saferequest.asp

某生物科技公司网站源码 包括整个网站所需要的代码文件 以及必要的资源文件

<% 

'--- 传入参数 ---
'ParaName:参数名称-字符型
'ParaType:参数类型-数字型(1:数字，0:字符)

Function SafeRequest(ParaName,ParaType)
    Dim ParaValue
    ParaValue=ParaName
    If ParaType=1 then
        IF ParaValue<>"" Then
            If not isNumeric(ParaValue) then
                Response.write "<p align='center'><font color='red'>参数错误！"
                Response.end
            End if
        End if
    Else
        ParaValue=replace(ParaValue,"'","''")
        ParaValue=replace(ParaValue,"select","''")
        ParaValue=replace(ParaValue,"count","''")
        ParaValue=replace(ParaValue,"len","''")
        ParaValue=replace(ParaValue,"from","''")
        ParaValue=replace(ParaValue,"where","''")
        ParaValue=replace(ParaValue,"and","''")
        ParaValue=replace(ParaValue,"delete","''")
        ParaValue=replace(ParaValue,"values","''")
        ParaValue=replace(ParaValue,"insert","''")
        ParaValue=replace(ParaValue,"into","''")
        ParaValue=replace(ParaValue,"table","''")
        ParaValue=replace(ParaValue,"update","''")
        ParaValue=replace(ParaValue,"set","''")
    End if
    SafeRequest=ParaValue
End function
%>