Response.Buffer = TrueConst EnableStopInjection = TrueIf EnableStopInjection = True ThenIf Request.QueryString <> "" Then C

Response.Buffer = TrueConst EnableStopInjection = TrueIf EnableStopInjection = True ThenIf Request.QueryString <> "" Then Call StopInjection(Request.QueryString)If Request.Cookies <> "" Then Call StopInjection(Request.Cookies)If Request.Form <> "" Then Call StopInjection(Request.Form)End IfSub StopInjection(Values)Dim regExSet regEx = New RegExpregEx.IgnoreCase = TrueregEx.Global = TrueregEx.Pattern = "'|;|#|([\s\b+()]+(select|update|insert|delete|declare|@|exec|dbcc|alter|drop|create|backup|if|else|end|and|or|add|set|open|close|use|begin|retun|as|go|exists)[\s\b+]*)"Dim sItem, sValueFor Each sItem In ValuessValue = Values(sItem)If regEx.Test(sValue) ThenResponse.Write "请不要使用敏感字符 021jz.com.cn"Response.EndEnd IfNextSet regEx = NothingEnd Sub

上一篇：防止asp中的access数据库被下载的解决方法 下一篇：css鼠标经过文字时显示图片