ASPX代码加固小结

 

1、replace替换

?

1 2 3 4 5 6 7 8

<%@Page Language="C#"%>   <% string strID=Request["id"]; strID = strID.Replace("'","");//单引号过滤 //strID==Globals.HtmlEncode(strID) Response.Write(strID); %>

2、转换

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14

<%@ Page Language="C#" %>   <% string strID =Request["id"]; int strID11 = int.Parse(strID);//string 转换为int //int strID = int.Parse(Request["id"]); //int strID = Convert.ToInt32(Request["id"]); //将对象转换为int //string strID = HttpUtility.HtmlEncode(Request["id"]);//Htmlencode处理   int strID = int.Parse(strID); Response.Write(strID);     %>