sql_zr.asp

看房直达车 后台路径:admin/login.asp 用户名:manage 密码:fansyou

<%
strtemp= Trim(Request.QueryString)
if strtemp <>"" then 
strtemp=lcase(strtemp) 

 if instr(strtemp,"select%20") or instr(strtemp,"insert") or instr(strtemp,"delete") or instr(strtemp,"count") or instr(strtemp,"update") or instr(strtemp,"asc(") or instr(strtemp,"mid(") or instr(strtemp,"exec%20") or instr(strtemp,"'") or instr(strtemp,"%20or%20") or instr(strtemp,"%20and%20") then
 response.write "请不要提交非法参数"
 response.end
 end if 
 end if
 %>