ASP最新SQL防注入过滤涵数

王朝asp·作者佚名  2008-07-07
窄屏简体版  字體: |||超大  

function checkstr(str)

if isnull(str) then

checkstr = ""

exit function

end if

str = replace(str,chr(0),"", 1, -1, 1)

str = replace(str, """", """, 1, -1, 1)

str = replace(str,"<;","<;", 1, -1, 1)

str = replace(str,">;",">;", 1, -1, 1)

str = replace(str, "script", "script", 1, -1, 0)

str = replace(str, "script", "script", 1, -1, 0)

str = replace(str, "script", "script", 1, -1, 0)

str = replace(str, "script", "script", 1, -1, 1)

str = replace(str, "object", "object", 1, -1, 0)

str = replace(str, "object", "object", 1, -1, 0)

str = replace(str, "object", "object", 1, -1, 0)

str = replace(str, "object", "object", 1, -1, 1)

str = replace(str, "applet", "applet", 1, -1, 0)

str = replace(str, "applet", "applet", 1, -1, 0)

str = replace(str, "applet", "applet", 1, -1, 0)

str = replace(str, "applet", "applet", 1, -1, 1)

str = replace(str, "[", "[")

str = replace(str, "]", "]")

str = replace(str, """", "", 1, -1, 1)

str = replace(str, "=", "=", 1, -1, 1)

str = replace(str, "’", "’’", 1, -1, 1)

str = replace(str, "select", "select", 1, -1, 1)

str = replace(str, "execute", "execute", 1, -1, 1)

str = replace(str, "exec", "exec", 1, -1, 1)

str = replace(str, "join", "join", 1, -1, 1)

str = replace(str, "union", "union", 1, -1, 1)

str = replace(str, "where", "where", 1, -1, 1)

str = replace(str, "insert", "insert", 1, -1, 1)

str = replace(str, "delete", "delete", 1, -1, 1)

str = replace(str, "update", "update", 1, -1, 1)

str = replace(str, "like", "like", 1, -1, 1)

str = replace(str, "drop", "drop", 1, -1, 1)

str = replace(str, "create", "create", 1, -1, 1)

str = replace(str, "rename", "rename", 1, -1, 1)

str = replace(str, "count", "count", 1, -1, 1)

str = replace(str, "chr", "chr", 1, -1, 1)

str = replace(str, "mid", "mid", 1, -1, 1)

str = replace(str, "truncate", "truncate", 1, -1, 1)

str = replace(str, "nchar", "nchar", 1, -1, 1)

str = replace(str, "char", "char", 1, -1, 1)

str = replace(str, "alter", "alter", 1, -1, 1)

str = replace(str, "cast", "cast", 1, -1, 1)

str = replace(str, "exists", "exists", 1, -1, 1)

str = replace(str,chr(13),"<;br>;", 1, -1, 1)

checkstr = replace(str,"’","’’", 1, -1, 1)

end function

 
 
 
免责声明:本文为网络用户发布,其观点仅代表作者个人观点,与本站无关,本站仅提供信息存储服务。文中陈述内容未经本站证实,其真实性、完整性、及时性本站不作任何保证或承诺,请读者仅作参考,并请自行核实相关内容。
 
 
© 2005- 王朝網路 版權所有 導航