''==========================
''过滤提交表单中的SQL
''==========================
function ForSqlForm()
dim fqys,errc,i,items
dim nothis(18)
nothis(0)="net user"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(1)="xp_cmdshell"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(2)="/add"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(3)="exec%20master.dbo.xp_cmdshell"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(4)="net localgroup administrators"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(5)="select"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(6)="count"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(7)="asc"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(8)="char"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(9)="mid"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(10)="''"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(11)=":"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(12)=""""
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(13)="insert"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(14)="delete"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(15)="drop"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(16)="truncate"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(17)="from"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(18)="%"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
''nothis(19)="@"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
errc=false
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
for i= 0 to ubound(nothis)
for each items in request.Form
if instr(request.Form(items),nothis(i))<>0 then
response.write("<div>")
response.write("你所填写的信息:" & server.HTMLEncode(request.Form(items)) & "<br>含非法字符:" & nothis(i))
response.write("</div>")
response.write("对不起,你所填写的信息含非法字符!<a href=""#"" onclick=""history.back()"">返回</a>")
response.End()
end if
next
next
end function
''==========================
''过滤查询中的SQL
''==========================
function ForSqlInjection()
dim fqys,errc,i
dim nothis(19)
fqys = request.ServerVariables("QUERY_STRING")
nothis(0)="net user"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(1)="xp_cmdshell"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(2)="/add"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(3)="exec%20master.dbo.xp_cmdshell"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(4)="net localgroup administrators"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(5)="select"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(6)="count"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(7)="asc"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(8)="char"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(9)="mid"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(10)="''"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(11)=":"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(12)=""""
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(13)="insert"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(14)="delete"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(15)="drop"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(16)="truncate"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(17)="from"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(18)="%"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
nothis(19)="@"
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
errc=false
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
for i= 0 to ubound(nothis)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
if instr(FQYs,nothis(i))<>0 then
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
errc=true
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
end if
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
next
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
if errc then
response.write "查询信息含非法字符!<a href=""#"" onclick=""history.back()"">返回</a>"
response.end
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
end if
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
end function
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)
![](https://aowind.cnblogs.com/Images/OutliningIndicators/None.gif)