ASPSecurity SQL 防注入

 <%

'************** ASPSecurity SQL 防注入**************

' Copyright 2006

' Create:2006-4-06

' Update:2006-6-01

'***************************************************

If Request.Form<>"" Then StopInjection(Request.Form)

If Request.QueryString<>"" Then StopInjection(Request.QueryString)

If Request.Cookies<>"" Then StopInjection(Request.Cookies)

Function StopInjection(values)

 For Each N_Get In values

  Dim L_Get, L_Get2

  For Each L_Get In values

   L_Get2 = values(L_Get)

   Set regEx = New RegExp

   regEx.IgnoreCase = True

   regEx.Global = True

   regEx.Pattern = "(\bselect\b|\sand\s|'|\sdeclare\s)"

   If regEx.Test(L_Get2) Then

    Alert()

    response.End()

   End If

   Set regEx = Nothing

  Next

 Next

End Function 

Sub Alert()

 Dim str

 str = "<"&"Script Language=JavaScript"&">"

 str = str & "alert('== 雷客图ASP站长安全助手检测到了危险字符，已经禁止本次提交 ==\n');window.close();"

 str = str & "<"&"/Script"&">"

 response.write  str

End Sub

%>

 本文转自 simeon2005 51CTO博客，原文链接:http://blog.51cto.com/simeon/113522