sqladmin.asp

浪人文章系统

<%
dim GuGetFlag
dim GuErrorSQLG,GuErrorSQLF
dim RequestKey
dim iGuG,iGuF

GuErrorSQLG=""
GuErrorSQLF=""
GuErrorSQLG=split(GuErrorSQLG,"|")
GuErrorSQLF=split(GuErrorSQLF,"|")

if Request.ServerVariables("REQUEST_METHOD")="GET" then
	GuGetFlag=True
else
	GuGetFlag=False
end if

if GuGetFlag then
	For Each RequestKey In Request.QueryString
	For iGuG=0 To Ubound(GuErrorSQLG)
	if Instr(LCase(Request.QueryString(RequestKey)),GuErrorSQLG(iGuG))<>0 then
		Response.write "<Script Language=""JavaScript"">alert(""防SQL注入检测程序 "&GuErrorSQLG(iGuG)&""");location.href=""Admin_Server.asp"";</Script>"
		Response.end
	end if
	Next
	Next
else
	For Each RequestKey In Request.Form
	For iGuF=0 To Ubound(GuErrorSQLF)
	if Instr(LCase(Request.Form(RequestKey)),GuErrorSQLF(iGuF))<>0 then
		Response.write "<Script Language=""JavaScript"">alert(""防SQL注入检测程序 "&GuErrorSQLF(iGuF)&""");location.href=""Admin_Server.asp"";</Script>"
		Response.end
	end if
	Next
	Next
end if
%>