注册 登录
编程论坛 ASP技术论坛

自动生成添加,删除,修改代码(修改版)

hp3325 发布于 2010-11-18 20:45, 462 次点击
只有本站会员才能查看附件,请 登录


1,加入字段类型识别
2,加入防注代码,可以说告别注入
3,加入操作时锁定
4,其它修改...

2010.12.01
喔,还忘了一句:
P=rs.fields(i).type

'过滤函数
Function ReplaceBadWord(eword)
  eword = Replace(eword,"'","")
  eword = Replace(eword," ","")
  eword = Replace(eword,"(","")
  eword = Replace(eword,"\","")
  eword = Replace(eword,"^","")
  eword = Replace(eword,"%","%")
  eword = Replace(eword,"|","")
  eword = Replace(eword,";","")
  eword = Replace(eword," = ","")
  eword = Replace(eword,"select","")
  eword = Replace(eword,"or","")
  eword = Replace(eword,"Or","")
  eword = Replace(eword,"oR","")
  eword = Replace(eword,"And","")
  eword = Replace(eword,"aNd","")
  eword = Replace(eword,"anD","")
  eword = Replace(eword,"and","")
  eword = Replace(eword,"delete","")
  eword = Replace(eword,"where","")
  html = Replace(Body,"'","")
  html = Replace(html,Chr(34),"")
  eword = Trim(Replace(eword,")",""))  
  ReplaceBadWord = eword
End Function

[ 本帖最后由 hp3325 于 2010-12-2 11:14 编辑 ]
1 回复
#2
gupiao1752010-11-18 21:32
下来看看。有点意思!
1