中财网www.arrow.com:防网站漏洞扫描asp代码
来源：百度文库 编辑：中财网 时间：2024/04/28 19:19:10
<%
Dim flashack_Post,flashack_Get,flashack_In,flashack_Inf,flashack_Xh,flashack_db,flashack_dbstr
flashack_In = "'※;※and※exec※insert※select※delete※update※count※*※%※chr※mid※master※truncate※char※declare"
flashack_Inf = split(flashack_In,"※")
If Request.Form<>"" Then
For Each flashack_Post In Request.Form
For flashack_Xh=0 To Ubound(flashack_Inf)
If Instr(LCase(Request.Form(flashack_Post)),flashack_Inf(flashack_Xh))<>0 Then
Response.Write "
Response.Write "非法操作！系统做了如下记录↓
"
Response.Write "操作IP："&Request.ServerVariables("REMOTE_ADDR")&"
"
Response.Write "操作时间："&Now&"
"
Response.Write "操作页面："&Request.ServerVariables("URL")&"
"
Response.Write "提交方式：POST
"
Response.Write "提交参数："&flashack_Post&"
"
Response.Write "提交数据："&Request.Form(flashack_Post)
Response.End
End If
Next
Next
End If
If Request.QueryString<>"" Then
For Each flashack_Get In Request.QueryString
For flashack_Xh=0 To Ubound(flashack_Inf)
If Instr(LCase(Request.QueryString(flashack_Get)),flashack_Inf(flashack_Xh))<>0 Then
Response.Write "
Response.Write "非法操作！flashack已经给你做了如下记录↓
"
Response.Write "操作IP："&Request.ServerVariables("REMOTE_ADDR")&"
"
Response.Write "操作时间："&Now&"
"
Response.Write "操作页面："&Request.ServerVariables("URL")&"
"
Response.Write "提交方式：GET
"
Response.Write "提交参数："&flashack_Get&"
"
Response.Write "提交数据："&Request.QueryString(flashack_Get)
Response.End
End If
Next
Next
End If
%>
conn里加上这个就没漏洞了。