultstr, ";", "")
	'Resultstr = Replace(Resultstr, "-", "")
	'Resultstr = Replace(Resultstr, "=", "")
	'Resultstr = Replace(Resultstr, "<", "")
	'Resultstr = Replace(Resultstr, ">", "")
	'Resultstr = Replace(Resultstr, "(", "")
	'Resultstr = Replace(Resultstr, ")", "")
	'Resultstr = Replace(Resultstr, "[", "")
	'Resultstr = Replace(Resultstr, "]", "")
	'Resultstr = Replace(Resultstr, " ", "")
	Checkstr  = Resultstr
End Function

'提示框
Function MsgBox(error,n)
  Copyright = "\n\n　　　　　Copyright by 2008 "&WebSqlType&".Com"
  Response.write "<script>alert('" & Replace(error,"'","\'") & Copyright & "');" & vbcrlf
  If Vartype(n) = 2 then
    If n = 1 then  Response.write "history.go(-1);" & vbcrlf
    If n = 3 then	Response.write "parent.top.location.reload();" & vbcrlf
    If n=4 or n=5 then Response.write "opener.location.reload();" & vbcrlf
    If n=2 or n=5 then Response.write "window.close();" & vbcrlf
  else
    Response.write "window.location.href='" & n & "';" & vbcrlf
  end if
  response.write " </script>"
End Function

%>