wxbbs.asp

25175留言管理系统V2009 build0219[中文版] 功能简介[此程序适用于初学制作网站者]： wxbbs.asp 数据库链接 admin.asp 管理页面,管理留言[,回复 删除

<%
' FileName="Connection_odbc_conn_dsn.htm"
' Type="ADO"
' HTTP="false"
' Catalog=""
' Schema=""
'下面这段代码用于检测浏览器是否带有攻击性字符。
dim urlnlu
urlnlu=LCase(Request.ServerVariables("QUERY_STRING"))
if instr(urlnlu,"select")>0 OR instr(urlnlu,"'")>0 OR instr(urlnlu,"'")>0 OR instr(urlnlu,")")>0 OR instr(urlnlu,"(")>0 OR instr(urlnlu,"*")>0 OR instr(urlnlu,chr(32))>0 or instr(urlnlu,"where")>0 _
OR instr(urlnlu,"and")>0 OR instr(urlnlu,"not")>0 OR instr(urlnlu,",")>0 OR instr(urlnlu,"from")>0 OR instr(urlnlu,"sum")>0 OR instr(urlnlu,"avg")>0 OR instr(urlnlu,"max")>0 OR instr(urlnlu,"min")>0 _
OR instr(urlnlu,"delete")>0 OR instr(urlnlu,"insert")>0 OR instr(urlnlu,"table")>0 OR instr(urlnlu,"update")>0 then
response.Write(urlnlu)
response.write("<h1>严重警告!!<br>你在地址栏中使用了危险的脚本符号，严禁访问！</h1></br>你的IP地址已被记录，如是者再犯三次立即封你的IP，使你终身不能访问本站！")
response.end
end if

MM_wxbbs_STRING = "driver={Microsoft Access Driver (*.mdb)};dbq="& Server.MapPath("mouse_db/25175_rat.mdb")
%>