sql.asp

统管理：初始设置

<%
Dim Aymi_Get,Aymi_Key,Aymi_Inf,Aymi_Bstr
Aymi_Key = "'|;|and|exec|insert|select|update|count|*|%|chr|mid|master|truncate|char|declare|<|>|(|)|[|]|="
Aymi_Case = 2
Aymi_Page = "index.asp"
%>

<%
Aymi_Inf = split(Aymi_Key,"|")

If Request.QueryString<>"" Then
For Each Aymi_Get In Request.QueryString

For Aymi_Bstr=0 To Ubound(Aymi_Inf)
If Instr(LCase(Request.QueryString(Aymi_Get)),Aymi_Inf(Aymi_Bstr))<>0 Then

Select Case Aymi_Case
  Case "1"
Response.Write "<Script Language=JavaScript>alert('');window.close();</Script>"
  Case "2"
Response.Write "<Script Language=JavaScript>location.href='"&Aymi_Page&"'</Script>"
  Case "3"
Response.Write "<Script Language=JavaScript>alert('');location.href='"&Aymi_Page&"';</Script>"
End Select
Response.End
End If
Next
Next
End If
%>